$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c8788082-9bee-454b-a32c-e6d016b76179.roa File: c8788082-9bee-454b-a32c-e6d016b76179.roa (raw, json) Hash identifier: yC1bqT8j4T++WILBG7zBB+z0Oy/xozAnElSIMWnhUVU= Subject key identifier: 17:C1:2A:0B:CA:B5:09:4A:6B:98:86:4C:AD:8E:A3:1C:E6:24:E8:A4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1EF7895FA40E28A7656B9C4E5B98D4C0FA7A4017 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c8788082-9bee-454b-a32c-e6d016b76179.roa Signing time: Mon 19 May 2025 15:00:48 +0000 ROA not before: Mon 19 May 2025 15:00:48 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da20:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:f7:89:5f:a4:0e:28:a7:65:6b:9c:4e:5b:98:d4:c0:fa:7a:40:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 19 15:00:48 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=77f9783927159e8825563a56723b4accfd062c596fef4b86927a81a2909bef26, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2f:47:43:08:16:d1:7d:04:0d:6e:a8:6b:87: 86:33:77:fc:90:26:e7:58:25:7d:e8:ca:44:7a:a6: 11:39:9d:4c:b3:12:84:67:86:7c:a0:08:c0:1b:86: 71:04:6d:2f:de:c6:c4:53:30:d2:09:82:9f:e4:0a: 4a:28:ef:85:b5:f5:f6:8e:c1:eb:ab:97:48:f6:ec: 15:ff:e4:6b:f9:83:c6:78:09:98:49:7f:48:d1:4c: e2:ff:9b:7d:7d:f7:d8:1e:3e:74:ff:bb:91:1e:33: 78:1b:16:4a:00:37:fc:80:b0:20:6a:37:10:b2:87: dc:1d:ae:29:2c:07:57:68:1e:27:0b:a5:ed:dd:c3: d3:b0:7f:f4:c7:e1:00:30:4b:f2:58:68:16:03:0b: 66:e6:c5:9d:9e:11:26:14:8b:2f:d9:e7:f6:a5:e1: 99:44:33:58:3c:a5:4d:7f:82:63:77:c6:82:1c:be: ca:7c:bb:be:bf:e4:9e:22:54:dd:1f:08:ac:e6:d2: 4e:f5:7c:cf:aa:db:36:fe:a7:4f:b5:03:78:d7:ed: ca:d4:f8:fa:ef:8c:7d:de:35:2b:92:91:df:b9:5c: 29:d7:cb:db:1b:de:f0:99:bf:16:54:eb:44:2d:84: 76:c7:4d:df:e8:d8:d8:b7:7f:16:e5:16:02:8e:27: ae:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C1:2A:0B:CA:B5:09:4A:6B:98:86:4C:AD:8E:A3:1C:E6:24:E8:A4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c8788082-9bee-454b-a32c-e6d016b76179.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da20:8000::/36 Signature Algorithm: sha256WithRSAEncryption 5e:11:61:ed:40:f0:0c:7a:eb:15:6f:4e:45:d5:66:96:8a:47: 8e:43:82:75:96:da:70:55:c2:7b:c4:ac:a5:aa:fe:ee:80:8b: 7b:25:17:bd:9f:3e:d9:ec:b0:5d:0f:61:5a:77:46:58:de:b3: a3:54:0f:f8:af:94:d8:18:b7:57:a2:1d:a9:35:2d:3c:29:0e: a3:0d:84:be:fe:bd:1e:6f:4c:4d:d9:26:79:66:c1:1e:f8:f1: dd:6d:58:38:eb:c8:94:29:91:eb:94:fd:dd:87:0e:16:14:79: 23:6e:fc:00:84:e7:95:31:a8:8c:6e:a4:97:21:f7:4f:92:49: ee:a4:41:74:bc:4b:02:8a:79:bf:14:55:b6:0d:06:f6:fa:c0: b8:8a:73:99:87:dd:0f:e6:4a:60:09:eb:90:8a:38:95:15:a8: 4c:74:2b:28:f3:03:fe:06:46:db:48:11:a2:d1:d5:61:b9:ec: 5f:61:e9:a2:91:d6:22:ae:34:e0:aa:72:69:13:83:3d:a6:48: 92:fb:3d:bf:ed:b7:19:d7:cd:2b:ea:7e:d6:43:53:8f:c8:f8: 31:4e:7c:e6:23:2f:40:df:ad:86:e5:c1:39:cf:54:55:53:a7: 15:e7:4d:ae:8a:90:e8:46:ea:98:d0:35:91:32:2b:bf:3e:90: 7c:21:46:9f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUHveJX6QOKKdla5xOW5jUwPp6QBcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxOTE1MDA0OFoX DTI1MDYyMzIzNTk1OVowejFJMEcGA1UEBRNANzdmOTc4MzkyNzE1OWU4ODI1NTYz YTU2NzIzYjRhY2NmZDA2MmM1OTZmZWY0Yjg2OTI3YTgxYTI5MDliZWYyNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry9HQwgW0X0EDW6oa4eGM3f8kCbn WCV96MpEeqYROZ1MsxKEZ4Z8oAjAG4ZxBG0v3sbEUzDSCYKf5ApKKO+FtfX2jsHr q5dI9uwV/+Rr+YPGeAmYSX9I0Uzi/5t9fffYHj50/7uRHjN4GxZKADf8gLAgajcQ sofcHa4pLAdXaB4nC6Xt3cPTsH/0x+EAMEvyWGgWAwtm5sWdnhEmFIsv2ef2peGZ RDNYPKVNf4Jjd8aCHL7KfLu+v+SeIlTdHwis5tJO9XzPqts2/qdPtQN41+3K1Pj6 74x93jUrkpHfuVwp18vbG97wmb8WVOtELYR2x03f6NjYt38W5RYCjieuJwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBfBKgvKtQlKa5iGTK2OoxzmJOikMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M4Nzg4MDgyLTliZWUtNDU0Yi1hMzJjLWU2ZDAxNmI3NjE3OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaIIAwDQYJKoZIhvcNAQELBQADggEBAF4RYe1A8Ax66xVvTkXV ZpaKR45DgnWW2nBVwnvErKWq/u6Ai3slF72fPtnssF0PYVp3Rljes6NUD/ivlNgY t1eiHak1LTwpDqMNhL7+vR5vTE3ZJnlmwR748d1tWDjryJQpkeuU/d2HDhYUeSNu /ACE55UxqIxupJch90+SSe6kQXS8SwKKeb8UVbYNBvb6wLiKc5mH3Q/mSmAJ65CK OJUVqEx0KyjzA/4GRttIEaLR1WG57F9h6aKR1iKuNOCqcmkTgz2mSJL7Pb/ttxnX zSvqftZDU4/I+DFOfOYjL0DfrYblwTnPVFVTpxXnTa6KkOhG6pjQNZEyK78+kHwh Rp8= -----END CERTIFICATE-----Generated at Tue Jun 3 23:12:30 2025 by rpki-client