$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/de533e09-cd05-4749-8ae2-bf8eb74e13cf.roa File: de533e09-cd05-4749-8ae2-bf8eb74e13cf.roa (raw, json) Hash identifier: MPKXNgUsJdI30iqYfdNGcgRli2Lu6aGUTe97inbnygY= Subject key identifier: 88:15:D2:CA:F3:EE:36:4B:51:47:C1:74:4A:72:32:F0:B8:F9:19:36 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7C176E9E67AD244F5B55BB7BA383D9B115FE53DA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/de533e09-cd05-4749-8ae2-bf8eb74e13cf.roa Signing time: Mon 12 May 2025 15:01:17 +0000 ROA not before: Mon 12 May 2025 15:01:17 +0000 ROA not after: Mon 16 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:2840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:17:6e:9e:67:ad:24:4f:5b:55:bb:7b:a3:83:d9:b1:15:fe:53:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 12 15:01:17 2025 GMT Not After : Jun 16 23:59:59 2025 GMT Subject: serialNumber=afffa3f9d4bd6d858543b7fe2e9470414df65cbcfa673d1783e411101040a232, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ec:0b:a8:6a:31:17:ed:f1:69:7a:3b:8a:86: e1:b1:9c:3f:19:9b:b4:32:15:e1:f7:86:ed:eb:3c: f8:97:47:fe:be:ca:8b:b4:ad:23:60:38:25:e1:92: 5e:46:3d:a2:34:3b:c5:de:18:21:e5:95:48:33:0a: b1:20:15:5c:1e:1a:86:57:bd:a5:c0:e1:11:dc:26: 0f:aa:8d:9e:1e:8b:11:33:c6:7a:2f:e7:a3:0f:a8: 62:62:d4:83:38:aa:2a:7b:e2:28:75:a3:4d:10:b2: 41:9c:ad:cf:6e:eb:48:49:6b:aa:36:e7:4a:1b:04: c8:00:24:9c:f9:01:83:eb:72:44:a0:be:10:4d:84: e4:13:43:bb:74:8b:09:f2:fb:27:4b:f7:b5:e6:99: 77:92:37:3c:85:06:34:c6:4f:15:26:b5:19:15:99: c8:e3:44:06:df:10:13:01:bf:ff:c1:f3:08:8d:50: 03:d4:de:4f:47:7c:d1:ee:52:30:d0:b1:65:72:c3: e1:0a:e8:22:1e:9d:6f:20:29:6e:cc:d4:24:b4:80: c9:18:5d:35:6f:6d:6c:f2:82:b9:93:d2:c4:c2:02: d9:9a:7f:a0:8f:c9:e3:b0:bf:5b:a1:af:22:e1:97: a6:4a:a5:15:98:26:a9:65:b4:f6:5e:3b:bc:18:64: 69:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:15:D2:CA:F3:EE:36:4B:51:47:C1:74:4A:72:32:F0:B8:F9:19:36 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/de533e09-cd05-4749-8ae2-bf8eb74e13cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:2840::/48 Signature Algorithm: sha256WithRSAEncryption 24:05:a9:c8:b1:4e:01:dc:af:d6:70:53:43:05:51:b9:ac:ba: 97:bf:be:1a:07:93:72:5b:95:1f:6e:61:01:2d:d7:7c:b6:e0: d8:62:46:82:4b:eb:b5:58:a1:a9:b8:bd:5a:0e:1a:dd:d4:0e: d7:3a:15:95:25:6e:b0:31:9c:6b:07:45:66:42:e6:11:4a:3b: 03:e7:6d:6a:09:47:a1:47:ec:88:50:7e:2e:38:e2:87:e8:dc: 4e:e6:97:4f:51:69:71:92:a7:b5:77:e9:1d:14:ba:69:20:41: 59:2c:01:be:1e:e1:85:b7:0c:95:9e:32:dd:a1:0f:ac:7a:9c: 83:07:ed:6d:df:b8:33:03:73:92:b5:eb:33:8d:93:a5:8b:07: 28:57:5c:27:2b:24:3e:69:8a:cf:40:41:30:58:55:9a:8d:65: 0a:71:70:e5:f5:15:75:cb:78:0c:f2:7b:58:b1:70:25:b5:e5: c7:5b:05:69:97:34:66:63:7b:55:57:22:a0:42:fa:63:8c:95: 4b:2d:d6:a2:3f:39:fd:18:07:4a:c0:4e:ac:f7:c5:bb:54:bc: c7:69:c1:66:64:50:7b:f5:fa:f5:47:08:1f:59:c6:8c:76:cb: 41:f7:54:c4:49:aa:43:76:a1:31:45:da:bb:e5:10:d6:d3:20: 5d:93:14:75 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUfBdunmetJE9bVbt7o4PZsRX+U9owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxMjE1MDExN1oX DTI1MDYxNjIzNTk1OVowejFJMEcGA1UEBRNAYWZmZmEzZjlkNGJkNmQ4NTg1NDNi N2ZlMmU5NDcwNDE0ZGY2NWNiY2ZhNjczZDE3ODNlNDExMTAxMDQwYTIzMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnewLqGoxF+3xaXo7iobhsZw/GZu0 MhXh94bt6zz4l0f+vsqLtK0jYDgl4ZJeRj2iNDvF3hgh5ZVIMwqxIBVcHhqGV72l wOER3CYPqo2eHosRM8Z6L+ejD6hiYtSDOKoqe+IodaNNELJBnK3PbutISWuqNudK GwTIACSc+QGD63JEoL4QTYTkE0O7dIsJ8vsnS/e15pl3kjc8hQY0xk8VJrUZFZnI 40QG3xATAb//wfMIjVAD1N5PR3zR7lIw0LFlcsPhCugiHp1vICluzNQktIDJGF01 b21s8oK5k9LEwgLZmn+gj8njsL9boa8i4ZemSqUVmCapZbT2Xju8GGRpjQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIgV0srz7jZLUUfBdEpyMvC4+Rk2MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RlNTMzZTA5LWNkMDUtNDc0OS04YWUyLWJmOGViNzRlMTNjZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAChAMA0GCSqGSIb3DQEBCwUAA4IBAQAkBanIsU4B3K/WcFND BVG5rLqXv74aB5NyW5UfbmEBLdd8tuDYYkaCS+u1WKGpuL1aDhrd1A7XOhWVJW6w MZxrB0VmQuYRSjsD521qCUehR+yIUH4uOOKH6NxO5pdPUWlxkqe1d+kdFLppIEFZ LAG+HuGFtwyVnjLdoQ+sepyDB+1t37gzA3OSteszjZOliwcoV1wnKyQ+aYrPQEEw WFWajWUKcXDl9RV1y3gM8ntYsXAlteXHWwVplzRmY3tVVyKgQvpjjJVLLdaiPzn9 GAdKwE6s98W7VLzHacFmZFB79fr1RwgfWcaMdstB91TESapDdqExRdq75RDW0yBd kxR1 -----END CERTIFICATE-----Generated at Tue Jun 3 23:15:35 2025 by rpki-client