$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b722e8e8-9dc4-4578-b939-252603f62da2.roa File: b722e8e8-9dc4-4578-b939-252603f62da2.roa (raw, json) Hash identifier: ysVTY7xhmX1hKRvv6SSoU7yCR9A4nohlFbpt42D8QHQ= Subject key identifier: FE:07:3C:F1:BB:B4:EF:9E:80:38:1F:0A:BC:7D:42:FE:90:89:41:89 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 050310745F7B29A3DD10E6B25B2A62EA94DF010A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b722e8e8-9dc4-4578-b939-252603f62da2.roa Signing time: Fri 16 May 2025 00:20:11 +0000 ROA not before: Fri 16 May 2025 00:20:11 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:9080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 00:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:03:10:74:5f:7b:29:a3:dd:10:e6:b2:5b:2a:62:ea:94:df:01:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 00:20:11 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=a24f57687464b8c044a2212cb5ffaf22c18104455e0251340509c909186ac7cd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6a:f3:d7:e2:81:72:fd:f4:58:4a:70:93:0c: 8c:d9:d5:18:cf:66:5a:fd:27:14:fb:b1:06:1a:9a: b3:4f:26:a4:4c:0b:44:35:73:5c:8c:a0:5e:3a:94: 49:e3:8e:ec:ce:61:e8:7c:ef:bc:cc:e1:27:a1:c6: 2b:cd:b7:06:09:bc:9b:5b:0a:f9:34:88:24:d4:d8: a8:19:a7:ab:1e:99:51:be:fb:ce:90:bb:56:95:38: d8:75:7e:e2:d6:57:54:0c:e0:11:ad:98:d9:51:c0: 2b:d1:d8:69:ee:a7:5d:5d:83:5e:e5:9b:a5:a6:97: 43:c8:19:4a:de:ec:4b:88:11:24:3b:f8:97:d0:da: 48:4f:37:83:24:42:f9:c9:b3:47:b8:78:1b:af:df: df:0b:a3:33:93:66:79:b3:fb:e1:9e:9f:6b:5c:98: 64:49:02:ac:b6:58:d8:1b:3e:57:6d:fc:d7:6b:86: fd:3d:c9:12:d4:bb:d1:0f:6b:63:6e:35:9b:67:cc: 78:b7:ce:12:56:52:ee:0e:1e:2c:8f:75:92:80:06: 83:39:cb:bc:1d:92:76:67:fa:a2:08:cb:f9:43:75: 70:de:ed:26:76:75:ea:9b:d1:a3:db:87:87:74:7a: 48:df:7e:74:f0:6d:80:f3:f8:a0:7d:f9:0c:ac:cc: 91:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:07:3C:F1:BB:B4:EF:9E:80:38:1F:0A:BC:7D:42:FE:90:89:41:89 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b722e8e8-9dc4-4578-b939-252603f62da2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:9080::/46 Signature Algorithm: sha256WithRSAEncryption a4:ce:c2:cf:5c:8a:56:ba:35:b2:d6:0a:95:38:4f:81:d4:9d: 7e:27:74:3d:97:b2:41:8d:6e:36:88:a7:8d:db:24:94:99:96: 81:26:a0:f3:2c:81:5b:9f:5b:5f:01:1c:13:ec:20:1d:b1:72: 0a:71:18:02:fc:65:16:5d:da:50:af:40:8e:07:00:34:23:a9: 6f:f3:57:27:f5:28:9f:ee:3c:4f:15:8f:72:29:a3:00:fc:d7: 9d:48:73:f4:88:84:b2:fd:cb:7f:db:b1:41:fb:bf:ff:13:47: ab:65:84:72:a1:fa:af:67:95:19:7d:b4:81:e4:97:40:77:6b: 04:b6:2d:40:4d:09:d4:27:ed:8d:87:ea:98:ed:ed:c6:0b:2e: c3:43:dd:3d:80:76:83:e9:2e:14:47:0b:35:30:db:2e:7b:8c: 12:41:40:be:52:8f:e2:0b:1d:91:11:ee:4a:25:a3:bb:a9:9a: ba:b1:f9:06:86:75:c3:6b:21:6f:c9:2f:c2:18:6f:fa:1f:70: 0b:90:4f:d5:93:90:9e:ef:98:75:3a:38:10:7a:c1:f1:0e:84: 55:8a:4a:df:82:5b:cc:a0:c5:26:00:2e:db:57:5c:10:d3:b7: 8f:7a:56:08:f5:1b:97:03:b1:29:98:d6:96:de:69:ab:4f:93: 8e:76:fe:3d -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUBQMQdF97KaPdEOayWypi6pTfAQowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjAwMjAxMVoX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAYTI0ZjU3Njg3NDY0YjhjMDQ0YTIy MTJjYjVmZmFmMjJjMTgxMDQ0NTVlMDI1MTM0MDUwOWM5MDkxODZhYzdjZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2rz1+KBcv30WEpwkwyM2dUYz2Za /ScU+7EGGpqzTyakTAtENXNcjKBeOpRJ447szmHofO+8zOEnocYrzbcGCbybWwr5 NIgk1NioGaerHplRvvvOkLtWlTjYdX7i1ldUDOARrZjZUcAr0dhp7qddXYNe5Zul ppdDyBlK3uxLiBEkO/iX0NpITzeDJEL5ybNHuHgbr9/fC6Mzk2Z5s/vhnp9rXJhk SQKstljYGz5XbfzXa4b9PckS1LvRD2tjbjWbZ8x4t84SVlLuDh4sj3WSgAaDOcu8 HZJ2Z/qiCMv5Q3Vw3u0mdnXqm9Gj24eHdHpI33508G2A8/igffkMrMyROQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFP4HPPG7tO+egDgfCrx9Qv6QiUGJMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I3MjJlOGU4LTlkYzQtNDU3OC1iOTM5LTI1MjYwM2Y2MmRhMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaZCAMA0GCSqGSIb3DQEBCwUAA4IBAQCkzsLPXIpWujWy1gqV OE+B1J1+J3Q9l7JBjW42iKeN2ySUmZaBJqDzLIFbn1tfARwT7CAdsXIKcRgC/GUW XdpQr0COBwA0I6lv81cn9Sif7jxPFY9yKaMA/NedSHP0iISy/ct/27FB+7//E0er ZYRyofqvZ5UZfbSB5JdAd2sEti1ATQnUJ+2Nh+qY7e3GCy7DQ909gHaD6S4URws1 MNsue4wSQUC+Uo/iCx2REe5KJaO7qZq6sfkGhnXDayFvyS/CGG/6H3ALkE/Vk5Ce 75h1OjgQesHxDoRVikrfglvMoMUmAC7bV1wQ07ePelYI9RuXA7EpmNaW3mmrT5OO dv49 -----END CERTIFICATE-----Generated at Mon Jun 2 06:18:05 2025 by rpki-client