$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/995f333a-490f-44be-baae-a7428f2d9a63.roa File: 995f333a-490f-44be-baae-a7428f2d9a63.roa (raw, json) Hash identifier: 5qUWxodQBT7XAMSVlw48VLIy27Fh+NLsrT1dghb4AqE= Subject key identifier: AB:EB:B8:95:E0:57:41:A8:5B:66:C5:47:70:32:D8:12:15:6B:A9:E8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5343435D2892FB9B46A264729701AE18237DE302 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/995f333a-490f-44be-baae-a7428f2d9a63.roa Signing time: Mon 28 Apr 2025 15:00:13 +0000 ROA not before: Mon 28 Apr 2025 15:00:13 +0000 ROA not after: Mon 02 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daef:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 00:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:43:43:5d:28:92:fb:9b:46:a2:64:72:97:01:ae:18:23:7d:e3:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 28 15:00:13 2025 GMT Not After : Jun 2 23:59:59 2025 GMT Subject: serialNumber=18d8bc3bc24a79d85265fa6ee847ea32b79d0c6ba115304816dc01dc6c350130, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:98:e3:2e:4d:2c:16:3c:16:4b:e7:60:37:54: f8:c9:98:00:70:6a:2b:19:78:22:59:89:ae:4c:d0: 6f:72:42:00:07:f2:8e:6a:87:32:e4:45:23:a0:c9: 79:1f:8f:dc:ed:17:85:f7:b5:18:88:79:2e:71:9d: 01:74:52:85:5e:f7:d9:23:59:d4:e3:93:69:c3:50: 7e:fa:62:4d:3d:5a:30:de:90:30:73:99:08:2f:f6: ab:15:e4:e3:a1:d9:12:3a:4d:73:84:c5:b8:11:00: e5:44:6f:2c:42:a7:02:4b:5a:ad:63:b1:ee:46:d9: fc:38:60:39:6b:e0:b6:91:16:af:75:58:a8:9c:11: 7d:03:62:da:ac:d4:53:82:75:be:e5:90:a3:f6:75: 0e:0b:99:b8:3c:78:42:42:36:fc:49:2f:52:79:e8: 98:1c:1e:24:8f:1d:84:10:b9:b2:91:0c:c6:e0:68: 5a:ec:51:bf:d2:01:7c:26:b1:18:9e:b2:8b:91:b9: 29:38:a2:57:35:80:a2:39:77:93:21:22:21:64:85: 89:e9:1f:3f:de:97:d9:b4:ce:e5:03:88:9e:3f:26: 8b:ad:fe:95:bd:65:6d:ae:79:eb:e9:b1:92:e2:0d: 47:9f:ec:dd:cf:fb:0d:24:3d:64:0b:15:e2:11:03: 5a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:EB:B8:95:E0:57:41:A8:5B:66:C5:47:70:32:D8:12:15:6B:A9:E8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/995f333a-490f-44be-baae-a7428f2d9a63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:1000::/40 Signature Algorithm: sha256WithRSAEncryption 27:c4:df:48:ef:87:f7:c3:80:a9:ce:b6:48:2e:68:34:00:d9: b5:d0:97:e7:4c:b7:c8:b0:94:92:93:1a:bc:b1:5e:1c:a1:07: 98:44:81:38:6e:a6:5d:41:2b:d3:fc:73:3c:b8:3d:d8:7a:31: 9d:10:86:de:19:21:b6:6f:d3:b8:57:8d:d3:20:a6:99:74:34: dc:2c:e5:29:49:d2:83:ef:fc:99:31:ad:16:4c:dd:2f:99:a1: 76:f8:f7:c4:88:76:f0:7e:a4:29:ff:e2:f7:79:53:3b:95:9f: fd:92:17:33:e9:36:2d:86:12:1b:c2:0c:5a:44:0d:07:dc:3f: b3:dd:01:02:8d:ce:83:c1:92:24:34:3e:31:e9:c3:5a:ba:d4: 0c:dd:36:13:97:a0:bb:e6:2b:f9:1b:43:a1:12:b9:b4:12:c9: 5b:5c:4b:36:53:df:a4:b9:c6:d0:77:72:6a:f9:df:10:2b:ae: de:91:ca:6b:dc:3d:17:c9:60:65:03:fb:2c:bb:17:d5:01:ef: 03:d0:51:8c:15:de:00:43:79:38:8c:7b:3a:b4:5f:a5:c6:15: 11:6a:96:fb:18:95:16:fb:27:c0:87:bc:f2:29:2d:a6:2a:5e: 91:60:40:2e:6b:20:71:7d:b8:8a:d4:ac:18:2e:d2:04:4f:79: 74:7b:b9:9e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUU0NDXSiS+5tGomRylwGuGCN94wIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyODE1MDAxM1oX DTI1MDYwMjIzNTk1OVowejFJMEcGA1UEBRNAMThkOGJjM2JjMjRhNzlkODUyNjVm YTZlZTg0N2VhMzJiNzlkMGM2YmExMTUzMDQ4MTZkYzAxZGM2YzM1MDEzMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZjjLk0sFjwWS+dgN1T4yZgAcGor GXgiWYmuTNBvckIAB/KOaocy5EUjoMl5H4/c7ReF97UYiHkucZ0BdFKFXvfZI1nU 45Npw1B++mJNPVow3pAwc5kIL/arFeTjodkSOk1zhMW4EQDlRG8sQqcCS1qtY7Hu Rtn8OGA5a+C2kRavdVionBF9A2LarNRTgnW+5ZCj9nUOC5m4PHhCQjb8SS9SeeiY HB4kjx2EELmykQzG4Gha7FG/0gF8JrEYnrKLkbkpOKJXNYCiOXeTISIhZIWJ6R8/ 3pfZtM7lA4iePyaLrf6VvWVtrnnr6bGS4g1Hn+zdz/sNJD1kCxXiEQNa2wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKvruJXgV0GoW2bFR3Ay2BIVa6noMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk5NWYzMzNhLTQ5MGYtNDRiZS1iYWFlLWE3NDI4ZjJkOWE2My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7xAwDQYJKoZIhvcNAQELBQADggEBACfE30jvh/fDgKnOtkgu aDQA2bXQl+dMt8iwlJKTGryxXhyhB5hEgThupl1BK9P8czy4Pdh6MZ0Qht4ZIbZv 07hXjdMgppl0NNws5SlJ0oPv/JkxrRZM3S+ZoXb498SIdvB+pCn/4vd5UzuVn/2S FzPpNi2GEhvCDFpEDQfcP7PdAQKNzoPBkiQ0PjHpw1q61AzdNhOXoLvmK/kbQ6ES ubQSyVtcSzZT36S5xtB3cmr53xArrt6RymvcPRfJYGUD+yy7F9UB7wPQUYwV3gBD eTiMezq0X6XGFRFqlvsYlRb7J8CHvPIpLaYqXpFgQC5rIHF9uIrUrBgu0gRPeXR7 uZ4= -----END CERTIFICATE-----Generated at Mon May 5 14:59:32 2025 by rpki-client