$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/83deaaaf-ec15-40fe-9a98-71b9bcc1ae87.roa File: 83deaaaf-ec15-40fe-9a98-71b9bcc1ae87.roa (raw, json) Hash identifier: bjbEPsLKrKfjr35a4KzW0D3CphtVwls7n1Q7mVLpjik= Subject key identifier: 24:33:DA:9A:04:3E:54:13:47:62:05:B5:2F:72:F5:08:F7:18:D4:05 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7AAD4925A2A9A2707549CF762EDA815763306053 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/83deaaaf-ec15-40fe-9a98-71b9bcc1ae87.roa Signing time: Tue 13 May 2025 00:11:19 +0000 ROA not before: Tue 13 May 2025 00:11:19 +0000 ROA not after: Tue 17 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:8020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:ad:49:25:a2:a9:a2:70:75:49:cf:76:2e:da:81:57:63:30:60:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 13 00:11:19 2025 GMT Not After : Jun 17 23:59:59 2025 GMT Subject: serialNumber=138d301193f20f3d427821131f5a8c76d8c93b1cc63327c87020a2bd23f0e957, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:52:7b:75:47:f3:4f:e5:4f:6a:95:e5:b0:08: 8e:c4:13:a3:2c:93:f1:f5:f8:9d:bb:59:e5:38:74: 31:82:21:e8:49:d6:95:dd:c0:c6:8a:1f:68:49:65: cd:f8:0f:82:fd:41:17:e3:93:6d:71:21:fa:99:7c: 02:82:40:b6:a0:93:38:74:f3:22:78:69:93:1a:14: b1:51:00:1b:26:aa:e6:d0:51:86:c9:3b:92:b3:07: 96:0c:34:ec:17:d0:84:b8:15:9d:e9:28:d4:3d:b0: c3:4c:b9:da:89:c4:89:a6:b0:c0:43:07:43:c3:3a: 93:6e:f2:03:77:c2:cc:94:12:69:ec:69:b6:ac:90: 37:1f:4b:29:51:18:2f:17:06:17:db:eb:92:5f:0a: 18:70:3b:05:0d:94:09:35:a5:18:cf:88:8b:e0:5d: 9b:fd:d8:f3:e0:86:2a:c8:69:61:54:34:1d:01:51: d5:ad:d0:1e:e3:3b:97:b6:dd:88:6e:b7:1a:9d:dd: cd:51:a8:12:38:2e:92:67:d7:d3:43:f5:55:46:67: ec:9d:c3:f3:0c:f9:73:7b:17:b2:c3:66:bd:8f:26: f5:2e:27:d6:ff:3f:94:06:ae:93:d7:e6:9c:85:e8: 86:b0:3d:6e:69:31:6b:fe:e3:12:66:78:c8:86:f2: f0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:33:DA:9A:04:3E:54:13:47:62:05:B5:2F:72:F5:08:F7:18:D4:05 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/83deaaaf-ec15-40fe-9a98-71b9bcc1ae87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:8020::/48 Signature Algorithm: sha256WithRSAEncryption 68:8d:e6:30:2e:7a:3d:ed:a6:b6:ae:0b:fc:1b:2e:77:c7:81: 06:ec:c9:0e:2e:fa:e6:d5:29:b4:a4:39:06:2e:6a:30:d0:e7: 6f:38:ad:77:92:84:56:23:30:e3:6f:80:2b:7e:15:3e:8a:ad: 15:38:3b:28:d5:06:2d:f2:a4:8e:47:0c:77:f6:bb:68:b5:6a: 41:93:91:c7:f5:6f:98:c8:42:24:19:90:c3:6b:df:ed:eb:2c: 64:96:d6:9b:a6:8e:0b:4c:ca:d7:67:2a:f7:f3:e8:da:b6:34: 39:73:08:3d:14:d0:ce:f9:c9:bb:97:92:1e:55:08:f5:6e:59: 64:f2:bf:29:31:54:92:09:bf:9b:3f:68:55:25:b9:f3:cf:ae: 14:19:d9:92:81:fd:eb:d0:03:3f:f0:da:62:de:0e:29:04:2e: 2a:19:2f:2e:66:f8:eb:ee:f9:78:47:b8:13:e4:83:75:ca:c0: 7a:1d:26:af:29:d4:6f:fc:95:1f:73:36:b6:13:12:37:b9:b5: 99:7b:bc:9c:cc:fe:2f:58:e7:48:d5:4e:72:4f:2b:63:29:60: a6:00:82:51:5c:8a:0f:72:62:2a:8c:75:f0:87:73:ef:df:bb: dc:c7:f1:3e:3e:0d:cc:53:a7:8f:7d:dd:ec:0d:dc:5f:ac:dd: 29:c6:38:c4 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUeq1JJaKponB1Sc92LtqBV2MwYFMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxMzAwMTExOVoX DTI1MDYxNzIzNTk1OVowejFJMEcGA1UEBRNAMTM4ZDMwMTE5M2YyMGYzZDQyNzgy MTEzMWY1YThjNzZkOGM5M2IxY2M2MzMyN2M4NzAyMGEyYmQyM2YwZTk1NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1J7dUfzT+VPapXlsAiOxBOjLJPx 9fidu1nlOHQxgiHoSdaV3cDGih9oSWXN+A+C/UEX45NtcSH6mXwCgkC2oJM4dPMi eGmTGhSxUQAbJqrm0FGGyTuSsweWDDTsF9CEuBWd6SjUPbDDTLnaicSJprDAQwdD wzqTbvIDd8LMlBJp7Gm2rJA3H0spURgvFwYX2+uSXwoYcDsFDZQJNaUYz4iL4F2b /djz4IYqyGlhVDQdAVHVrdAe4zuXtt2Ibrcand3NUagSOC6SZ9fTQ/VVRmfsncPz DPlzexeyw2a9jyb1LifW/z+UBq6T1+acheiGsD1uaTFr/uMSZnjIhvLw2wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCQz2poEPlQTR2IFtS9y9Qj3GNQFMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgzZGVhYWFmLWVjMTUtNDBmZS05YTk4LTcxYjliY2MxYWU4Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/4AgMA0GCSqGSIb3DQEBCwUAA4IBAQBojeYwLno97aa2rgv8 Gy53x4EG7MkOLvrm1Sm0pDkGLmow0OdvOK13koRWIzDjb4ArfhU+iq0VODso1QYt 8qSORwx39rtotWpBk5HH9W+YyEIkGZDDa9/t6yxkltabpo4LTMrXZyr38+jatjQ5 cwg9FNDO+cm7l5IeVQj1bllk8r8pMVSSCb+bP2hVJbnzz64UGdmSgf3r0AM/8Npi 3g4pBC4qGS8uZvjr7vl4R7gT5IN1ysB6HSavKdRv/JUfcza2ExI3ubWZe7yczP4v WOdI1U5yTytjKWCmAIJRXIoPcmIqjHXwh3Pv37vcx/E+Pg3MU6ePfd3sDdxfrN0p xjjE -----END CERTIFICATE-----Generated at Tue Jun 3 23:15:37 2025 by rpki-client