$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f593232f-0244-4a16-ab0c-ae29ea60c65f.roa File: f593232f-0244-4a16-ab0c-ae29ea60c65f.roa (raw, json) Hash identifier: Kvre1tQpjhDLzfstTEjrcdNQTUTql7PEW6iPW1nUkDU= Subject key identifier: 2A:1F:B8:14:46:D6:D1:FE:C8:95:43:6E:4D:B7:E2:57:DE:3F:0E:08 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7FFFC8340D099129D682DCC67BA210708955DDDD Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f593232f-0244-4a16-ab0c-ae29ea60c65f.roa Signing time: Fri 16 May 2025 15:21:01 +0000 ROA not before: Fri 16 May 2025 15:21:01 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da68:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:ff:c8:34:0d:09:91:29:d6:82:dc:c6:7b:a2:10:70:89:55:dd:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 15:21:01 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=6cb054dd51495103ec8e2a55640aac12df714d5519ddafe6f0520582ed861f54, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d9:1e:3b:01:ec:27:bf:8b:63:fd:56:a0:11: 30:b4:7e:94:50:34:74:ec:ac:1f:59:83:97:2f:11: cf:ac:e4:c6:ee:50:30:f5:a3:2a:1c:a7:90:44:dc: 43:65:37:06:7b:11:1b:c8:aa:ab:d0:b6:cd:af:c5: 04:2e:2a:f0:b7:72:5c:b6:d9:3e:13:f8:e3:41:7b: af:8e:6a:9f:cd:16:45:a5:57:f9:d3:39:7b:b5:ca: a6:08:6a:73:64:71:18:22:ad:ce:15:8c:bc:6d:23: c9:5e:d4:8a:5b:c4:20:ba:c6:77:f0:66:eb:5d:c6: ad:e4:2b:e1:8e:8d:10:e4:7e:02:12:b2:a2:15:00: 98:16:5a:05:a0:04:33:7d:09:1b:20:45:b3:ac:aa: d6:8f:26:67:79:49:a9:bb:5e:3a:c2:9a:54:f9:f9: 40:16:76:e7:7f:6f:2d:f0:2b:7d:c0:8f:39:d1:ee: ac:1c:93:5d:eb:6b:28:15:ce:ae:e6:17:b5:df:d0: 18:1a:a1:1d:c7:dd:db:e8:ba:93:17:a9:7e:43:1f: 49:41:b3:bd:ea:38:7b:e1:16:b3:dc:57:0e:58:ee: 9f:ba:52:59:52:51:11:54:5d:1d:72:8a:70:01:a7: 66:5a:28:ef:98:47:33:75:31:bf:de:c8:2f:73:cc: de:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1F:B8:14:46:D6:D1:FE:C8:95:43:6E:4D:B7:E2:57:DE:3F:0E:08 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f593232f-0244-4a16-ab0c-ae29ea60c65f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da68:f000::/40 Signature Algorithm: sha256WithRSAEncryption c6:b6:e4:fd:1e:0f:b3:e4:8c:b2:aa:19:9f:27:c3:f7:3d:50: 06:cb:9e:41:d1:cc:f1:ac:10:06:30:d4:5c:72:62:1a:70:87: ce:77:60:11:d8:a9:bf:4c:1b:10:d2:96:cf:6e:90:96:9f:05: 40:cf:6c:3f:85:8a:52:5f:7c:b8:58:a7:b5:cb:e8:d9:18:a4: 5f:1d:f8:e9:90:76:87:c7:7e:39:0b:fe:17:ec:69:8f:76:31: e4:0c:d7:0f:73:da:9a:72:c9:2c:d7:14:3e:4e:09:f1:cf:46: 4c:45:e7:b4:11:12:56:a6:f4:b1:9f:57:7d:3e:78:cb:5d:10: 6a:b7:43:c3:d2:eb:c8:f8:73:c4:a2:87:bd:c5:d6:cf:04:ff: d5:69:ff:2d:01:57:74:1d:57:07:87:4f:66:fa:61:41:e4:15: ff:00:82:a6:1c:51:06:01:4b:e6:ec:ae:b5:24:29:75:b3:4b: 80:0d:b7:8e:b1:c5:58:49:f8:ac:20:fd:03:d5:62:cb:47:96: f8:6b:70:4a:90:bc:df:80:ad:5a:48:a2:e6:1d:63:da:5f:2a: e4:58:09:e8:a1:9a:16:70:47:e2:a6:ae:ed:13:43:b1:74:37: cb:63:e2:c9:c3:dc:58:d4:82:04:b1:a2:50:49:69:02:c5:4b: b3:c9:5b:50 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUf//INA0JkSnWgtzGe6IQcIlV3d0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjE1MjEwMVoX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNANmNiMDU0ZGQ1MTQ5NTEwM2VjOGUy YTU1NjQwYWFjMTJkZjcxNGQ1NTE5ZGRhZmU2ZjA1MjA1ODJlZDg2MWY1NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dkeOwHsJ7+LY/1WoBEwtH6UUDR0 7KwfWYOXLxHPrOTG7lAw9aMqHKeQRNxDZTcGexEbyKqr0LbNr8UELirwt3Jcttk+ E/jjQXuvjmqfzRZFpVf50zl7tcqmCGpzZHEYIq3OFYy8bSPJXtSKW8QgusZ38Gbr Xcat5Cvhjo0Q5H4CErKiFQCYFloFoAQzfQkbIEWzrKrWjyZneUmpu146wppU+flA Fnbnf28t8Ct9wI850e6sHJNd62soFc6u5he139AYGqEdx93b6LqTF6l+Qx9JQbO9 6jh74Raz3FcOWO6fulJZUlERVF0dcopwAadmWijvmEczdTG/3sgvc8zeNwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCofuBRG1tH+yJVDbk234lfePw4IMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y1OTMyMzJmLTAyNDQtNGExNi1hYjBjLWFlMjllYTYwYzY1Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaPAwDQYJKoZIhvcNAQELBQADggEBAMa25P0eD7PkjLKqGZ8n w/c9UAbLnkHRzPGsEAYw1FxyYhpwh853YBHYqb9MGxDSls9ukJafBUDPbD+FilJf fLhYp7XL6NkYpF8d+OmQdofHfjkL/hfsaY92MeQM1w9z2ppyySzXFD5OCfHPRkxF 57QRElam9LGfV30+eMtdEGq3Q8PS68j4c8Sih73F1s8E/9Vp/y0BV3QdVweHT2b6 YUHkFf8AgqYcUQYBS+bsrrUkKXWzS4ANt46xxVhJ+Kwg/QPVYstHlvhrcEqQvN+A rVpIouYdY9pfKuRYCeihmhZwR+Kmru0TQ7F0N8tj4snD3FjUggSxolBJaQLFS7PJ W1A= -----END CERTIFICATE-----Generated at Tue Jun 3 23:12:27 2025 by rpki-client