$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5a7061fa-5c37-4494-8c7f-d198ecf9a78a.roa File: 5a7061fa-5c37-4494-8c7f-d198ecf9a78a.roa (raw, json) Hash identifier: azsbSmmrAfUBsdULgno9wg7lobrUvndv/lsBVvL+yi0= Subject key identifier: 42:98:A6:53:77:8E:2F:37:25:A2:8E:72:11:FD:A8:2A:B2:CF:74:08 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 79922663C87FB23E56F014CE92ADF22C65AC1D2D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5a7061fa-5c37-4494-8c7f-d198ecf9a78a.roa Signing time: Sat 31 May 2025 00:00:17 +0000 ROA not before: Sat 31 May 2025 00:00:17 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da68:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:92:26:63:c8:7f:b2:3e:56:f0:14:ce:92:ad:f2:2c:65:ac:1d:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 31 00:00:17 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=09c0e3700890fc95b10f6448b62d577bedac187125624559b980f343513a2bad, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f2:58:70:c6:c3:7d:c9:1e:fa:98:84:87:6b: 70:97:a1:61:e9:1f:20:bc:c9:2a:f3:7f:6f:72:57: a0:ce:42:29:bf:a6:86:62:3a:c4:33:61:73:8d:a0: 66:7c:34:ca:82:87:d1:94:01:a3:ec:fb:96:99:ff: ce:9a:3b:43:2f:fd:e0:25:05:8c:5e:51:eb:bc:70: 63:ed:f7:3c:e1:0b:ab:e6:ae:0b:a6:d2:36:6d:75: 4c:c0:77:7b:3e:6a:ad:22:ac:26:39:5a:5e:60:ed: a7:4b:22:16:19:16:54:9a:56:18:9d:d1:95:58:40: e0:04:a1:f8:c4:2d:e0:a7:dc:6f:77:56:0d:e7:ca: e6:1a:13:25:3a:a7:bf:31:e6:1a:50:fe:00:0f:c0: 00:b5:22:51:a8:11:cd:55:ed:c5:eb:a9:1a:1a:b8: 94:3f:5f:69:77:3f:90:8e:8e:4e:53:28:89:1d:8f: 6e:b8:c7:db:26:01:95:73:11:87:d6:8d:4f:f2:c5: fd:61:ba:11:29:a0:0e:1a:a6:6b:f5:21:3d:61:7e: d4:3e:1c:bf:06:16:40:50:2c:46:84:79:66:2e:9c: 4c:eb:83:dd:a4:57:f1:8e:3f:65:9f:43:3a:39:87: 86:e1:f9:d9:1a:17:54:4f:f4:67:8d:cc:72:38:5a: 84:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:98:A6:53:77:8E:2F:37:25:A2:8E:72:11:FD:A8:2A:B2:CF:74:08 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5a7061fa-5c37-4494-8c7f-d198ecf9a78a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da68:c800::/40 Signature Algorithm: sha256WithRSAEncryption 5b:f7:32:4e:77:e3:fd:6b:d5:d3:5e:16:57:2a:ad:69:14:06: 87:eb:0a:57:cd:06:16:37:b6:91:da:9a:37:a6:06:82:ae:11: c2:9f:be:aa:0b:4d:13:54:1c:e3:37:37:ae:26:eb:c2:6c:ed: 0d:45:07:13:e3:ed:3e:0c:cd:7c:38:ef:44:27:ef:62:65:9c: 09:91:1f:42:97:48:ee:ea:85:2b:e7:c7:8c:56:e1:f9:4a:ee: 50:e8:da:20:3f:3c:45:7b:c5:22:bc:0b:93:a2:71:9b:d6:06: 90:7c:81:bb:0d:bd:2d:79:49:18:74:ed:0d:39:2f:ed:36:5d: b0:8d:c6:81:0b:e3:7d:a4:fa:bc:ad:e0:b9:fd:e5:a2:94:59: a5:6a:7a:f9:84:3a:2c:85:34:60:d7:f4:f9:41:af:38:95:57: c0:33:fc:0c:cd:b7:72:6d:ab:87:3a:3c:ec:00:39:d9:de:c4: 64:d4:e9:99:9b:02:81:1b:68:e9:6b:41:a3:4c:7a:9b:d3:9f: c1:12:40:76:b6:f9:58:50:e0:1e:6f:56:db:57:57:cc:1d:05: d5:41:24:d2:e9:0b:67:08:12:6f:91:a6:1b:b0:17:9d:4e:b0: 1a:d9:86:94:6d:bf:0a:45:83:db:a4:b8:8a:46:22:13:05:a8: 05:4c:f3:e0 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUeZImY8h/sj5W8BTOkq3yLGWsHS0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUzMTAwMDAxN1oX DTI1MDcwNTIzNTk1OVowejFJMEcGA1UEBRNAMDljMGUzNzAwODkwZmM5NWIxMGY2 NDQ4YjYyZDU3N2JlZGFjMTg3MTI1NjI0NTU5Yjk4MGYzNDM1MTNhMmJhZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfJYcMbDfcke+piEh2twl6Fh6R8g vMkq839vclegzkIpv6aGYjrEM2FzjaBmfDTKgofRlAGj7PuWmf/OmjtDL/3gJQWM XlHrvHBj7fc84Qur5q4LptI2bXVMwHd7PmqtIqwmOVpeYO2nSyIWGRZUmlYYndGV WEDgBKH4xC3gp9xvd1YN58rmGhMlOqe/MeYaUP4AD8AAtSJRqBHNVe3F66kaGriU P19pdz+Qjo5OUyiJHY9uuMfbJgGVcxGH1o1P8sX9YboRKaAOGqZr9SE9YX7UPhy/ BhZAUCxGhHlmLpxM64PdpFfxjj9ln0M6OYeG4fnZGhdUT/RnjcxyOFqE9wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEKYplN3ji83JaKOchH9qCqyz3QIMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVhNzA2MWZhLTVjMzctNDQ5NC04YzdmLWQxOThlY2Y5YTc4YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaMgwDQYJKoZIhvcNAQELBQADggEBAFv3Mk534/1r1dNeFlcq rWkUBofrClfNBhY3tpHamjemBoKuEcKfvqoLTRNUHOM3N64m68Js7Q1FBxPj7T4M zXw470Qn72JlnAmRH0KXSO7qhSvnx4xW4flK7lDo2iA/PEV7xSK8C5OicZvWBpB8 gbsNvS15SRh07Q05L+02XbCNxoEL432k+ryt4Ln95aKUWaVqevmEOiyFNGDX9PlB rziVV8Az/AzNt3Jtq4c6POwAOdnexGTU6ZmbAoEbaOlrQaNMepvTn8ESQHa2+VhQ 4B5vVttXV8wdBdVBJNLpC2cIEm+RphuwF51OsBrZhpRtvwpFg9ukuIpGIhMFqAVM 8+A= -----END CERTIFICATE-----Generated at Tue Jun 3 23:34:29 2025 by rpki-client