$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c1bb658d-621e-4348-96fa-5f81f0d9578b.roa File: c1bb658d-621e-4348-96fa-5f81f0d9578b.roa (raw, json) Hash identifier: v+QOJMmSWbIPjzuGBZvDkRMlZRCkJBx0ppgPsJY3aHs= Subject key identifier: 32:CD:07:BD:5E:65:5B:E2:50:12:5E:65:CE:E2:BB:5E:30:F8:E8:01 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7C82510B8CC70FA24F2636395A3D5EE9D8E45D17 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c1bb658d-621e-4348-96fa-5f81f0d9578b.roa Signing time: Tue 13 May 2025 00:20:20 +0000 ROA not before: Tue 13 May 2025 00:20:20 +0000 ROA not after: Tue 17 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:48c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:82:51:0b:8c:c7:0f:a2:4f:26:36:39:5a:3d:5e:e9:d8:e4:5d:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 13 00:20:20 2025 GMT Not After : Jun 17 23:59:59 2025 GMT Subject: serialNumber=08f4101420b8667ac42db931311206f3e7c6f983fc8a49d3357db1aa3ace2c07, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e6:a6:e7:ac:0f:33:e2:36:b7:0b:70:4b:d9: 4c:90:9a:13:1e:a5:60:2c:fd:e6:22:74:36:70:2b: 47:13:26:95:b0:b2:8c:f8:16:3b:57:b4:1e:b2:e1: 1c:3e:94:ff:f2:ff:40:c8:2f:7a:c5:93:89:12:44: 8b:cd:2e:38:2f:8f:24:f4:26:97:ea:2b:9e:a9:87: 69:67:90:1f:1a:35:d7:cd:75:98:22:cc:a6:17:e7: dc:98:e0:17:81:54:02:f0:d3:45:98:af:e7:7d:8c: 4a:81:44:70:18:9c:94:2f:36:3d:07:55:a8:a0:6b: 41:07:ce:51:19:8f:9a:fb:0b:be:60:04:01:b5:e1: 72:de:5e:d5:2e:be:4e:d3:21:a6:df:4b:d7:d1:7f: 79:e0:03:c4:c4:70:85:25:a6:18:0d:bf:0c:3d:6b: c2:68:52:62:51:30:4c:14:85:7e:3f:71:64:d4:8d: 93:1c:b9:a3:37:98:1a:84:d6:75:3c:dc:7f:31:54: 5d:08:fe:9c:a1:17:ef:39:61:68:b4:a8:68:a9:1a: ed:bf:96:6e:f6:23:92:c5:d6:b2:57:72:d5:9b:59: 10:95:07:5b:61:fe:38:1a:7a:2a:f1:c9:e0:5d:16: 6c:36:d0:10:80:52:16:ba:d1:65:9f:ae:2d:26:ee: 3d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:CD:07:BD:5E:65:5B:E2:50:12:5E:65:CE:E2:BB:5E:30:F8:E8:01 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c1bb658d-621e-4348-96fa-5f81f0d9578b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:48c0::/48 Signature Algorithm: sha256WithRSAEncryption 45:35:22:44:29:99:70:4f:8b:16:9c:d7:21:e7:e7:42:a9:49: b6:77:0c:8e:a8:11:a0:1b:f0:2f:f2:1f:35:f3:a2:dd:0e:b0: d1:51:af:ae:d1:ac:94:51:6f:2c:43:43:e9:04:88:38:42:04: c1:38:f4:9c:bd:9f:ab:9c:9b:eb:79:27:61:92:7a:13:3a:db: d3:d9:90:5a:b4:16:d4:7c:86:bf:54:8a:d7:7a:f6:30:6e:7a: bd:08:59:e6:42:6b:f8:a5:90:ec:0a:ae:f7:c1:46:35:12:a9: e7:cc:56:a7:72:43:70:fa:a0:6d:a6:99:28:ff:fa:0f:83:2a: 5e:d0:db:b7:49:c0:0e:de:2e:87:cd:bf:b8:24:43:52:b9:cd: 8b:30:ac:7a:2d:09:85:94:79:dd:32:de:5b:46:d1:47:99:bd: e7:df:34:cf:59:3b:64:a1:6f:45:3f:7e:69:e5:9f:d5:50:b6: 48:3f:4e:38:11:44:80:7c:10:e5:8a:a5:eb:1f:80:5e:de:0e: dd:f3:8f:64:41:31:3d:79:db:06:91:b4:d3:39:78:4c:34:53: 65:08:63:e9:27:33:57:ec:05:b7:4e:00:31:74:6e:da:94:a3: 18:0f:29:f9:80:eb:90:e5:81:03:63:94:dc:c0:1c:44:3a:bb: 3b:37:42:1c -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUfIJRC4zHD6JPJjY5Wj1e6djkXRcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxMzAwMjAyMFoX DTI1MDYxNzIzNTk1OVowejFJMEcGA1UEBRNAMDhmNDEwMTQyMGI4NjY3YWM0MmRi OTMxMzExMjA2ZjNlN2M2Zjk4M2ZjOGE0OWQzMzU3ZGIxYWEzYWNlMmMwNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+am56wPM+I2twtwS9lMkJoTHqVg LP3mInQ2cCtHEyaVsLKM+BY7V7QesuEcPpT/8v9AyC96xZOJEkSLzS44L48k9CaX 6iueqYdpZ5AfGjXXzXWYIsymF+fcmOAXgVQC8NNFmK/nfYxKgURwGJyULzY9B1Wo oGtBB85RGY+a+wu+YAQBteFy3l7VLr5O0yGm30vX0X954APExHCFJaYYDb8MPWvC aFJiUTBMFIV+P3Fk1I2THLmjN5gahNZ1PNx/MVRdCP6coRfvOWFotKhoqRrtv5Zu 9iOSxdayV3LVm1kQlQdbYf44Gnoq8cngXRZsNtAQgFIWutFln64tJu49lwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDLNB71eZVviUBJeZc7iu14w+OgBMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2MxYmI2NThkLTYyMWUtNDM0OC05NmZhLTVmODFmMGQ5NTc4Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8kjAMA0GCSqGSIb3DQEBCwUAA4IBAQBFNSJEKZlwT4sWnNch 5+dCqUm2dwyOqBGgG/Av8h8186LdDrDRUa+u0ayUUW8sQ0PpBIg4QgTBOPScvZ+r nJvreSdhknoTOtvT2ZBatBbUfIa/VIrXevYwbnq9CFnmQmv4pZDsCq73wUY1Eqnn zFanckNw+qBtppko//oPgype0Nu3ScAO3i6Hzb+4JENSuc2LMKx6LQmFlHndMt5b RtFHmb3n3zTPWTtkoW9FP35p5Z/VULZIP044EUSAfBDliqXrH4Be3g7d849kQTE9 edsGkbTTOXhMNFNlCGPpJzNX7AW3TgAxdG7alKMYDyn5gOuQ5YEDY5TcwBxEOrs7 N0Ic -----END CERTIFICATE-----Generated at Tue Jun 3 23:17:53 2025 by rpki-client