$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b1a86cb5-be63-483d-92d7-e04128bbd6dd.roa File: b1a86cb5-be63-483d-92d7-e04128bbd6dd.roa (raw, json) Hash identifier: 10nVI+YKxE4J6mqfmJNEy4VaulCggP5X4FSP8Sb/4rY= Subject key identifier: E8:6C:E4:F6:E8:08:70:D4:5B:32:15:12:CB:AB:57:52:18:6F:25:AF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4447C2BC2CEF64AA5CD48F904F1241FD4F75C33A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b1a86cb5-be63-483d-92d7-e04128bbd6dd.roa Signing time: Fri 16 May 2025 00:10:42 +0000 ROA not before: Fri 16 May 2025 00:10:42 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:8880::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:47:c2:bc:2c:ef:64:aa:5c:d4:8f:90:4f:12:41:fd:4f:75:c3:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 00:10:42 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=ad36bcc345fb1c2856e8abe4aacc0182b6da9b8be1e0cc56f4580afe92156ecf, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4e:db:bb:93:c7:b1:9f:3c:3d:32:28:4d:d0: ce:54:77:0d:8d:95:01:dd:7c:93:b7:ec:74:75:6f: 09:ef:f2:da:f6:f5:f6:0b:05:fd:59:80:ab:fd:d2: 3e:cd:54:84:52:90:b3:ae:ea:e7:63:b2:0f:dc:34: 09:19:81:29:65:2e:ed:38:fb:f9:6e:12:3d:5d:b5: 2d:95:43:35:0b:c6:04:d1:d2:b5:3f:0c:42:29:b9: a9:4f:bb:51:60:64:12:7b:f3:3e:8f:b4:30:eb:73: 41:a9:7c:ae:eb:18:f8:02:1f:53:f5:10:14:1b:2a: 7d:1d:c5:ec:bf:16:2f:62:6d:ce:9d:8b:42:6c:99: 59:ee:2e:d0:bf:97:d7:81:0a:85:71:48:11:5b:5c: e0:0c:44:2d:6f:49:a6:c9:b7:be:52:06:6d:d5:8a: f4:79:d2:67:37:33:f5:ea:13:78:af:78:af:20:54: e7:dd:c2:23:fa:20:8e:a6:8e:e5:5a:d1:d1:2f:27: ae:fb:d1:32:ab:19:88:91:f8:7c:35:2b:79:d4:7b: 26:64:e9:e2:8a:68:07:40:dd:eb:28:39:20:1f:d6: c7:5a:65:1f:18:83:e4:a6:ff:0f:bb:0e:eb:22:b6: bd:02:90:92:ad:01:72:9f:79:47:0c:c4:a9:2e:5b: 89:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:6C:E4:F6:E8:08:70:D4:5B:32:15:12:CB:AB:57:52:18:6F:25:AF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b1a86cb5-be63-483d-92d7-e04128bbd6dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:8880::/46 Signature Algorithm: sha256WithRSAEncryption 95:ca:46:d6:6a:a5:a9:47:48:34:fe:4a:ba:71:3b:31:35:f4: 75:11:d5:0b:7f:36:a9:93:f1:47:4c:f2:a4:b5:97:78:33:2f: 2e:08:97:20:2e:f7:26:47:dc:43:41:1d:75:6c:67:39:e0:d7: 56:42:90:fe:bd:83:51:94:a3:f0:91:59:04:64:61:a9:96:2a: 07:f9:4c:e8:c6:00:c2:1b:1e:78:f2:8d:31:31:90:fb:78:9a: b0:33:ed:68:4c:c5:b0:4a:f0:76:6e:d8:cb:a3:f5:be:7f:cf: a1:d1:0d:8d:15:45:44:8b:49:30:16:e0:49:c9:aa:b6:3b:35: 5c:8b:ef:12:e7:2e:a0:7a:17:2b:4e:40:ef:b5:0f:48:d3:77: 3e:8b:6a:dc:a5:e0:e6:c7:87:99:41:7d:f9:9a:81:96:88:f1: 24:98:02:04:07:43:73:3a:c9:d8:24:0a:41:21:00:cc:9c:b5: 35:c2:a8:f9:1e:82:26:db:46:a2:59:1c:aa:23:e4:77:b4:73: c3:31:70:46:cf:7c:68:30:9d:a4:68:57:d8:7a:0d:48:81:b7: e4:07:00:62:5e:b1:ed:17:0b:26:fc:45:e2:4e:a0:0c:38:a3: a4:b4:6a:c8:8e:f9:76:01:45:23:67:1a:2e:0c:be:a1:fd:45: e5:35:ac:da -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUREfCvCzvZKpc1I+QTxJB/U91wzowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjAwMTA0MloX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAYWQzNmJjYzM0NWZiMWMyODU2ZThh YmU0YWFjYzAxODJiNmRhOWI4YmUxZTBjYzU2ZjQ1ODBhZmU5MjE1NmVjZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkk7bu5PHsZ88PTIoTdDOVHcNjZUB 3XyTt+x0dW8J7/La9vX2CwX9WYCr/dI+zVSEUpCzrurnY7IP3DQJGYEpZS7tOPv5 bhI9XbUtlUM1C8YE0dK1PwxCKbmpT7tRYGQSe/M+j7Qw63NBqXyu6xj4Ah9T9RAU Gyp9HcXsvxYvYm3OnYtCbJlZ7i7Qv5fXgQqFcUgRW1zgDEQtb0mmybe+UgZt1Yr0 edJnNzP16hN4r3ivIFTn3cIj+iCOpo7lWtHRLyeu+9EyqxmIkfh8NSt51HsmZOni imgHQN3rKDkgH9bHWmUfGIPkpv8Puw7rIra9ApCSrQFyn3lHDMSpLluJWwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOhs5PboCHDUWzIVEsurV1IYbyWvMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IxYTg2Y2I1LWJlNjMtNDgzZC05MmQ3LWUwNDEyOGJiZDZkZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaYiAMA0GCSqGSIb3DQEBCwUAA4IBAQCVykbWaqWpR0g0/kq6 cTsxNfR1EdULfzapk/FHTPKktZd4My8uCJcgLvcmR9xDQR11bGc54NdWQpD+vYNR lKPwkVkEZGGplioH+UzoxgDCGx548o0xMZD7eJqwM+1oTMWwSvB2btjLo/W+f8+h 0Q2NFUVEi0kwFuBJyaq2OzVci+8S5y6gehcrTkDvtQ9I03c+i2rcpeDmx4eZQX35 moGWiPEkmAIEB0NzOsnYJApBIQDMnLU1wqj5HoIm20aiWRyqI+R3tHPDMXBGz3xo MJ2kaFfYeg1IgbfkBwBiXrHtFwsm/EXiTqAMOKOktGrIjvl2AUUjZxouDL6h/UXl Naza -----END CERTIFICATE-----Generated at Tue Jun 3 23:27:26 2025 by rpki-client