$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ba2b9024-3102-4fc7-bdb9-0191e3bb79c4.roa File: ba2b9024-3102-4fc7-bdb9-0191e3bb79c4.roa (raw, json) Hash identifier: 350iT2ryX1MLMWjsaVYq92fBGJUoUBjiQ3T9svpjsSs= Subject key identifier: 75:A9:86:48:0A:AB:69:EA:91:DF:BA:B8:76:AD:A4:C2:0D:03:DD:13 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2A19DF4044431569B3B9E74A922D4BF01FE95602 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ba2b9024-3102-4fc7-bdb9-0191e3bb79c4.roa Signing time: Fri 16 May 2025 15:10:17 +0000 ROA not before: Fri 16 May 2025 15:10:17 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daa0:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:19:df:40:44:43:15:69:b3:b9:e7:4a:92:2d:4b:f0:1f:e9:56:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 15:10:17 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=a4bc590eea42ec195a86a4318bede7785ea3f2205cc17556e788101955b6d99b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0e:fb:88:c5:9b:92:d5:d4:da:da:d0:3b:41: fc:ec:42:50:79:a9:2b:6a:00:7c:da:31:84:61:a7: 60:07:4a:69:7f:c8:10:0c:99:1a:fb:7b:31:4d:93: 1c:bf:d9:67:1e:74:ba:65:55:87:6e:5f:c8:47:dc: 7c:96:84:20:f5:c4:70:bf:fe:91:3d:44:f8:33:93: f2:81:7f:91:d9:9f:64:bc:4b:71:0e:12:7f:b8:63: 7f:4a:be:b2:c9:c4:41:e0:1b:9c:fa:4e:6b:1e:31: 29:43:d0:36:33:b3:3b:e9:72:1e:99:4d:52:2c:15: 9b:f1:01:4d:2f:5b:33:e1:a8:6e:be:6e:e6:a2:7e: 79:b2:38:16:9d:b1:c5:2d:fd:7c:90:85:93:e6:92: f1:5d:c2:58:35:97:a0:de:6e:23:12:48:38:4b:46: 35:76:a7:6c:79:a4:29:38:d2:d2:09:17:40:75:a0: b1:12:dc:9d:d3:02:32:04:2d:e6:25:e2:4a:62:d8: 80:b1:a2:ba:9c:11:49:25:d0:1f:5a:d9:ef:ed:ad: 32:3b:fd:5d:bc:f3:75:3b:93:13:e6:75:35:d9:63: 91:29:fc:68:a6:8b:ee:77:3b:6d:54:7b:5d:45:6a: ef:b1:06:ea:12:a7:0c:c3:3b:21:40:c0:12:cd:71: ec:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A9:86:48:0A:AB:69:EA:91:DF:BA:B8:76:AD:A4:C2:0D:03:DD:13 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ba2b9024-3102-4fc7-bdb9-0191e3bb79c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daa0:4000::/40 Signature Algorithm: sha256WithRSAEncryption 0e:cc:b1:61:6a:e3:0d:1f:ab:4e:73:dc:04:0c:83:71:19:4d: d4:f7:5a:67:62:f0:d5:db:9a:55:9b:ac:06:bb:12:60:29:f0: f1:37:cd:f5:c1:27:fb:bc:ed:cb:bd:f4:c3:e2:7b:11:9e:ca: 3e:0e:3b:27:ac:d3:cb:35:72:65:2d:b4:3b:95:21:1e:1d:e1: 81:4b:ce:6c:56:ff:bd:e0:5b:d6:d8:bf:da:e4:86:01:a0:7a: f9:3e:f8:42:98:4e:78:71:ab:f1:ee:58:06:9a:a1:53:4d:ae: 6d:66:be:4a:df:95:e7:7e:50:70:39:9c:99:5a:94:48:24:fd: 0e:9e:82:74:f2:fb:d4:f0:6a:d5:e4:c0:7e:aa:67:7d:25:2c: 65:d9:73:c0:df:58:b7:7e:e5:13:73:93:a3:ce:be:60:8b:b3: ec:18:52:f5:55:93:8d:27:9e:8f:53:06:3a:08:54:e5:ed:fb: 4e:59:15:c6:4c:39:b5:ca:29:ba:3b:f6:5e:f7:e7:22:10:75: 65:06:92:27:99:c6:29:6e:54:14:65:f1:cf:cd:c0:1b:58:49: ef:bc:1e:ef:d7:0b:3f:af:ed:38:39:5e:22:ab:0e:43:5b:9e: 3c:c4:20:09:e5:33:03:c2:7e:f9:99:27:a8:8f:72:13:7c:c1: 7b:1d:82:ca -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUKhnfQERDFWmzuedKki1L8B/pVgIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjE1MTAxN1oX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAYTRiYzU5MGVlYTQyZWMxOTVhODZh NDMxOGJlZGU3Nzg1ZWEzZjIyMDVjYzE3NTU2ZTc4ODEwMTk1NWI2ZDk5YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuA77iMWbktXU2trQO0H87EJQeakr agB82jGEYadgB0ppf8gQDJka+3sxTZMcv9lnHnS6ZVWHbl/IR9x8loQg9cRwv/6R PUT4M5PygX+R2Z9kvEtxDhJ/uGN/Sr6yycRB4Buc+k5rHjEpQ9A2M7M76XIemU1S LBWb8QFNL1sz4ahuvm7mon55sjgWnbHFLf18kIWT5pLxXcJYNZeg3m4jEkg4S0Y1 dqdseaQpONLSCRdAdaCxEtyd0wIyBC3mJeJKYtiAsaK6nBFJJdAfWtnv7a0yO/1d vPN1O5MT5nU12WORKfxopovudzttVHtdRWrvsQbqEqcMwzshQMASzXHsRwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHWphkgKq2nqkd+6uHatpMINA90TMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JhMmI5MDI0LTMxMDItNGZjNy1iZGI5LTAxOTFlM2JiNzljNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaoEAwDQYJKoZIhvcNAQELBQADggEBAA7MsWFq4w0fq05z3AQM g3EZTdT3Wmdi8NXbmlWbrAa7EmAp8PE3zfXBJ/u87cu99MPiexGeyj4OOyes08s1 cmUttDuVIR4d4YFLzmxW/73gW9bYv9rkhgGgevk++EKYTnhxq/HuWAaaoVNNrm1m vkrfled+UHA5nJlalEgk/Q6egnTy+9TwatXkwH6qZ30lLGXZc8DfWLd+5RNzk6PO vmCLs+wYUvVVk40nno9TBjoIVOXt+05ZFcZMObXKKbo79l735yIQdWUGkieZxilu VBRl8c/NwBtYSe+8Hu/XCz+v7Tg5XiKrDkNbnjzEIAnlMwPCfvmZJ6iPchN8wXsd gso= -----END CERTIFICATE-----Generated at Tue Jun 3 23:13:16 2025 by rpki-client