$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2e254d4e-c057-4a72-b7c3-e714097585e7.roa File: 2e254d4e-c057-4a72-b7c3-e714097585e7.roa (raw, json) Hash identifier: hkT/qGT48vqA84TlKX1P0qiGiM2pEQJd9z3dQRfwHeM= Subject key identifier: 23:8D:9E:E2:F9:2A:1E:23:07:6B:1B:0A:79:62:AD:96:3F:1B:B5:63 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5186F6895CBAED557F6DB6E38890E49901850A6B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2e254d4e-c057-4a72-b7c3-e714097585e7.roa Signing time: Thu 26 Jun 2025 20:09:26 +0000 ROA not before: Thu 26 Jun 2025 20:09:26 +0000 ROA not after: Thu 31 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:e0c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:86:f6:89:5c:ba:ed:55:7f:6d:b6:e3:88:90:e4:99:01:85:0a:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 26 20:09:26 2025 GMT Not After : Jul 31 23:59:59 2025 GMT Subject: serialNumber=55558165b6366c454dae8aed2eacad16a8461c1bb0cbcde87f66b199347c4ef7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c5:89:29:42:58:c1:94:87:1d:d3:53:a8:e9: 0f:29:85:b4:6a:87:7e:80:e4:cf:bb:c3:13:7d:68: 90:1a:28:29:91:49:62:98:a5:31:74:c5:3a:04:01: 72:18:cb:6e:56:7e:16:64:30:80:38:42:b4:7f:05: 1c:37:96:41:eb:bb:90:8e:b2:4d:fc:2a:55:d4:c4: 31:04:d3:49:68:3e:53:d8:7d:7e:69:7c:25:e2:e1: 97:66:2f:98:48:4d:c7:03:bb:99:3d:9c:05:ec:00: 4c:43:df:75:55:58:1e:54:7e:50:43:ce:5d:ff:0c: 2b:12:91:7b:2e:00:cd:e6:91:c0:ac:ad:ed:24:de: d3:97:20:7c:3a:d1:86:5f:78:59:f3:21:5a:53:a4: 28:61:df:70:7f:34:1a:c5:7e:5b:08:76:cd:38:a8: b1:00:f4:70:c5:ec:36:d9:1b:b5:c9:a6:38:21:39: aa:d0:39:0a:58:42:94:54:09:9c:a6:5e:9a:b6:bb: e0:7e:b2:8d:d0:76:9b:ad:df:8a:23:c3:d6:bf:00: 26:34:71:08:6d:01:66:ad:8c:43:ba:06:a3:1e:ab: 03:49:8b:d2:74:03:be:d8:51:26:da:c3:5e:38:16: ff:32:58:4b:0a:b0:26:dd:46:8a:8e:0d:27:4a:08: ed:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:8D:9E:E2:F9:2A:1E:23:07:6B:1B:0A:79:62:AD:96:3F:1B:B5:63 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2e254d4e-c057-4a72-b7c3-e714097585e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:e0c0::/46 Signature Algorithm: sha256WithRSAEncryption b3:1b:ac:d3:cc:b4:8f:bf:d8:a4:63:0a:70:28:7b:51:f4:c9: 7e:65:3c:8b:47:cb:81:db:b6:db:0b:63:0e:3c:98:7e:8a:c1: a8:85:23:57:64:e8:42:e2:07:43:a3:cb:04:e2:03:74:11:62: d5:87:89:0c:da:f4:9f:21:4c:47:5d:c4:ab:a7:17:39:cd:59: d7:ff:5b:8e:0b:ae:55:cc:72:83:06:f2:e4:c7:5a:14:58:47: cc:bd:84:e0:31:a3:52:42:06:63:7b:3d:af:8c:b4:14:cb:dd: a5:06:0f:81:c8:fa:60:f4:f1:f5:b7:09:b4:23:45:6b:99:5f: 74:0d:f6:e6:4c:fe:ea:fb:ad:6e:51:33:f2:bc:a0:57:63:a0: 96:45:bb:1b:7e:eb:32:c1:9c:fd:23:bc:fa:8b:9f:85:f8:83: fd:13:74:7c:77:0d:37:83:76:97:98:1d:b1:a3:69:b6:ba:60: 73:56:3d:4f:1c:fd:8f:3c:ef:35:4d:6e:8c:04:7a:47:95:ab: 3a:3a:35:81:3f:0d:7a:58:44:7e:33:e4:42:4b:28:18:47:12: 42:a1:b7:42:55:4f:e0:1c:02:6f:26:d6:e2:94:43:1a:b9:be: 58:7b:d6:69:26:30:2b:b3:6a:8c:89:3b:52:a0:e6:1f:36:40: ef:18:df:a0 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUUYb2iVy67VV/bbbjiJDkmQGFCmswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYyNjIwMDkyNloX DTI1MDczMTIzNTk1OVowejFJMEcGA1UEBRNANTU1NTgxNjViNjM2NmM0NTRkYWU4 YWVkMmVhY2FkMTZhODQ2MWMxYmIwY2JjZGU4N2Y2NmIxOTkzNDdjNGVmNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMWJKUJYwZSHHdNTqOkPKYW0aod+ gOTPu8MTfWiQGigpkUlimKUxdMU6BAFyGMtuVn4WZDCAOEK0fwUcN5ZB67uQjrJN /CpV1MQxBNNJaD5T2H1+aXwl4uGXZi+YSE3HA7uZPZwF7ABMQ991VVgeVH5QQ85d /wwrEpF7LgDN5pHArK3tJN7TlyB8OtGGX3hZ8yFaU6QoYd9wfzQaxX5bCHbNOKix APRwxew22Ru1yaY4ITmq0DkKWEKUVAmcpl6atrvgfrKN0Habrd+KI8PWvwAmNHEI bQFmrYxDugajHqsDSYvSdAO+2FEm2sNeOBb/MlhLCrAm3UaKjg0nSgjtLwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCONnuL5Kh4jB2sbCnlirZY/G7VjMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJlMjU0ZDRlLWMwNTctNGE3Mi1iN2MzLWU3MTQwOTc1ODVlNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba8+DAMA0GCSqGSIb3DQEBCwUAA4IBAQCzG6zTzLSPv9ikYwpw KHtR9Ml+ZTyLR8uB27bbC2MOPJh+isGohSNXZOhC4gdDo8sE4gN0EWLVh4kM2vSf IUxHXcSrpxc5zVnX/1uOC65VzHKDBvLkx1oUWEfMvYTgMaNSQgZjez2vjLQUy92l Bg+ByPpg9PH1twm0I0VrmV90DfbmTP7q+61uUTPyvKBXY6CWRbsbfusywZz9I7z6 i5+F+IP9E3R8dw03g3aXmB2xo2m2umBzVj1PHP2PPO81TW6MBHpHlas6OjWBPw16 WER+M+RCSygYRxJCobdCVU/gHAJvJtbilEMaub5Ye9ZpJjArs2qMiTtSoOYfNkDv GN+g -----END CERTIFICATE-----Generated at Sun Jun 29 03:40:03 2025 by rpki-client