$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/71d1a287-2d4f-4345-ae49-debf8605c516.roa File: 71d1a287-2d4f-4345-ae49-debf8605c516.roa (raw, json) Hash identifier: vDCNUbHJSbPGivBIU75loHkT5V0/PPTv31rqtd7UtAo= Subject key identifier: 8E:80:EC:52:7A:EE:85:4E:38:B6:4F:33:EA:B6:B2:3F:93:20:FB:2C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 049ACA68708991B26FB1CDA819B1DDF5436B69A2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/71d1a287-2d4f-4345-ae49-debf8605c516.roa Signing time: Fri 16 May 2025 15:50:56 +0000 ROA not before: Fri 16 May 2025 15:50:56 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da11::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:9a:ca:68:70:89:91:b2:6f:b1:cd:a8:19:b1:dd:f5:43:6b:69:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 15:50:56 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=2b110db58305a9c416deb0cb935b0808d863580ddab0a60f7a431c5812a7a80c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:17:f4:73:73:99:76:e7:5d:44:9f:53:ee:9b: c0:2f:57:eb:08:5f:f3:91:22:80:2d:1e:9d:8b:ee: 3d:41:2c:cc:d7:9f:02:4b:8b:a4:91:9d:9c:5f:ea: 2a:f6:21:96:e6:65:24:8d:e3:54:8f:fc:d1:18:d8: d1:e9:23:00:d8:a5:36:cd:36:cd:25:42:94:52:72: 4e:59:3f:21:50:f7:a7:dd:fa:10:ff:77:ce:1a:0d: 3a:d6:e4:b2:36:03:6e:03:2c:11:87:ff:20:dc:37: f6:d6:8d:70:d6:e5:15:17:21:21:d6:6f:b8:12:d8: f2:59:fa:34:54:98:2e:4e:5c:7c:f4:96:55:bd:e9: 27:4c:bc:ad:77:8e:07:76:5a:19:66:10:d8:98:53: 85:54:cc:2a:81:1d:62:a5:32:f2:75:3a:6d:d0:04: 47:11:f1:07:22:e9:16:bc:5b:76:1a:e6:13:33:72: 3a:aa:61:9a:cb:27:ac:c3:70:e4:3f:56:2e:e6:1c: 74:96:06:39:65:93:0b:99:3b:46:bf:a4:74:7e:36: 53:6b:74:5e:94:68:a3:15:83:2a:07:2a:89:1d:ca: e7:99:cc:0f:76:c7:e2:f2:62:71:8f:c3:76:32:f7: c2:ef:0c:de:e5:97:f2:bc:c0:af:95:3e:19:44:2b: d0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:80:EC:52:7A:EE:85:4E:38:B6:4F:33:EA:B6:B2:3F:93:20:FB:2C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/71d1a287-2d4f-4345-ae49-debf8605c516.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da11::/38 Signature Algorithm: sha256WithRSAEncryption 52:24:e1:bb:91:04:9b:f9:95:c5:51:2a:0f:5b:5c:ee:e3:72: 10:15:21:26:ca:06:a5:fd:55:fb:89:f1:04:03:09:ae:68:ee: b2:8e:5c:71:cd:3c:fb:a5:da:3b:59:fa:f5:ef:43:e9:5c:41: d8:87:c6:15:72:04:30:68:c1:d6:3e:52:49:7d:a6:b4:b2:9a: 17:f3:2d:f2:e8:cb:da:1f:16:a0:6e:04:5c:d0:83:ec:f7:ab: 8f:33:86:9c:d3:ab:3c:94:3d:8a:88:67:78:a1:18:16:9f:ef: 17:2e:9c:8d:7a:18:4b:46:c4:ba:11:66:1b:eb:e7:81:2c:18: a8:1a:44:08:2a:17:58:79:31:7d:df:41:66:9b:c6:e9:82:c8: b7:14:e9:47:70:44:b1:83:92:d9:87:b0:6e:c3:5e:69:04:98: 41:16:02:82:98:4e:cd:2c:9f:1e:74:34:bb:e6:14:33:3e:3b: 27:5b:06:03:fb:57:45:df:bb:61:e9:8c:0b:bd:91:54:e2:e3: 84:88:76:fd:86:ae:1d:cb:4e:1e:fb:38:d2:28:42:59:0e:bf: 90:49:ce:3e:94:de:4b:8c:dc:db:6d:e2:ea:64:0a:73:78:9b: d9:26:fb:6b:c1:6e:36:eb:29:48:e5:d4:81:ed:b1:8d:74:86: 46:8f:f8:6d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBJrKaHCJkbJvsc2oGbHd9UNraaIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjE1NTA1NloX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAMmIxMTBkYjU4MzA1YTljNDE2ZGVi MGNiOTM1YjA4MDhkODYzNTgwZGRhYjBhNjBmN2E0MzFjNTgxMmE3YTgwYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxf0c3OZduddRJ9T7pvAL1frCF/z kSKALR6di+49QSzM158CS4ukkZ2cX+oq9iGW5mUkjeNUj/zRGNjR6SMA2KU2zTbN JUKUUnJOWT8hUPen3foQ/3fOGg061uSyNgNuAywRh/8g3Df21o1w1uUVFyEh1m+4 EtjyWfo0VJguTlx89JZVveknTLytd44HdloZZhDYmFOFVMwqgR1ipTLydTpt0ARH EfEHIukWvFt2GuYTM3I6qmGayyesw3DkP1Yu5hx0lgY5ZZMLmTtGv6R0fjZTa3Re lGijFYMqByqJHcrnmcwPdsfi8mJxj8N2MvfC7wze5ZfyvMCvlT4ZRCvQ7QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFI6A7FJ67oVOOLZPM+q2sj+TIPssMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzcxZDFhMjg3LTJkNGYtNDM0NS1hZTQ5LWRlYmY4NjA1YzUxNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaEQAwDQYJKoZIhvcNAQELBQADggEBAFIk4buRBJv5lcVRKg9b XO7jchAVISbKBqX9VfuJ8QQDCa5o7rKOXHHNPPul2jtZ+vXvQ+lcQdiHxhVyBDBo wdY+Ukl9prSymhfzLfLoy9ofFqBuBFzQg+z3q48zhpzTqzyUPYqIZ3ihGBaf7xcu nI16GEtGxLoRZhvr54EsGKgaRAgqF1h5MX3fQWabxumCyLcU6UdwRLGDktmHsG7D XmkEmEEWAoKYTs0snx50NLvmFDM+OydbBgP7V0Xfu2HpjAu9kVTi44SIdv2Grh3L Th77ONIoQlkOv5BJzj6U3kuM3Ntt4upkCnN4m9km+2vBbjbrKUjl1IHtsY10hkaP +G0= -----END CERTIFICATE-----Generated at Tue Jun 3 23:31:51 2025 by rpki-client