$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/33792cb7-eb1d-47b9-939a-d14cbbaa92eb.roa File: 33792cb7-eb1d-47b9-939a-d14cbbaa92eb.roa (raw, json) Hash identifier: 4R57K5riF1IgFQiXnTfw94DOIcco32ME/58RvYACIN8= Subject key identifier: AE:99:F3:61:14:FB:95:DD:05:AD:25:A7:E7:63:99:8B:86:47:FA:01 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 41CF2A82DDCBECD6F9FF3556E56031A444BD8657 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/33792cb7-eb1d-47b9-939a-d14cbbaa92eb.roa Signing time: Tue 03 Jun 2025 19:38:32 +0000 ROA not before: Tue 03 Jun 2025 19:38:32 +0000 ROA not after: Tue 08 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:a020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:cf:2a:82:dd:cb:ec:d6:f9:ff:35:56:e5:60:31:a4:44:bd:86:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 3 19:38:32 2025 GMT Not After : Jul 8 23:59:59 2025 GMT Subject: serialNumber=e681ac189939681692a521ce0c7ab27c4aa32d14bcdea939586a12393d7adfbb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d1:49:ff:73:5b:b9:6b:e5:db:0d:e4:75:91: c9:3e:98:ff:ff:e0:0f:cf:3e:5f:98:61:ca:a2:65: bc:85:dd:c1:ef:a1:da:99:6b:ec:bd:66:f3:ec:07: 7c:1b:25:8d:9e:29:16:40:88:0b:24:dd:b5:fc:40: 08:81:3d:e4:58:84:5b:c1:84:f7:59:9e:06:0d:16: 29:41:31:c0:ee:23:be:fc:6c:6d:8a:1d:49:6f:e3: c5:5b:fc:16:8d:b7:e7:f5:37:8a:c9:d9:29:e1:df: 2f:49:f1:f9:bc:10:f0:65:8c:49:17:d2:37:44:42: 2f:e4:a3:47:07:f5:3e:96:04:30:35:d7:97:7e:45: 44:e9:53:21:e7:5d:40:88:e6:3b:7a:50:c4:82:32: 89:f2:04:07:bf:2b:bd:53:1f:3b:4b:01:25:e8:5d: 01:46:0f:3a:80:e6:47:b6:04:36:c8:a0:cd:a6:7b: 75:e7:27:7b:1b:d8:18:bc:49:a4:43:68:57:6a:88: 92:29:ac:cb:f0:c1:7e:2c:04:e7:2c:f4:04:fa:7d: cb:b1:7e:31:c5:ae:70:c8:25:62:d5:68:71:b5:62: 68:c0:e8:d3:62:f3:d1:07:48:17:c5:70:19:08:d5: d6:b5:77:98:91:31:d9:27:81:b3:5b:57:fb:1a:97: eb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:99:F3:61:14:FB:95:DD:05:AD:25:A7:E7:63:99:8B:86:47:FA:01 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/33792cb7-eb1d-47b9-939a-d14cbbaa92eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:a020::/48 Signature Algorithm: sha256WithRSAEncryption 3b:c4:3a:e5:48:64:cd:19:3f:7f:96:d4:a0:1d:55:6e:53:a6: 35:b6:b8:5b:f4:98:9e:14:6d:78:23:09:e6:4a:ac:a6:36:9b: b2:00:68:e1:e3:c4:81:08:14:d2:60:fc:8f:00:2d:5c:a4:ec: cf:b0:58:b9:21:c8:46:5e:f7:1f:24:01:93:48:77:be:ac:c7: 94:ab:cd:1b:c8:6d:f5:ed:42:09:bb:80:37:50:44:e2:03:fe: 20:70:80:52:7c:9c:ef:a7:84:e6:24:15:e5:24:94:e2:ea:13: 62:a4:58:8a:fd:ae:56:f2:48:67:9e:f1:b6:e9:f0:a8:45:da: ee:89:9f:f9:e9:a2:02:20:58:d1:e4:e1:9a:aa:19:5a:a3:54: b7:86:bc:6f:28:18:a2:74:f8:81:48:e9:7b:df:6f:21:c7:b0: 90:5d:20:56:5f:aa:4f:35:aa:b7:4a:dd:c4:4e:19:bd:26:2e: f7:2e:5b:c6:01:d4:4a:05:9c:42:41:f2:88:bc:af:10:44:59: f1:68:91:d0:26:71:09:00:8c:ac:a3:ec:60:99:08:ad:37:1a: 3c:ef:94:c4:32:1e:66:10:61:65:28:33:9f:b4:f6:14:3c:81: 95:9e:d8:36:12:74:97:f2:f2:7b:d3:40:9e:57:47:a4:a4:ce: 24:f7:c8:7c -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUQc8qgt3L7Nb5/zVW5WAxpES9hlcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwMzE5MzgzMloX DTI1MDcwODIzNTk1OVowejFJMEcGA1UEBRNAZTY4MWFjMTg5OTM5NjgxNjkyYTUy MWNlMGM3YWIyN2M0YWEzMmQxNGJjZGVhOTM5NTg2YTEyMzkzZDdhZGZiYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNFJ/3NbuWvl2w3kdZHJPpj//+AP zz5fmGHKomW8hd3B76HamWvsvWbz7Ad8GyWNnikWQIgLJN21/EAIgT3kWIRbwYT3 WZ4GDRYpQTHA7iO+/Gxtih1Jb+PFW/wWjbfn9TeKydkp4d8vSfH5vBDwZYxJF9I3 REIv5KNHB/U+lgQwNdeXfkVE6VMh511AiOY7elDEgjKJ8gQHvyu9Ux87SwEl6F0B Rg86gOZHtgQ2yKDNpnt15yd7G9gYvEmkQ2hXaoiSKazL8MF+LATnLPQE+n3LsX4x xa5wyCVi1WhxtWJowOjTYvPRB0gXxXAZCNXWtXeYkTHZJ4GzW1f7GpfrvQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFK6Z82EU+5XdBa0lp+djmYuGR/oBMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzMzNzkyY2I3LWViMWQtNDdiOS05MzlhLWQxNGNiYmFhOTJlYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAKAgMA0GCSqGSIb3DQEBCwUAA4IBAQA7xDrlSGTNGT9/ltSg HVVuU6Y1trhb9JieFG14IwnmSqymNpuyAGjh48SBCBTSYPyPAC1cpOzPsFi5IchG XvcfJAGTSHe+rMeUq80byG317UIJu4A3UETiA/4gcIBSfJzvp4TmJBXlJJTi6hNi pFiK/a5W8khnnvG26fCoRdruiZ/56aICIFjR5OGaqhlao1S3hrxvKBiidPiBSOl7 328hx7CQXSBWX6pPNaq3St3EThm9Ji73LlvGAdRKBZxCQfKIvK8QRFnxaJHQJnEJ AIyso+xgmQitNxo875TEMh5mEGFlKDOftPYUPIGVntg2EnSX8vJ700CeV0ekpM4k 98h8 -----END CERTIFICATE-----Generated at Sat Jun 14 06:14:05 2025 by rpki-client