$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cf35e264-b53a-4b49-a7c8-5b159b7ccfd7.roa File: cf35e264-b53a-4b49-a7c8-5b159b7ccfd7.roa (raw, json) Hash identifier: yxtLLnPr0md7lK73TeGSghANTbfyx4x+SDWQjx2OS3A= Subject key identifier: 93:2E:48:45:DA:12:36:8A:27:C5:F5:34:1C:CE:A6:5E:DB:97:AD:CE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1512D56C84EED7AA32A5DEA05CC0F746151920E9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cf35e264-b53a-4b49-a7c8-5b159b7ccfd7.roa Signing time: Fri 16 May 2025 15:31:10 +0000 ROA not before: Fri 16 May 2025 15:31:10 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf1:4800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 00:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:12:d5:6c:84:ee:d7:aa:32:a5:de:a0:5c:c0:f7:46:15:19:20:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 15:31:10 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=3d167b21e11d6f556323691df61aabedf162f267c66294269c7b41a09db200df, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6a:5d:83:01:2e:7e:72:b6:98:8a:f5:09:23: 0d:90:21:79:e2:e8:54:46:10:cc:7f:1c:4e:93:e3: d5:00:7a:46:4f:0c:b2:85:b2:52:26:e1:70:60:b0: 84:6d:b8:e7:9f:9d:82:98:7a:6b:7e:c0:0a:70:90: 97:59:3f:df:60:94:bd:de:10:ca:63:b9:53:6e:3e: d5:19:b9:41:7b:33:3f:ea:38:d9:71:a9:6a:97:71: 0c:ba:c1:f0:11:df:7c:9f:8d:cd:83:71:08:e6:aa: e0:71:11:f3:86:42:8d:9d:49:f9:8a:12:4a:8d:93: 11:c1:d9:20:0b:ce:ee:ec:7d:af:ff:ec:7d:4a:a6: 6b:43:2b:bc:95:83:5c:ba:44:84:52:b4:7d:32:9d: df:bb:3b:ce:e4:ec:73:18:df:0a:5d:88:19:37:db: b6:fd:f2:e6:ec:e0:5b:68:49:0f:cc:16:db:b8:f0: e0:68:f1:87:27:5c:6a:3f:62:f0:44:54:ff:75:6a: 89:b3:5c:25:06:5c:39:00:31:31:7e:08:49:22:7f: 5e:de:ea:2b:54:c0:a2:12:14:8c:2d:ee:89:e3:a4: 3b:bc:d0:f7:31:ef:cd:f3:58:f2:04:28:d2:1b:c7: de:33:e1:4c:d0:ad:ee:b5:b1:4d:d2:68:e1:4a:6f: 0d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:2E:48:45:DA:12:36:8A:27:C5:F5:34:1C:CE:A6:5E:DB:97:AD:CE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cf35e264-b53a-4b49-a7c8-5b159b7ccfd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf1:4800::/40 Signature Algorithm: sha256WithRSAEncryption 99:63:02:dd:13:e8:d6:b3:c5:d9:b7:3b:6c:1e:37:e3:01:1a: 91:ff:16:04:38:83:69:13:f3:ea:57:b4:03:e8:08:de:c6:e9: 5b:e4:4e:76:36:b7:38:79:2d:68:21:8a:86:16:53:69:b3:be: 9d:85:a9:ad:ff:35:bd:40:f3:10:8c:64:9b:4f:a3:66:0c:a2: d2:e4:19:05:41:ef:6c:37:a4:43:4e:29:cf:51:0a:64:1b:48: 42:f9:89:6e:7b:49:2c:16:93:56:d1:ff:27:b9:7a:d8:99:a9: ea:ff:4e:8b:48:a0:ff:f7:2f:09:f7:d3:d2:af:a4:e7:78:bd: e5:59:63:6e:56:4e:5e:93:4e:c4:3e:9c:84:38:0e:44:53:07: 6f:84:76:b6:36:d2:88:7f:b5:db:45:4b:38:d9:d3:2c:93:6b: 06:6f:ae:f0:4e:d1:96:64:f0:f6:4d:1d:8f:db:54:cb:2b:49: d9:cd:50:a5:db:31:90:e7:5a:ee:51:ce:da:68:ff:b7:5f:30: f9:c0:ee:b3:4b:aa:b9:19:fe:5c:3b:4d:1c:d2:96:87:c9:b1: 93:20:ea:d7:be:1a:82:cf:f3:de:28:f3:0f:9a:43:10:d3:63: bf:c7:73:d8:9a:60:69:ab:b7:2f:29:ad:4c:20:f1:3d:c6:10: 03:e0:96:16 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUFRLVbITu16oypd6gXMD3RhUZIOkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjE1MzExMFoX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAM2QxNjdiMjFlMTFkNmY1NTYzMjM2 OTFkZjYxYWFiZWRmMTYyZjI2N2M2NjI5NDI2OWM3YjQxYTA5ZGIyMDBkZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmpdgwEufnK2mIr1CSMNkCF54uhU RhDMfxxOk+PVAHpGTwyyhbJSJuFwYLCEbbjnn52CmHprfsAKcJCXWT/fYJS93hDK Y7lTbj7VGblBezM/6jjZcalql3EMusHwEd98n43Ng3EI5qrgcRHzhkKNnUn5ihJK jZMRwdkgC87u7H2v/+x9SqZrQyu8lYNcukSEUrR9Mp3fuzvO5OxzGN8KXYgZN9u2 /fLm7OBbaEkPzBbbuPDgaPGHJ1xqP2LwRFT/dWqJs1wlBlw5ADExfghJIn9e3uor VMCiEhSMLe6J46Q7vND3Me/N81jyBCjSG8feM+FM0K3utbFN0mjhSm8N3wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJMuSEXaEjaKJ8X1NBzOpl7bl63OMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2NmMzVlMjY0LWI1M2EtNGI0OS1hN2M4LTViMTU5YjdjY2ZkNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8UgwDQYJKoZIhvcNAQELBQADggEBAJljAt0T6Nazxdm3O2we N+MBGpH/FgQ4g2kT8+pXtAPoCN7G6VvkTnY2tzh5LWghioYWU2mzvp2Fqa3/Nb1A 8xCMZJtPo2YMotLkGQVB72w3pENOKc9RCmQbSEL5iW57SSwWk1bR/ye5etiZqer/ TotIoP/3Lwn309KvpOd4veVZY25WTl6TTsQ+nIQ4DkRTB2+EdrY20oh/tdtFSzjZ 0yyTawZvrvBO0ZZk8PZNHY/bVMsrSdnNUKXbMZDnWu5Rztpo/7dfMPnA7rNLqrkZ /lw7TRzSlofJsZMg6te+GoLP894o8w+aQxDTY7/Hc9iaYGmrty8prUwg8T3GEAPg lhY= -----END CERTIFICATE-----Generated at Mon Jun 2 06:14:21 2025 by rpki-client