$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e5b22d77-3182-4224-8e47-32ca7c3d3373.roa File: e5b22d77-3182-4224-8e47-32ca7c3d3373.roa (raw, json) Hash identifier: DM3pHJx9NcgbpX4LwlnlJ49Pi3jc7sNWdojhRsW0PmE= Subject key identifier: F6:87:58:65:09:A6:8B:1C:87:7F:E4:99:F5:C2:41:B2:84:9B:59:33 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 54FB43286DEF2E94C4DF75B11D919317C3346AF0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e5b22d77-3182-4224-8e47-32ca7c3d3373.roa Signing time: Wed 14 May 2025 00:21:41 +0000 ROA not before: Wed 14 May 2025 00:21:41 +0000 ROA not after: Wed 18 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:f0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:fb:43:28:6d:ef:2e:94:c4:df:75:b1:1d:91:93:17:c3:34:6a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 14 00:21:41 2025 GMT Not After : Jun 18 23:59:59 2025 GMT Subject: serialNumber=e6eb4276ea77f32d4fc28c59ca9b783853637b05e895f4daa0dcb5773efb468f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:29:1d:67:0e:11:74:dd:38:52:6b:84:62:86: bf:6b:8a:5d:db:be:5f:f7:43:e8:26:9b:2d:44:48: 02:1a:86:3d:79:70:e9:53:64:b9:53:4c:f4:a4:c3: 72:9b:71:02:0c:b2:49:ec:db:4f:04:3a:29:c9:03: 39:5d:57:07:d6:a3:cf:30:c7:11:34:c4:e2:06:5f: 41:8f:82:6b:03:1e:99:0a:42:88:d5:94:91:0c:e6: 99:a6:48:c1:ed:f3:90:36:2c:25:c1:6a:ca:fb:24: 3a:8f:ca:e6:dc:e1:87:9c:26:35:f4:6d:c0:c6:fd: fd:d4:08:98:e6:18:1d:46:9a:16:45:10:ed:79:89: 5c:e0:0c:26:7b:c0:44:08:9a:1e:e0:c1:8e:db:83: 34:98:a7:63:c2:18:0f:30:b7:1d:9e:e7:a9:62:e2: 86:b8:8b:4f:28:d2:45:7e:1f:81:39:5b:cc:ed:12: c9:18:3a:3e:ca:c6:c1:aa:f2:e2:c5:de:13:3a:13: 88:34:98:aa:ff:83:62:6c:89:92:8f:5b:b6:e0:1c: 24:75:1f:c6:06:a6:c9:1d:8c:bb:16:18:a2:38:0a: 41:e1:22:1c:28:22:4c:84:ca:0e:e0:55:bf:4e:e9: 99:6c:f6:d4:d7:e6:c7:e2:6e:71:dd:5b:2a:e3:9e: cc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:87:58:65:09:A6:8B:1C:87:7F:E4:99:F5:C2:41:B2:84:9B:59:33 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e5b22d77-3182-4224-8e47-32ca7c3d3373.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:f0c0::/48 Signature Algorithm: sha256WithRSAEncryption 81:0c:48:93:79:56:71:e2:6c:3d:bd:0b:93:ac:ab:16:05:ab: 08:a1:61:9a:32:79:17:8c:32:c0:96:d2:72:6a:fb:64:d7:6d: 96:19:8c:8a:01:80:83:7a:8f:7a:b4:64:fd:70:4b:2d:30:75: 2f:df:b4:20:8c:ec:e9:e6:0f:3a:49:a5:b6:6c:de:5c:8a:09: b8:2d:b3:d4:bf:75:bb:29:6a:1a:8b:9f:d3:9d:36:7e:52:21: 2c:ca:e5:fc:99:86:e7:87:7e:c9:e4:bc:8f:8c:01:9d:82:db: 91:4f:65:17:c1:ff:9e:9b:1d:ae:d3:39:a1:82:5e:4b:e2:a4: 41:d0:6f:59:32:8f:ea:d7:a8:1d:3c:bb:f2:d8:46:5a:d7:8f: 53:e0:07:31:0f:2b:54:f6:89:f6:ce:18:cd:ce:bf:8d:9d:59: fa:14:25:82:dc:01:ad:1a:07:66:2d:e4:f2:0a:b8:bc:8b:83: 15:0b:49:1a:40:e6:9b:18:36:15:d0:ff:7e:11:42:61:d0:2d: 0e:ae:8c:5e:dc:f2:2b:a3:f3:05:63:e5:06:ee:ac:79:17:9c: 17:15:57:fc:f5:1a:89:51:3d:2c:73:a3:49:35:56:f4:fc:86: ff:83:dd:fc:2e:9a:57:62:b1:c2:02:9f:dc:f6:7b:3b:bb:63: a6:bd:14:4a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUVPtDKG3vLpTE33WxHZGTF8M0avAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNDAwMjE0MVoX DTI1MDYxODIzNTk1OVowejFJMEcGA1UEBRNAZTZlYjQyNzZlYTc3ZjMyZDRmYzI4 YzU5Y2E5Yjc4Mzg1MzYzN2IwNWU4OTVmNGRhYTBkY2I1NzczZWZiNDY4ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArykdZw4RdN04UmuEYoa/a4pd275f 90PoJpstREgCGoY9eXDpU2S5U0z0pMNym3ECDLJJ7NtPBDopyQM5XVcH1qPPMMcR NMTiBl9Bj4JrAx6ZCkKI1ZSRDOaZpkjB7fOQNiwlwWrK+yQ6j8rm3OGHnCY19G3A xv391AiY5hgdRpoWRRDteYlc4Awme8BECJoe4MGO24M0mKdjwhgPMLcdnuepYuKG uItPKNJFfh+BOVvM7RLJGDo+ysbBqvLixd4TOhOINJiq/4NibImSj1u24BwkdR/G BqbJHYy7FhiiOApB4SIcKCJMhMoO4FW/TumZbPbU1+bH4m5x3Vsq457MPwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPaHWGUJposch3/kmfXCQbKEm1kzMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2U1YjIyZDc3LTMxODItNDIyNC04ZTQ3LTMyY2E3YzNkMzM3My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8vDAMA0GCSqGSIb3DQEBCwUAA4IBAQCBDEiTeVZx4mw9vQuT rKsWBasIoWGaMnkXjDLAltJyavtk122WGYyKAYCDeo96tGT9cEstMHUv37QgjOzp 5g86SaW2bN5cigm4LbPUv3W7KWoai5/TnTZ+UiEsyuX8mYbnh37J5LyPjAGdgtuR T2UXwf+emx2u0zmhgl5L4qRB0G9ZMo/q16gdPLvy2EZa149T4AcxDytU9on2zhjN zr+NnVn6FCWC3AGtGgdmLeTyCri8i4MVC0kaQOabGDYV0P9+EUJh0C0Oroxe3PIr o/MFY+UG7qx5F5wXFVf89RqJUT0sc6NJNVb0/Ib/g938LppXYrHCAp/c9ns7u2Om vRRK -----END CERTIFICATE-----Generated at Tue Jun 3 23:15:10 2025 by rpki-client