$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a9812ae5-6cb6-43be-82bc-429f2e7be616.roa File: a9812ae5-6cb6-43be-82bc-429f2e7be616.roa (raw, json) Hash identifier: IOfdrTssXe4RAKG77bdT2GLtfnRNx3yUjbYfyVRO/eo= Subject key identifier: 32:2B:76:FB:09:9C:36:F2:1F:69:E5:7E:9E:00:25:83:29:73:0A:92 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 75898DEE8EDB2F29675D5A22ACAF55F07095CB10 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a9812ae5-6cb6-43be-82bc-429f2e7be616.roa Signing time: Fri 16 May 2025 16:01:24 +0000 ROA not before: Fri 16 May 2025 16:01:24 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da11:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:89:8d:ee:8e:db:2f:29:67:5d:5a:22:ac:af:55:f0:70:95:cb:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 16:01:24 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=3dee06c4bc9baa21a708a3e435ea2f45a2a3321128a7f090339ba39e07fde47c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0a:2c:d5:81:e2:6d:96:2c:a3:f7:3c:b3:bf: 1d:3d:02:00:69:f8:5b:cb:a3:cf:05:19:b4:b0:cc: be:e6:c0:24:42:6c:a0:4e:45:af:69:fd:a3:0d:37: 30:cf:a3:de:dd:4b:45:05:cc:56:f9:52:c6:49:7c: c0:01:6a:25:38:cc:1d:c8:49:a8:67:a1:5f:7b:5e: 79:50:16:6c:0b:4b:5d:c8:e6:af:ca:a0:23:16:49: bc:15:d9:6d:47:95:eb:10:2a:06:81:23:c9:9e:97: ad:4c:e8:84:0e:09:4e:b8:45:4c:76:c2:00:8c:ea: 44:b2:15:22:8b:76:2a:27:44:73:15:fd:6c:0f:0c: d8:7c:88:93:01:3e:51:21:1b:75:60:a4:6b:99:7d: 3e:25:56:0c:8d:c3:48:20:08:50:da:76:d5:09:3f: 98:2d:bb:39:1e:a5:81:41:79:15:be:f3:0e:6f:66: 99:ef:8e:63:d7:c2:97:e6:e3:4e:19:b7:8e:0e:d0: ab:92:11:36:17:b5:1f:3d:78:9a:5f:76:15:ed:e3: 28:4f:83:54:15:d5:5e:bd:32:77:8d:20:25:a6:f5: c5:79:2b:11:96:19:fc:a1:3a:47:7f:fe:28:06:fb: f7:d4:f8:06:05:cf:ed:c9:32:7d:ed:c1:73:7f:78: df:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2B:76:FB:09:9C:36:F2:1F:69:E5:7E:9E:00:25:83:29:73:0A:92 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a9812ae5-6cb6-43be-82bc-429f2e7be616.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da11:c00::/38 Signature Algorithm: sha256WithRSAEncryption c7:7f:94:15:43:5d:84:a4:48:f6:9d:c0:ea:12:a5:de:f0:04: 5a:f4:ae:10:59:31:ac:6c:57:13:f8:8b:7d:7d:ad:74:3f:6d: 42:8e:b0:b0:ac:24:9b:36:84:b3:ce:75:7d:fd:00:10:c7:1c: ef:e6:ae:24:22:f3:c1:a9:59:87:5c:52:32:55:c8:86:1f:61: 7c:d8:62:31:89:36:f8:31:a5:7b:56:fd:7e:2e:da:74:bb:c7: 42:44:3c:b2:9a:2c:43:01:7b:07:21:2c:17:25:27:fe:a3:39: ba:14:f9:ed:49:6f:38:4d:72:28:4b:f0:e1:36:88:69:c3:cc: 5a:70:6d:9c:5d:eb:b7:20:ef:1d:5d:01:75:25:81:93:08:98: d5:1e:68:23:9a:5b:9f:a2:10:d6:b6:ae:6b:4d:c6:48:9f:08: 91:91:76:2d:67:2e:9d:9b:8c:05:6b:54:ae:9d:bd:e0:35:22: ab:56:c1:f8:b6:6c:97:a9:96:7b:8b:db:c4:ef:63:d8:32:ca: 22:2a:d1:f9:08:66:a2:8b:f8:0d:e2:8e:44:f7:b3:59:d2:ba: 42:7f:ea:b8:36:5d:8a:e9:65:8d:23:fc:94:d6:79:91:8e:91: 11:56:d8:52:fd:42:89:5f:cd:db:42:3d:9f:b6:b5:ad:e2:ea: c5:ff:2b:a0 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUdYmN7o7bLylnXVoirK9V8HCVyxAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjE2MDEyNFoX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAM2RlZTA2YzRiYzliYWEyMWE3MDhh M2U0MzVlYTJmNDVhMmEzMzIxMTI4YTdmMDkwMzM5YmEzOWUwN2ZkZTQ3YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Qos1YHibZYso/c8s78dPQIAafhb y6PPBRm0sMy+5sAkQmygTkWvaf2jDTcwz6Pe3UtFBcxW+VLGSXzAAWolOMwdyEmo Z6Ffe155UBZsC0tdyOavyqAjFkm8FdltR5XrECoGgSPJnpetTOiEDglOuEVMdsIA jOpEshUii3YqJ0RzFf1sDwzYfIiTAT5RIRt1YKRrmX0+JVYMjcNIIAhQ2nbVCT+Y Lbs5HqWBQXkVvvMOb2aZ745j18KX5uNOGbeODtCrkhE2F7UfPXiaX3YV7eMoT4NU FdVevTJ3jSAlpvXFeSsRlhn8oTpHf/4oBvv31PgGBc/tyTJ97cFzf3jfUQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDIrdvsJnDbyH2nlfp4AJYMpcwqSMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E5ODEyYWU1LTZjYjYtNDNiZS04MmJjLTQyOWYyZTdiZTYxNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaEQwwDQYJKoZIhvcNAQELBQADggEBAMd/lBVDXYSkSPadwOoS pd7wBFr0rhBZMaxsVxP4i319rXQ/bUKOsLCsJJs2hLPOdX39ABDHHO/mriQi88Gp WYdcUjJVyIYfYXzYYjGJNvgxpXtW/X4u2nS7x0JEPLKaLEMBewchLBclJ/6jOboU +e1JbzhNcihL8OE2iGnDzFpwbZxd67cg7x1dAXUlgZMImNUeaCOaW5+iENa2rmtN xkifCJGRdi1nLp2bjAVrVK6dveA1IqtWwfi2bJeplnuL28TvY9gyyiIq0fkIZqKL +A3ijkT3s1nSukJ/6rg2XYrpZY0j/JTWeZGOkRFW2FL9QolfzdtCPZ+2ta3i6sX/ K6A= -----END CERTIFICATE-----Generated at Tue Jun 3 23:38:34 2025 by rpki-client