$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/4bbd1bdf-866e-4b25-9ac6-e929a05080b9.roa File: 4bbd1bdf-866e-4b25-9ac6-e929a05080b9.roa (raw, json) Hash identifier: GeJMuNWf6+w6005LDXjOL7bQdyji14Srwqmc9KESlYo= Subject key identifier: 8D:5D:AD:63:6F:E4:EE:A4:BA:15:49:10:09:72:80:36:33:AC:67:BD Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 72B3993CA7E60C9B6F6D6A112F41E39193633DF6 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/4bbd1bdf-866e-4b25-9ac6-e929a05080b9.roa Signing time: Fri 16 May 2025 16:00:05 +0000 ROA not before: Fri 16 May 2025 16:00:05 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2403:b300:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:b3:99:3c:a7:e6:0c:9b:6f:6d:6a:11:2f:41:e3:91:93:63:3d:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: May 16 16:00:05 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=b29cfb57c70d105cc6fd72ad559d7d60a3b797cdf59440181a61200fe6a800cd, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:41:b2:ae:f1:8c:fd:83:7d:58:7c:a5:61:7d: 4a:d0:05:b2:60:68:a2:38:5c:34:2d:5b:88:12:37: 2e:9e:02:8a:12:f7:68:5b:28:a8:4f:fc:a0:06:54: 27:87:c0:f1:4d:1c:20:7e:80:9f:8c:d6:fa:e5:58: bf:b5:ec:0f:8b:4c:cc:a4:da:f9:3f:ac:4a:33:5c: ee:56:64:f8:b1:b6:0e:68:bb:8b:b7:58:89:4e:8b: 1c:5d:a1:37:13:ae:b0:58:fb:b6:17:ed:a4:0d:af: 82:a7:da:44:a0:ee:89:c7:2d:a6:c4:b0:42:8b:01: fd:75:b2:c9:f6:cd:70:f0:c7:66:37:d8:d6:a0:3f: 06:c1:86:01:82:78:e5:7b:88:9f:f5:7c:d1:3c:73: 0e:7d:a2:96:38:1d:63:35:60:3c:78:60:92:42:b0: 80:26:e1:28:dd:fb:dc:df:87:f1:90:e5:da:fd:5e: 76:93:d1:73:6a:ce:f1:2f:dd:90:97:9d:1b:2b:ac: a1:c9:60:65:20:f9:cf:11:5b:b4:41:00:93:78:45: 77:c4:66:39:a9:79:54:cc:c3:8c:9a:0f:59:a6:f2: 9f:64:b2:ae:f1:f7:18:3c:40:3d:e5:79:ff:6f:94: 80:6d:4e:7d:62:0f:4d:dc:fa:7d:01:77:0e:3f:16: b1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:5D:AD:63:6F:E4:EE:A4:BA:15:49:10:09:72:80:36:33:AC:67:BD X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/4bbd1bdf-866e-4b25-9ac6-e929a05080b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b300:1000::/48 Signature Algorithm: sha256WithRSAEncryption 07:55:c3:12:e4:d4:d3:4e:45:45:9d:02:91:46:40:d0:f0:05: 54:fb:8c:8b:db:25:94:31:b3:67:ac:7d:d8:12:89:6a:b7:fe: 74:db:db:78:9d:a6:65:36:2e:e5:ee:3c:7d:1b:6c:42:6a:15: 99:46:49:01:5b:f7:1d:9f:9c:38:72:12:ee:3c:d5:21:46:13: a5:39:28:ea:09:9f:a2:d0:e8:42:be:cb:7f:33:8c:b1:68:fa: 10:8d:73:a1:00:52:17:b0:df:38:10:4b:2e:cf:f0:49:39:e5: d4:97:21:ab:d8:19:5e:e1:4c:6d:8d:29:3d:58:f3:ae:44:16: 24:d5:9f:6d:17:44:cd:de:2f:8e:0a:a1:ae:e6:1a:78:42:58: a6:47:dc:aa:3e:d7:0f:84:90:48:45:5d:db:77:13:0a:cf:a4: 85:55:86:1c:35:fa:5c:ab:4e:29:54:34:c3:8f:c2:89:cb:a2: fe:19:69:8c:2b:eb:cf:62:29:8d:8c:09:23:58:87:e4:cd:eb: bc:06:1f:51:a0:3e:7c:fa:27:25:f6:e9:11:be:eb:c2:1d:c4: 7a:ad:3c:e4:3f:35:a2:86:1b:a0:89:35:5f:92:93:9f:30:a7: 83:79:81:38:7f:d2:c1:f1:a9:db:bb:fc:34:4d:1e:29:b3:46: b7:71:42:54 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUcrOZPKfmDJtvbWoRL0HjkZNjPfYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI1MDUxNjE2MDAwNVoX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAYjI5Y2ZiNTdjNzBkMTA1Y2M2ZmQ3 MmFkNTU5ZDdkNjBhM2I3OTdjZGY1OTQ0MDE4MWE2MTIwMGZlNmE4MDBjZDEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0GyrvGM/YN9WHylYX1K0AWyYGii OFw0LVuIEjcungKKEvdoWyioT/ygBlQnh8DxTRwgfoCfjNb65Vi/tewPi0zMpNr5 P6xKM1zuVmT4sbYOaLuLt1iJToscXaE3E66wWPu2F+2kDa+Cp9pEoO6Jxy2mxLBC iwH9dbLJ9s1w8MdmN9jWoD8GwYYBgnjle4if9XzRPHMOfaKWOB1jNWA8eGCSQrCA JuEo3fvc34fxkOXa/V52k9Fzas7xL92Ql50bK6yhyWBlIPnPEVu0QQCTeEV3xGY5 qXlUzMOMmg9ZpvKfZLKu8fcYPEA95Xn/b5SAbU59Yg9N3Pp9AXcOPxaxvQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFI1drWNv5O6kuhVJEAlygDYzrGe9MB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvNzA4YWFmYWYtMDBiNC00ODViLTg1NGMtMGIzMmNhMzBmNTdi LzRiYmQxYmRmLTg2NmUtNGIyNS05YWM2LWU5MjlhMDUwODBiOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMy Y2EzMGY1N2IvMTJlNTkwMDEtMzVhYy00YWJmLTg1OGYtMzdiOTU1YTI0YjNmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAOzABAAMA0GCSqGSIb3DQEBCwUAA4IBAQAHVcMS5NTTTkVFnQKR RkDQ8AVU+4yL2yWUMbNnrH3YEolqt/5029t4naZlNi7l7jx9G2xCahWZRkkBW/cd n5w4chLuPNUhRhOlOSjqCZ+i0OhCvst/M4yxaPoQjXOhAFIXsN84EEsuz/BJOeXU lyGr2Ble4UxtjSk9WPOuRBYk1Z9tF0TN3i+OCqGu5hp4QlimR9yqPtcPhJBIRV3b dxMKz6SFVYYcNfpcq04pVDTDj8KJy6L+GWmMK+vPYimNjAkjWIfkzeu8Bh9RoD58 +icl9ukRvuvCHcR6rTzkPzWihhugiTVfkpOfMKeDeYE4f9LB8anbu/w0TR4ps0a3 cUJU -----END CERTIFICATE-----Generated at Tue Jun 3 23:19:20 2025 by rpki-client