$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/710ed6f2-597f-48a7-930b-32584c274e6f.roa File: 710ed6f2-597f-48a7-930b-32584c274e6f.roa (raw, json) Hash identifier: Hx75Ivy1FCQ9qbHQuIkRtNidwrhbA1EF1FylZ9dq338= Subject key identifier: F6:BC:8F:1C:9A:9E:DE:68:D2:61:D6:2D:D0:9B:76:3E:F7:BB:C3:FD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 57FBC49B964C1A537E2FCD36E0F90DFF418D5A94 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/710ed6f2-597f-48a7-930b-32584c274e6f.roa Signing time: Mon 28 Apr 2025 15:00:05 +0000 ROA not before: Mon 28 Apr 2025 15:00:05 +0000 ROA not after: Mon 02 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daef:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 00:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:fb:c4:9b:96:4c:1a:53:7e:2f:cd:36:e0:f9:0d:ff:41:8d:5a:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 28 15:00:05 2025 GMT Not After : Jun 2 23:59:59 2025 GMT Subject: serialNumber=49ccc594d1971d64f5ae42c3448c9c2769ddf81634b0c792d81b595051393e14, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:cd:43:cf:f5:5d:34:75:80:7c:f3:a9:b3:98: 06:e8:8e:e1:ce:af:5b:8f:18:f0:d5:46:d6:7a:ce: 0c:ad:88:fa:04:a7:2d:95:95:e8:12:a3:49:04:48: 3a:ee:eb:58:bb:97:96:1f:79:18:da:32:98:55:18: 5d:c3:2d:65:98:b8:92:00:1b:74:81:68:45:87:25: 0d:25:61:ca:92:e8:aa:ae:70:14:9b:9b:aa:5f:6a: 90:6a:8a:ae:c8:6a:6e:06:db:ee:95:fa:33:6c:2e: 6a:24:0d:6e:9c:8e:9e:d8:33:0d:15:0b:39:63:38: 57:c9:35:56:7b:26:ab:bf:2c:e4:b3:8d:0c:4c:e5: 0c:68:6a:63:46:ec:b6:5c:41:ab:65:6b:bc:38:53: bb:75:4e:9f:42:e1:72:a8:13:2b:b4:12:04:93:fc: e8:cd:0f:64:53:ae:a8:18:79:a2:81:e2:4d:33:fd: 04:fb:d9:06:21:51:3d:d6:bc:65:3a:d2:0e:b3:b6: 4f:14:29:41:01:4d:91:32:68:70:bf:8b:1d:4b:05: bd:3b:23:f4:4d:26:35:4b:58:d0:84:af:29:6b:ed: 09:1e:05:f0:9c:52:b3:11:4b:41:59:f2:a6:9b:ea: d2:fa:bd:7c:20:3d:9d:6b:2d:30:37:5f:e6:1b:58: f8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:BC:8F:1C:9A:9E:DE:68:D2:61:D6:2D:D0:9B:76:3E:F7:BB:C3:FD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/710ed6f2-597f-48a7-930b-32584c274e6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:8000::/40 Signature Algorithm: sha256WithRSAEncryption 93:cb:d6:9e:59:72:17:68:7c:7a:dd:5c:81:25:ca:13:6a:98: d4:20:cf:2f:43:d2:1a:23:05:00:2a:4e:45:de:d9:39:5c:82: a7:87:e8:28:7f:0a:a5:db:90:d3:8c:24:80:08:af:e9:bc:94: a5:60:2d:f2:b6:ca:2d:5a:33:cc:37:05:43:04:0a:36:e6:a1: 2b:b9:90:f5:9d:fa:a9:73:fa:bc:48:4c:f2:1f:3f:f2:9f:2b: 52:9b:ff:36:12:12:1d:45:c3:d2:ca:95:9f:f6:d3:c4:03:34: 47:0b:c7:f3:39:17:02:52:c9:64:28:e9:1e:e0:b3:1b:79:e7: 3f:90:30:d9:e9:0f:81:31:dd:98:c6:95:74:e3:af:50:ee:1b: f3:9d:15:93:ba:2f:d8:60:ac:0e:4c:2f:15:8d:85:ee:56:ff: 33:a5:27:5c:c2:82:27:16:39:0f:b7:6b:ea:36:8c:a4:37:0e: f0:52:80:29:c7:a7:54:81:69:1d:e4:68:4b:f8:27:56:81:a1: 0f:aa:87:75:ed:4e:f5:4e:ca:ce:e0:6f:3b:69:af:53:bb:bc: 8e:94:90:d2:39:6c:32:51:20:17:14:15:d5:67:8f:18:5c:4a: 6a:c9:2c:ca:a3:db:3a:d8:6f:8e:f6:0b:ed:9d:81:7a:cb:9e: f8:82:a2:02 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUV/vEm5ZMGlN+L8024PkN/0GNWpQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyODE1MDAwNVoX DTI1MDYwMjIzNTk1OVowejFJMEcGA1UEBRNANDljY2M1OTRkMTk3MWQ2NGY1YWU0 MmMzNDQ4YzljMjc2OWRkZjgxNjM0YjBjNzkyZDgxYjU5NTA1MTM5M2UxNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2c1Dz/VdNHWAfPOps5gG6I7hzq9b jxjw1UbWes4MrYj6BKctlZXoEqNJBEg67utYu5eWH3kY2jKYVRhdwy1lmLiSABt0 gWhFhyUNJWHKkuiqrnAUm5uqX2qQaoquyGpuBtvulfozbC5qJA1unI6e2DMNFQs5 YzhXyTVWeyarvyzks40MTOUMaGpjRuy2XEGrZWu8OFO7dU6fQuFyqBMrtBIEk/zo zQ9kU66oGHmigeJNM/0E+9kGIVE91rxlOtIOs7ZPFClBAU2RMmhwv4sdSwW9OyP0 TSY1S1jQhK8pa+0JHgXwnFKzEUtBWfKmm+rS+r18ID2day0wN1/mG1j4kwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPa8jxyant5o0mHWLdCbdj73u8P9MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzcxMGVkNmYyLTU5N2YtNDhhNy05MzBiLTMyNTg0YzI3NGU2Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba74AwDQYJKoZIhvcNAQELBQADggEBAJPL1p5ZchdofHrdXIEl yhNqmNQgzy9D0hojBQAqTkXe2TlcgqeH6Ch/CqXbkNOMJIAIr+m8lKVgLfK2yi1a M8w3BUMECjbmoSu5kPWd+qlz+rxITPIfP/KfK1Kb/zYSEh1Fw9LKlZ/208QDNEcL x/M5FwJSyWQo6R7gsxt55z+QMNnpD4Ex3ZjGlXTjr1DuG/OdFZO6L9hgrA5MLxWN he5W/zOlJ1zCgicWOQ+3a+o2jKQ3DvBSgCnHp1SBaR3kaEv4J1aBoQ+qh3XtTvVO ys7gbztpr1O7vI6UkNI5bDJRIBcUFdVnjxhcSmrJLMqj2zrYb472C+2dgXrLnviC ogI= -----END CERTIFICATE-----Generated at Mon May 5 04:52:37 2025 by rpki-client