$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa File: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (raw, json) Hash identifier: nD1AAZ7CpIeTYiR8Iab9kZdHvayajnVG5pU6iAY8ZLg= Subject key identifier: 73:67:D7:F7:F0:B7:93:0F:CA:35:57:4A:6F:11:31:88:57:A2:90:E9 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 40F45EF253B495E162C5B445D285C67AEE73283C Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa Signing time: Mon 26 May 2025 15:00:05 +0000 ROA not before: Mon 26 May 2025 15:00:05 +0000 ROA not after: Mon 30 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2403:b300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:f4:5e:f2:53:b4:95:e1:62:c5:b4:45:d2:85:c6:7a:ee:73:28:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: May 26 15:00:05 2025 GMT Not After : Jun 30 23:59:59 2025 GMT Subject: serialNumber=6b49c6c8e06fed90fdd02732271eafdaa7264df233bed4a57d5840713c070861, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d1:0b:b3:8d:bd:4b:3f:24:a9:44:87:b0:3d: a5:8c:18:8c:73:87:29:e5:89:d4:96:5c:5d:8f:5a: 81:2c:e7:61:e4:c7:38:89:fd:25:3d:db:73:88:e9: 21:d4:bd:8c:4b:1d:51:80:e5:3f:b6:d8:79:41:29: d6:ba:ea:0d:0d:5a:11:83:be:35:70:29:f8:bd:1b: 28:67:fe:28:64:7c:f0:21:5d:f2:34:19:2c:18:68: 12:a3:40:15:ee:16:cb:3b:7e:f0:7f:9f:d0:96:14: f7:40:8f:e3:b0:42:31:a6:28:86:a1:35:e0:cb:37: fc:a2:ce:b8:ba:71:2d:5d:30:4e:39:61:d9:4b:7e: d7:08:e5:60:bf:76:7e:1a:e8:8e:51:10:17:ce:00: 6e:27:9b:da:83:9a:7e:29:cd:36:23:fb:fa:a3:b9: af:32:b0:9a:1f:89:7b:e4:87:25:55:8d:72:6f:be: 0d:18:b0:40:1d:e0:8f:63:a4:e3:9f:59:33:cb:9c: ad:87:5c:bb:4a:24:eb:39:b8:7a:89:4e:1b:17:96: 80:47:b4:45:af:cc:65:4d:c9:84:63:ee:be:20:36: 11:93:92:28:95:1b:24:7f:ff:7f:6d:10:fd:ec:42: f5:67:3e:b5:16:15:e4:77:39:f1:66:bd:14:df:dc: eb:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:67:D7:F7:F0:B7:93:0F:CA:35:57:4A:6F:11:31:88:57:A2:90:E9 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b300::/32 Signature Algorithm: sha256WithRSAEncryption 8b:d0:f8:0c:7b:4f:ad:de:96:bb:7b:27:1c:dc:0c:de:08:f4: ee:37:49:cf:0d:26:44:af:fb:6e:e9:c8:0a:4c:ca:2e:cd:aa: c0:ab:ed:3c:a8:4c:66:40:1c:7b:70:5e:3a:b3:00:c4:6b:66: e3:34:32:c1:45:48:4b:7a:1e:5a:2c:ab:77:32:fa:7f:d5:21: a7:05:5c:26:ae:c3:9b:f1:7e:c2:64:9e:b1:3b:ff:18:98:12: 37:d5:18:ca:c5:0b:ae:45:15:74:7a:95:b2:db:3e:28:49:f8: 9b:a9:e9:2f:c3:49:4b:20:2a:c5:b1:48:3c:1d:81:19:a4:b9: 00:86:07:8d:b5:6a:29:62:bd:09:c3:fe:01:c9:8d:96:d3:70: ed:77:51:1a:cd:47:43:1b:3f:c3:be:8a:62:9d:f7:fb:87:5e: 63:b8:bf:f6:c5:ae:9b:1d:da:3d:7c:87:2a:1f:54:60:aa:74: da:5c:15:b6:70:22:3a:a5:ca:07:c8:5a:d4:67:8e:87:a6:1a: d7:1f:bb:58:e8:b7:b5:5c:8b:e4:aa:e1:42:84:5c:f9:59:40: fd:59:fe:2a:e1:7b:38:68:43:60:39:45:99:72:de:ce:3b:ab: ff:11:40:89:04:84:b9:98:48:e2:32:d7:c5:ea:49:4c:de:ea: 9f:ac:3e:08 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUQPRe8lO0leFixbRF0oXGeu5zKDwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI1MDUyNjE1MDAwNVoX DTI1MDYzMDIzNTk1OVowejFJMEcGA1UEBRNANmI0OWM2YzhlMDZmZWQ5MGZkZDAy NzMyMjcxZWFmZGFhNzI2NGRmMjMzYmVkNGE1N2Q1ODQwNzEzYzA3MDg2MTEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9ELs429Sz8kqUSHsD2ljBiMc4cp 5YnUllxdj1qBLOdh5Mc4if0lPdtziOkh1L2MSx1RgOU/tth5QSnWuuoNDVoRg741 cCn4vRsoZ/4oZHzwIV3yNBksGGgSo0AV7hbLO37wf5/QlhT3QI/jsEIxpiiGoTXg yzf8os64unEtXTBOOWHZS37XCOVgv3Z+GuiOURAXzgBuJ5vag5p+Kc02I/v6o7mv MrCaH4l75IclVY1yb74NGLBAHeCPY6Tjn1kzy5yth1y7SiTrObh6iU4bF5aAR7RF r8xlTcmEY+6+IDYRk5IolRskf/9/bRD97EL1Zz61FhXkdznxZr0U39zrmwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFHNn1/fwt5MPyjVXSm8RMYhXopDpMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvNzA4YWFmYWYtMDBiNC00ODViLTg1NGMtMGIzMmNhMzBmNTdi L2NjMmY3MDkzLTIxYTYtNDAwZi05ZGIxLTkzYzJmZTAyYmMxYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMy Y2EzMGY1N2IvMTJlNTkwMDEtMzVhYy00YWJmLTg1OGYtMzdiOTU1YTI0YjNmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAOzADANBgkqhkiG9w0BAQsFAAOCAQEAi9D4DHtPrd6Wu3snHNwM 3gj07jdJzw0mRK/7bunICkzKLs2qwKvtPKhMZkAce3BeOrMAxGtm4zQywUVIS3oe WiyrdzL6f9UhpwVcJq7Dm/F+wmSesTv/GJgSN9UYysULrkUVdHqVsts+KEn4m6np L8NJSyAqxbFIPB2BGaS5AIYHjbVqKWK9CcP+AcmNltNw7XdRGs1HQxs/w76KYp33 +4deY7i/9sWumx3aPXyHKh9UYKp02lwVtnAiOqXKB8ha1GeOh6Ya1x+7WOi3tVyL 5KrhQoRc+VlA/Vn+KuF7OGhDYDlFmXLezjur/xFAiQSEuZhI4jLXxepJTN7qn6w+ CA== -----END CERTIFICATE-----Generated at Tue Jun 3 23:14:20 2025 by rpki-client