$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5b15b8cc-026d-4909-976b-a48a26fc3ee0.roa File: 5b15b8cc-026d-4909-976b-a48a26fc3ee0.roa (raw, json) Hash identifier: 232p8mGWr8Hv9P0EzB8VthGY9JCDXniELKVKZAXl0Lc= Subject key identifier: 1D:87:74:03:FC:97:0C:96:8B:B8:CA:6A:D9:E9:3F:58:B6:4C:EF:52 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5A0B23EB69F009EF46F5C4AF658C0FCD7BC88890 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5b15b8cc-026d-4909-976b-a48a26fc3ee0.roa Signing time: Wed 14 May 2025 00:42:03 +0000 ROA not before: Wed 14 May 2025 00:42:03 +0000 ROA not after: Wed 18 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:8800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:0b:23:eb:69:f0:09:ef:46:f5:c4:af:65:8c:0f:cd:7b:c8:88:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 14 00:42:03 2025 GMT Not After : Jun 18 23:59:59 2025 GMT Subject: serialNumber=6457deac03403428fca687bd02777e73b8d30183955ba47327ac2906af6f1dd4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bf:95:4b:61:15:cb:99:5b:72:ae:38:d3:2d: 4a:94:e2:92:dc:23:60:a6:36:a8:f5:86:f6:1b:7d: 65:98:bd:bc:b1:23:9b:5e:da:1b:0b:24:95:89:95: 20:eb:63:27:42:a5:5e:07:fa:0d:a7:47:fe:e5:97: 0f:5c:61:b1:9c:bd:66:6b:6e:72:18:a5:6b:61:a4: 53:07:5a:26:de:a0:03:7f:96:ff:44:27:78:e2:c4: 4b:d5:0d:29:6f:79:5a:6a:2c:3b:76:ec:d9:bf:0e: a2:1a:58:93:95:cd:b2:d5:af:7d:81:a4:17:a9:fc: ca:6f:97:c6:71:e9:57:cb:16:9d:49:a0:6f:3f:90: 04:5e:e5:d1:15:ba:83:62:ab:b2:7c:85:05:20:48: 77:54:95:91:f3:39:72:c3:3c:e8:f9:f7:9a:cc:9a: e3:e8:33:fc:9b:fe:cf:13:c0:cb:ec:46:b8:c3:9a: 4f:cb:19:37:d8:27:93:d8:9f:7b:19:54:63:05:13: da:6c:f4:32:f2:04:86:9e:a0:61:01:90:cb:2a:c5: c2:88:73:01:14:0b:25:88:8e:1f:a0:86:84:88:07: 54:3f:fb:91:41:a0:82:0f:bd:dc:6b:9f:d1:8f:b5: 22:fb:c4:2d:3d:12:be:08:df:ff:a6:3e:95:83:12: 75:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:87:74:03:FC:97:0C:96:8B:B8:CA:6A:D9:E9:3F:58:B6:4C:EF:52 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5b15b8cc-026d-4909-976b-a48a26fc3ee0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:8800::/40 Signature Algorithm: sha256WithRSAEncryption 02:b5:bd:32:83:70:a3:cb:64:78:07:d1:b5:01:bf:76:f9:8d: d0:b4:d8:28:72:96:e9:e9:c8:7d:f9:1a:5b:00:b6:95:a3:3e: d1:f1:fc:68:ba:0f:a3:4f:65:af:f3:ff:f4:e3:54:49:c5:0f: 75:9c:35:5d:51:4f:cf:8a:d9:cc:aa:54:15:10:7d:16:bc:13: 61:d5:ee:e2:79:46:89:e1:b0:0f:c0:53:0f:ad:48:1d:34:77: 86:ac:6d:92:fb:62:8c:83:dc:0f:ae:74:2b:97:82:2a:8e:92: de:dd:0a:99:9e:19:d1:55:97:91:64:54:08:7e:95:bb:2a:48: 06:24:27:36:b0:8c:f0:f9:1e:f3:fd:bf:fe:1a:fe:74:99:d2: b2:84:12:a0:7d:48:84:ce:56:12:4d:ba:f8:5f:06:e6:6d:4b: c0:91:00:62:ae:11:55:b1:31:00:51:92:a8:34:1f:2c:32:74: fd:42:77:9c:53:b8:e7:82:a5:68:fc:a2:62:08:0c:91:af:1f: 13:48:1d:50:b5:de:57:39:04:cd:09:a6:00:10:07:b3:94:81: 40:bb:14:d4:4a:e8:fa:9b:46:3b:c8:ef:f4:3c:5e:5e:6a:26: 2c:e9:90:93:08:46:3f:be:dd:40:de:6d:63:b3:96:0e:5b:bb: ad:a4:f0:24 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUWgsj62nwCe9G9cSvZYwPzXvIiJAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNDAwNDIwM1oX DTI1MDYxODIzNTk1OVowejFJMEcGA1UEBRNANjQ1N2RlYWMwMzQwMzQyOGZjYTY4 N2JkMDI3NzdlNzNiOGQzMDE4Mzk1NWJhNDczMjdhYzI5MDZhZjZmMWRkNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArr+VS2EVy5lbcq440y1KlOKS3CNg pjao9Yb2G31lmL28sSObXtobCySViZUg62MnQqVeB/oNp0f+5ZcPXGGxnL1ma25y GKVrYaRTB1om3qADf5b/RCd44sRL1Q0pb3laaiw7duzZvw6iGliTlc2y1a99gaQX qfzKb5fGcelXyxadSaBvP5AEXuXRFbqDYquyfIUFIEh3VJWR8zlywzzo+feazJrj 6DP8m/7PE8DL7Ea4w5pPyxk32CeT2J97GVRjBRPabPQy8gSGnqBhAZDLKsXCiHMB FAsliI4foIaEiAdUP/uRQaCCD73ca5/Rj7Ui+8QtPRK+CN//pj6VgxJ1hwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFB2HdAP8lwyWi7jKatnpP1i2TO9SMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzViMTViOGNjLTAyNmQtNDkwOS05NzZiLWE0OGEyNmZjM2VlMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/4gwDQYJKoZIhvcNAQELBQADggEBAAK1vTKDcKPLZHgH0bUB v3b5jdC02ChylunpyH35GlsAtpWjPtHx/Gi6D6NPZa/z//TjVEnFD3WcNV1RT8+K 2cyqVBUQfRa8E2HV7uJ5RonhsA/AUw+tSB00d4asbZL7YoyD3A+udCuXgiqOkt7d CpmeGdFVl5FkVAh+lbsqSAYkJzawjPD5HvP9v/4a/nSZ0rKEEqB9SITOVhJNuvhf BuZtS8CRAGKuEVWxMQBRkqg0HywydP1Cd5xTuOeCpWj8omIIDJGvHxNIHVC13lc5 BM0JpgAQB7OUgUC7FNRK6PqbRjvI7/Q8Xl5qJizpkJMIRj++3UDebWOzlg5bu62k 8CQ= -----END CERTIFICATE-----Generated at Tue Jun 3 23:13:27 2025 by rpki-client