$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/aae85ea8-a494-4fb1-b7c6-dbdcf11c74ad.roa File: aae85ea8-a494-4fb1-b7c6-dbdcf11c74ad.roa (raw, json) Hash identifier: rjF/qTmrGBrZ6UQE4aDkJmm5fccIRsrgvMk2/zkwaIs= Subject key identifier: 6E:BB:F0:BA:A1:4D:9E:10:B4:79:F7:CC:23:79:70:B1:60:CC:B2:CA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1009EF46FC604BFABD5C3913CE3711B5A62FA15D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/aae85ea8-a494-4fb1-b7c6-dbdcf11c74ad.roa Signing time: Mon 12 May 2025 15:01:21 +0000 ROA not before: Mon 12 May 2025 15:01:21 +0000 ROA not after: Mon 16 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:6000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:09:ef:46:fc:60:4b:fa:bd:5c:39:13:ce:37:11:b5:a6:2f:a1:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 12 15:01:21 2025 GMT Not After : Jun 16 23:59:59 2025 GMT Subject: serialNumber=6b2261bf4d478039083180952a1bfccb677e55f39446d4e42fef69f0e38d1a40, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:11:dd:ad:83:e3:f1:1b:cc:f4:a1:4d:ea:cc: 29:36:53:da:b9:fa:db:2c:10:88:47:97:78:90:dd: 3f:82:e6:ff:ee:96:2d:e4:64:02:51:18:ac:2e:47: 21:b3:7f:64:b9:65:fe:b5:05:f6:83:ff:68:cd:92: 01:34:9e:07:76:a5:04:4e:45:27:59:86:22:c6:2e: 34:dd:d4:07:03:79:94:32:dc:81:96:db:f6:91:c7: 2e:98:40:97:66:05:c2:76:d1:84:28:17:bf:d5:0e: d0:eb:17:12:af:ed:5f:21:44:a2:74:99:bf:21:10: 47:43:ca:54:ec:be:3a:74:21:89:e9:23:35:07:a6: 5e:ba:ad:e5:06:09:29:72:28:55:de:b7:d9:f5:b6: 92:dd:11:8a:37:77:75:44:3c:e7:2f:57:bf:a8:b0: 1d:f4:2f:e3:ba:6c:b3:51:8a:a6:e3:27:bc:b7:71: 5b:f3:15:01:13:ac:cc:42:d0:bc:15:70:40:06:48: a9:7e:06:f3:62:50:36:5b:41:75:ec:09:93:7c:9d: 63:8e:20:d4:96:39:49:fd:06:cd:da:5b:ef:ce:f9: 94:7a:f6:25:2b:c1:c7:8e:70:95:01:8f:b3:63:30: 51:81:ee:8a:af:21:dd:e9:9d:f9:c3:43:79:3a:83: b7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:BB:F0:BA:A1:4D:9E:10:B4:79:F7:CC:23:79:70:B1:60:CC:B2:CA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/aae85ea8-a494-4fb1-b7c6-dbdcf11c74ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:6000::/40 Signature Algorithm: sha256WithRSAEncryption 5c:83:18:39:68:b9:b6:24:f8:ee:56:e5:8b:b8:5c:fe:5d:8a: 48:3b:57:a6:9a:3c:e1:99:40:2d:27:4f:74:b7:23:db:d0:17: 0e:2f:e5:ad:24:67:36:13:67:db:f1:36:74:a7:24:a8:55:9f: da:40:e1:b3:af:46:04:ce:61:8f:ee:02:cb:5e:0e:7f:e1:d1: 9a:b4:06:8c:59:31:ee:f5:8b:9f:ad:53:d4:f2:5f:62:55:40: bc:41:20:c2:51:8f:cd:cf:a3:70:a7:33:64:b4:af:2c:2a:df: 7c:f9:b3:78:d7:86:bd:f4:17:21:f6:85:b3:a7:ca:44:33:c7: 2d:57:03:67:08:ed:88:57:9c:c1:e2:9a:7b:dc:49:98:73:98: 0f:37:b5:db:c5:5c:1a:5a:53:a5:ce:5e:42:a8:21:49:a1:91: d3:fc:a5:57:16:b6:e5:be:14:fa:e5:cf:b5:3b:27:bd:f3:7f: de:21:ea:a0:25:79:e0:52:94:83:4d:6e:bd:45:6c:c7:21:7c: b9:cf:6d:58:9e:98:88:ce:66:75:df:54:61:73:1e:29:9e:77: 8f:51:51:ac:0d:ea:5b:39:16:2c:27:15:da:05:c5:54:1d:72: af:fc:f9:ab:14:ce:82:26:f9:75:84:4b:ca:2e:88:9c:71:69: 6a:37:58:84 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUEAnvRvxgS/q9XDkTzjcRtaYvoV0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxMjE1MDEyMVoX DTI1MDYxNjIzNTk1OVowejFJMEcGA1UEBRNANmIyMjYxYmY0ZDQ3ODAzOTA4MzE4 MDk1MmExYmZjY2I2NzdlNTVmMzk0NDZkNGU0MmZlZjY5ZjBlMzhkMWE0MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshHdrYPj8RvM9KFN6swpNlPaufrb LBCIR5d4kN0/gub/7pYt5GQCURisLkchs39kuWX+tQX2g/9ozZIBNJ4HdqUETkUn WYYixi403dQHA3mUMtyBltv2kccumECXZgXCdtGEKBe/1Q7Q6xcSr+1fIUSidJm/ IRBHQ8pU7L46dCGJ6SM1B6Zeuq3lBgkpcihV3rfZ9baS3RGKN3d1RDznL1e/qLAd 9C/jumyzUYqm4ye8t3Fb8xUBE6zMQtC8FXBABkipfgbzYlA2W0F17AmTfJ1jjiDU ljlJ/QbN2lvvzvmUevYlK8HHjnCVAY+zYzBRge6KryHd6Z35w0N5OoO31wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFG678LqhTZ4QtHn3zCN5cLFgzLLKMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FhZTg1ZWE4LWE0OTQtNGZiMS1iN2M2LWRiZGNmMTFjNzRhZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9mAwDQYJKoZIhvcNAQELBQADggEBAFyDGDloubYk+O5W5Yu4 XP5dikg7V6aaPOGZQC0nT3S3I9vQFw4v5a0kZzYTZ9vxNnSnJKhVn9pA4bOvRgTO YY/uAsteDn/h0Zq0BoxZMe71i5+tU9TyX2JVQLxBIMJRj83Po3CnM2S0rywq33z5 s3jXhr30FyH2hbOnykQzxy1XA2cI7YhXnMHimnvcSZhzmA83tdvFXBpaU6XOXkKo IUmhkdP8pVcWtuW+FPrlz7U7J73zf94h6qAleeBSlINNbr1FbMchfLnPbViemIjO ZnXfVGFzHimed49RUawN6ls5FiwnFdoFxVQdcq/8+asUzoIm+XWES8ouiJxxaWo3 WIQ= -----END CERTIFICATE-----Generated at Tue Jun 3 23:08:36 2025 by rpki-client