$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8bb4fc6d-b270-4df7-a776-77d2795dda17.roa File: 8bb4fc6d-b270-4df7-a776-77d2795dda17.roa (raw, json) Hash identifier: y3AHOIX1/Nxod+GJ2UOBID6z9U1OlK7VU1IoDg2dCLE= Subject key identifier: 77:BE:BD:12:85:06:44:76:30:EE:0C:F1:E4:D6:19:00:33:F5:17:41 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 08163632CBE651AE65FDD7C66F1A804644D31B8E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8bb4fc6d-b270-4df7-a776-77d2795dda17.roa Signing time: Fri 16 May 2025 15:30:25 +0000 ROA not before: Fri 16 May 2025 15:30:25 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da16:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:16:36:32:cb:e6:51:ae:65:fd:d7:c6:6f:1a:80:46:44:d3:1b:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 15:30:25 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=959b9b5cd55a8e7429d3e14d053f220ced4682c89f72fa375e071a7fc3ab438a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:99:ae:f4:54:54:b6:6d:9e:3b:f8:54:5a:f0: 61:82:86:6a:ec:c2:ef:80:3b:b1:6b:5c:c1:b6:de: cb:dd:91:1c:13:2a:e1:e3:5e:b0:b9:d4:b2:c0:32: 6f:7e:96:95:e6:4f:9e:5e:01:a8:40:d6:3c:53:59: ea:c0:57:c8:7e:ba:8e:49:2c:66:15:22:d3:db:0b: d8:e9:bc:e7:f2:a6:63:e5:89:d6:89:2e:9c:a9:8f: cc:7e:5a:c4:66:69:69:be:46:16:d2:4e:f1:ec:c0: 25:f1:28:ea:8e:20:c6:4b:88:36:35:0c:50:cf:48: cc:60:06:7b:5e:64:2e:77:dc:2a:9f:ce:fe:e8:a7: 08:24:b1:38:6f:2c:0a:07:3b:87:7d:e8:e4:53:15: e4:91:89:e9:0d:79:cb:cc:90:eb:76:6d:53:23:83: 6e:69:ec:f1:b3:0d:4e:16:1e:5a:4c:a0:4b:ca:0f: e9:f7:6c:33:41:e1:f4:42:cf:e4:71:a3:0a:56:54: ce:cc:c0:d2:d9:39:b2:f3:29:4b:68:ca:a2:d6:49: 56:ce:7e:ac:0e:33:11:65:cb:e2:b7:68:b8:3b:65: b6:2b:00:99:a5:30:2e:89:9f:93:22:2d:90:28:b5: da:b2:b2:64:2c:9c:0e:f8:a4:34:ca:22:69:dd:ef: 3a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:BE:BD:12:85:06:44:76:30:EE:0C:F1:E4:D6:19:00:33:F5:17:41 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8bb4fc6d-b270-4df7-a776-77d2795dda17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da16:c00::/38 Signature Algorithm: sha256WithRSAEncryption 93:bc:53:68:8d:47:00:2b:be:f1:1f:ab:46:ed:54:fa:d0:ce: fa:68:d8:50:13:6d:3a:59:1f:2a:c6:a0:b9:89:ab:f9:d3:a3: ce:b4:e4:6f:51:12:ae:c6:e9:05:7e:37:48:94:fd:97:67:4c: e2:af:63:1d:42:4e:64:42:32:71:bc:f2:ac:42:bf:d6:11:fe: 34:5a:1c:f5:b9:db:c5:10:bd:63:9d:79:2c:15:33:1f:8f:da: fd:01:6f:aa:40:3f:d1:74:fe:c5:17:47:5c:c7:be:48:51:f0: 29:0d:e5:ed:e9:09:d5:d3:24:83:9d:fa:2d:ce:d9:84:23:3c: 06:99:13:8e:e5:08:6b:52:12:54:a4:85:ab:ef:aa:43:aa:e0: 0d:79:65:33:62:aa:0f:9c:e8:58:bc:58:a7:32:c4:b5:f9:04: 7c:b0:a2:2c:36:57:e1:93:10:31:5b:68:e6:ec:25:49:a6:5f: 4f:29:a4:59:7b:32:69:11:80:5e:b2:7b:2a:2b:82:fd:3a:a9: 9b:17:68:18:d7:3b:49:cf:1f:4a:03:21:6f:5e:50:48:24:e2: 7f:1b:12:8f:1b:d4:6d:b0:af:08:77:c5:41:12:61:41:2e:ba: 21:ce:e0:56:51:92:d2:a8:1a:e0:1e:dc:a4:67:9e:f7:1d:4d: ee:2a:b3:91 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUCBY2MsvmUa5l/dfGbxqARkTTG44wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjE1MzAyNVoX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAOTU5YjliNWNkNTVhOGU3NDI5ZDNl MTRkMDUzZjIyMGNlZDQ2ODJjODlmNzJmYTM3NWUwNzFhN2ZjM2FiNDM4YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJmu9FRUtm2eO/hUWvBhgoZq7MLv gDuxa1zBtt7L3ZEcEyrh416wudSywDJvfpaV5k+eXgGoQNY8U1nqwFfIfrqOSSxm FSLT2wvY6bzn8qZj5YnWiS6cqY/MflrEZmlpvkYW0k7x7MAl8SjqjiDGS4g2NQxQ z0jMYAZ7XmQud9wqn87+6KcIJLE4bywKBzuHfejkUxXkkYnpDXnLzJDrdm1TI4Nu aezxsw1OFh5aTKBLyg/p92wzQeH0Qs/kcaMKVlTOzMDS2Tmy8ylLaMqi1klWzn6s DjMRZcvit2i4O2W2KwCZpTAuiZ+TIi2QKLXasrJkLJwO+KQ0yiJp3e86QQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHe+vRKFBkR2MO4M8eTWGQAz9RdBMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhiYjRmYzZkLWIyNzAtNGRmNy1hNzc2LTc3ZDI3OTVkZGExNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaFgwwDQYJKoZIhvcNAQELBQADggEBAJO8U2iNRwArvvEfq0bt VPrQzvpo2FATbTpZHyrGoLmJq/nTo8605G9REq7G6QV+N0iU/ZdnTOKvYx1CTmRC MnG88qxCv9YR/jRaHPW528UQvWOdeSwVMx+P2v0Bb6pAP9F0/sUXR1zHvkhR8CkN 5e3pCdXTJIOd+i3O2YQjPAaZE47lCGtSElSkhavvqkOq4A15ZTNiqg+c6Fi8WKcy xLX5BHywoiw2V+GTEDFbaObsJUmmX08ppFl7MmkRgF6yeyorgv06qZsXaBjXO0nP H0oDIW9eUEgk4n8bEo8b1G2wrwh3xUESYUEuuiHO4FZRktKoGuAe3KRnnvcdTe4q s5E= -----END CERTIFICATE-----Generated at Tue Jun 3 23:33:29 2025 by rpki-client