$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/727c896b-445c-4fe4-af0f-9c0c9d7ae3b0.roa File: 727c896b-445c-4fe4-af0f-9c0c9d7ae3b0.roa (raw, json) Hash identifier: TTjJ5uK9kxvmT4VPtbCmrEjZRKlE5DcG69E3BF3RCwI= Subject key identifier: D5:4F:AB:C0:B4:FF:FA:5E:15:AB:4E:C0:09:4F:5A:E0:B4:5A:EC:FB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 118469AC0818B63CDAB9CFBC75F64330CFDC5C9F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/727c896b-445c-4fe4-af0f-9c0c9d7ae3b0.roa Signing time: Tue 13 May 2025 00:00:47 +0000 ROA not before: Tue 13 May 2025 00:00:47 +0000 ROA not after: Tue 17 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:7080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:84:69:ac:08:18:b6:3c:da:b9:cf:bc:75:f6:43:30:cf:dc:5c:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 13 00:00:47 2025 GMT Not After : Jun 17 23:59:59 2025 GMT Subject: serialNumber=8db7eb69af70e8fb11c84164e604542faa3f01f49f2b1e66d30393cde91c7b0e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:43:af:17:a9:95:6f:bf:b1:98:89:bd:9b:94: 18:6a:06:9b:3a:be:78:d3:cf:d1:6b:6e:8a:b3:bd: 08:de:b6:6b:ae:09:d4:98:72:c8:65:5d:7b:51:83: 5f:f2:0a:da:b3:c4:9e:e2:e1:be:4d:ff:4e:7a:ee: 60:78:e3:f6:f1:b5:59:e7:cd:61:5b:89:b1:73:e2: 4b:36:45:f4:f3:f2:c4:e7:28:49:d5:a6:bb:05:e7: 5d:f1:07:d9:d3:c1:55:d4:71:aa:c8:19:97:4f:4c: c2:c1:ba:b9:46:26:d9:3e:8b:ac:15:76:8a:29:df: 6c:82:ed:2e:ed:43:32:14:c1:3a:69:07:08:c8:a3: 25:fb:5f:d2:b3:62:c5:67:ef:a6:59:7d:57:24:60: db:73:eb:23:be:5f:39:4f:c8:60:97:34:15:46:aa: 79:ea:ee:e2:e9:0d:cb:51:0b:1e:1a:b9:e8:06:87: 4e:f6:cd:01:d4:57:03:74:5b:7f:7c:6c:b6:16:24: 2c:ca:be:fe:b8:98:43:ec:03:55:31:7c:48:0f:cc: c0:14:05:b0:da:38:32:bf:07:0b:28:dc:ef:55:42: ee:a7:26:45:44:9b:43:6b:1b:36:c9:27:2f:7b:33: 03:ee:e6:a0:2b:81:ae:5f:50:c6:4c:93:bd:8e:ec: 50:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:4F:AB:C0:B4:FF:FA:5E:15:AB:4E:C0:09:4F:5A:E0:B4:5A:EC:FB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/727c896b-445c-4fe4-af0f-9c0c9d7ae3b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:7080::/48 Signature Algorithm: sha256WithRSAEncryption 42:89:d6:cd:2c:b1:f2:ed:13:5c:44:1d:14:62:56:ec:79:7b: 1d:00:60:56:a3:57:28:94:6a:1f:a7:4b:ce:86:d8:25:d6:4a: 56:69:83:0a:19:30:09:db:6b:51:cd:7e:54:6b:19:9f:e3:48: 57:ae:64:f0:32:dc:80:0a:dd:ec:56:2a:a8:0c:78:e3:80:33: ca:91:6b:60:a8:f4:32:a1:d0:3e:d6:64:35:5d:28:32:a7:a4: 4a:50:ec:1f:a6:a9:8f:48:65:da:2f:f7:96:db:dd:40:12:ea: b6:02:b4:57:fb:64:40:6a:85:ca:cc:1a:27:42:2f:b6:65:23: 28:b5:cc:45:25:93:17:cb:b6:65:55:98:cd:0e:65:46:21:c0: e7:88:11:d0:b8:7f:39:d3:08:b8:bd:c3:41:93:5c:9c:76:10: 08:ae:1b:5e:39:8d:54:ba:71:35:d8:92:75:ec:4d:42:dc:ee: f9:d5:ad:57:0d:f5:33:82:f1:46:38:81:a2:5c:62:98:25:9c: d6:26:15:a4:e7:2a:ff:84:1d:a6:b1:44:a6:3e:1d:33:f1:21: 29:93:2d:77:bc:58:76:ce:4d:f5:c4:d9:6a:e2:1a:b4:e4:e7: ef:8c:e1:12:cb:cb:61:d6:0f:ae:e3:38:fd:3e:ce:82:be:f4: 3d:2a:0d:c9 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUEYRprAgYtjzauc+8dfZDMM/cXJ8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxMzAwMDA0N1oX DTI1MDYxNzIzNTk1OVowejFJMEcGA1UEBRNAOGRiN2ViNjlhZjcwZThmYjExYzg0 MTY0ZTYwNDU0MmZhYTNmMDFmNDlmMmIxZTY2ZDMwMzkzY2RlOTFjN2IwZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEOvF6mVb7+xmIm9m5QYagabOr54 08/Ra26Ks70I3rZrrgnUmHLIZV17UYNf8gras8Se4uG+Tf9Oeu5geOP28bVZ581h W4mxc+JLNkX08/LE5yhJ1aa7Bedd8QfZ08FV1HGqyBmXT0zCwbq5RibZPousFXaK Kd9sgu0u7UMyFME6aQcIyKMl+1/Ss2LFZ++mWX1XJGDbc+sjvl85T8hglzQVRqp5 6u7i6Q3LUQseGrnoBodO9s0B1FcDdFt/fGy2FiQsyr7+uJhD7ANVMXxID8zAFAWw 2jgyvwcLKNzvVULupyZFRJtDaxs2yScvezMD7uagK4GuX1DGTJO9juxQqwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNVPq8C0//peFatOwAlPWuC0Wuz7MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzcyN2M4OTZiLTQ0NWMtNGZlNC1hZjBmLTljMGM5ZDdhZTNiMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/3CAMA0GCSqGSIb3DQEBCwUAA4IBAQBCidbNLLHy7RNcRB0U YlbseXsdAGBWo1colGofp0vOhtgl1kpWaYMKGTAJ22tRzX5Uaxmf40hXrmTwMtyA Ct3sViqoDHjjgDPKkWtgqPQyodA+1mQ1XSgyp6RKUOwfpqmPSGXaL/eW291AEuq2 ArRX+2RAaoXKzBonQi+2ZSMotcxFJZMXy7ZlVZjNDmVGIcDniBHQuH850wi4vcNB k1ycdhAIrhteOY1UunE12JJ17E1C3O751a1XDfUzgvFGOIGiXGKYJZzWJhWk5yr/ hB2msUSmPh0z8SEpky13vFh2zk31xNlq4hq05OfvjOESy8th1g+u4zj9Ps6CvvQ9 Kg3J -----END CERTIFICATE-----Generated at Tue Jun 3 23:10:41 2025 by rpki-client