$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6e03d559-5f6b-4f35-b42a-126f6eddced6.roa File: 6e03d559-5f6b-4f35-b42a-126f6eddced6.roa (raw, json) Hash identifier: 1FkKEVlFJg5RXmy7ybILc9D+dCefmW5y24ZSWreRcq4= Subject key identifier: 7A:15:A8:2B:73:0B:DD:73:F9:4D:D8:B2:C4:B7:46:92:C6:A1:D8:BB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0EA5793D0EB132710AF088C8DFF3B5F18C2692 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6e03d559-5f6b-4f35-b42a-126f6eddced6.roa Signing time: Fri 16 May 2025 15:10:11 +0000 ROA not before: Fri 16 May 2025 15:10:11 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:8800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:a5:79:3d:0e:b1:32:71:0a:f0:88:c8:df:f3:b5:f1:8c:26:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 15:10:11 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=5676f7c0448b85f303eb950d0c6b0599a781b5a2348f6ea3f36039509b2eea2e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:74:d8:97:0b:09:97:25:f7:82:f4:d4:e6:67: af:76:48:3d:20:62:79:f7:14:c2:94:8b:70:52:f1: 4a:71:65:74:9a:c9:d4:10:ba:1a:e6:27:4e:21:f6: 0b:e1:9c:ec:15:af:4a:6e:cc:b4:21:9a:ea:f3:26: b1:4a:e4:8e:dc:31:bb:33:f0:dd:54:7b:84:d6:a8: ed:f1:70:db:c4:12:e0:ef:95:dd:6d:e5:a0:13:fe: da:d0:3c:d6:e7:94:d5:23:10:27:71:f8:52:92:50: 60:dd:e1:71:f8:98:6d:6b:cb:92:88:9a:e3:ab:b7: be:c5:9a:08:27:33:c5:7e:d5:a7:19:6d:53:6d:b1: 07:1c:86:49:0c:a1:7e:6a:86:45:75:58:59:26:f1: ce:e4:6b:e7:36:9a:53:bc:1f:7b:80:fc:ac:d2:56: 2b:e0:a6:a1:49:de:d7:0a:96:87:3a:f5:d0:45:e7: eb:55:bb:48:49:76:96:da:c5:49:54:d3:4f:ad:45: ae:cd:7c:d9:27:68:0f:08:16:32:44:67:cb:44:43: 8e:2a:46:56:a6:2e:c5:e3:77:e6:0c:05:63:8f:00: bf:c7:16:86:b0:9e:ad:f8:e5:ab:7c:5a:17:99:6c: 9f:2c:8c:1c:44:6e:7f:8d:7f:cd:4e:88:d7:56:85: 41:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:15:A8:2B:73:0B:DD:73:F9:4D:D8:B2:C4:B7:46:92:C6:A1:D8:BB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6e03d559-5f6b-4f35-b42a-126f6eddced6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:8800::/40 Signature Algorithm: sha256WithRSAEncryption 82:11:b2:8a:78:21:17:8c:b9:36:aa:51:bc:90:c1:7c:ad:d5: 4b:a2:57:41:4f:25:40:c6:bd:0a:7c:7b:ec:48:e7:80:e1:27: 1f:09:0a:b8:61:b9:ea:b3:19:38:21:fb:7d:80:2c:ed:b1:29: 6b:d0:a8:77:fc:ab:06:43:e6:4b:31:ea:e2:56:68:49:78:8a: 89:18:d0:61:62:c3:3e:8c:25:44:c1:0b:de:e7:74:d7:2a:08: 2e:95:0b:6b:7b:60:da:bb:59:18:29:dd:83:3b:40:f1:fe:5b: 