$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7f58f387-58a3-4959-8dec-7781a0fc0834.roa File: 7f58f387-58a3-4959-8dec-7781a0fc0834.roa (raw, json) Hash identifier: JJNS7WZHBTP6KeTccpdAgtIaj+j2ProMJGqBLdv3Uv0= Subject key identifier: 52:C9:64:7E:A4:E3:4A:26:95:B5:8F:6A:5A:15:6E:97:CA:75:86:4B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5B8DCC75D386D7E3007400C22E5970CA2C6665CE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7f58f387-58a3-4959-8dec-7781a0fc0834.roa Signing time: Fri 16 May 2025 15:50:59 +0000 ROA not before: Fri 16 May 2025 15:50:59 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da18:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 00:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:8d:cc:75:d3:86:d7:e3:00:74:00:c2:2e:59:70:ca:2c:66:65:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 15:50:59 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=5d0d74eba0c4c62a48c41d08d1a72046a26faf23cc0255b8d5da9280b6713d84, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e5:16:13:b8:f3:87:5c:65:b1:88:1a:53:db: 43:19:cc:46:b3:80:e0:ed:2e:43:be:b0:2b:91:2b: 8e:f2:24:29:e5:18:97:e9:cf:40:14:83:87:5e:31: a8:f1:e8:0c:ca:02:65:f5:f1:e8:c5:77:5c:0e:59: ed:b3:f7:5c:1e:e8:0b:2e:4f:fa:c7:1f:14:68:09: 99:1f:0b:71:34:d9:0e:47:d3:e3:ce:83:5e:4e:0d: 36:e4:4e:7d:39:09:c0:02:73:17:f5:80:ab:0b:52: b4:79:d1:9b:26:a5:70:43:53:51:6c:4f:96:5b:c2: 0a:1d:d4:87:ff:c5:73:8f:31:a5:9a:67:46:33:c2: 10:81:e2:99:d6:56:03:a1:d2:63:62:50:52:c5:57: 78:29:a0:ad:dd:7b:b0:a2:cb:21:1e:31:be:2e:6e: 67:67:ca:4c:ab:bd:6f:68:13:12:a4:26:3d:37:1a: 88:de:74:a8:05:ba:58:54:c2:12:23:81:c3:c9:b8: 3a:bf:40:d4:28:1b:9a:ff:12:5b:11:20:3e:80:86: 63:a0:c2:60:0a:5b:19:55:48:f0:34:2a:4e:9b:3b: d8:88:26:04:e1:2f:e6:ef:e7:34:65:57:c1:48:33: 2e:9a:20:47:54:4b:ea:fc:d4:1e:db:c3:21:a6:57: dc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C9:64:7E:A4:E3:4A:26:95:B5:8F:6A:5A:15:6E:97:CA:75:86:4B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7f58f387-58a3-4959-8dec-7781a0fc0834.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da18:800::/38 Signature Algorithm: sha256WithRSAEncryption 9e:1a:3b:f8:b4:8f:48:2b:c3:b6:ba:a0:2c:3c:68:d3:15:1b: bf:1c:4a:d3:5b:b2:5c:79:c1:90:37:d4:ad:54:b0:71:ba:47: 86:bf:a1:b7:21:6d:c7:60:91:59:14:ce:43:9b:c6:26:e2:41: 31:ec:cc:f5:1b:d2:2c:5b:a2:47:60:5c:77:ef:8c:69:a2:6e: a6:9f:3c:9c:1b:50:45:86:3d:f9:76:77:ff:bb:6b:40:19:77: 59:90:2c:7a:b1:6a:91:40:1d:be:6c:6f:4c:d4:ff:66:7d:35: 0e:6d:65:86:d3:e6:d7:e6:22:3b:2f:d0:0c:9d:1d:8f:e9:91: 3a:63:d1:af:cd:18:c7:94:3a:3d:92:c0:09:82:e5:d2:3c:12: 69:57:24:0b:d9:e8:25:27:26:82:4e:8c:b6:77:68:35:84:f6: 41:81:68:b0:d1:a2:02:f6:88:d0:21:0c:8d:10:5c:59:d8:56: de:7a:e4:4d:90:19:f5:3e:d2:0a:9a:f7:a9:2e:34:cb:ed:42: 55:0d:2b:c5:9a:da:04:4f:02:47:3e:a6:f9:1a:71:b8:d1:f4: bc:c2:25:40:75:6a:93:62:1e:bb:70:05:53:f4:cd:31:92:33: 9e:08:a2:33:ab:e3:9d:9f:66:2e:b4:7e:f1:80:cc:27:76:48: 2c:e5:7c:c4 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUW43MddOG1+MAdADCLllwyixmZc4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjE1NTA1OVoX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNANWQwZDc0ZWJhMGM0YzYyYTQ4YzQx ZDA4ZDFhNzIwNDZhMjZmYWYyM2NjMDI1NWI4ZDVkYTkyODBiNjcxM2Q4NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuUWE7jzh1xlsYgaU9tDGcxGs4Dg 7S5DvrArkSuO8iQp5RiX6c9AFIOHXjGo8egMygJl9fHoxXdcDlnts/dcHugLLk/6 xx8UaAmZHwtxNNkOR9PjzoNeTg025E59OQnAAnMX9YCrC1K0edGbJqVwQ1NRbE+W W8IKHdSH/8VzjzGlmmdGM8IQgeKZ1lYDodJjYlBSxVd4KaCt3XuwosshHjG+Lm5n Z8pMq71vaBMSpCY9NxqI3nSoBbpYVMISI4HDybg6v0DUKBua/xJbESA+gIZjoMJg ClsZVUjwNCpOmzvYiCYE4S/m7+c0ZVfBSDMumiBHVEvq/NQe28Mhplfc5wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFLJZH6k40omlbWPaloVbpfKdYZLMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdmNThmMzg3LTU4YTMtNDk1OS04ZGVjLTc3ODFhMGZjMDgzNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaGAgwDQYJKoZIhvcNAQELBQADggEBAJ4aO/i0j0grw7a6oCw8 aNMVG78cStNbslx5wZA31K1UsHG6R4a/obchbcdgkVkUzkObxibiQTHszPUb0ixb okdgXHfvjGmibqafPJwbUEWGPfl2d/+7a0AZd1mQLHqxapFAHb5sb0zU/2Z9NQ5t ZYbT5tfmIjsv0AydHY/pkTpj0a/NGMeUOj2SwAmC5dI8EmlXJAvZ6CUnJoJOjLZ3 aDWE9kGBaLDRogL2iNAhDI0QXFnYVt565E2QGfU+0gqa96kuNMvtQlUNK8Wa2gRP Akc+pvkacbjR9LzCJUB1apNiHrtwBVP0zTGSM54IojOr452fZi60fvGAzCd2SCzl fMQ= -----END CERTIFICATE-----Generated at Mon Jun 2 06:30:44 2025 by rpki-client