$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/544e7031-781b-4e29-9730-b21cc2781435.roa File: 544e7031-781b-4e29-9730-b21cc2781435.roa (raw, json) Hash identifier: GcUZANAzPmde0FniJ9YU8oaQq/VpaY8A2AmlJbMqjPM= Subject key identifier: 2B:BE:D4:26:E9:35:92:71:36:5A:2A:E5:72:12:8D:71:78:2B:8D:F8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6902CBFB3D55248C9B08ECBDAE2DCC24711419D2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/544e7031-781b-4e29-9730-b21cc2781435.roa Signing time: Tue 20 May 2025 00:00:46 +0000 ROA not before: Tue 20 May 2025 00:00:46 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da36:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:02:cb:fb:3d:55:24:8c:9b:08:ec:bd:ae:2d:cc:24:71:14:19:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 20 00:00:46 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=799dee267f370b541088727a5f9ca34d7d83e2b33a6dbf337b03af01e05120a6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6d:23:04:ae:f6:b3:60:59:de:92:a3:60:40: bb:bf:73:4c:42:99:73:83:e7:53:92:f4:69:ee:bc: 69:20:0a:c1:8d:2d:df:af:3a:b4:41:74:42:24:6e: b6:8b:ee:4d:19:af:cc:89:60:03:fa:01:d2:7d:74: 33:81:f4:5b:54:4b:a4:09:8c:9c:10:57:f0:07:4f: 62:31:89:dd:54:5c:c0:f2:7f:42:af:b8:d1:eb:e9: ce:3c:56:c2:81:e7:7c:55:60:eb:cc:b0:c6:b3:6f: 50:a4:ec:ca:7c:87:23:55:bb:3b:72:41:c4:5f:94: b6:54:72:df:cd:ef:8c:06:ed:cf:46:b0:f1:bf:40: 3f:cf:63:14:24:9d:69:94:e5:83:87:13:93:57:a1: 5d:7e:98:5a:d5:13:6d:b1:88:47:80:4b:20:4e:5d: 5e:28:67:23:ff:ed:53:52:2f:68:7c:26:00:c7:b5: eb:0b:6b:b2:83:05:f3:86:15:00:f7:92:89:f4:e4: 7a:b2:d7:9c:21:6a:8d:f2:da:90:83:7e:c2:eb:18: ed:96:de:c6:c2:0d:4f:f1:a0:f9:7a:19:28:08:3e: 35:e6:2c:27:e3:d1:83:5e:b1:dd:ff:99:2d:fc:98: 50:42:bc:1d:17:35:66:47:61:93:8e:85:ef:8f:ea: 00:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:BE:D4:26:E9:35:92:71:36:5A:2A:E5:72:12:8D:71:78:2B:8D:F8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/544e7031-781b-4e29-9730-b21cc2781435.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da36:a000::/40 Signature Algorithm: sha256WithRSAEncryption 22:95:74:c1:3b:67:07:f1:3f:a9:5f:e1:b6:f4:2f:47:a9:9e: 17:9b:16:f9:68:fb:5e:07:91:2f:51:7e:59:02:36:8a:96:14: 62:a8:98:9d:95:f3:92:54:8a:28:0d:2f:5b:79:64:2b:cc:c9: 1e:5c:61:b9:c9:a0:df:46:e3:58:ca:db:a8:fa:04:19:37:73: 68:9d:d8:e1:8f:e4:e7:a1:05:de:97:2d:be:a4:41:8e:2c:5c: 05:76:8d:bb:24:ae:d0:95:d6:a8:ae:ca:db:80:32:b2:4c:c0: a3:93:20:20:69:c7:2d:06:81:d2:01:e3:8e:5a:e0:01:a4:f3: 9b:6e:43:cc:b9:67:c7:e4:a0:58:63:e5:e5:3f:aa:9a:47:c8: e0:93:af:c9:83:be:ce:67:b8:ae:68:31:d2:a9:12:79:9f:1b: 58:73:8e:35:d7:58:ad:e9:f5:6a:31:fd:33:98:08:e7:5d:51: c3:b4:31:e4:da:c4:7d:2f:b9:a0:33:17:55:e2:9a:5b:7e:1f: 07:8e:f6:4c:5d:a3:85:51:e7:f4:5d:d3:7d:92:4e:0f:46:a3: 32:55:6e:f6:21:0b:f5:35:06:67:0c:8f:d4:a6:5a:55:38:24: 43:19:3f:0d:60:96:8f:91:e4:e7:e9:0c:48:d7:99:9d:73:15: 69:73:8c:3b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUaQLL+z1VJIybCOy9ri3MJHEUGdIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUyMDAwMDA0NloX DTI1MDYyNDIzNTk1OVowejFJMEcGA1UEBRNANzk5ZGVlMjY3ZjM3MGI1NDEwODg3 MjdhNWY5Y2EzNGQ3ZDgzZTJiMzNhNmRiZjMzN2IwM2FmMDFlMDUxMjBhNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlm0jBK72s2BZ3pKjYEC7v3NMQplz g+dTkvRp7rxpIArBjS3frzq0QXRCJG62i+5NGa/MiWAD+gHSfXQzgfRbVEukCYyc EFfwB09iMYndVFzA8n9Cr7jR6+nOPFbCged8VWDrzLDGs29QpOzKfIcjVbs7ckHE X5S2VHLfze+MBu3PRrDxv0A/z2MUJJ1plOWDhxOTV6Fdfpha1RNtsYhHgEsgTl1e KGcj/+1TUi9ofCYAx7XrC2uygwXzhhUA95KJ9OR6stecIWqN8tqQg37C6xjtlt7G wg1P8aD5ehkoCD415iwn49GDXrHd/5kt/JhQQrwdFzVmR2GTjoXvj+oASwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCu+1CbpNZJxNloq5XISjXF4K434MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU0NGU3MDMxLTc4MWItNGUyOS05NzMwLWIyMWNjMjc4MTQzNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaNqAwDQYJKoZIhvcNAQELBQADggEBACKVdME7ZwfxP6lf4bb0 L0epnhebFvlo+14HkS9RflkCNoqWFGKomJ2V85JUiigNL1t5ZCvMyR5cYbnJoN9G 41jK26j6BBk3c2id2OGP5OehBd6XLb6kQY4sXAV2jbskrtCV1qiuytuAMrJMwKOT ICBpxy0GgdIB445a4AGk85tuQ8y5Z8fkoFhj5eU/qppHyOCTr8mDvs5nuK5oMdKp EnmfG1hzjjXXWK3p9Wox/TOYCOddUcO0MeTaxH0vuaAzF1Ximlt+HweO9kxdo4VR 5/Rd032STg9GozJVbvYhC/U1BmcMj9SmWlU4JEMZPw1glo+R5OfpDEjXmZ1zFWlz jDs= -----END CERTIFICATE-----Generated at Tue Jun 3 23:51:50 2025 by rpki-client