$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c2c34d45-d139-4122-8407-d2263ceee098.roa File: c2c34d45-d139-4122-8407-d2263ceee098.roa (raw, json) Hash identifier: jzRRBghnirhO0xUCa4nz9ZOS1ini9bS97k6Jo+M8D4A= Subject key identifier: 60:34:06:17:1B:52:82:F1:36:A8:C1:33:32:29:C3:97:88:C7:A2:3D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 426A84466F17B091817C44513DA9935CE67A43C2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c2c34d45-d139-4122-8407-d2263ceee098.roa Signing time: Fri 16 May 2025 15:20:02 +0000 ROA not before: Fri 16 May 2025 15:20:02 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da32:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:6a:84:46:6f:17:b0:91:81:7c:44:51:3d:a9:93:5c:e6:7a:43:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 15:20:02 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=74c64371161a21cffc7c7861dd00c01dd0a527cd8f4a153c8f9b6aa59b449506, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e7:33:28:b9:67:df:96:de:54:8a:55:52:d4: 06:ac:7c:f4:cb:30:95:5a:c1:70:d6:0c:e5:25:06: 86:04:99:2d:3f:d6:7a:9b:c6:ea:bc:bd:5c:7e:8b: f8:cb:87:21:1a:5d:1b:4b:49:4b:1a:f3:65:97:2b: 0d:14:75:bb:5e:11:36:a2:c1:6f:25:cd:fa:38:e9: d7:c0:2b:dc:ca:b9:1a:58:ed:83:f7:d2:78:b5:90: 94:f2:26:ca:78:a8:50:b5:3b:07:3b:27:c6:52:e8: 9d:31:08:14:ca:32:f5:b2:c7:1a:34:fd:3b:77:62: 99:61:d6:43:23:1f:33:54:23:f9:29:35:02:e5:34: cc:c2:e6:f8:b8:24:19:ee:69:74:e8:50:42:ec:1d: 69:4b:05:95:1e:e7:a4:93:da:19:73:06:af:09:78: 93:ca:89:79:90:b6:42:af:79:b6:b7:0c:9e:1c:21: a8:8d:bb:bb:24:95:ef:4a:ee:ce:aa:03:33:e6:6d: 9a:0e:c3:0c:42:e9:0a:c2:ce:d8:df:c4:dd:54:fc: 10:7a:ca:e2:7d:12:ba:14:e9:2f:84:7c:dd:4d:f5: ea:94:4f:3f:6b:64:14:8e:3d:3f:c4:5b:90:e7:2f: 69:7e:79:97:ca:66:59:09:81:9f:9b:c2:2b:b5:cd: 99:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:34:06:17:1B:52:82:F1:36:A8:C1:33:32:29:C3:97:88:C7:A2:3D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c2c34d45-d139-4122-8407-d2263ceee098.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da32:e000::/40 Signature Algorithm: sha256WithRSAEncryption 39:96:53:21:5f:88:c9:1e:cb:c5:1c:67:55:15:19:2e:ac:df: 0a:45:75:ae:fb:15:ac:ce:22:20:1c:3b:b8:59:f9:b0:2f:d4: 47:4b:e5:26:3d:87:13:3f:e5:61:ca:d5:31:99:84:d9:09:bb: f0:21:17:1b:fc:9f:15:e8:20:a6:23:2b:4e:85:59:25:02:db: ab:d2:9b:bb:ee:7b:32:a3:f5:9c:9d:fb:f1:fd:f7:a0:48:9f: b7:8f:53:e7:a2:89:96:ef:d0:99:09:20:d9:e2:ec:49:20:cd: fd:1d:d8:57:fb:5e:c1:a6:5a:54:92:44:f9:1d:a5:cc:7c:d4: 4a:18:3b:f1:29:2d:31:99:25:7d:cd:27:b6:cc:83:ff:2d:a1: 40:3f:50:b0:32:e1:7b:85:b5:8f:18:07:ce:cf:20:77:28:4c: eb:c0:08:01:52:2d:b1:66:3d:b7:fb:d9:c8:f0:be:80:bf:e1: f2:fd:77:f3:ba:e6:7e:f6:94:a6:98:d6:97:9d:04:b6:fc:71: 2a:18:60:99:4c:99:64:b9:e9:68:25:b4:fe:e0:14:b6:06:86: 5c:18:1f:d2:38:da:27:b4:6c:41:d5:37:92:98:f9:de:7c:79: 0c:76:1f:1d:b4:7f:f5:35:c8:10:d2:cd:eb:a4:c3:ea:67:a2: 06:9c:df:f9 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQmqERm8XsJGBfERRPamTXOZ6Q8IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjE1MjAwMloX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNANzRjNjQzNzExNjFhMjFjZmZjN2M3 ODYxZGQwMGMwMWRkMGE1MjdjZDhmNGExNTNjOGY5YjZhYTU5YjQ0OTUwNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleczKLln35beVIpVUtQGrHz0yzCV WsFw1gzlJQaGBJktP9Z6m8bqvL1cfov4y4chGl0bS0lLGvNllysNFHW7XhE2osFv Jc36OOnXwCvcyrkaWO2D99J4tZCU8ibKeKhQtTsHOyfGUuidMQgUyjL1sscaNP07 d2KZYdZDIx8zVCP5KTUC5TTMwub4uCQZ7ml06FBC7B1pSwWVHuekk9oZcwavCXiT yol5kLZCr3m2twyeHCGojbu7JJXvSu7OqgMz5m2aDsMMQukKws7Y38TdVPwQesri fRK6FOkvhHzdTfXqlE8/a2QUjj0/xFuQ5y9pfnmXymZZCYGfm8Irtc2ZpQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGA0BhcbUoLxNqjBMzIpw5eIx6I9MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2MyYzM0ZDQ1LWQxMzktNDEyMi04NDA3LWQyMjYzY2VlZTA5OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaMuAwDQYJKoZIhvcNAQELBQADggEBADmWUyFfiMkey8UcZ1UV GS6s3wpFda77FazOIiAcO7hZ+bAv1EdL5SY9hxM/5WHK1TGZhNkJu/AhFxv8nxXo IKYjK06FWSUC26vSm7vuezKj9Zyd+/H996BIn7ePU+eiiZbv0JkJINni7Ekgzf0d 2Ff7XsGmWlSSRPkdpcx81EoYO/EpLTGZJX3NJ7bMg/8toUA/ULAy4XuFtY8YB87P IHcoTOvACAFSLbFmPbf72cjwvoC/4fL9d/O65n72lKaY1pedBLb8cSoYYJlMmWS5 6WgltP7gFLYGhlwYH9I42ie0bEHVN5KY+d58eQx2Hx20f/U1yBDSzeukw+pnogac 3/k= -----END CERTIFICATE-----Generated at Tue Jun 3 23:17:42 2025 by rpki-client