$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c9bc976a-9bbb-401d-9a58-bcfa6dc78171.roa File: c9bc976a-9bbb-401d-9a58-bcfa6dc78171.roa (raw, json) Hash identifier: ZS7/mgowsb9ytMviZtanUPEJi3Tg+Q6+tT6i4Fj2t70= Subject key identifier: 05:0A:59:E6:EC:50:0A:CD:89:7A:2C:BC:C7:E4:09:A0:80:A1:FC:F5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 68B4E4373D36185004CBE3E2E02AC201C8BE0BF0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c9bc976a-9bbb-401d-9a58-bcfa6dc78171.roa Signing time: Fri 16 May 2025 15:20:48 +0000 ROA not before: Fri 16 May 2025 15:20:48 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:c800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:b4:e4:37:3d:36:18:50:04:cb:e3:e2:e0:2a:c2:01:c8:be:0b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 15:20:48 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=5431eb57c3cba6b67c5f3ad0f24b4b6ea6a4c028f0e13c157b15b32f845a7d06, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:db:9a:c8:bc:20:39:48:05:7a:f9:0d:74:e8: 40:81:2c:da:55:84:37:cb:60:54:f5:d4:2e:80:7f: f6:28:9a:3e:a7:3e:dc:ff:35:45:3b:c9:6f:00:89: a7:be:9d:ac:15:ed:e2:d0:9d:d8:8d:d1:dd:1a:e5: fa:87:05:ff:a2:93:b2:67:04:97:0f:44:8c:45:78: bb:7c:fa:84:36:c4:6a:34:68:b7:09:3c:4b:fc:0e: 75:cc:34:9f:80:1d:1e:17:e8:ca:d4:e4:2e:e9:8f: 8d:48:19:b3:ea:a7:45:7a:58:34:cb:2f:99:30:86: e5:91:ea:77:2c:0e:91:7b:08:e0:0c:05:53:21:d3: df:ed:9c:48:a0:a8:56:5f:11:a0:09:10:73:a2:52: 35:ba:c0:4c:0d:7f:81:fc:95:27:14:da:eb:e0:72: 24:bf:16:44:44:62:9d:49:46:e6:c0:13:7f:4f:87: 7d:54:a7:ee:d3:31:b9:25:e5:d1:17:d0:92:93:39: 85:db:f3:f7:98:a2:45:d7:bc:56:a2:b1:b6:8b:69: 2a:32:86:ed:61:67:ea:9b:1f:56:e3:9f:6e:c7:6e: 23:7c:b6:92:51:c2:47:75:91:59:12:0b:04:10:96: fa:35:46:cf:fe:57:a6:be:44:1d:66:34:cb:79:cd: 23:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:0A:59:E6:EC:50:0A:CD:89:7A:2C:BC:C7:E4:09:A0:80:A1:FC:F5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c9bc976a-9bbb-401d-9a58-bcfa6dc78171.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:c800::/40 Signature Algorithm: sha256WithRSAEncryption 8f:55:97:40:78:75:8e:fb:04:7f:99:b3:8c:4b:3f:c4:8d:95: 9e:99:c5:dc:37:90:9f:56:f0:01:2d:ae:58:88:ab:44:e9:c2: 03:89:1e:b1:19:bc:26:9c:c6:4b:2c:ac:73:b6:11:c2:90:86: 3e:f9:42:ab:cb:f9:08:4d:49:9f:15:d7:84:cf:a2:59:4b:de: 14:5a:6d:70:7c:82:a4:45:42:7a:03:f4:2e:09:c6:fe:5f:3e: c9:ba:b6:7e:7b:a8:9e:0f:04:77:f6:4b:cd:4a:86:75:de:fe: a5:b9:61:dc:49:4b:6c:c1:9e:14:20:de:68:c7:38:63:b3:92: 10:70:0e:55:49:4f:26:29:37:c7:7f:ec:c2:ef:4e:3a:f6:a0: 73:81:3a:b5:e8:de:ad:11:89:7e:0a:e2:4c:7d:c9:27:db:9a: 97:fb:77:a9:f1:7c:4f:a6:4a:42:aa:7d:ae:7e:99:25:27:dc: f5:68:64:2b:fc:fc:47:bb:3b:2b:41:a9:33:ce:fc:16:e4:1f: 4e:0a:22:55:69:5b:b4:6a:5b:8b:52:09:c7:28:1a:74:b8:c7: a2:0b:13:ba:91:46:f3:6e:fb:a1:f7:27:0a:7f:08:2e:8b:c4: f7:40:b0:c5:65:f8:39:19:60:21:99:96:ca:4d:35:9a:04:1a: 42:30:d4:d9 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUaLTkNz02GFAEy+Pi4CrCAci+C/AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjE1MjA0OFoX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNANTQzMWViNTdjM2NiYTZiNjdjNWYz YWQwZjI0YjRiNmVhNmE0YzAyOGYwZTEzYzE1N2IxNWIzMmY4NDVhN2QwNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNuayLwgOUgFevkNdOhAgSzaVYQ3 y2BU9dQugH/2KJo+pz7c/zVFO8lvAImnvp2sFe3i0J3YjdHdGuX6hwX/opOyZwSX D0SMRXi7fPqENsRqNGi3CTxL/A51zDSfgB0eF+jK1OQu6Y+NSBmz6qdFelg0yy+Z MIblkep3LA6RewjgDAVTIdPf7ZxIoKhWXxGgCRBzolI1usBMDX+B/JUnFNrr4HIk vxZERGKdSUbmwBN/T4d9VKfu0zG5JeXRF9CSkzmF2/P3mKJF17xWorG2i2kqMobt YWfqmx9W459ux24jfLaSUcJHdZFZEgsEEJb6NUbP/lemvkQdZjTLec0jRQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAUKWebsUArNiXosvMfkCaCAofz1MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M5YmM5NzZhLTliYmItNDAxZC05YTU4LWJjZmE2ZGM3ODE3MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9sgwDQYJKoZIhvcNAQELBQADggEBAI9Vl0B4dY77BH+Zs4xL P8SNlZ6Zxdw3kJ9W8AEtrliIq0TpwgOJHrEZvCacxkssrHO2EcKQhj75QqvL+QhN SZ8V14TPollL3hRabXB8gqRFQnoD9C4Jxv5fPsm6tn57qJ4PBHf2S81KhnXe/qW5 YdxJS2zBnhQg3mjHOGOzkhBwDlVJTyYpN8d/7MLvTjr2oHOBOrXo3q0RiX4K4kx9 ySfbmpf7d6nxfE+mSkKqfa5+mSUn3PVoZCv8/Ee7OytBqTPO/BbkH04KIlVpW7Rq W4tSCccoGnS4x6ILE7qRRvNu+6H3Jwp/CC6LxPdAsMVl+DkZYCGZlspNNZoEGkIw 1Nk= -----END CERTIFICATE-----Generated at Tue Jun 3 23:36:52 2025 by rpki-client