$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a2dfef2f-8338-40af-9ecb-7ab01162740f.roa File: a2dfef2f-8338-40af-9ecb-7ab01162740f.roa (raw, json) Hash identifier: Lk8mvJ6U4ruRJIE9CQOoGN5VhF7jkDvBa9f2dgOa3Jo= Subject key identifier: 69:99:E5:5F:89:AC:B4:B8:0F:A4:44:E3:39:22:9E:9E:2C:58:55:7D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 716388547CC57D45C40BB88C12F1BE58A865A1AC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a2dfef2f-8338-40af-9ecb-7ab01162740f.roa Signing time: Fri 16 May 2025 00:21:38 +0000 ROA not before: Fri 16 May 2025 00:21:38 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:63:88:54:7c:c5:7d:45:c4:0b:b8:8c:12:f1:be:58:a8:65:a1:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 00:21:38 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=bfb5fbc93dd622583638e3e833f6dd544de104c7f0e2fa74e4afa230e3e2bb41, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0b:66:dd:ec:80:d8:b0:03:e7:03:f4:5f:36: 8f:e8:86:68:33:a1:57:79:d3:05:ed:13:1e:6e:03: db:4b:f9:25:15:4e:33:c9:e1:53:8d:40:92:58:9b: b9:84:14:08:67:5a:fc:51:63:56:76:38:86:90:b8: 56:53:af:d2:7f:e3:e5:e1:5b:3b:46:87:42:4e:f7: e1:d2:ab:53:72:a1:43:aa:59:46:c5:61:72:15:1a: 78:22:a1:37:dd:b3:34:1f:e4:98:95:27:7b:96:d9: 68:7a:11:69:7b:57:5a:22:8b:77:74:eb:10:12:ff: 05:b4:3e:a5:87:b0:c2:a8:83:d9:af:35:21:9e:3a: 6a:63:43:96:c7:38:cf:06:69:a4:e9:0f:bf:d1:3c: 66:b7:ae:90:0f:2a:9a:13:7e:67:e6:a0:6e:1f:3a: 5b:10:bf:96:3d:2a:1d:f9:f7:ed:f5:d1:b7:4e:ab: 9d:a5:16:f3:b1:dc:98:b6:a7:d1:36:c1:3c:53:be: 64:1a:16:d6:da:2d:d4:34:6d:26:80:ea:5d:ce:5f: 9a:21:93:5f:4e:00:b4:4d:78:58:f1:9f:ef:f8:1b: bb:21:61:42:25:73:d7:7f:3c:8c:58:c8:c4:fb:43: 52:43:e4:4b:c5:34:21:43:ad:c7:59:b5:c7:c0:d2: ac:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:99:E5:5F:89:AC:B4:B8:0F:A4:44:E3:39:22:9E:9E:2C:58:55:7D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a2dfef2f-8338-40af-9ecb-7ab01162740f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:e000::/40 Signature Algorithm: sha256WithRSAEncryption bf:91:dd:43:e3:df:ba:2a:88:ae:3b:b9:3c:3b:d7:e2:36:42: 31:d9:86:d8:d8:b2:bc:e5:44:7d:fb:71:b3:6b:5c:d4:ee:4e: d8:a7:e0:08:03:b6:47:c4:80:2c:3a:5e:d7:bc:dd:8f:35:c2: 9b:93:cd:dc:fb:31:e3:f8:2d:fb:ce:5e:70:ac:20:02:5c:98: 37:d0:94:a1:40:31:01:89:5c:e6:c9:e3:7b:ea:d4:0a:04:48: 56:3d:62:be:aa:79:8f:d7:24:74:a7:e3:cb:09:ac:3c:31:e5: 25:8c:88:06:db:33:03:92:c9:35:c0:33:38:e4:c3:ef:be:5e: aa:0d:47:c3:04:83:fe:2c:5a:6c:69:7b:26:5b:57:a5:6d:a9: c2:1f:cb:ea:61:4c:57:05:d2:1f:9f:16:e2:ae:0f:1b:56:44: 6d:68:01:38:2b:30:e9:24:50:bf:57:10:b0:a1:37:e6:93:80: 9f:7a:fa:5e:0b:ca:f0:72:fb:3c:e1:5e:70:78:e5:42:7b:ef: c9:9d:f0:4f:20:d9:e8:2b:5b:18:01:9b:6d:e0:b8:d5:29:7b: a9:f4:58:17:20:f4:d6:18:fb:8e:fe:18:b6:b9:83:31:4b:c4: 42:e6:88:6e:97:ee:74:8f:d3:54:1c:33:95:0a:90:f8:7b:5b: 37:bf:f5:27 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUcWOIVHzFfUXEC7iMEvG+WKhloawwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjAwMjEzOFoX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAYmZiNWZiYzkzZGQ2MjI1ODM2Mzhl M2U4MzNmNmRkNTQ0ZGUxMDRjN2YwZTJmYTc0ZTRhZmEyMzBlM2UyYmI0MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAtm3eyA2LAD5wP0XzaP6IZoM6FX edMF7RMebgPbS/klFU4zyeFTjUCSWJu5hBQIZ1r8UWNWdjiGkLhWU6/Sf+Pl4Vs7 RodCTvfh0qtTcqFDqllGxWFyFRp4IqE33bM0H+SYlSd7ltloehFpe1daIot3dOsQ Ev8FtD6lh7DCqIPZrzUhnjpqY0OWxzjPBmmk6Q+/0Txmt66QDyqaE35n5qBuHzpb EL+WPSod+fft9dG3TqudpRbzsdyYtqfRNsE8U75kGhbW2i3UNG0mgOpdzl+aIZNf TgC0TXhY8Z/v+Bu7IWFCJXPXfzyMWMjE+0NSQ+RLxTQhQ63HWbXHwNKsNwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGmZ5V+JrLS4D6RE4zkinp4sWFV9MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2EyZGZlZjJmLTgzMzgtNDBhZi05ZWNiLTdhYjAxMTYyNzQwZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaeAwDQYJKoZIhvcNAQELBQADggEBAL+R3UPj37oqiK47uTw7 1+I2QjHZhtjYsrzlRH37cbNrXNTuTtin4AgDtkfEgCw6Xte83Y81wpuTzdz7MeP4 LfvOXnCsIAJcmDfQlKFAMQGJXObJ43vq1AoESFY9Yr6qeY/XJHSn48sJrDwx5SWM iAbbMwOSyTXAMzjkw+++XqoNR8MEg/4sWmxpeyZbV6VtqcIfy+phTFcF0h+fFuKu DxtWRG1oATgrMOkkUL9XELChN+aTgJ96+l4LyvBy+zzhXnB45UJ778md8E8g2egr WxgBm23guNUpe6n0WBcg9NYY+47+GLa5gzFLxELmiG6X7nSP01QcM5UKkPh7Wze/ 9Sc= -----END CERTIFICATE-----Generated at Tue Jun 3 23:39:10 2025 by rpki-client