$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c85be8cd-a1a8-4332-82e9-469e2daf903e.roa File: c85be8cd-a1a8-4332-82e9-469e2daf903e.roa (raw, json) Hash identifier: MIvBM2J6k2CkDGEM1y/DTc+ueC1Rt+Bk1ALKfIQsTno= Subject key identifier: CE:70:9E:D5:E7:FC:18:6A:BA:4C:36:C8:C0:A4:BC:BA:6F:63:44:50 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2D2EDDF327CAD72D9F075D86F5697335834B4196 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c85be8cd-a1a8-4332-82e9-469e2daf903e.roa Signing time: Sat 10 May 2025 00:01:52 +0000 ROA not before: Sat 10 May 2025 00:01:52 +0000 ROA not after: Sat 14 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da60:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:2e:dd:f3:27:ca:d7:2d:9f:07:5d:86:f5:69:73:35:83:4b:41:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 10 00:01:52 2025 GMT Not After : Jun 14 23:59:59 2025 GMT Subject: serialNumber=425e9a8b02187813037f9d854b938a8e78c64dfe9b281fc0cbb6b514f9251cef, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bd:d0:8c:0c:0e:1b:88:ac:5e:f1:48:8c:e0: 6e:c6:d2:87:58:7e:b5:a9:51:c8:7d:d8:6e:ee:6d: e3:a7:19:b2:0c:42:5c:4f:f5:c5:8b:d4:87:56:99: ac:6e:59:d8:b6:91:3b:49:0a:15:c0:84:56:9f:89: cb:d9:bb:93:3c:4c:a0:6f:42:b3:fb:42:5c:ee:02: b9:8f:9f:f6:a3:db:0a:33:0e:85:b9:12:44:9d:b2: e4:15:5b:dd:d1:48:59:05:99:ae:3f:2f:76:3e:fa: d1:e5:17:04:61:a6:43:37:96:c4:eb:47:3b:de:00: e2:4c:af:12:a0:f7:58:dd:eb:f6:71:1a:f6:15:cc: 24:23:43:17:c1:06:aa:31:c8:05:5d:97:d1:d7:36: 85:40:05:a9:83:ab:82:48:26:d5:c5:94:e2:c9:7b: 45:d3:0f:23:09:75:1d:cc:5f:d5:2f:54:7b:14:8a: 07:e5:33:a8:0b:18:c4:e5:5f:9c:c0:bd:c7:ad:0c: 97:5e:24:ad:8c:b5:47:b1:85:6d:52:d0:f2:bf:b9: 1c:1a:a5:41:12:30:8d:ed:0a:ba:1e:bc:8d:8b:7f: 8e:62:23:bf:13:c0:bd:a5:1a:73:5f:5c:01:98:64: 73:d4:bf:6b:40:66:66:19:c2:dd:36:44:33:03:c0: 34:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:70:9E:D5:E7:FC:18:6A:BA:4C:36:C8:C0:A4:BC:BA:6F:63:44:50 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c85be8cd-a1a8-4332-82e9-469e2daf903e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:c800::/40 Signature Algorithm: sha256WithRSAEncryption 77:6f:8b:9d:06:88:b6:8a:ab:5d:70:5d:bc:d6:b8:8e:c7:f8: b8:b9:ff:2f:6b:2b:87:74:83:b5:18:86:1e:2a:fe:4f:56:2c: 92:fb:31:9f:5d:ce:3d:c1:ce:fb:ed:c9:63:95:2c:9d:76:82: c5:8c:4a:df:3d:06:64:25:d5:03:8f:0e:de:e3:b0:f0:c0:a6: a0:b4:40:df:9c:62:c6:08:52:c1:52:9d:3b:76:02:e1:f0:31: 3e:3c:20:a0:38:a9:25:72:55:e2:0c:fa:79:35:59:d3:80:b5: 18:6d:b3:98:9d:36:41:39:e5:7c:00:f6:8c:e5:12:13:d3:40: 79:15:7f:b9:83:c5:05:23:da:47:3c:89:81:07:ab:7c:84:cc: 05:eb:7f:c4:ce:eb:55:47:05:19:9a:ca:4e:1c:00:5c:58:4a: ac:45:9a:90:2a:8c:5a:12:6f:20:ab:c7:ea:3a:b2:e6:cb:bc: d2:73:10:2f:79:85:ef:1d:93:7e:0a:8d:47:bc:56:d1:27:94: 9d:71:30:2c:6d:9b:c3:14:d8:9d:90:38:25:e4:b0:d8:7e:34: ee:6c:9d:7f:0b:2d:41:41:d8:63:da:a9:87:81:99:11:ac:09: 4a:3b:37:9a:77:24:26:bb:01:aa:f7:1c:d6:6c:0d:f7:f5:40: db:c9:7b:aa -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIULS7d8yfK1y2fB12G9WlzNYNLQZYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxMDAwMDE1MloX DTI1MDYxNDIzNTk1OVowejFJMEcGA1UEBRNANDI1ZTlhOGIwMjE4NzgxMzAzN2Y5 ZDg1NGI5MzhhOGU3OGM2NGRmZTliMjgxZmMwY2JiNmI1MTRmOTI1MWNlZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArL3QjAwOG4isXvFIjOBuxtKHWH61 qVHIfdhu7m3jpxmyDEJcT/XFi9SHVpmsblnYtpE7SQoVwIRWn4nL2buTPEygb0Kz +0Jc7gK5j5/2o9sKMw6FuRJEnbLkFVvd0UhZBZmuPy92PvrR5RcEYaZDN5bE60c7 3gDiTK8SoPdY3ev2cRr2FcwkI0MXwQaqMcgFXZfR1zaFQAWpg6uCSCbVxZTiyXtF 0w8jCXUdzF/VL1R7FIoH5TOoCxjE5V+cwL3HrQyXXiStjLVHsYVtUtDyv7kcGqVB EjCN7Qq6HryNi3+OYiO/E8C9pRpzX1wBmGRz1L9rQGZmGcLdNkQzA8A01QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFM5wntXn/Bhqukw2yMCkvLpvY0RQMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M4NWJlOGNkLWExYTgtNDMzMi04MmU5LTQ2OWUyZGFmOTAzZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYMgwDQYJKoZIhvcNAQELBQADggEBAHdvi50GiLaKq11wXbzW uI7H+Li5/y9rK4d0g7UYhh4q/k9WLJL7MZ9dzj3BzvvtyWOVLJ12gsWMSt89BmQl 1QOPDt7jsPDApqC0QN+cYsYIUsFSnTt2AuHwMT48IKA4qSVyVeIM+nk1WdOAtRht s5idNkE55XwA9ozlEhPTQHkVf7mDxQUj2kc8iYEHq3yEzAXrf8TO61VHBRmayk4c AFxYSqxFmpAqjFoSbyCrx+o6subLvNJzEC95he8dk34KjUe8VtEnlJ1xMCxtm8MU 2J2QOCXksNh+NO5snX8LLUFB2GPaqYeBmRGsCUo7N5p3JCa7Aar3HNZsDff1QNvJ e6o= -----END CERTIFICATE-----Generated at Tue Jun 3 23:12:16 2025 by rpki-client