$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7974622f-4ca2-41cf-a120-c997e94d7512.roa File: 7974622f-4ca2-41cf-a120-c997e94d7512.roa (raw, json) Hash identifier: mxZVi+DKQQ/myQPCWnu4OH7UwvX4qz4wHLKtZzDbi7s= Subject key identifier: 99:2A:87:16:B8:CD:3C:E8:44:95:BC:22:9C:F5:DB:EA:84:0D:16:F3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 018405A2E46EB286E0719CAB59D29D11A75BC350 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7974622f-4ca2-41cf-a120-c997e94d7512.roa Signing time: Fri 16 May 2025 00:11:08 +0000 ROA not before: Fri 16 May 2025 00:11:08 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:b040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:84:05:a2:e4:6e:b2:86:e0:71:9c:ab:59:d2:9d:11:a7:5b:c3:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 00:11:08 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=5629ea4850bb82c1b8d5665a9099408661db084a7505685c9b8d1c9829b72897, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:87:38:54:fe:af:80:c1:16:f6:86:b6:6c:8a: 5b:73:89:3a:50:5f:64:84:e2:e9:59:12:77:33:ac: 48:35:a3:76:d2:5c:bf:23:56:d1:2c:d6:81:51:7f: 07:51:6f:07:a7:7e:92:2e:b6:67:7e:a0:81:ee:53: 87:9b:96:2c:82:87:53:2f:5b:4a:83:1a:ef:91:0a: 3d:5f:4d:44:91:15:2a:30:83:7a:14:33:7b:95:25: 03:f9:a2:75:d1:1d:78:b1:86:b6:9d:26:da:e1:e1: da:34:ce:21:f6:4f:75:86:9d:f1:6a:f4:6b:27:d4: 61:b6:e7:8a:aa:f0:91:e2:f1:a0:f6:ca:63:3b:d5: 7c:e8:95:11:e8:a6:96:ff:55:9a:cf:5c:ef:22:98: 9a:67:c2:3c:79:27:07:6d:3f:9b:1b:48:fb:17:eb: 5b:55:7b:b4:da:fe:83:de:3b:47:d8:1e:d8:c0:2c: 71:57:dc:8e:9c:93:98:f3:81:7b:e8:81:ca:31:41: de:59:d3:88:f2:fb:86:b2:b2:5f:51:38:20:d2:c2: 69:38:b1:11:78:bd:2e:f9:cd:95:80:e7:45:82:09: b1:1b:d3:05:2b:d6:d1:ff:22:79:09:b9:3f:7e:d7: 6c:55:5e:55:77:74:24:8b:be:37:13:42:eb:57:3c: 3d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:2A:87:16:B8:CD:3C:E8:44:95:BC:22:9C:F5:DB:EA:84:0D:16:F3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7974622f-4ca2-41cf-a120-c997e94d7512.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:b040::/46 Signature Algorithm: sha256WithRSAEncryption 99:ec:9f:e2:24:e9:e2:0a:60:da:91:15:9c:18:8b:21:f2:24: d4:e4:5a:cc:48:ae:d9:50:c8:89:0a:00:bc:ea:0d:17:46:37: 5f:81:53:e1:2a:3f:69:86:f0:b5:6b:8d:7c:31:5e:c5:e0:0d: 4e:37:cb:35:5c:39:03:45:9c:43:f5:17:7c:1d:eb:45:1a:94: 76:d5:d2:7f:82:7b:38:d3:99:01:30:38:3a:35:a9:6e:a2:e2: 0b:fd:ee:50:58:6c:28:83:71:25:8d:f5:29:d5:ce:c8:c6:44: 7c:2e:af:82:57:d0:ff:f6:de:8d:eb:28:67:a3:b9:8a:28:c2: 2f:f0:7d:1c:f1:c3:bc:ab:ac:91:a2:fd:ec:a7:87:12:95:05: 58:5a:90:bd:52:c2:aa:fe:4a:b5:d3:4d:f7:36:d2:d1:bc:41: c8:9d:46:f3:77:ff:41:10:2f:d4:93:a0:0f:44:6b:ed:05:39: 4f:60:a7:c9:9f:e3:b3:a7:20:39:02:c6:1b:fe:2c:59:11:30: d6:cf:bb:cc:22:f3:2e:26:f8:b5:81:17:c1:a2:24:50:0d:0d: 90:0e:b5:26:4c:74:4d:5e:d5:ef:21:1a:29:49:11:e8:cf:99: 8e:6b:cb:28:16:9d:d6:75:50:31:a8:93:ba:41:f7:2d:ce:dc: ec:ee:4e:e2 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUAYQFouRusobgcZyrWdKdEadbw1AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjAwMTEwOFoX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNANTYyOWVhNDg1MGJiODJjMWI4ZDU2 NjVhOTA5OTQwODY2MWRiMDg0YTc1MDU2ODVjOWI4ZDFjOTgyOWI3Mjg5NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Ic4VP6vgMEW9oa2bIpbc4k6UF9k hOLpWRJ3M6xINaN20ly/I1bRLNaBUX8HUW8Hp36SLrZnfqCB7lOHm5YsgodTL1tK gxrvkQo9X01EkRUqMIN6FDN7lSUD+aJ10R14sYa2nSba4eHaNM4h9k91hp3xavRr J9RhtueKqvCR4vGg9spjO9V86JUR6KaW/1Waz1zvIpiaZ8I8eScHbT+bG0j7F+tb VXu02v6D3jtH2B7YwCxxV9yOnJOY84F76IHKMUHeWdOI8vuGsrJfUTgg0sJpOLER eL0u+c2VgOdFggmxG9MFK9bR/yJ5Cbk/ftdsVV5Vd3Qki743E0LrVzw9iwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJkqhxa4zTzoRJW8Ipz12+qEDRbzMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc5NzQ2MjJmLTRjYTItNDFjZi1hMTIwLWM5OTdlOTRkNzUxMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaabBAMA0GCSqGSIb3DQEBCwUAA4IBAQCZ7J/iJOniCmDakRWc GIsh8iTU5FrMSK7ZUMiJCgC86g0XRjdfgVPhKj9phvC1a418MV7F4A1ON8s1XDkD RZxD9Rd8HetFGpR21dJ/gns405kBMDg6NaluouIL/e5QWGwog3EljfUp1c7IxkR8 Lq+CV9D/9t6N6yhno7mKKMIv8H0c8cO8q6yRov3sp4cSlQVYWpC9UsKq/kq10033 NtLRvEHInUbzd/9BEC/Uk6APRGvtBTlPYKfJn+OzpyA5AsYb/ixZETDWz7vMIvMu Jvi1gRfBoiRQDQ2QDrUmTHRNXtXvIRopSRHoz5mOa8soFp3WdVAxqJO6Qfctztzs 7k7i -----END CERTIFICATE-----Generated at Tue Jun 3 23:15:00 2025 by rpki-client