$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ceb0138a-da27-4867-b667-db77092baf0f.roa File: ceb0138a-da27-4867-b667-db77092baf0f.roa (raw, json) Hash identifier: iOJNlZWCQXEFzVThADcMVTDW2dv+2EBFN67E1K5r63Y= Subject key identifier: 57:9E:12:78:28:56:0F:66:47:3B:B4:C9:30:A3:F8:8E:46:AE:75:0D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1C49268CE642D07A7BF6B4099DD50A0FB492641C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ceb0138a-da27-4867-b667-db77092baf0f.roa Signing time: Wed 14 May 2025 00:21:36 +0000 ROA not before: Wed 14 May 2025 00:21:36 +0000 ROA not after: Wed 18 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:2020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:49:26:8c:e6:42:d0:7a:7b:f6:b4:09:9d:d5:0a:0f:b4:92:64:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 14 00:21:36 2025 GMT Not After : Jun 18 23:59:59 2025 GMT Subject: serialNumber=45750cb7201049ea51dd89add241c86f0702dce845038a678da776b8ae371baa, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ad:fb:e3:24:41:76:bc:0d:22:27:6d:a9:94: 91:0c:c5:2e:0a:26:fa:93:11:63:28:bc:58:69:97: 34:ec:e9:91:07:fd:5d:60:51:a2:3d:37:a4:ff:59: 64:5f:eb:c4:cd:d6:31:e2:f8:44:16:0f:9e:be:1b: b6:15:73:6a:72:fa:ac:67:d8:6c:b3:91:bc:dd:9a: 0f:65:75:ad:1f:80:f9:a1:20:2c:02:99:c0:9c:20: 07:24:3b:7f:e7:e4:b6:78:95:c9:1a:12:6b:8d:7f: a4:cc:c8:bd:a1:00:f9:f5:0f:07:00:17:22:10:3a: 27:53:81:9e:1c:ad:c7:ea:c2:6e:77:3a:c8:88:aa: ee:1b:8e:a6:6b:8e:3d:a4:d5:1f:4a:e8:33:d5:21: 5b:34:39:b6:fd:0a:51:65:6e:6f:d3:fa:13:4d:6c: e5:e0:be:ad:f4:63:0b:3d:f6:19:10:9b:7c:2f:92: dc:56:55:93:89:16:36:b4:4c:3d:7e:48:c1:4d:41: fd:9c:cb:68:b9:b5:df:29:4c:e6:cf:49:8c:64:b2: c3:1c:d7:00:c7:2d:2c:29:76:09:dd:dc:3e:76:fe: 57:59:41:1f:b5:81:cd:6e:de:30:2e:28:64:73:cd: af:9f:15:b8:f2:94:6c:4f:a8:7e:fd:e4:4d:5d:fe: dd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:9E:12:78:28:56:0F:66:47:3B:B4:C9:30:A3:F8:8E:46:AE:75:0D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ceb0138a-da27-4867-b667-db77092baf0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:2020::/48 Signature Algorithm: sha256WithRSAEncryption 59:a1:df:38:32:9f:3a:96:8d:fd:b7:0c:aa:bd:61:59:43:d1: 05:9e:92:7f:42:1f:4e:ae:52:21:e4:d3:1b:d1:a9:b2:32:19: 67:8b:a8:1d:84:9d:4d:1b:be:9f:a3:00:ac:36:84:74:17:fd: 0e:1c:70:e9:0e:7e:c6:13:ef:8e:b4:02:dd:88:33:a3:98:00: b2:54:44:d4:eb:50:fd:f8:a7:9c:c1:42:33:93:88:60:51:12: 17:92:8b:35:31:83:49:75:03:5c:75:08:0c:37:76:cb:24:cf: 3c:21:0b:8d:6b:1a:30:5a:0d:0c:9f:43:c6:3d:c4:b5:03:3e: bf:de:76:17:a5:b8:49:8f:59:b0:65:02:f4:95:7a:ae:97:aa: bd:f3:5d:cb:1f:8a:38:67:9f:03:54:cb:4e:1e:3b:a2:84:06: 94:81:13:55:75:25:3f:34:dd:89:ba:a7:a4:01:1f:83:2b:96: ef:ce:cc:d8:17:02:f4:e9:65:32:33:2c:da:48:2f:a8:9e:73: f8:98:45:00:71:62:79:e2:4e:46:a1:ce:d9:7b:90:0d:b8:e1: 0e:3b:5d:c4:73:d1:e6:92:94:6a:b3:8b:13:14:f7:9e:a0:a7: bd:08:2d:cd:2a:26:d3:45:3d:a1:bf:35:1e:cc:f8:7b:da:ba: 1f:b5:37:18 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUHEkmjOZC0Hp79rQJndUKD7SSZBwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNDAwMjEzNloX DTI1MDYxODIzNTk1OVowejFJMEcGA1UEBRNANDU3NTBjYjcyMDEwNDllYTUxZGQ4 OWFkZDI0MWM4NmYwNzAyZGNlODQ1MDM4YTY3OGRhNzc2YjhhZTM3MWJhYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArq374yRBdrwNIidtqZSRDMUuCib6 kxFjKLxYaZc07OmRB/1dYFGiPTek/1lkX+vEzdYx4vhEFg+evhu2FXNqcvqsZ9hs s5G83ZoPZXWtH4D5oSAsApnAnCAHJDt/5+S2eJXJGhJrjX+kzMi9oQD59Q8HABci EDonU4GeHK3H6sJudzrIiKruG46ma449pNUfSugz1SFbNDm2/QpRZW5v0/oTTWzl 4L6t9GMLPfYZEJt8L5LcVlWTiRY2tEw9fkjBTUH9nMtoubXfKUzmz0mMZLLDHNcA xy0sKXYJ3dw+dv5XWUEftYHNbt4wLihkc82vnxW48pRsT6h+/eRNXf7dtQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFeeEngoVg9mRzu0yTCj+I5GrnUNMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2NlYjAxMzhhLWRhMjctNDg2Ny1iNjY3LWRiNzcwOTJiYWYwZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaACAgMA0GCSqGSIb3DQEBCwUAA4IBAQBZod84Mp86lo39twyq vWFZQ9EFnpJ/Qh9OrlIh5NMb0amyMhlni6gdhJ1NG76fowCsNoR0F/0OHHDpDn7G E++OtALdiDOjmACyVETU61D9+KecwUIzk4hgURIXkos1MYNJdQNcdQgMN3bLJM88 IQuNaxowWg0Mn0PGPcS1Az6/3nYXpbhJj1mwZQL0lXqul6q9813LH4o4Z58DVMtO HjuihAaUgRNVdSU/NN2JuqekAR+DK5bvzszYFwL06WUyMyzaSC+onnP4mEUAcWJ5 4k5Goc7Ze5ANuOEOO13Ec9HmkpRqs4sTFPeeoKe9CC3NKibTRT2hvzUezPh72rof tTcY -----END CERTIFICATE-----Generated at Tue Jun 3 23:11:09 2025 by rpki-client