$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/debc584f-82ae-4052-973f-96282869d7c9.roa File: debc584f-82ae-4052-973f-96282869d7c9.roa (raw, json) Hash identifier: eKFxxb0R4uPQ7XtPn0PfHmoBZwAVc2Gtl0C6nOIv02U= Subject key identifier: A1:96:16:20:0C:D9:22:FA:BC:EB:D1:1C:E6:B8:82:C5:26:7D:D0:E2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 62AEEE3DA430620B128A7474081A19B7BA93E39B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/debc584f-82ae-4052-973f-96282869d7c9.roa Signing time: Wed 14 May 2025 00:11:12 +0000 ROA not before: Wed 14 May 2025 00:11:12 +0000 ROA not after: Wed 18 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:20c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:ae:ee:3d:a4:30:62:0b:12:8a:74:74:08:1a:19:b7:ba:93:e3:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 14 00:11:12 2025 GMT Not After : Jun 18 23:59:59 2025 GMT Subject: serialNumber=4e59e5052fd741561ae1bee8cc4ae43171a2706fe1dcfa80e1727310dfd6d1a2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b2:0f:d0:96:fe:80:2b:d2:8a:1b:f4:a7:9e: ae:19:c6:c3:be:21:91:82:6b:cf:f1:0a:90:48:3e: 02:15:43:f4:1a:85:d5:67:e5:94:8a:a9:0e:11:d0: 96:00:be:1e:09:dd:75:b4:40:f6:f2:da:f6:07:c9: 4f:3c:f5:e4:2d:d8:5c:ca:f0:2a:8b:a5:61:a5:e1: f8:da:0e:22:9b:82:25:8b:08:7c:e5:ac:8a:64:5d: db:cb:39:a6:d0:f2:13:5a:7d:61:61:72:e5:80:10: fd:13:c2:14:df:fd:66:61:8a:cc:40:a5:26:10:e7: d3:18:c8:eb:14:a8:1b:01:3c:f4:22:e8:3e:8c:07: 81:58:f1:bb:ed:37:d4:27:5b:ef:3b:5d:bb:9e:71: aa:d2:ee:ba:0a:1c:89:d3:d4:c8:68:65:41:51:27: c3:8a:9d:3f:50:31:41:a3:2d:e9:0f:b6:d5:0f:61: 45:56:b4:0e:da:e0:80:b4:40:cb:e1:73:7d:fd:46: 0f:d3:0d:9f:8b:2c:07:c9:66:dd:36:d5:84:42:8a: 14:35:a5:a0:4e:fc:d5:c5:18:9b:33:41:ab:14:87: 73:ae:ea:a3:b9:39:2d:05:00:02:5a:75:33:ca:ef: 85:80:6b:2e:a8:6a:15:91:28:71:44:c7:88:4d:b8: c0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:96:16:20:0C:D9:22:FA:BC:EB:D1:1C:E6:B8:82:C5:26:7D:D0:E2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/debc584f-82ae-4052-973f-96282869d7c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:20c0::/48 Signature Algorithm: sha256WithRSAEncryption 6e:f2:c8:8b:53:f8:6e:53:4d:53:e1:41:7b:3d:49:60:b6:e5: 98:11:c8:f2:f1:11:3f:41:6d:57:2d:a2:51:7a:e1:d3:b8:b7: 1f:6e:47:d5:37:fa:85:e0:a6:4a:b8:cd:50:62:27:34:61:62: 52:9b:89:0c:98:f6:99:12:44:78:e7:10:77:cd:72:5d:47:2a: c0:67:d1:32:20:67:e3:0d:fc:b1:8c:d8:36:82:8d:16:53:f7: 77:49:29:4a:e3:0f:b1:ed:1a:83:02:86:97:38:53:3f:ea:75: a0:7f:19:fc:b0:75:69:1c:4e:50:58:84:9c:63:79:f0:08:ee: 1e:00:7f:32:45:92:e2:4b:1d:77:5f:9d:b3:f1:35:6d:e5:d3: 11:b8:69:b6:38:a3:2f:0c:ae:46:17:3a:ca:f8:54:43:44:1b: 30:bb:26:b7:07:28:42:65:32:f8:f1:26:31:39:ec:20:b5:8f: 67:02:c0:71:75:95:4f:f7:ea:13:d4:25:c2:56:d3:a5:67:e4: 5f:40:08:94:4d:a9:53:0e:3a:21:3a:00:e0:cf:32:95:0b:72: fc:0a:15:a3:90:86:64:e7:e3:0f:a1:e7:db:c3:69:f4:3d:03: 91:ac:fd:fd:3e:30:0d:5c:ec:b4:9a:e5:c8:9b:d5:80:9e:91: 51:8b:9d:e7 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUYq7uPaQwYgsSinR0CBoZt7qT45swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNDAwMTExMloX DTI1MDYxODIzNTk1OVowejFJMEcGA1UEBRNANGU1OWU1MDUyZmQ3NDE1NjFhZTFi ZWU4Y2M0YWU0MzE3MWEyNzA2ZmUxZGNmYTgwZTE3MjczMTBkZmQ2ZDFhMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLIP0Jb+gCvSihv0p56uGcbDviGR gmvP8QqQSD4CFUP0GoXVZ+WUiqkOEdCWAL4eCd11tED28tr2B8lPPPXkLdhcyvAq i6VhpeH42g4im4Iliwh85ayKZF3byzmm0PITWn1hYXLlgBD9E8IU3/1mYYrMQKUm EOfTGMjrFKgbATz0Iug+jAeBWPG77TfUJ1vvO127nnGq0u66ChyJ09TIaGVBUSfD ip0/UDFBoy3pD7bVD2FFVrQO2uCAtEDL4XN9/UYP0w2fiywHyWbdNtWEQooUNaWg TvzVxRibM0GrFIdzruqjuTktBQACWnUzyu+FgGsuqGoVkShxRMeITbjALQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKGWFiAM2SL6vOvRHOa4gsUmfdDiMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RlYmM1ODRmLTgyYWUtNDA1Mi05NzNmLTk2MjgyODY5ZDdjOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYSDAMA0GCSqGSIb3DQEBCwUAA4IBAQBu8siLU/huU01T4UF7 PUlgtuWYEcjy8RE/QW1XLaJReuHTuLcfbkfVN/qF4KZKuM1QYic0YWJSm4kMmPaZ EkR45xB3zXJdRyrAZ9EyIGfjDfyxjNg2go0WU/d3SSlK4w+x7RqDAoaXOFM/6nWg fxn8sHVpHE5QWIScY3nwCO4eAH8yRZLiSx13X52z8TVt5dMRuGm2OKMvDK5GFzrK +FRDRBswuya3ByhCZTL48SYxOewgtY9nAsBxdZVP9+oT1CXCVtOlZ+RfQAiUTalT DjohOgDgzzKVC3L8ChWjkIZk5+MPoefbw2n0PQORrP39PjANXOy0muXIm9WAnpFR i53n -----END CERTIFICATE-----Generated at Tue Jun 3 23:38:26 2025 by rpki-client