$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5d757d26-e156-4b10-9ff8-2391de94a136.roa File: 5d757d26-e156-4b10-9ff8-2391de94a136.roa (raw, json) Hash identifier: 2uht/uIXllhFYMR3a2mJzVky+/ivdvh7aUoRHxOBleI= Subject key identifier: E8:56:53:38:2C:78:98:A9:F5:79:F6:B9:80:15:03:55:19:F3:37:FB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 14A12853EB5525C32E3CDAC2B3C53D6D9C120A8C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5d757d26-e156-4b10-9ff8-2391de94a136.roa Signing time: Fri 16 May 2025 15:51:01 +0000 ROA not before: Fri 16 May 2025 15:51:01 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da12::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:a1:28:53:eb:55:25:c3:2e:3c:da:c2:b3:c5:3d:6d:9c:12:0a:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 15:51:01 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=73a97efae6f881535f60165250ec829880266bd853391a524b245277617c4b91, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a1:28:cf:27:7c:6b:3b:62:9e:1a:10:30:fc: 57:b8:a4:48:13:0b:75:de:4d:23:27:f5:cc:ff:35: 7d:26:00:1e:b0:44:8f:44:7c:25:ad:39:08:1d:19: 20:f3:5b:d4:59:33:60:b9:ba:58:94:3f:d8:83:f9: b8:94:0e:5f:58:d0:42:33:c2:69:c3:a9:52:3a:89: 44:58:dd:fe:1e:47:b5:46:6b:6d:6e:e1:28:35:45: 77:bf:25:33:d5:74:8b:e0:93:b8:3a:ee:27:db:c0: 23:f8:62:dc:4b:03:f4:3c:9f:0a:f8:25:20:ad:0a: ca:ba:f6:1f:e3:c4:d7:96:fa:e9:64:8d:97:38:ca: 0a:9f:58:96:4a:1a:71:b4:13:61:a4:94:9b:0c:9d: 18:2c:16:2c:ed:e7:7a:6b:9c:6b:dc:98:9a:7b:01: 67:67:86:75:88:06:3e:5a:cb:6c:17:b4:0f:ca:d7: 50:cc:ed:58:c4:90:73:2d:8e:35:c7:ed:d8:99:79: 5d:00:d8:1d:a6:a2:79:39:b0:60:1e:80:d0:05:35: 93:a0:91:53:80:c7:b1:01:16:87:93:3e:36:50:06: 06:1d:12:7d:a9:55:79:94:5c:a0:96:59:6f:c9:fb: 68:c8:d7:74:80:50:af:d5:79:1b:86:97:cf:7f:e6: 43:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:56:53:38:2C:78:98:A9:F5:79:F6:B9:80:15:03:55:19:F3:37:FB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5d757d26-e156-4b10-9ff8-2391de94a136.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da12::/36 Signature Algorithm: sha256WithRSAEncryption 07:e9:92:b8:d3:a8:69:55:f2:7c:00:c2:66:6b:b4:63:f9:ef: 63:60:91:4b:4d:c4:01:94:b9:4d:59:cc:f0:92:0d:1f:3b:a4: 4e:2a:87:b5:8d:07:d4:21:37:01:9b:48:dd:36:ce:96:51:b4: 17:52:cd:f2:6e:6e:a7:1b:6c:40:86:61:66:53:a3:6c:63:8c: 9b:46:80:9d:82:a5:30:00:be:e2:db:17:1e:aa:1e:c6:1d:62: e3:b4:a2:12:f6:16:08:3b:8a:4b:94:28:f7:b7:8f:19:f5:0c: 54:c0:13:ee:7e:01:a9:cd:42:18:fe:1f:f4:12:14:a3:88:8e: 4e:49:de:a4:2c:28:16:e2:df:7e:c5:24:0c:87:d2:8b:90:44: e3:dc:de:47:9e:1d:a6:71:2e:fd:46:72:09:1b:00:fb:50:6c: c9:af:ef:53:0a:07:af:ab:3f:19:09:70:51:f4:93:f0:71:ba: b0:7f:e5:a8:de:81:7a:7e:65:88:92:88:8b:6c:7a:b9:bf:a2: 2d:1b:7b:c9:15:46:80:69:b8:64:6c:14:6e:67:56:8e:39:ae: 0e:53:6a:9b:06:fa:e2:f5:b0:53:6a:7a:a1:6b:6c:e2:e3:c3: da:ac:4d:57:47:55:de:36:d4:db:a4:b9:e2:d7:e3:3e:07:de: c3:ae:84:81 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUFKEoU+tVJcMuPNrCs8U9bZwSCowwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjE1NTEwMVoX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNANzNhOTdlZmFlNmY4ODE1MzVmNjAx NjUyNTBlYzgyOTg4MDI2NmJkODUzMzkxYTUyNGIyNDUyNzc2MTdjNGI5MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6Eozyd8aztinhoQMPxXuKRIEwt1 3k0jJ/XM/zV9JgAesESPRHwlrTkIHRkg81vUWTNgubpYlD/Yg/m4lA5fWNBCM8Jp w6lSOolEWN3+Hke1RmttbuEoNUV3vyUz1XSL4JO4Ou4n28Aj+GLcSwP0PJ8K+CUg rQrKuvYf48TXlvrpZI2XOMoKn1iWShpxtBNhpJSbDJ0YLBYs7ed6a5xr3JiaewFn Z4Z1iAY+WstsF7QPytdQzO1YxJBzLY41x+3YmXldANgdpqJ5ObBgHoDQBTWToJFT gMexARaHkz42UAYGHRJ9qVV5lFyglllvyftoyNd0gFCv1XkbhpfPf+ZDsQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOhWUzgseJip9Xn2uYAVA1UZ8zf7MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVkNzU3ZDI2LWUxNTYtNGIxMC05ZmY4LTIzOTFkZTk0YTEzNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaEgAwDQYJKoZIhvcNAQELBQADggEBAAfpkrjTqGlV8nwAwmZr tGP572NgkUtNxAGUuU1ZzPCSDR87pE4qh7WNB9QhNwGbSN02zpZRtBdSzfJubqcb bECGYWZTo2xjjJtGgJ2CpTAAvuLbFx6qHsYdYuO0ohL2Fgg7ikuUKPe3jxn1DFTA E+5+AanNQhj+H/QSFKOIjk5J3qQsKBbi337FJAyH0ouQROPc3keeHaZxLv1Gcgkb APtQbMmv71MKB6+rPxkJcFH0k/BxurB/5ajegXp+ZYiSiItserm/oi0be8kVRoBp uGRsFG5nVo45rg5TapsG+uL1sFNqeqFrbOLjw9qsTVdHVd421NukueLX4z4H3sOu hIE= -----END CERTIFICATE-----Generated at Tue Jun 3 23:15:41 2025 by rpki-client