$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5a0d1930-a322-4bbd-8eef-91ba17b37082.roa File: 5a0d1930-a322-4bbd-8eef-91ba17b37082.roa (raw, json) Hash identifier: z47gPdDhMyqvtPMo9w/58+l+7t1lNMFRTHN4tIqefXM= Subject key identifier: 87:B9:78:55:AD:B2:40:CE:38:29:F0:5E:CD:AF:30:CE:2C:50:33:2C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 41EC3BF6DC710B133F86887F0B51FFCB6DF9B0BC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5a0d1930-a322-4bbd-8eef-91ba17b37082.roa Signing time: Wed 14 May 2025 00:21:43 +0000 ROA not before: Wed 14 May 2025 00:21:43 +0000 ROA not after: Wed 18 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:e0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:ec:3b:f6:dc:71:0b:13:3f:86:88:7f:0b:51:ff:cb:6d:f9:b0:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 14 00:21:43 2025 GMT Not After : Jun 18 23:59:59 2025 GMT Subject: serialNumber=c5326652d815e4761c0ce87d45dd3142e2ccce195a03073076e60b31ae360776, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c9:73:2c:1f:13:b3:fa:47:58:f6:ba:a4:38: 14:9a:03:5a:06:85:80:44:0b:08:64:d3:c1:84:8e: 47:f0:35:b5:e6:aa:b4:47:83:b6:a0:1b:d7:eb:60: 22:b4:61:34:0e:4d:b0:98:45:e8:bc:09:95:b8:3d: 95:09:d4:dd:24:13:10:42:c9:89:ed:bf:d3:ae:f1: c4:ab:1e:db:27:93:a2:67:06:b5:a5:92:5f:d2:d1: 2e:dc:9f:8b:f2:51:ce:ec:eb:22:14:f3:ad:7f:ce: dd:13:df:8e:50:17:33:38:ae:52:cf:9a:bb:91:e1: be:77:c5:d5:37:cb:33:c6:e3:ac:5c:7c:13:c4:65: fa:c1:74:f4:f1:89:0f:de:2f:28:22:d0:f1:4c:4a: 46:3d:49:76:00:35:1d:2f:4c:97:48:20:59:22:70: cc:03:ad:61:61:89:21:a2:f3:fc:2a:77:4c:fd:b2: 6d:a7:f2:d2:06:c5:96:16:ec:4a:db:b6:ae:fc:2a: 65:d7:ad:d3:33:1b:e2:d6:4e:a9:14:34:68:84:33: 8e:97:14:67:87:bc:2f:d5:93:70:55:b6:3e:fb:ab: 66:19:59:f0:bc:d8:da:e3:d3:26:50:01:b6:e6:e6: ca:db:17:ac:f8:66:b2:86:df:41:7f:12:3c:9f:a3: 26:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B9:78:55:AD:B2:40:CE:38:29:F0:5E:CD:AF:30:CE:2C:50:33:2C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5a0d1930-a322-4bbd-8eef-91ba17b37082.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:e0c0::/48 Signature Algorithm: sha256WithRSAEncryption 8b:2e:82:47:fd:1b:0f:c7:69:c6:94:e2:99:98:10:b2:e7:39: 6e:3e:55:1b:a1:6d:34:74:4a:27:60:64:b0:ba:f9:7d:63:2d: c2:ed:9f:a4:0d:9d:c7:06:ae:24:da:04:99:af:2d:40:61:ac: 73:e9:f4:eb:99:74:0c:30:99:9b:9d:56:4c:8a:37:40:2b:7b: 96:63:da:16:97:2a:d8:0e:ad:3c:2e:cc:5d:74:67:71:57:f2: 63:97:57:2b:d0:31:df:88:9f:65:df:4b:bf:6e:c2:7a:a8:fd: 49:3e:7b:72:23:c6:4e:8a:11:8a:88:a2:59:28:0b:46:f3:56: c7:6a:66:08:9c:32:1e:6f:2c:04:11:c6:dd:90:56:e4:48:c5: 7c:99:d0:96:ab:10:2e:e2:5d:63:78:98:70:ae:48:87:29:7b: d0:87:06:30:a5:4d:a2:5e:bb:de:d6:48:12:6c:17:54:47:b8: 17:2f:ea:0f:00:66:e7:89:3a:9e:e6:34:69:4e:a7:42:cf:0f: 4b:00:7e:8e:05:9e:9d:95:0c:8c:92:7b:6f:3e:a8:77:f0:91: 90:e4:4d:c5:28:a9:32:20:a5:d6:22:03:19:78:cd:ac:84:fb: 0d:72:82:b7:b4:14:38:5b:d5:f8:4d:e7:02:ba:47:99:d0:73: e9:c3:e1:81 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUQew79txxCxM/hoh/C1H/y235sLwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNDAwMjE0M1oX DTI1MDYxODIzNTk1OVowejFJMEcGA1UEBRNAYzUzMjY2NTJkODE1ZTQ3NjFjMGNl ODdkNDVkZDMxNDJlMmNjY2UxOTVhMDMwNzMwNzZlNjBiMzFhZTM2MDc3NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArclzLB8Ts/pHWPa6pDgUmgNaBoWA RAsIZNPBhI5H8DW15qq0R4O2oBvX62AitGE0Dk2wmEXovAmVuD2VCdTdJBMQQsmJ 7b/TrvHEqx7bJ5OiZwa1pZJf0tEu3J+L8lHO7OsiFPOtf87dE9+OUBczOK5Sz5q7 keG+d8XVN8szxuOsXHwTxGX6wXT08YkP3i8oItDxTEpGPUl2ADUdL0yXSCBZInDM A61hYYkhovP8KndM/bJtp/LSBsWWFuxK27au/Cpl163TMxvi1k6pFDRohDOOlxRn h7wv1ZNwVbY++6tmGVnwvNja49MmUAG25ubK2xes+Gayht9BfxI8n6MmQQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIe5eFWtskDOOCnwXs2vMM4sUDMsMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVhMGQxOTMwLWEzMjItNGJiZC04ZWVmLTkxYmExN2IzNzA4Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYeDAMA0GCSqGSIb3DQEBCwUAA4IBAQCLLoJH/RsPx2nGlOKZ mBCy5zluPlUboW00dEonYGSwuvl9Yy3C7Z+kDZ3HBq4k2gSZry1AYaxz6fTrmXQM MJmbnVZMijdAK3uWY9oWlyrYDq08LsxddGdxV/Jjl1cr0DHfiJ9l30u/bsJ6qP1J PntyI8ZOihGKiKJZKAtG81bHamYInDIebywEEcbdkFbkSMV8mdCWqxAu4l1jeJhw rkiHKXvQhwYwpU2iXrve1kgSbBdUR7gXL+oPAGbniTqe5jRpTqdCzw9LAH6OBZ6d lQyMkntvPqh38JGQ5E3FKKkyIKXWIgMZeM2shPsNcoK3tBQ4W9X4TecCukeZ0HPp w+GB -----END CERTIFICATE-----Generated at Tue Jun 3 23:35:38 2025 by rpki-client