$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4eba370b-504c-4cec-9df7-1704d28e1c93.roa File: 4eba370b-504c-4cec-9df7-1704d28e1c93.roa (raw, json) Hash identifier: zq7RrI+1xpj6U0Lt6aN3B4dz6gLDXFWccfTDBVDyhig= Subject key identifier: B6:90:21:DE:4F:AF:FC:10:DF:A3:CA:7F:87:79:BD:F5:21:CF:28:B6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 639EEC77DC976664AB4DC86AF5800DC9A4858111 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4eba370b-504c-4cec-9df7-1704d28e1c93.roa Signing time: Mon 28 Apr 2025 15:01:26 +0000 ROA not before: Mon 28 Apr 2025 15:01:26 +0000 ROA not after: Mon 02 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da10::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 00:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:9e:ec:77:dc:97:66:64:ab:4d:c8:6a:f5:80:0d:c9:a4:85:81:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 28 15:01:26 2025 GMT Not After : Jun 2 23:59:59 2025 GMT Subject: serialNumber=dbcde9feee8d7396aade83b67c42be996d10b3e92e891b54c6c0dc655b1b8b71, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:14:cb:65:be:3c:aa:8f:91:ac:6b:c4:d5:55: b6:5e:52:ba:23:56:84:4d:c6:2e:91:d1:e2:4b:19: 5e:ff:3d:d5:1c:52:19:0c:d6:47:3a:b4:05:1c:f4: f3:b1:84:4e:e9:09:90:e8:6d:26:e9:6e:4b:80:5d: 8a:f5:8c:10:4e:0c:e4:cf:a0:24:36:61:b6:de:a9: 06:cb:15:30:71:65:ea:f0:d1:a0:26:fe:18:f1:bf: 0a:01:8b:e8:f4:d4:0d:e1:91:30:91:ac:f4:ed:7b: 7e:5c:65:e5:4b:bc:cc:0d:78:00:69:a7:b4:b3:79: c3:8d:06:6b:7b:c1:3d:86:29:d9:4b:41:c9:12:56: 5a:89:2d:c2:d5:ae:03:57:d5:4a:8a:55:fb:f1:37: 8c:45:b3:ad:b9:bf:be:56:50:16:74:53:62:de:53: 79:e3:e1:c1:d8:46:8e:5e:fd:ff:e1:4e:c4:b9:c1: 62:a2:15:46:15:0d:5d:ec:f0:88:55:92:88:ff:c6: 90:63:18:0c:10:cc:c4:a5:93:59:8f:5b:60:08:31: 44:c3:70:21:f2:36:17:88:9f:83:a8:0e:84:07:55: f6:ab:7b:dd:a8:a8:f0:ec:7e:6a:c0:e1:47:20:f8: ee:49:4c:70:71:0c:0f:de:08:da:4e:9b:b2:75:66: 26:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:90:21:DE:4F:AF:FC:10:DF:A3:CA:7F:87:79:BD:F5:21:CF:28:B6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4eba370b-504c-4cec-9df7-1704d28e1c93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da10::/28 Signature Algorithm: sha256WithRSAEncryption 4c:12:e9:36:3a:79:42:64:79:7f:57:6f:03:20:5d:6c:56:0e: 8e:8e:86:22:06:40:c1:8b:1b:9a:a2:cf:40:64:e2:34:82:97: 8c:56:49:25:58:98:03:e2:bd:c7:ba:15:55:0b:62:ff:36:2b: 02:84:b8:ee:eb:a1:10:22:33:f6:01:b0:a0:b1:a5:34:35:7a: 42:30:c0:be:07:6e:9a:35:c6:0b:d2:6b:bd:4e:03:00:65:07: 22:7a:d6:31:4e:12:e6:36:9d:de:eb:9d:74:e8:f7:25:a3:cf: 35:ae:38:6b:50:e8:7f:7e:bc:1c:6f:2d:d7:e4:bc:59:1e:aa: d4:49:4a:1e:95:cf:fc:c9:d9:20:82:ed:26:fd:51:18:fd:79: 6c:f3:e9:bd:6c:23:c4:ed:df:d8:11:62:d0:f7:9f:02:03:74: 37:d3:6a:83:fe:f2:0e:85:df:b8:ce:b0:3a:2f:44:47:85:b0: ab:14:29:c2:9a:a2:3c:d5:9e:4a:40:e4:61:f7:85:4d:68:75: b8:05:9f:b4:99:b2:93:fd:c7:c6:78:e3:d5:28:c4:01:08:46: b8:d8:7a:0f:19:f0:1f:87:a8:1a:f5:b6:81:1b:9d:a0:7e:7b: 89:95:eb:60:ce:94:07:51:3f:16:87:56:2b:ab:4f:94:8a:18: 3f:61:0f:83 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUY57sd9yXZmSrTchq9YANyaSFgREwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyODE1MDEyNloX DTI1MDYwMjIzNTk1OVowejFJMEcGA1UEBRNAZGJjZGU5ZmVlZThkNzM5NmFhZGU4 M2I2N2M0MmJlOTk2ZDEwYjNlOTJlODkxYjU0YzZjMGRjNjU1YjFiOGI3MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBTLZb48qo+RrGvE1VW2XlK6I1aE TcYukdHiSxle/z3VHFIZDNZHOrQFHPTzsYRO6QmQ6G0m6W5LgF2K9YwQTgzkz6Ak NmG23qkGyxUwcWXq8NGgJv4Y8b8KAYvo9NQN4ZEwkaz07Xt+XGXlS7zMDXgAaae0 s3nDjQZre8E9hinZS0HJElZaiS3C1a4DV9VKilX78TeMRbOtub++VlAWdFNi3lN5 4+HB2EaOXv3/4U7EucFiohVGFQ1d7PCIVZKI/8aQYxgMEMzEpZNZj1tgCDFEw3Ah 8jYXiJ+DqA6EB1X2q3vdqKjw7H5qwOFHIPjuSUxwcQwP3gjaTpuydWYmhwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFLaQId5Pr/wQ36PKf4d5vfUhzyi2MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRlYmEzNzBiLTUwNGMtNGNlYy05ZGY3LTE3MDRkMjhlMWM5My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUEJAbaEDANBgkqhkiG9w0BAQsFAAOCAQEATBLpNjp5QmR5f1dvAyBd bFYOjo6GIgZAwYsbmqLPQGTiNIKXjFZJJViYA+K9x7oVVQti/zYrAoS47uuhECIz 9gGwoLGlNDV6QjDAvgdumjXGC9JrvU4DAGUHInrWMU4S5jad3uuddOj3JaPPNa44 a1Dof368HG8t1+S8WR6q1ElKHpXP/MnZIILtJv1RGP15bPPpvWwjxO3f2BFi0Pef AgN0N9Nqg/7yDoXfuM6wOi9ER4WwqxQpwpqiPNWeSkDkYfeFTWh1uAWftJmyk/3H xnjj1SjEAQhGuNh6DxnwH4eoGvW2gRudoH57iZXrYM6UB1E/FodWK6tPlIoYP2EP gw== -----END CERTIFICATE-----Generated at Tue May 6 11:54:20 2025 by rpki-client