$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/98bbbcef-0217-4c51-a717-7af30c63be28.roa File: 98bbbcef-0217-4c51-a717-7af30c63be28.roa (raw, json) Hash identifier: WRz0eyk3mqplHs1pxKmrxqVTbQXclz7xEfI3IowT9O4= Subject key identifier: 80:57:6F:FD:40:EA:31:57:B9:C3:05:06:FA:31:C8:FA:B4:53:BF:99 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7234A7070062386E207009B712CED35CF45A7514 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/98bbbcef-0217-4c51-a717-7af30c63be28.roa Signing time: Sat 31 May 2025 00:00:16 +0000 ROA not before: Sat 31 May 2025 00:00:16 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf8:8800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:34:a7:07:00:62:38:6e:20:70:09:b7:12:ce:d3:5c:f4:5a:75:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 31 00:00:16 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=4ae5c9acc13e0b4047679c9c91a89149e0e8f2b01e5a06f9acfe54530bc8e3c5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:68:82:fa:7e:bf:1f:11:7b:fc:c9:59:6e:53: a0:4a:c4:d1:4d:37:6f:21:cb:1f:f3:fd:4a:6a:74: 02:e6:b1:98:f8:a9:03:be:15:51:f7:a7:44:23:4d: 9d:7f:f9:b1:99:f6:34:24:09:56:96:67:59:63:fd: ad:15:06:d2:a6:71:45:de:b2:f4:f3:e9:81:d9:9b: 41:7e:e8:e5:c8:29:47:86:96:02:ab:67:4c:e1:55: bb:dd:ea:04:48:e7:ac:a5:69:45:77:74:13:ec:77: df:17:14:96:a5:78:73:3b:47:78:40:71:8d:84:5b: 41:7d:bf:69:b8:be:ec:fb:81:79:25:b1:d0:1b:14: 28:b5:61:6d:49:b9:db:b7:76:cb:b3:69:4f:fa:d1: 6b:3e:c0:c9:f8:69:52:d4:37:ba:9e:6c:da:24:73: 87:83:b8:87:06:a6:ef:c0:87:8d:99:47:b1:fd:c7: 3e:39:3b:25:fd:30:c5:9e:7a:10:b6:0c:b1:2d:57: b6:c1:6b:91:bb:1b:bd:87:df:da:0c:ca:cd:8a:2b: 9f:6b:86:68:36:17:23:7c:97:be:73:e1:96:53:9a: 58:42:49:58:b0:ee:5e:e0:f1:79:cf:b3:9e:93:f4: 7c:60:df:6b:36:f1:f6:d9:6f:da:c8:4e:4b:41:90: 84:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:57:6F:FD:40:EA:31:57:B9:C3:05:06:FA:31:C8:FA:B4:53:BF:99 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/98bbbcef-0217-4c51-a717-7af30c63be28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf8:8800::/40 Signature Algorithm: sha256WithRSAEncryption 36:ea:ed:98:a9:94:dc:2b:b3:cd:4d:cb:bb:40:9c:f5:0b:86: 50:e1:a4:f7:ff:7f:ca:b2:6f:1d:d7:10:7b:f8:b3:70:66:69: 77:11:f2:e4:20:81:bb:59:89:8d:fd:33:88:ac:86:8d:92:b2: c6:f5:ac:d6:35:76:73:27:d1:a0:b9:f5:80:03:a9:3b:ec:92: ac:c8:45:df:50:49:68:96:82:44:48:02:4a:dd:83:83:9d:5b: dd:e8:4d:b2:6f:ac:fc:86:1c:83:ec:24:f5:37:aa:db:48:c2: c0:4a:98:13:b4:6e:1c:3c:b3:6b:ea:30:6d:6a:1c:0e:5b:92: 46:72:ff:c1:fa:16:e4:4c:26:6d:40:46:29:94:3e:6f:0f:8d: 65:74:e8:9a:e5:30:97:31:bb:a3:54:df:30:b4:48:8a:8e:23: d0:ea:f9:16:7c:4d:84:0a:db:d9:f4:53:c2:3c:ef:58:e4:fc: c6:2b:ba:f4:57:b7:f9:08:2d:5c:ed:9e:2d:d4:0d:de:fa:63: 01:bc:e5:9f:52:c3:a1:08:18:8e:c0:ba:86:46:ac:5b:8e:b6: ab:9f:8f:ce:81:42:a0:a0:c3:3c:16:6b:c8:2f:72:9b:fb:b3: b1:d2:e8:4d:b3:fa:f1:67:8a:54:f7:cf:71:a8:e6:c1:f2:aa: c3:28:ce:b8 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUcjSnBwBiOG4gcAm3Es7TXPRadRQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUzMTAwMDAxNloX DTI1MDcwNTIzNTk1OVowejFJMEcGA1UEBRNANGFlNWM5YWNjMTNlMGI0MDQ3Njc5 YzljOTFhODkxNDllMGU4ZjJiMDFlNWEwNmY5YWNmZTU0NTMwYmM4ZTNjNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGiC+n6/HxF7/MlZblOgSsTRTTdv Icsf8/1KanQC5rGY+KkDvhVR96dEI02df/mxmfY0JAlWlmdZY/2tFQbSpnFF3rL0 8+mB2ZtBfujlyClHhpYCq2dM4VW73eoESOespWlFd3QT7HffFxSWpXhzO0d4QHGN hFtBfb9puL7s+4F5JbHQGxQotWFtSbnbt3bLs2lP+tFrPsDJ+GlS1De6nmzaJHOH g7iHBqbvwIeNmUex/cc+OTsl/TDFnnoQtgyxLVe2wWuRuxu9h9/aDMrNiiufa4Zo NhcjfJe+c+GWU5pYQklYsO5e4PF5z7Oek/R8YN9rNvH22W/ayE5LQZCECwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIBXb/1A6jFXucMFBvoxyPq0U7+ZMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk4YmJiY2VmLTAyMTctNGM1MS1hNzE3LTdhZjMwYzYzYmUyOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+IgwDQYJKoZIhvcNAQELBQADggEBADbq7ZiplNwrs81Ny7tA nPULhlDhpPf/f8qybx3XEHv4s3BmaXcR8uQggbtZiY39M4isho2Sssb1rNY1dnMn 0aC59YADqTvskqzIRd9QSWiWgkRIAkrdg4OdW93oTbJvrPyGHIPsJPU3qttIwsBK mBO0bhw8s2vqMG1qHA5bkkZy/8H6FuRMJm1ARimUPm8PjWV06JrlMJcxu6NU3zC0 SIqOI9Dq+RZ8TYQK29n0U8I871jk/MYruvRXt/kILVztni3UDd76YwG85Z9Sw6EI GI7AuoZGrFuOtqufj86BQqCgwzwWa8gvcpv7s7HS6E2z+vFnilT3z3Go5sHyqsMo zrg= -----END CERTIFICATE-----Generated at Tue Jun 3 23:20:50 2025 by rpki-client