$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f7f81d5-9939-43d6-b333-dd2d090500da.roa File: 9f7f81d5-9939-43d6-b333-dd2d090500da.roa (raw, json) Hash identifier: ed9kETjVqhnN8dmfW64LbUSVaaaxl9v5/LxCrV9zAl8= Subject key identifier: 05:73:30:8B:55:0D:A2:1F:D5:31:A0:41:88:1D:4B:23:F5:D7:29:E0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2735196FDCF43E43E3A8892BE2F3C2248EBC9CE4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f7f81d5-9939-43d6-b333-dd2d090500da.roa Signing time: Fri 16 May 2025 15:11:23 +0000 ROA not before: Fri 16 May 2025 15:11:23 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da70:8800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:35:19:6f:dc:f4:3e:43:e3:a8:89:2b:e2:f3:c2:24:8e:bc:9c:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 15:11:23 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=7aae5223d695bab7f27e294a84e37a730e2f29bfec4418d26b443fb3e0ca3ad0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:64:69:37:2e:6d:f7:80:fc:9f:d9:f7:27:b9: 39:79:23:c3:70:2d:8b:b3:11:e2:9a:4a:06:d0:9c: 02:76:92:7e:14:b9:b7:59:60:3c:4a:a3:1d:1e:40: af:18:9b:6a:ff:e4:ea:d5:52:cb:65:ca:d9:b7:98: 84:2b:2f:20:e7:e5:ab:f9:4b:e0:5d:c1:25:97:b1: 40:37:fb:64:ac:0e:46:0a:b3:06:65:35:73:17:59: 66:85:ea:47:2d:e0:3d:09:fd:20:89:ae:0c:57:4d: 9d:00:b9:a3:9f:86:04:28:10:09:d4:1d:77:b5:7d: 5e:48:4e:79:28:00:cc:11:0c:7f:80:32:ac:4c:95: e6:76:2e:b0:18:9b:c6:3e:81:d6:d9:17:64:e4:73: fa:9e:f9:7d:a4:73:a1:88:0a:31:21:7a:89:33:c0: bf:14:26:88:45:4f:0b:45:5a:1b:ed:f5:c8:a5:4d: 89:f2:bb:fa:24:dc:7e:df:5a:68:11:a6:ce:5f:96: ba:51:1b:5a:f2:0f:47:5d:11:2f:a7:b2:d5:e2:b8: d8:7a:5f:61:54:24:39:65:94:9f:f3:e3:6f:be:5f: 59:34:93:b6:c7:4d:d6:94:1a:a3:96:6c:8a:29:ec: 52:9d:b0:66:f7:21:f6:92:db:d7:a8:0c:01:6c:2d: 40:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:73:30:8B:55:0D:A2:1F:D5:31:A0:41:88:1D:4B:23:F5:D7:29:E0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f7f81d5-9939-43d6-b333-dd2d090500da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da70:8800::/40 Signature Algorithm: sha256WithRSAEncryption b9:49:3a:18:ce:5e:5a:ee:03:ff:e0:cf:2c:1d:ab:41:88:49: 46:ee:bc:75:df:b9:3f:f9:15:fe:10:f0:31:3a:17:4a:78:73: 06:71:c7:9c:30:19:d4:73:ba:90:95:8f:86:4a:d3:ff:39:e2: 76:41:07:17:38:c3:d5:cb:02:3f:12:25:58:46:56:92:12:99: 67:19:63:34:29:da:5c:a8:c4:86:79:64:44:fa:89:ea:5a:9d: fe:5e:ce:50:71:c3:89:d5:46:42:84:29:82:7b:a7:8c:75:3e: 8d:fb:0c:6f:e3:e8:8d:80:d3:ae:78:df:4b:d9:2d:9c:bd:54: b0:79:95:37:98:28:ce:63:b6:e7:fc:06:23:39:0e:df:da:d2: 63:c8:38:7b:2f:76:d3:e3:1b:6d:9b:57:6c:f6:6e:81:6e:ba: a3:0c:8c:2d:5b:f5:17:91:cb:57:c3:7d:12:50:aa:c3:ee:fb: 45:e6:76:66:cb:dd:11:4c:f8:8b:08:e4:82:a5:dc:a1:a6:08: 47:9d:53:ba:82:fa:9e:b4:16:d7:46:32:74:f6:b2:6a:08:15: 57:49:0f:b7:30:2f:29:16:1f:00:b1:ec:f2:eb:8f:43:2f:9b: 60:85:5d:61:60:88:92:41:95:1f:97:65:c0:1e:02:7d:87:fc: 05:49:3c:83 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUJzUZb9z0PkPjqIkr4vPCJI68nOQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjE1MTEyM1oX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAN2FhZTUyMjNkNjk1YmFiN2YyN2Uy OTRhODRlMzdhNzMwZTJmMjliZmVjNDQxOGQyNmI0NDNmYjNlMGNhM2FkMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WRpNy5t94D8n9n3J7k5eSPDcC2L sxHimkoG0JwCdpJ+FLm3WWA8SqMdHkCvGJtq/+Tq1VLLZcrZt5iEKy8g5+Wr+Uvg XcEll7FAN/tkrA5GCrMGZTVzF1lmhepHLeA9Cf0gia4MV02dALmjn4YEKBAJ1B13 tX1eSE55KADMEQx/gDKsTJXmdi6wGJvGPoHW2Rdk5HP6nvl9pHOhiAoxIXqJM8C/ FCaIRU8LRVob7fXIpU2J8rv6JNx+31poEabOX5a6URta8g9HXREvp7LV4rjYel9h VCQ5ZZSf8+Nvvl9ZNJO2x03WlBqjlmyKKexSnbBm9yH2ktvXqAwBbC1A0QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAVzMItVDaIf1TGgQYgdSyP11yngMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlmN2Y4MWQ1LTk5MzktNDNkNi1iMzMzLWRkMmQwOTA1MDBkYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbacIgwDQYJKoZIhvcNAQELBQADggEBALlJOhjOXlruA//gzywd q0GISUbuvHXfuT/5Ff4Q8DE6F0p4cwZxx5wwGdRzupCVj4ZK0/854nZBBxc4w9XL Aj8SJVhGVpISmWcZYzQp2lyoxIZ5ZET6iepanf5ezlBxw4nVRkKEKYJ7p4x1Po37 DG/j6I2A065430vZLZy9VLB5lTeYKM5jtuf8BiM5Dt/a0mPIOHsvdtPjG22bV2z2 boFuuqMMjC1b9ReRy1fDfRJQqsPu+0XmdmbL3RFM+IsI5IKl3KGmCEedU7qC+p60 FtdGMnT2smoIFVdJD7cwLykWHwCx7PLrj0Mvm2CFXWFgiJJBlR+XZcAeAn2H/AVJ PIM= -----END CERTIFICATE-----Generated at Tue Jun 3 23:16:57 2025 by rpki-client