$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/825b729c-7c4f-404b-b26e-13e5d882a631.roa File: 825b729c-7c4f-404b-b26e-13e5d882a631.roa (raw, json) Hash identifier: qnFWvAsOXp24Knd2TM/ghKRv8SNJ4rCr+Jn/b7v0Xm4= Subject key identifier: AC:E0:CE:9C:70:18:97:94:C8:B1:C1:AB:AB:34:E8:52:29:64:60:31 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 400150DFA0DF8F15A3FCAF0959506A8BCECDF5B6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/825b729c-7c4f-404b-b26e-13e5d882a631.roa Signing time: Sat 10 May 2025 00:01:11 +0000 ROA not before: Sat 10 May 2025 00:01:11 +0000 ROA not after: Sat 14 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da60:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:01:50:df:a0:df:8f:15:a3:fc:af:09:59:50:6a:8b:ce:cd:f5:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 10 00:01:11 2025 GMT Not After : Jun 14 23:59:59 2025 GMT Subject: serialNumber=cfb874c9b27e1a6421b79b4cbd409153f37bed018c63a17a568bb778f41abcc3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0f:87:8d:12:1b:82:e8:99:14:e3:58:71:d5: ee:86:d6:27:f2:7d:25:bf:5e:1f:34:68:5c:ad:cc: 78:d1:78:ee:cb:84:16:73:43:71:a3:ac:d5:c6:db: b9:52:14:a0:9b:d5:11:fd:6e:5d:e3:b5:de:60:b4: fa:d9:15:31:20:18:97:92:b7:65:02:f1:bf:c3:b3: 8c:e0:87:a6:26:e3:b4:9f:64:08:ba:29:18:7c:7f: 07:fb:15:aa:b4:56:96:94:49:26:0d:dc:ae:02:2b: 2a:17:e1:ff:2e:05:20:c8:a0:c1:64:31:6a:be:3e: 2d:60:d8:fa:88:fb:2f:0b:40:df:21:4d:3d:cd:5c: e2:6e:33:f6:c6:d4:5e:c5:db:83:fa:6e:94:83:70: 2b:26:cc:30:52:7d:b4:61:43:4e:0c:89:35:cf:1f: 0a:7e:59:67:be:41:31:65:8f:bb:e2:25:00:03:40: ea:7d:69:1d:66:66:6d:8b:5b:f9:25:a3:8c:dd:c6: f6:62:80:79:2d:55:d5:33:2f:d9:5b:67:a1:9c:33: 52:58:d4:7c:3e:19:16:32:81:2f:2b:ca:8f:03:3c: c4:f9:f4:d9:fe:da:7c:96:20:0e:46:a4:bc:2f:a3: 77:5a:f7:7d:23:3a:bb:a0:ff:5b:2e:12:9e:08:06: 51:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E0:CE:9C:70:18:97:94:C8:B1:C1:AB:AB:34:E8:52:29:64:60:31 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/825b729c-7c4f-404b-b26e-13e5d882a631.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:b000::/40 Signature Algorithm: sha256WithRSAEncryption 2b:6b:e1:f1:fe:a5:5f:c9:c3:54:e0:86:75:70:05:c3:b5:b9: 33:94:02:76:0d:db:cb:22:35:c7:d2:84:c1:f2:de:18:91:8e: ae:2e:4c:ea:07:de:12:00:9c:4b:be:c4:85:a6:94:e3:59:bc: 58:58:b3:e1:66:20:a9:b7:82:69:ad:b9:7c:08:5c:89:db:e0: 7e:26:29:fe:e4:8c:0c:1c:8b:ed:80:2d:1a:15:ee:9c:00:4d: 07:de:5a:0f:db:48:c1:48:3a:b2:bf:5c:ab:87:a5:9b:82:10: fa:bf:c3:5c:88:43:70:b5:f3:a1:9e:82:91:9d:f8:9f:ba:6f: 09:81:7a:b4:6d:6c:b4:68:70:10:a5:1c:c1:46:b7:bb:8f:d6: db:d3:52:29:b7:89:a3:e9:0f:03:ab:7a:d2:92:70:ec:74:cc: 2a:12:32:6f:4c:c3:ae:a7:a3:e1:25:a3:33:1c:ca:4d:7c:cd: 47:c6:cc:51:31:fb:1d:96:bc:33:b9:a7:bf:79:37:6f:cc:b5: f6:ce:ef:c7:8b:9c:88:03:b7:05:ed:ea:02:a3:2d:22:70:ed: f4:21:ec:08:f5:85:5a:73:9c:cf:36:64:5b:cc:93:be:45:bc: 13:1c:96:52:58:ac:f7:1a:f9:c2:8a:b0:1a:8e:0d:5e:8f:5b: d7:31:a9:45 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQAFQ36DfjxWj/K8JWVBqi87N9bYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxMDAwMDExMVoX DTI1MDYxNDIzNTk1OVowejFJMEcGA1UEBRNAY2ZiODc0YzliMjdlMWE2NDIxYjc5 YjRjYmQ0MDkxNTNmMzdiZWQwMThjNjNhMTdhNTY4YmI3NzhmNDFhYmNjMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlA+HjRIbguiZFONYcdXuhtYn8n0l v14fNGhcrcx40Xjuy4QWc0Nxo6zVxtu5UhSgm9UR/W5d47XeYLT62RUxIBiXkrdl AvG/w7OM4IemJuO0n2QIuikYfH8H+xWqtFaWlEkmDdyuAisqF+H/LgUgyKDBZDFq vj4tYNj6iPsvC0DfIU09zVzibjP2xtRexduD+m6Ug3ArJswwUn20YUNODIk1zx8K fllnvkExZY+74iUAA0DqfWkdZmZti1v5JaOM3cb2YoB5LVXVMy/ZW2ehnDNSWNR8 PhkWMoEvK8qPAzzE+fTZ/tp8liAORqS8L6N3Wvd9Izq7oP9bLhKeCAZRMwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKzgzpxwGJeUyLHBq6s06FIpZGAxMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgyNWI3MjljLTdjNGYtNDA0Yi1iMjZlLTEzZTVkODgyYTYzMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYLAwDQYJKoZIhvcNAQELBQADggEBACtr4fH+pV/Jw1TghnVw BcO1uTOUAnYN28siNcfShMHy3hiRjq4uTOoH3hIAnEu+xIWmlONZvFhYs+FmIKm3 gmmtuXwIXInb4H4mKf7kjAwci+2ALRoV7pwATQfeWg/bSMFIOrK/XKuHpZuCEPq/ w1yIQ3C186GegpGd+J+6bwmBerRtbLRocBClHMFGt7uP1tvTUim3iaPpDwOretKS cOx0zCoSMm9Mw66no+ElozMcyk18zUfGzFEx+x2WvDO5p795N2/MtfbO78eLnIgD twXt6gKjLSJw7fQh7Aj1hVpznM82ZFvMk75FvBMcllJYrPca+cKKsBqODV6PW9cx qUU= -----END CERTIFICATE-----Generated at Tue Jun 3 23:17:02 2025 by rpki-client