$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf40bbcd-0211-4289-921c-c7d5e705cbda.roa File: bf40bbcd-0211-4289-921c-c7d5e705cbda.roa (raw, json) Hash identifier: W5JMzOvNOvRs9ueZQZZnSPyUftqTtxsC0bKvwOVyjrk= Subject key identifier: 05:D2:8E:E7:B8:10:F6:0D:9A:01:13:C6:C3:10:D8:A5:40:0B:84:CC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 524071B091AF6B8CF55906E98F489AD8CE576427 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf40bbcd-0211-4289-921c-c7d5e705cbda.roa Signing time: Tue 10 Jun 2025 15:31:38 +0000 ROA not before: Tue 10 Jun 2025 15:31:38 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf8:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:40:71:b0:91:af:6b:8c:f5:59:06:e9:8f:48:9a:d8:ce:57:64:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 15:31:38 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=da9761da0b77f843a748b2a474331079f5e4e76f6e05dd5fb7c0f3bd5056b81e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d7:e4:61:8b:b9:94:79:f6:62:3d:e5:8e:3e: 70:fb:46:53:72:0c:b6:92:83:48:b4:42:96:59:28: 8d:ac:4b:f1:be:4a:6f:ee:04:ed:7a:3b:41:2d:f4: 6b:89:60:cb:85:84:ba:f3:3b:c2:f7:f1:72:0f:3a: 0a:a8:59:1d:2c:c2:a8:52:87:61:78:a1:ac:62:c8: 93:1f:ea:a3:5d:da:d5:d2:61:83:b4:cc:aa:ff:cb: 34:3e:65:96:c7:22:43:6b:c3:a8:98:9f:cd:82:cb: 84:a8:2f:4d:0b:5f:b4:42:94:48:b4:63:de:39:51: 33:20:fa:f7:1f:15:23:e5:bb:a1:77:11:1d:d4:0d: b0:f2:84:90:98:c0:5f:f1:e2:2f:9e:24:9f:6a:8e: c6:bb:81:76:0a:b8:95:38:10:5c:14:85:50:7e:0a: 0e:2b:d8:af:4b:24:0d:0e:c8:09:2b:00:a5:0f:e2: 7c:df:0f:63:7a:fe:cf:1d:84:12:b6:40:86:b9:a6: ca:3c:7c:60:d9:a9:00:a5:73:80:f0:d9:d5:3f:5c: 78:70:4a:0f:3f:db:7e:2c:69:1d:0f:0f:7e:33:ba: 15:6e:76:58:2b:26:27:32:a1:eb:90:96:04:1e:70: e1:00:15:72:4a:ab:34:20:c2:f3:cc:14:93:59:0e: 45:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D2:8E:E7:B8:10:F6:0D:9A:01:13:C6:C3:10:D8:A5:40:0B:84:CC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf40bbcd-0211-4289-921c-c7d5e705cbda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf8:f000::/40 Signature Algorithm: sha256WithRSAEncryption 93:4d:21:e4:b6:b7:8f:60:44:2c:e2:fd:63:79:e9:48:d4:78: 0e:f4:80:7d:19:81:be:e9:5e:05:c6:95:a3:a7:31:6a:ed:30: e5:86:95:31:87:4d:b2:36:5c:57:35:71:21:c5:0b:ee:43:e6: 82:8c:b0:fd:5b:c2:75:23:10:5c:e0:64:59:ee:80:7b:89:45: 07:90:24:f9:91:70:27:59:b5:95:00:43:3a:31:b8:ec:01:11: 38:82:39:22:e4:01:90:da:1f:53:08:b4:e8:c1:94:cc:8b:9e: 93:ff:25:4a:f9:a7:4e:24:40:ff:7a:42:34:50:81:27:88:3e: 7d:12:7e:2b:82:e2:74:39:d5:c5:4b:b9:17:0a:1f:7b:2a:e8: ac:aa:ea:60:e5:ab:3f:2f:f3:47:6e:e5:27:b7:50:89:7e:aa: 52:37:3d:20:40:46:cf:a3:49:87:eb:59:89:70:48:8e:9d:73: 3a:38:de:f7:eb:05:19:b3:c7:79:88:04:7b:51:f1:9e:ee:96: d1:64:73:3c:4b:c7:52:0d:cf:3f:c6:13:50:f2:06:6e:73:e6: ec:f4:b1:e0:be:2f:06:67:7a:5d:df:0e:eb:4d:66:48:bc:96: 47:76:73:97:e2:b9:eb:80:60:f1:c8:51:4a:f4:7e:bc:c6:84: 8f:a3:00:5d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUUkBxsJGva4z1WQbpj0ia2M5XZCcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDE1MzEzOFoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAZGE5NzYxZGEwYjc3Zjg0M2E3NDhi MmE0NzQzMzEwNzlmNWU0ZTc2ZjZlMDVkZDVmYjdjMGYzYmQ1MDU2YjgxZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptfkYYu5lHn2Yj3ljj5w+0ZTcgy2 koNItEKWWSiNrEvxvkpv7gTtejtBLfRriWDLhYS68zvC9/FyDzoKqFkdLMKoUodh eKGsYsiTH+qjXdrV0mGDtMyq/8s0PmWWxyJDa8OomJ/NgsuEqC9NC1+0QpRItGPe OVEzIPr3HxUj5buhdxEd1A2w8oSQmMBf8eIvniSfao7Gu4F2CriVOBBcFIVQfgoO K9ivSyQNDsgJKwClD+J83w9jev7PHYQStkCGuabKPHxg2akApXOA8NnVP1x4cEoP P9t+LGkdDw9+M7oVbnZYKyYnMqHrkJYEHnDhABVySqs0IMLzzBSTWQ5FNwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAXSjue4EPYNmgETxsMQ2KVAC4TMMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JmNDBiYmNkLTAyMTEtNDI4OS05MjFjLWM3ZDVlNzA1Y2JkYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+PAwDQYJKoZIhvcNAQELBQADggEBAJNNIeS2t49gRCzi/WN5 6UjUeA70gH0Zgb7pXgXGlaOnMWrtMOWGlTGHTbI2XFc1cSHFC+5D5oKMsP1bwnUj EFzgZFnugHuJRQeQJPmRcCdZtZUAQzoxuOwBETiCOSLkAZDaH1MItOjBlMyLnpP/ JUr5p04kQP96QjRQgSeIPn0SfiuC4nQ51cVLuRcKH3sq6Kyq6mDlqz8v80du5Se3 UIl+qlI3PSBARs+jSYfrWYlwSI6dczo43vfrBRmzx3mIBHtR8Z7ultFkczxLx1IN zz/GE1DyBm5z5uz0seC+LwZnel3fDutNZki8lkd2c5fiueuAYPHIUUr0frzGhI+j AF0= -----END CERTIFICATE-----Generated at Sat Jun 14 05:49:32 2025 by rpki-client