$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eac3eaf9-d837-4f7f-bdb2-0d2d31583fde.roa File: eac3eaf9-d837-4f7f-bdb2-0d2d31583fde.roa (raw, json) Hash identifier: yCTam2Syrl/mb87nVJti46U9IvH8tXF9k5ss+HrT3cs= Subject key identifier: EC:B9:46:EF:9E:00:D2:8D:7C:94:56:44:62:82:F9:A5:39:EF:CD:DD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 21AC0AF1E9AF1400DDB1384527B57BFE96A7041F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eac3eaf9-d837-4f7f-bdb2-0d2d31583fde.roa Signing time: Fri 23 May 2025 00:00:54 +0000 ROA not before: Fri 23 May 2025 00:00:54 +0000 ROA not after: Fri 27 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daef:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:ac:0a:f1:e9:af:14:00:dd:b1:38:45:27:b5:7b:fe:96:a7:04:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 23 00:00:54 2025 GMT Not After : Jun 27 23:59:59 2025 GMT Subject: serialNumber=1ad6ed819343697d34eb404d8e9553713fe01e6e140b2d0c07b273e5f41264e5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a4:25:25:6d:d7:60:4b:be:70:65:80:16:5e: fc:ca:6c:e6:7e:81:9b:5a:c6:96:a1:06:f1:cd:03: 5b:04:ab:60:7f:26:f0:eb:4a:d1:1a:94:13:47:4d: a0:31:dc:47:1a:1b:f2:e8:84:c5:25:c9:ed:df:49: 46:4a:4c:00:e2:e0:a2:c0:7f:79:ba:eb:4b:a9:2a: dc:d8:a2:e1:3d:54:4c:39:02:96:b9:df:1c:26:11: d6:a1:c1:2c:6e:db:93:e4:90:41:17:ce:b9:3a:fb: 2a:a9:d1:49:1d:fa:a5:13:4b:2d:69:12:bd:9a:46: 4f:6f:a2:ab:3d:d7:4b:15:48:49:e1:cf:3c:15:d2: d2:e4:fb:a5:9f:3c:91:da:2d:cd:01:38:aa:67:85: 73:ee:37:04:3a:4d:7f:93:cc:e3:0e:d8:84:aa:78: 2e:bd:76:55:af:a0:ec:28:f2:49:f8:3e:6c:af:d8: 9f:49:61:3e:d1:71:68:8c:2b:21:0a:4f:7f:66:fa: 03:b7:2b:ff:88:ce:04:6e:8c:46:9e:51:af:41:e8: 44:c6:f4:f3:e9:45:f9:16:93:d8:ac:9b:8e:8a:03: 7d:40:75:45:06:95:9a:b1:c1:4f:ba:97:df:ee:cf: b3:d8:c1:fb:a5:af:93:42:c1:10:0e:34:ea:3f:8d: 6b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B9:46:EF:9E:00:D2:8D:7C:94:56:44:62:82:F9:A5:39:EF:CD:DD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eac3eaf9-d837-4f7f-bdb2-0d2d31583fde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:8000::/40 Signature Algorithm: sha256WithRSAEncryption c3:9c:df:fd:2b:35:1b:50:f6:f7:b0:b7:9b:cb:50:29:d7:e0: bb:58:8a:e5:c3:1f:c3:d5:7e:b4:f8:f3:1c:64:8f:e4:7f:da: 64:0a:ba:42:af:2f:c4:77:9c:be:a9:59:48:2d:28:0f:ef:5a: 41:a4:b4:52:b0:17:00:95:68:63:50:23:31:f3:2c:cb:46:74: 3b:0b:19:df:f0:f2:10:b2:e4:9c:c3:fe:ea:d1:33:9f:17:1d: c6:c7:27:3b:af:6d:65:b2:41:9f:b7:10:88:4e:aa:f3:ff:8a: 39:74:2c:80:df:c4:22:34:80:06:5f:c0:3a:c7:d8:4e:6b:7f: 65:c6:ca:c4:ee:d0:23:2f:7e:ad:73:e8:fa:07:f1:e9:38:ea: 54:a1:6a:9a:c7:f1:e2:56:07:fc:77:c4:09:74:81:57:26:05: 82:85:00:41:ea:a1:ed:96:a9:ae:bb:87:7f:b6:85:a7:c6:44: d6:c2:7c:a0:05:3d:dc:13:25:16:e8:7d:ff:d4:de:17:66:ce: db:fe:3f:9f:66:34:6b:5f:88:30:f0:7a:26:bb:f9:34:1c:df: b9:34:a2:28:76:03:3f:d0:46:9f:ea:c4:20:39:3a:a3:46:6c: 81:6b:a3:1b:db:79:ed:25:62:de:23:44:ee:72:45:6e:db:87: 8f:2e:8d:83 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUIawK8emvFADdsThFJ7V7/panBB8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUyMzAwMDA1NFoX DTI1MDYyNzIzNTk1OVowejFJMEcGA1UEBRNAMWFkNmVkODE5MzQzNjk3ZDM0ZWI0 MDRkOGU5NTUzNzEzZmUwMWU2ZTE0MGIyZDBjMDdiMjczZTVmNDEyNjRlNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaQlJW3XYEu+cGWAFl78ymzmfoGb WsaWoQbxzQNbBKtgfybw60rRGpQTR02gMdxHGhvy6ITFJcnt30lGSkwA4uCiwH95 uutLqSrc2KLhPVRMOQKWud8cJhHWocEsbtuT5JBBF865OvsqqdFJHfqlE0staRK9 mkZPb6KrPddLFUhJ4c88FdLS5PulnzyR2i3NATiqZ4Vz7jcEOk1/k8zjDtiEqngu vXZVr6DsKPJJ+D5sr9ifSWE+0XFojCshCk9/ZvoDtyv/iM4EboxGnlGvQehExvTz 6UX5FpPYrJuOigN9QHVFBpWascFPupff7s+z2MH7pa+TQsEQDjTqP41r1QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOy5Ru+eANKNfJRWRGKC+aU5783dMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2VhYzNlYWY5LWQ4MzctNGY3Zi1iZGIyLTBkMmQzMTU4M2ZkZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba74AwDQYJKoZIhvcNAQELBQADggEBAMOc3/0rNRtQ9vewt5vL UCnX4LtYiuXDH8PVfrT48xxkj+R/2mQKukKvL8R3nL6pWUgtKA/vWkGktFKwFwCV aGNQIzHzLMtGdDsLGd/w8hCy5JzD/urRM58XHcbHJzuvbWWyQZ+3EIhOqvP/ijl0 LIDfxCI0gAZfwDrH2E5rf2XGysTu0CMvfq1z6PoH8ek46lShaprH8eJWB/x3xAl0 gVcmBYKFAEHqoe2Wqa67h3+2hafGRNbCfKAFPdwTJRboff/U3hdmztv+P59mNGtf iDDweia7+TQc37k0oih2Az/QRp/qxCA5OqNGbIFroxvbee0lYt4jRO5yRW7bh48u jYM= -----END CERTIFICATE-----Generated at Tue Jun 3 23:19:06 2025 by rpki-client