$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/92488c39-e92d-4c20-9728-7956e83ecf4e.roa File: 92488c39-e92d-4c20-9728-7956e83ecf4e.roa (raw, json) Hash identifier: mG+Pa01iDCasFQevMtfv3rqTL1qk8KcGfUdGTzFaPAs= Subject key identifier: B2:67:2A:A3:38:B1:53:FB:4A:C4:99:31:F6:1E:82:D6:84:6A:1F:C4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 742407CD60733461D3B130EA478EC516AA532CD5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/92488c39-e92d-4c20-9728-7956e83ecf4e.roa Signing time: Fri 16 May 2025 15:51:27 +0000 ROA not before: Fri 16 May 2025 15:51:27 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da19:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:24:07:cd:60:73:34:61:d3:b1:30:ea:47:8e:c5:16:aa:53:2c:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 15:51:27 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=c27e9813e28e0d4e4a2a75d4bde40866b4b435258a4f314cbe97480011821342, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e2:88:f7:fb:96:5d:a3:29:1d:aa:ab:69:bf: 98:2b:89:d3:c1:7f:d0:fb:79:2d:1c:f4:6d:f3:3e: 4f:ff:d9:92:e8:78:91:aa:4b:f3:36:21:a9:36:4a: 0b:30:05:c3:63:31:8d:c8:17:7a:b6:71:80:21:c7: 86:9b:00:46:0b:19:9a:b6:5f:ef:4b:56:98:53:01: 7a:fa:cd:ca:bb:40:8d:e2:fb:8a:ea:d1:18:e0:b1: d0:d5:58:10:09:9e:6f:ca:f8:1e:fb:83:62:a2:c8: d0:d0:f8:a4:46:91:6e:1f:04:33:a6:dc:c0:7f:a0: 86:49:e7:26:07:8e:7b:21:86:52:7f:a9:e7:14:f1: db:0f:93:f6:5b:f0:75:b6:25:d6:46:f0:d6:ab:6f: dc:93:ff:bc:97:49:70:61:7e:5c:51:b6:0d:f5:8d: e5:16:af:e4:d9:c8:09:ad:69:e1:13:c5:05:6b:0e: 95:e6:2b:f0:2e:44:2b:e9:73:bf:75:ff:bc:d1:b3: ab:e0:e5:0a:81:d9:7a:5c:09:d3:db:51:ae:63:78: 2a:63:ad:d7:1d:6c:3e:1d:87:65:46:0a:5c:49:a5: 2b:1b:ab:8d:fa:d1:19:f6:12:4a:05:11:73:c9:1f: a4:a0:bf:30:07:5e:4b:97:f7:cc:aa:b1:bc:11:c7: 08:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:67:2A:A3:38:B1:53:FB:4A:C4:99:31:F6:1E:82:D6:84:6A:1F:C4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/92488c39-e92d-4c20-9728-7956e83ecf4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da19:400::/38 Signature Algorithm: sha256WithRSAEncryption 41:45:7b:2d:9d:d9:97:5f:40:54:bd:7b:16:99:f6:17:36:fb: e5:93:de:fe:06:56:6c:73:9a:31:4d:6c:85:f4:9d:cc:f8:94: d9:37:92:93:35:bc:9a:81:a2:a1:b8:b2:02:8b:4b:94:dd:79: 5c:1e:2d:d0:f2:43:04:a1:b7:0e:5f:67:73:53:59:94:6b:80: 01:73:a9:45:d2:5f:4e:50:59:b2:71:5b:99:03:89:a4:ac:84: a4:bf:7e:17:69:3e:d9:e1:b6:f2:dd:fd:8e:a2:f6:a4:ea:dd: c0:99:5e:fa:c3:cb:29:fe:2a:52:39:53:8b:3d:7e:71:03:75: d1:6d:c2:d7:b3:93:64:7e:b1:45:bc:2a:80:9e:00:e7:ff:0d: f6:e5:c2:5f:fb:15:43:a0:14:16:1c:df:38:3d:51:10:57:21: 94:8b:69:80:89:45:8e:e3:cf:9a:e6:43:18:6b:de:9f:52:a6: 5b:fd:a2:da:5b:13:5c:09:b3:e8:cd:18:22:28:bc:dc:05:86: 76:27:a3:e8:f4:a1:23:e3:b5:46:ac:3c:df:6a:93:4e:58:03: d1:39:61:db:4a:43:a4:27:e1:18:b4:8a:48:f2:ef:1d:f4:e7: f7:15:97:d7:c1:79:f6:72:9c:92:4e:13:75:f2:d8:7c:44:0b: e0:99:2a:f3 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUdCQHzWBzNGHTsTDqR47FFqpTLNUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjE1NTEyN1oX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAYzI3ZTk4MTNlMjhlMGQ0ZTRhMmE3 NWQ0YmRlNDA4NjZiNGI0MzUyNThhNGYzMTRjYmU5NzQ4MDAxMTgyMTM0MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuKI9/uWXaMpHaqrab+YK4nTwX/Q +3ktHPRt8z5P/9mS6HiRqkvzNiGpNkoLMAXDYzGNyBd6tnGAIceGmwBGCxmatl/v S1aYUwF6+s3Ku0CN4vuK6tEY4LHQ1VgQCZ5vyvge+4NiosjQ0PikRpFuHwQzptzA f6CGSecmB457IYZSf6nnFPHbD5P2W/B1tiXWRvDWq2/ck/+8l0lwYX5cUbYN9Y3l Fq/k2cgJrWnhE8UFaw6V5ivwLkQr6XO/df+80bOr4OUKgdl6XAnT21GuY3gqY63X HWw+HYdlRgpcSaUrG6uN+tEZ9hJKBRFzyR+koL8wB15Ll/fMqrG8EccIFQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLJnKqM4sVP7SsSZMfYegtaEah/EMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkyNDg4YzM5LWU5MmQtNGMyMC05NzI4LTc5NTZlODNlY2Y0ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaGQQwDQYJKoZIhvcNAQELBQADggEBAEFFey2d2ZdfQFS9exaZ 9hc2++WT3v4GVmxzmjFNbIX0ncz4lNk3kpM1vJqBoqG4sgKLS5TdeVweLdDyQwSh tw5fZ3NTWZRrgAFzqUXSX05QWbJxW5kDiaSshKS/fhdpPtnhtvLd/Y6i9qTq3cCZ XvrDyyn+KlI5U4s9fnEDddFtwtezk2R+sUW8KoCeAOf/Dfblwl/7FUOgFBYc3zg9 URBXIZSLaYCJRY7jz5rmQxhr3p9Splv9otpbE1wJs+jNGCIovNwFhnYno+j0oSPj tUasPN9qk05YA9E5YdtKQ6Qn4Ri0ikjy7x305/cVl9fBefZynJJOE3Xy2HxEC+CZ KvM= -----END CERTIFICATE-----Generated at Tue Jun 3 23:11:00 2025 by rpki-client