$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ba66f204-ef53-4c25-92d8-95b5c7db0e2f.roa File: ba66f204-ef53-4c25-92d8-95b5c7db0e2f.roa (raw, json) Hash identifier: gS8lwiia3rBwj5jZdx1ftsX3uy2Mc9oUVCETeJC+TOY= Subject key identifier: D0:76:39:2E:CF:74:7F:9E:27:3B:4C:14:66:31:F8:E7:1A:D3:0C:06 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 033FAE7F878B84FA78EA6532E72F3ABFC50AE786 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ba66f204-ef53-4c25-92d8-95b5c7db0e2f.roa Signing time: Wed 14 May 2025 00:42:01 +0000 ROA not before: Wed 14 May 2025 00:42:01 +0000 ROA not after: Wed 18 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:1040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 00:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:3f:ae:7f:87:8b:84:fa:78:ea:65:32:e7:2f:3a:bf:c5:0a:e7:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 14 00:42:01 2025 GMT Not After : Jun 18 23:59:59 2025 GMT Subject: serialNumber=00f33c6b153ee8bfe654e61f8a2dc023406b19716cc8e7ea4f37cc364041094e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9a:8d:fc:09:4b:65:07:12:a6:73:f6:24:95: 7c:9b:9d:cb:44:69:bc:fc:a7:92:6e:08:ed:f3:33: 05:e3:8f:97:d7:c6:7a:a0:80:f8:b1:12:95:5f:b3: a2:1e:97:a9:aa:c0:44:f3:0e:54:0d:c9:53:de:7a: 4b:bb:71:62:a0:47:66:a2:72:d5:c3:41:13:1c:68: cb:c9:f9:59:07:79:4d:cc:1c:28:f3:45:f0:79:e9: 17:88:6f:8c:76:ab:25:25:bd:a6:c2:d7:8c:a2:64: be:cf:81:b7:be:5a:4a:3c:2a:6f:d9:91:84:ee:14: be:2c:a7:b7:e7:71:da:46:0d:9e:b1:de:51:c4:e3: c1:b5:5c:bb:77:a1:4d:51:fb:b4:ae:d8:1a:1c:eb: 02:87:34:05:35:07:5a:d7:88:ab:a1:79:7c:a7:a2: 32:95:14:c3:68:d0:8e:a9:f1:20:3b:f1:cf:dc:77: 78:03:78:5e:3e:71:61:89:cb:5a:c7:d5:63:f6:fb: 1a:45:49:19:01:c4:e7:0d:77:8d:df:c8:40:81:ae: f8:9f:2c:09:00:09:9e:3e:d7:9c:0e:4c:df:4c:5e: 1a:de:99:57:10:87:77:e0:39:47:6d:5c:82:9b:40: c2:5d:3f:bc:2b:4d:9c:3a:61:48:b1:51:2f:a4:ac: 2a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:76:39:2E:CF:74:7F:9E:27:3B:4C:14:66:31:F8:E7:1A:D3:0C:06 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ba66f204-ef53-4c25-92d8-95b5c7db0e2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:1040::/48 Signature Algorithm: sha256WithRSAEncryption 26:3b:68:50:bc:cd:46:1e:da:36:02:e1:9e:78:56:2e:04:ef: 8a:a3:a0:0a:9d:ea:c9:37:84:f1:29:aa:d9:88:cf:c7:4c:1c: 75:b3:f2:7c:ba:59:b0:7b:4a:1c:a0:33:a0:84:54:e1:9b:cc: 35:1d:e4:9e:bd:88:ce:7d:68:57:98:e9:92:70:ca:a0:02:55: 5e:7d:18:c7:00:9f:d5:30:d3:98:ce:e7:27:bd:55:f5:21:35: e5:dc:58:b3:08:e0:fa:6f:08:1c:4b:45:b6:d9:63:f5:21:c4: 57:ca:70:45:5b:e7:53:e3:81:28:19:69:8a:85:43:57:5e:52: 41:62:98:45:e3:f3:6d:86:55:c0:f0:66:7f:14:79:c4:b4:8d: 4c:94:ef:48:55:a8:c7:ab:cb:50:55:29:68:b1:03:3d:bd:d6: e2:2e:f2:f3:06:21:66:59:fd:b8:fa:01:e7:3f:f3:69:d9:ec: f0:c8:9e:b3:a3:61:e4:6d:04:db:cf:53:1e:e5:b7:e0:eb:2c: 27:ef:dc:c0:cc:4b:b7:a6:ff:fc:b2:b8:81:e8:af:d5:fa:71: 5a:a0:29:7e:db:e2:ca:4b:a3:75:30:a6:c0:11:6f:c4:e2:58: 84:f0:71:64:e1:89:40:6e:eb:bf:a9:ef:dc:50:65:73:78:c7: a8:18:72:fd -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUAz+uf4eLhPp46mUy5y86v8UK54YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNDAwNDIwMVoX DTI1MDYxODIzNTk1OVowejFJMEcGA1UEBRNAMDBmMzNjNmIxNTNlZThiZmU2NTRl NjFmOGEyZGMwMjM0MDZiMTk3MTZjYzhlN2VhNGYzN2NjMzY0MDQxMDk0ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5qN/AlLZQcSpnP2JJV8m53LRGm8 /KeSbgjt8zMF44+X18Z6oID4sRKVX7OiHpepqsBE8w5UDclT3npLu3FioEdmonLV w0ETHGjLyflZB3lNzBwo80XweekXiG+MdqslJb2mwteMomS+z4G3vlpKPCpv2ZGE 7hS+LKe353HaRg2esd5RxOPBtVy7d6FNUfu0rtgaHOsChzQFNQda14iroXl8p6Iy lRTDaNCOqfEgO/HP3Hd4A3hePnFhictax9Vj9vsaRUkZAcTnDXeN38hAga74nywJ AAmePtecDkzfTF4a3plXEId34DlHbVyCm0DCXT+8K02cOmFIsVEvpKwqswIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNB2OS7PdH+eJztMFGYx+Oca0wwGMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JhNjZmMjA0LWVmNTMtNGMyNS05MmQ4LTk1YjVjN2RiMGUyZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/xBAMA0GCSqGSIb3DQEBCwUAA4IBAQAmO2hQvM1GHto2AuGe eFYuBO+Ko6AKnerJN4TxKarZiM/HTBx1s/J8ulmwe0ocoDOghFThm8w1HeSevYjO fWhXmOmScMqgAlVefRjHAJ/VMNOYzucnvVX1ITXl3FizCOD6bwgcS0W22WP1IcRX ynBFW+dT44EoGWmKhUNXXlJBYphF4/NthlXA8GZ/FHnEtI1MlO9IVajHq8tQVSlo sQM9vdbiLvLzBiFmWf24+gHnP/Np2ezwyJ6zo2HkbQTbz1Me5bfg6ywn79zAzEu3 pv/8sriB6K/V+nFaoCl+2+LKS6N1MKbAEW/E4liE8HFk4YlAbuu/qe/cUGVzeMeo GHL9 -----END CERTIFICATE-----Generated at Mon Jun 2 06:23:00 2025 by rpki-client