05:d7:cb:38:1d:e1:72:c0:d3:8c:8d:0d:10:10:13:9e:0c:ce: 65:1b:bc:6b:d0:2f:7a:5d:22:ab:01:1f:f5:fe:75:5e:f5:aa: 39:01:a8:df:51:de:52:8b:fe:6d:5d:d8:0a:b6:1b:4f:1a:d8: 89:76:59:2a:f3:16:08:ac:f0:ec:b9:ca:0c:8e:70:71:93:21: 12:ca:32:c5:14:5d:de:b1:26:eb:58:65:1e:21:ac:55:44:a7: 0d:65:ea:d7:e1:c4:10:a3:26:a4:9e:3b:72:94:57:dd:e6:1b: 00:3c:08:ec:de:ec:c8:b7:c1:a0:4b:29:04:ec:8a:55:fa:a1: fd:ce:62:73:f4:9e:7d:95:d1:fb:44:44:11:65:27:eb:ac:7c: d6:a2:3a:81 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgITDqV5PQ6xMnEK8IjI3/O18YwmkjANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTFGNjM1RjAwMDAxMTAvBgNVBAUTKDQwNzY4MjU1MjRE MkM2NkQyRTEwNDM2RkU2NUU5M0U4QzFCRDRBMzcwHhcNMjUwNTE2MTUxMDExWhcN MjUwNjIwMjM1OTU5WjB6MUkwRwYDVQQFE0A1Njc2ZjdjMDQ0OGI4NWYzMDNlYjk1 MGQwYzZiMDU5OWE3ODFiNWEyMzQ4ZjZlYTNmMzYwMzk1MDliMmVlYTJlMS0wKwYD VQQDEyRjMGJmMGZlOC03MTdjLTRmNzItOWI0NS1jOWM1MTkxMzJhODEwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXdNiXCwmXJfeC9NTmZ692SD0gYnn3 FMKUi3BS8UpxZXSaydQQuhrmJ04h9gvhnOwVr0puzLQhmurzJrFK5I7cMbsz8N1U e4TWqO3xcNvEEuDvld1t5aAT/trQPNbnlNUjECdx+FKSUGDd4XH4mG1ry5KImuOr t77FmggnM8V+1acZbVNtsQcchkkMoX5qhkV1WFkm8c7ka+c2mlO8H3uA/KzSVivg pqFJ3tcKloc69dBF5+tVu0hJdpbaxUlU00+tRa7NfNknaA8IFjJEZ8tEQ44qRlam LsXjd+YMBWOPAL/HFoawnq345at8WheZbJ8sjBxEbn+Nf81OiNdWhUG5AgMBAAGj ggJKMIICRjAdBgNVHQ4EFgQUehWoK3ML3XP5TdiyxLdGksah2LswHwYDVR0jBBgw FoAUQHaCVSTSxm0uEENv5l6T6MG9SjcwDgYDVR0PAQH/BAQDAgeAMH4GCCsGAQUF BwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBv c2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL1FIYUNWU1RT eG0wdUVFTnY1bDZUNk1HOVNqYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1MGJlYzkyNjEv NmUwM2Q1NTktNWY2Yi00ZjM1LWI0MmEtMTI2ZjZlZGRjZWQ2LnJvYTCBlQYDVR0f BIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFt YXpvbmF3cy5jb20vdm9sdW1lLzA4YzJmMjY0LTIzZjktNDlmYi05ZDQzLWY4YjUw YmVjOTI2MS83YmExNzg2My1hNjEzLTQxOTctOWVkNS1iZWRhNmE4OTg2OWYuY3Js MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgAkBtr2iDANBgkqhkiG9w0BAQsFAAOCAQEAghGyinghF4y5NqpRvJDB fK3VS6JXQU8lQMa9Cnx77EjngOEnHwkKuGG56rMZOCH7fYAs7bEpa9Cod/yrBkPm SzHq4lZoSXiKiRjQYWLDPowlRMEL3ud01yoILpULa3tg2rtZGCndgztA8f5bBdfL OB3hcsDTjI0NEBATngzOZRu8a9Avel0iqwEf9f51XvWqOQGo31HeUov+bV3YCrYb TxrYiXZZKvMWCKzw7LnKDI5wcZMhEsoyxRRd3rEm61hlHiGsVUSnDWXq1+HEEKMm pJ47cpRX3eYbADwI7N7syLfBoEspBOyKVfqh/c5ic/SefZXR+0REEWUn66x81qI6 gQ== -----END CERTIFICATE-----Generated at Tue Jun 3 23:36:36 2025 by rpki-client