$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f71bafd4-e9ed-4715-b38b-a57003e06da4.roa File: f71bafd4-e9ed-4715-b38b-a57003e06da4.roa (raw, json) Hash identifier: 3FYS7jvXnZLpY50BjjI5XR/UgMFH3aTc0xmxW1ACUOA= Subject key identifier: BC:F7:E8:A8:94:90:2D:55:31:5F:05:75:55:E5:F5:1C:CF:7F:57:70 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7178486AD1B7DBBC25F5C9C881EEA1916795EA0F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f71bafd4-e9ed-4715-b38b-a57003e06da4.roa Signing time: Fri 16 May 2025 00:41:33 +0000 ROA not before: Fri 16 May 2025 00:41:33 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:78:48:6a:d1:b7:db:bc:25:f5:c9:c8:81:ee:a1:91:67:95:ea:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 00:41:33 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=ca44fa4fc98e4713070756d123f558bc04b7e64ac542f9d1b2a863d395524198, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3a:2d:f6:27:ee:92:cf:20:92:80:c8:47:10: 02:20:93:ce:f6:cd:da:ab:9c:24:97:c3:3e:15:20: 78:53:52:e4:e8:4f:40:ee:c2:92:0e:9a:f2:4d:86: cd:40:3c:78:58:e0:ed:ee:60:20:78:60:ff:3c:46: 21:9b:d0:b5:3f:9b:70:60:c8:95:65:da:a6:bd:58: af:ae:c6:ef:a9:a7:fe:a8:d7:7e:cf:7a:a4:01:44: 58:51:e3:af:0c:e3:0f:9e:8f:22:0c:0a:41:9e:10: 78:15:8b:a9:fc:27:6b:d6:17:dc:6a:38:27:ac:21: 7a:e7:67:7e:8f:4d:8f:90:44:6a:69:1d:bb:e4:37: 8a:1c:d0:be:c9:61:25:e8:11:bb:c0:87:1c:62:de: 34:fc:33:3a:d1:e8:5e:bc:14:46:ef:85:a0:42:0e: 52:c1:68:a7:f9:4e:7a:1a:1e:61:4c:3e:a2:e5:40: 55:f1:a8:45:79:3e:f5:a7:22:cd:5c:7f:d7:6a:77: fc:8e:66:3c:16:0a:1a:e5:44:34:58:c9:dc:fc:f0: d7:18:35:1d:36:fd:d2:a2:2f:7f:a9:d8:fe:b8:65: ef:2b:b8:62:a8:f0:bf:12:6d:83:7e:25:bf:ee:b6: 56:ac:a2:84:86:c6:c3:6e:fd:30:e6:22:17:fa:b8: 83:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F7:E8:A8:94:90:2D:55:31:5F:05:75:55:E5:F5:1C:CF:7F:57:70 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f71bafd4-e9ed-4715-b38b-a57003e06da4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:2000::/40 Signature Algorithm: sha256WithRSAEncryption be:7c:04:77:84:84:45:7f:2f:62:0b:ee:17:f6:a7:e1:ea:75: 32:39:de:28:4e:df:a1:00:25:9b:80:07:6e:47:68:7c:b4:34: f1:48:5d:29:11:52:2d:89:46:9d:dd:85:05:38:44:1c:b9:6c: a3:91:21:a3:0e:5d:1e:b5:d1:3f:f1:f9:63:94:43:af:46:5d: 9b:9f:bb:69:9d:11:98:6b:48:95:30:da:03:9c:21:a7:dd:55: a6:33:2b:fe:62:6d:02:21:be:62:00:97:94:2f:01:64:b9:45: 03:f4:67:bb:62:ac:0b:80:66:8b:f0:6c:61:b3:0b:92:ee:53: 05:aa:0f:98:23:04:b3:e9:a2:db:4c:f2:94:ae:9b:5a:c1:9f: dc:9a:b0:30:37:81:a7:84:15:e5:ce:5f:c2:b8:bf:05:55:9a: 04:f1:32:d1:a2:29:49:5c:42:8b:55:c9:f7:68:30:42:4d:50: df:fc:a4:1e:0f:3b:ea:22:d2:0e:da:43:57:ca:36:2f:9b:1a: 48:da:69:db:bc:56:5b:b5:71:b1:1d:39:53:4b:9b:bb:28:ad: 90:34:92:3a:26:9e:71:c6:c2:05:f9:0c:3d:01:a4:73:0b:d3: bd:93:8e:9a:aa:3c:13:de:53:de:c3:6d:5f:63:06:2f:ea:11: e4:93:1e:65 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUcXhIatG327wl9cnIge6hkWeV6g8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjAwNDEzM1oX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAY2E0NGZhNGZjOThlNDcxMzA3MDc1 NmQxMjNmNTU4YmMwNGI3ZTY0YWM1NDJmOWQxYjJhODYzZDM5NTUyNDE5ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzot9ifuks8gkoDIRxACIJPO9s3a q5wkl8M+FSB4U1Lk6E9A7sKSDpryTYbNQDx4WODt7mAgeGD/PEYhm9C1P5twYMiV ZdqmvVivrsbvqaf+qNd+z3qkAURYUeOvDOMPno8iDApBnhB4FYup/Cdr1hfcajgn rCF652d+j02PkERqaR275DeKHNC+yWEl6BG7wIccYt40/DM60ehevBRG74WgQg5S wWin+U56Gh5hTD6i5UBV8ahFeT71pyLNXH/Xanf8jmY8Fgoa5UQ0WMnc/PDXGDUd Nv3Soi9/qdj+uGXvK7hiqPC/Em2DfiW/7rZWrKKEhsbDbv0w5iIX+riDowIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLz36KiUkC1VMV8FdVXl9RzPf1dwMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y3MWJhZmQ0LWU5ZWQtNDcxNS1iMzhiLWE1NzAwM2UwNmRhNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaSAwDQYJKoZIhvcNAQELBQADggEBAL58BHeEhEV/L2IL7hf2 p+HqdTI53ihO36EAJZuAB25HaHy0NPFIXSkRUi2JRp3dhQU4RBy5bKORIaMOXR61 0T/x+WOUQ69GXZufu2mdEZhrSJUw2gOcIafdVaYzK/5ibQIhvmIAl5QvAWS5RQP0 Z7tirAuAZovwbGGzC5LuUwWqD5gjBLPpottM8pSum1rBn9yasDA3gaeEFeXOX8K4 vwVVmgTxMtGiKUlcQotVyfdoMEJNUN/8pB4PO+oi0g7aQ1fKNi+bGkjaadu8Vlu1 cbEdOVNLm7sorZA0kjomnnHGwgX5DD0BpHML072TjpqqPBPeU97DbV9jBi/qEeST HmU= -----END CERTIFICATE-----Generated at Tue Jun 3 23:12:19 2025 by rpki-client