$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/86eb88ff-78f4-4f08-a1fa-b28fc3bf05ef.roa File: 86eb88ff-78f4-4f08-a1fa-b28fc3bf05ef.roa (raw, json) Hash identifier: Z/Hug3Lgq+colLbayQuH3PgNLy2InHGFVD2T6W3TNbU= Subject key identifier: E3:2E:B2:78:AA:FF:ED:94:98:2A:71:0E:F2:59:D9:25:83:04:97:41 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 14DBC3BF5C4D5E15633D6B5334D7D900B5A364E0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/86eb88ff-78f4-4f08-a1fa-b28fc3bf05ef.roa Signing time: Sat 10 May 2025 00:01:04 +0000 ROA not before: Sat 10 May 2025 00:01:04 +0000 ROA not after: Sat 14 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da60:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:db:c3:bf:5c:4d:5e:15:63:3d:6b:53:34:d7:d9:00:b5:a3:64:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 10 00:01:04 2025 GMT Not After : Jun 14 23:59:59 2025 GMT Subject: serialNumber=65ad5d7e8d913ce10c4418df2f088ff796d8aabf3bbff87fc45a7d26eeaa220c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a6:83:0c:af:f1:96:54:49:8a:10:28:83:1d: 43:4d:92:96:93:73:a2:42:99:23:5c:0a:56:ac:95: 50:74:25:3a:f2:6d:5c:a5:93:72:c9:74:72:5a:f7: 74:35:09:d8:f8:ae:74:da:9d:75:f0:0e:f9:85:a0: 0f:01:d7:d9:55:83:81:1c:90:64:98:cd:50:d0:02: 9f:72:0f:e0:4a:e7:b6:a4:b3:aa:3e:42:d8:4c:fb: d3:c8:6b:54:60:3b:4d:b0:ac:73:7b:e3:77:4a:17: a5:75:70:19:c4:e0:13:d7:95:5d:c4:2c:cd:14:9b: 5e:a0:98:7e:8b:26:51:8b:fa:c0:74:70:e3:34:08: 60:86:2c:29:ab:b7:65:82:fc:ec:6f:ef:06:b8:3b: d1:18:29:56:b5:63:d2:06:a3:e4:f3:b3:01:66:75: 8c:bd:9e:30:a1:55:7c:9c:7b:9b:88:82:d3:30:c9: a8:66:35:f5:67:0b:68:d7:21:bf:d1:20:95:1c:dc: 5c:e5:d1:e5:99:82:13:55:6e:14:65:66:98:6f:82: af:7c:11:bc:f5:6e:ed:56:40:40:95:e2:e0:70:99: 14:3a:e2:fe:17:dc:62:17:89:a4:f9:72:9a:d4:ac: 1e:b2:dc:91:2d:d6:88:80:9e:dc:87:e4:ec:64:4a: 1c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2E:B2:78:AA:FF:ED:94:98:2A:71:0E:F2:59:D9:25:83:04:97:41 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/86eb88ff-78f4-4f08-a1fa-b28fc3bf05ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:1000::/40 Signature Algorithm: sha256WithRSAEncryption c0:a8:41:05:e9:b7:21:e1:ab:9f:39:5a:7a:2e:a8:ab:57:29: 6f:3c:55:97:90:b4:50:f5:c4:e3:3b:46:9e:30:53:ac:38:b7: 79:70:fb:68:09:cf:38:2d:ea:60:84:02:4b:9c:a3:14:35:44: 08:50:b2:b1:e5:6a:7b:91:d7:0b:59:3e:b8:be:76:0e:53:9a: 95:2b:ba:75:97:6d:78:22:aa:b1:9b:93:a6:6e:cd:8a:66:56: 46:9f:c6:17:34:37:94:ed:51:36:8c:b1:7f:f4:40:92:bc:f7: b8:b3:34:ce:31:e9:41:c4:b6:c0:6b:1a:c3:67:69:93:1b:02: c6:8f:bf:20:31:c7:60:b5:72:81:32:76:d7:00:8c:13:c8:32: f6:06:ea:26:31:e5:52:9a:4b:ff:37:73:bb:46:49:61:33:3d: d6:b6:e6:a5:0e:3d:89:5f:b4:7e:9c:3f:fe:28:c5:02:a9:6f: 11:26:ff:33:c4:24:60:0a:39:dc:77:03:80:73:f6:13:0f:ef: 00:3e:0a:fb:d9:7b:1f:e0:ee:a4:01:ee:f1:da:fd:4e:fa:41: 59:f5:6a:9e:03:a2:ee:25:a4:78:b9:54:2c:82:28:d1:4b:0d: 44:06:e1:52:9c:15:29:d3:80:95:60:71:ef:36:dc:79:0f:cc: 50:cf:10:11 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUFNvDv1xNXhVjPWtTNNfZALWjZOAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxMDAwMDEwNFoX DTI1MDYxNDIzNTk1OVowejFJMEcGA1UEBRNANjVhZDVkN2U4ZDkxM2NlMTBjNDQx OGRmMmYwODhmZjc5NmQ4YWFiZjNiYmZmODdmYzQ1YTdkMjZlZWFhMjIwYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKaDDK/xllRJihAogx1DTZKWk3Oi QpkjXApWrJVQdCU68m1cpZNyyXRyWvd0NQnY+K502p118A75haAPAdfZVYOBHJBk mM1Q0AKfcg/gSue2pLOqPkLYTPvTyGtUYDtNsKxze+N3SheldXAZxOAT15VdxCzN FJteoJh+iyZRi/rAdHDjNAhghiwpq7dlgvzsb+8GuDvRGClWtWPSBqPk87MBZnWM vZ4woVV8nHubiILTMMmoZjX1Zwto1yG/0SCVHNxc5dHlmYITVW4UZWaYb4KvfBG8 9W7tVkBAleLgcJkUOuL+F9xiF4mk+XKa1KwestyRLdaIgJ7ch+TsZEocpwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOMusniq/+2UmCpxDvJZ2SWDBJdBMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg2ZWI4OGZmLTc4ZjQtNGYwOC1hMWZhLWIyOGZjM2JmMDVlZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYBAwDQYJKoZIhvcNAQELBQADggEBAMCoQQXptyHhq585Wnou qKtXKW88VZeQtFD1xOM7Rp4wU6w4t3lw+2gJzzgt6mCEAkucoxQ1RAhQsrHlanuR 1wtZPri+dg5TmpUrunWXbXgiqrGbk6ZuzYpmVkafxhc0N5TtUTaMsX/0QJK897iz NM4x6UHEtsBrGsNnaZMbAsaPvyAxx2C1coEydtcAjBPIMvYG6iYx5VKaS/83c7tG SWEzPda25qUOPYlftH6cP/4oxQKpbxEm/zPEJGAKOdx3A4Bz9hMP7wA+CvvZex/g 7qQB7vHa/U76QVn1ap4Dou4lpHi5VCyCKNFLDUQG4VKcFSnTgJVgce823HkPzFDP EBE= -----END CERTIFICATE-----Generated at Tue Jun 3 23:19:15 2025 by rpki-client