$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d375ac6e-ea3e-4008-acde-d10f6c4c1baa.roa File: d375ac6e-ea3e-4008-acde-d10f6c4c1baa.roa (raw, json) Hash identifier: 0cU5Xe66ORtM4ouWQ+yVPpFdzDIZgRdxuqeGHwDFFtw= Subject key identifier: A9:D4:BE:11:E7:55:23:94:7F:8F:39:23:9C:C2:A5:6C:0B:CC:82:BF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 646798CE87D368D10EB00905577E7F1723843085 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d375ac6e-ea3e-4008-acde-d10f6c4c1baa.roa Signing time: Fri 16 May 2025 00:31:59 +0000 ROA not before: Fri 16 May 2025 00:31:59 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:c880::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:67:98:ce:87:d3:68:d1:0e:b0:09:05:57:7e:7f:17:23:84:30:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 00:31:59 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=61b6168b8e2ac68ab04267d2e0b8684df19ce39817627712f04f4f074f8039d5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:30:fd:35:56:2d:b0:9f:00:23:49:97:ff:81: 73:8a:6b:68:98:69:b9:0b:58:2f:a2:9d:ce:24:53: c5:76:c1:44:37:2d:47:5f:87:2e:e9:d7:38:63:0e: fa:fa:7a:04:59:24:9f:4f:23:d1:c6:2a:73:b5:be: 48:65:56:f7:45:7f:30:1c:9d:7a:07:98:77:17:47: 9d:4b:14:94:36:3e:09:bb:6f:bf:04:da:df:a1:6e: 06:27:e4:86:f6:f4:ff:8b:28:1b:bb:fa:8e:83:a0: 4e:97:db:ec:ff:2a:0e:f6:29:ab:3d:ab:8d:e3:73: ca:c6:4b:cc:ed:dd:5b:01:7c:50:48:9f:5e:b7:9e: 2d:17:0b:b2:ba:44:27:b5:2c:3d:ad:18:3d:cc:61: 08:91:c8:8b:af:ed:3d:0e:3b:29:17:95:5a:6b:8a: 46:af:47:2e:db:a0:7b:d8:d0:07:ca:1c:7c:81:bb: e8:fe:95:33:c1:b0:77:79:b4:39:23:c7:d6:50:9f: 0a:ce:e3:1e:a9:81:34:ee:e9:0b:e4:ee:14:76:c1: 32:71:d5:d0:0d:7b:e2:d8:5c:3a:71:e0:9e:16:fa: 87:bb:ee:dc:d1:a7:8f:f0:64:3d:2f:32:eb:6c:aa: 46:02:c9:b7:04:a4:d9:06:32:7a:c0:32:43:c3:ff: 3b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D4:BE:11:E7:55:23:94:7F:8F:39:23:9C:C2:A5:6C:0B:CC:82:BF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d375ac6e-ea3e-4008-acde-d10f6c4c1baa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:c880::/46 Signature Algorithm: sha256WithRSAEncryption a9:39:a6:7b:d2:c8:db:55:a3:e6:85:7b:f0:f4:85:d8:ba:31: 3f:99:54:a3:0a:d7:4b:38:09:d5:70:18:77:27:94:22:b3:83: f7:15:e4:f3:02:76:d9:7a:49:8d:26:6b:4d:b2:bc:1f:3c:68: 81:d6:1f:64:76:a9:ec:0d:37:79:18:49:58:f1:47:51:35:05: 15:b4:bc:00:f8:c7:09:de:1c:79:2e:89:20:56:77:3c:ff:10: 37:55:2c:e2:7b:6a:0d:cc:9c:37:ca:a1:15:71:9e:4f:44:56: 79:41:19:99:7b:23:0d:35:48:d8:41:0b:3b:2f:c4:9d:01:b8: 91:14:19:66:10:8e:c8:c7:cf:e6:a8:7c:e0:e3:d9:23:b2:59: b7:fc:96:a9:c6:41:10:ff:be:82:32:f6:2e:4a:68:2b:8d:a5: 3f:fd:f1:77:71:33:05:97:88:c1:27:c1:7e:44:d7:fd:cf:25: 48:ed:8d:f4:36:c6:10:48:d9:e5:ee:9a:ac:99:35:54:25:34: 7f:46:50:23:3d:6b:b5:18:7b:01:e0:b2:ee:30:51:70:1f:01: f9:e5:9a:0a:f1:1a:c4:30:30:1b:da:f1:24:75:a0:96:ca:fa: bc:0e:7b:60:70:28:2b:50:87:cd:66:b6:2b:0b:3e:59:74:69: 5d:10:25:2c -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUZGeYzofTaNEOsAkFV35/FyOEMIUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjAwMzE1OVoX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNANjFiNjE2OGI4ZTJhYzY4YWIwNDI2 N2QyZTBiODY4NGRmMTljZTM5ODE3NjI3NzEyZjA0ZjRmMDc0ZjgwMzlkNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjD9NVYtsJ8AI0mX/4FzimtomGm5 C1gvop3OJFPFdsFENy1HX4cu6dc4Yw76+noEWSSfTyPRxipztb5IZVb3RX8wHJ16 B5h3F0edSxSUNj4Ju2+/BNrfoW4GJ+SG9vT/iygbu/qOg6BOl9vs/yoO9imrPauN 43PKxkvM7d1bAXxQSJ9et54tFwuyukQntSw9rRg9zGEIkciLr+09DjspF5Vaa4pG r0cu26B72NAHyhx8gbvo/pUzwbB3ebQ5I8fWUJ8KzuMeqYE07ukL5O4UdsEycdXQ DXvi2Fw6ceCeFvqHu+7c0aeP8GQ9LzLrbKpGAsm3BKTZBjJ6wDJDw/87RQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKnUvhHnVSOUf485I5zCpWwLzIK/MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2QzNzVhYzZlLWVhM2UtNDAwOC1hY2RlLWQxMGY2YzRjMWJhYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaciAMA0GCSqGSIb3DQEBCwUAA4IBAQCpOaZ70sjbVaPmhXvw 9IXYujE/mVSjCtdLOAnVcBh3J5Qis4P3FeTzAnbZekmNJmtNsrwfPGiB1h9kdqns DTd5GElY8UdRNQUVtLwA+McJ3hx5LokgVnc8/xA3VSzie2oNzJw3yqEVcZ5PRFZ5 QRmZeyMNNUjYQQs7L8SdAbiRFBlmEI7Ix8/mqHzg49kjslm3/JapxkEQ/76CMvYu SmgrjaU//fF3cTMFl4jBJ8F+RNf9zyVI7Y30NsYQSNnl7pqsmTVUJTR/RlAjPWu1 GHsB4LLuMFFwHwH55ZoK8RrEMDAb2vEkdaCWyvq8DntgcCgrUIfNZrYrCz5ZdGld ECUs -----END CERTIFICATE-----Generated at Tue Jun 3 23:15:38 2025 by rpki-client