$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/87e33d44-b16b-4ac1-98c3-0e0499461b1a.roa File: 87e33d44-b16b-4ac1-98c3-0e0499461b1a.roa (raw, json) Hash identifier: MHv7anV+a/CqgtIaOlKV+3LIhCm5O1MbdK++CHT0SD4= Subject key identifier: 17:1D:25:8E:45:60:33:34:46:74:68:52:F4:52:93:A6:F1:17:7C:00 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 714CD7F9AB1F5E62DF1635799935145FECA33851 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/87e33d44-b16b-4ac1-98c3-0e0499461b1a.roa Signing time: Fri 16 May 2025 00:41:22 +0000 ROA not before: Fri 16 May 2025 00:41:22 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:1080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:4c:d7:f9:ab:1f:5e:62:df:16:35:79:99:35:14:5f:ec:a3:38:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 00:41:22 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=4e4c605efeffb3e35800656f41af86efb43e9fa877a2216bf1afbdbc701bddad, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bd:43:12:82:45:f8:34:f7:0f:ac:5b:13:ec: ad:db:f7:18:5c:82:1d:ec:46:13:cd:e5:3c:45:e3: 2b:95:7f:b6:b0:23:65:37:06:90:69:da:5c:7c:eb: 79:a8:16:2e:9a:6a:43:eb:26:a5:e1:ce:ed:e2:fa: 4e:df:5d:c6:ab:75:9a:9c:0d:21:6d:8b:d9:80:69: 23:05:cf:a2:ff:79:7a:e9:e7:e6:12:a6:eb:d5:7f: ca:c4:b4:6c:8d:7b:a6:c1:09:0d:dc:75:7e:e0:93: bd:b1:dd:5d:f6:c0:5d:20:3a:9d:30:5b:32:3f:7e: e8:50:ea:97:73:b9:d8:11:79:ad:00:1a:bd:8b:bc: 77:22:f0:d6:31:e0:00:a6:bc:2e:06:87:a4:c2:2c: 7f:27:8d:6e:b5:0e:80:12:51:67:45:92:92:e5:01: b2:e1:5b:b2:fe:1a:6c:8c:09:a6:e1:38:3b:1e:ab: ef:74:3a:56:43:5d:d3:6a:21:cf:c5:01:22:1f:a9: 7a:e1:b7:e1:f7:7c:06:87:8d:8c:98:4f:65:6b:8f: 5f:80:68:6e:e4:98:65:b6:6e:5d:e4:93:74:93:1c: 58:eb:cb:06:97:c7:da:04:39:b5:34:9f:63:a4:fb: 7e:6c:70:f3:16:aa:02:83:6f:c9:96:f0:17:db:0a: 3a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:1D:25:8E:45:60:33:34:46:74:68:52:F4:52:93:A6:F1:17:7C:00 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/87e33d44-b16b-4ac1-98c3-0e0499461b1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:1080::/46 Signature Algorithm: sha256WithRSAEncryption 0a:a0:28:fc:9a:0f:55:6e:79:95:be:78:3d:b8:08:c3:7e:aa: 04:a6:c3:a4:5b:8a:1c:73:b4:36:d6:51:09:06:94:43:69:08: fd:82:98:8b:86:32:3c:64:60:fa:b1:85:20:fc:1b:9f:a7:9d: eb:46:6f:9f:48:e6:c2:e5:9a:5e:a7:fd:0a:d3:59:22:f1:37: 59:42:a7:81:96:84:53:2a:b8:42:a6:26:5b:37:1a:d7:75:3f: 49:fe:a9:13:3e:96:05:c2:ed:4f:19:51:02:ec:19:14:08:78: 25:f8:b5:88:fc:22:89:a9:a7:55:61:0c:a3:af:00:eb:ca:1c: 46:b7:4d:1a:b8:0e:b1:b3:20:b7:8c:53:e7:97:89:b6:7f:ff: 46:ac:64:56:eb:20:9c:aa:21:17:62:b9:63:28:26:73:c7:4f: 1a:80:e6:4b:bd:26:38:03:82:14:5b:15:b6:e6:c6:7e:f9:73: ff:3d:26:c6:7b:78:38:c0:a7:4d:ec:f3:35:7d:93:e5:a6:fa: 65:96:0a:51:30:dc:61:e2:e9:c8:eb:d1:e4:a4:71:b1:84:63: 31:c7:ee:e7:bd:e1:91:d7:aa:d9:49:9d:37:9e:b1:6e:2b:2d: 82:72:46:32:91:da:9d:4a:ee:19:e9:95:33:1a:d8:c8:8c:c7: e6:db:36:80 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUcUzX+asfXmLfFjV5mTUUX+yjOFEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjAwNDEyMloX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNANGU0YzYwNWVmZWZmYjNlMzU4MDA2 NTZmNDFhZjg2ZWZiNDNlOWZhODc3YTIyMTZiZjFhZmJkYmM3MDFiZGRhZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu71DEoJF+DT3D6xbE+yt2/cYXIId 7EYTzeU8ReMrlX+2sCNlNwaQadpcfOt5qBYummpD6yal4c7t4vpO313Gq3WanA0h bYvZgGkjBc+i/3l66efmEqbr1X/KxLRsjXumwQkN3HV+4JO9sd1d9sBdIDqdMFsy P37oUOqXc7nYEXmtABq9i7x3IvDWMeAAprwuBoekwix/J41utQ6AElFnRZKS5QGy 4Vuy/hpsjAmm4Tg7HqvvdDpWQ13TaiHPxQEiH6l64bfh93wGh42MmE9la49fgGhu 5Jhltm5d5JN0kxxY68sGl8faBDm1NJ9jpPt+bHDzFqoCg2/JlvAX2wo6FwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBcdJY5FYDM0RnRoUvRSk6bxF3wAMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg3ZTMzZDQ0LWIxNmItNGFjMS05OGMzLTBlMDQ5OTQ2MWIxYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaRCAMA0GCSqGSIb3DQEBCwUAA4IBAQAKoCj8mg9VbnmVvng9 uAjDfqoEpsOkW4occ7Q21lEJBpRDaQj9gpiLhjI8ZGD6sYUg/Bufp53rRm+fSObC 5Zpep/0K01ki8TdZQqeBloRTKrhCpiZbNxrXdT9J/qkTPpYFwu1PGVEC7BkUCHgl +LWI/CKJqadVYQyjrwDryhxGt00auA6xsyC3jFPnl4m2f/9GrGRW6yCcqiEXYrlj KCZzx08agOZLvSY4A4IUWxW25sZ++XP/PSbGe3g4wKdN7PM1fZPlpvpllgpRMNxh 4unI69HkpHGxhGMxx+7nveGR16rZSZ03nrFuKy2CckYykdqdSu4Z6ZUzGtjIjMfm 2zaA -----END CERTIFICATE-----Generated at Tue Jun 3 23:18:08 2025 by rpki-client