$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e1ee0ca6-4099-4f84-8e05-ff02d67a580a.roa File: e1ee0ca6-4099-4f84-8e05-ff02d67a580a.roa (raw, json) Hash identifier: bW+EK4L1O348I7fmeUX6mkmfr7MqyqWejCUYHSC66mE= Subject key identifier: 2A:A7:DE:FC:18:F4:8F:7E:27:B3:3D:78:7A:8E:D7:CA:CF:8A:58:F9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5DB2DB065081F963F4795EDA5DFE2D76A8A9523C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e1ee0ca6-4099-4f84-8e05-ff02d67a580a.roa Signing time: Mon 09 Jun 2025 15:30:23 +0000 ROA not before: Mon 09 Jun 2025 15:30:23 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:2800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:b2:db:06:50:81:f9:63:f4:79:5e:da:5d:fe:2d:76:a8:a9:52:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 9 15:30:23 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=8c9a8ac547d636f796431f8a7b8dff323fe9bc650e4950ccece6a3d3cedf778a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b0:76:51:f7:fa:6d:4a:9f:03:e2:ee:72:79: 04:a2:f0:a4:47:8a:ef:02:e0:b4:0c:6f:ad:c6:63: cc:9e:5c:63:22:72:dd:e2:66:4d:5e:fd:fb:cb:75: 0c:72:9b:94:8e:9d:b6:d6:2b:b5:a0:2b:4b:eb:12: e8:b2:3a:5e:ff:48:33:b9:48:8f:56:a9:ec:fc:0c: 1d:aa:26:73:ed:63:5e:fc:6e:20:86:a1:e2:ab:69: ca:5c:4f:03:7b:98:43:32:8a:f0:e7:6c:79:d1:05: d9:15:6c:c0:40:74:fa:ec:35:6a:4c:eb:7e:6e:85: 06:4c:c3:23:7e:5d:38:4c:c9:ee:7e:c0:23:68:54: c7:64:02:fd:4a:94:e9:f4:2d:01:d0:50:54:79:15: 08:f8:e6:c2:d5:0e:2d:e7:28:16:f6:18:ce:41:bb: f7:72:8e:68:47:09:b8:3e:74:37:4e:42:63:a3:ca: 4d:e6:bf:27:da:cd:8a:eb:f9:1a:98:e3:29:ab:21: 9a:66:8b:24:93:7e:5d:9f:90:9b:00:cd:bd:39:94: 3e:1f:be:51:58:2d:0a:10:68:cf:70:7a:71:71:ed: 23:34:86:b6:e5:3e:7a:5f:f3:e1:25:b3:67:5c:55: 96:4e:9f:1f:69:1f:a9:21:36:fb:5a:fa:45:b2:b1: 34:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A7:DE:FC:18:F4:8F:7E:27:B3:3D:78:7A:8E:D7:CA:CF:8A:58:F9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e1ee0ca6-4099-4f84-8e05-ff02d67a580a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:2800::/40 Signature Algorithm: sha256WithRSAEncryption 7b:d7:9a:d9:a0:a6:2d:e2:3f:b4:54:1c:fe:d0:c8:31:3b:5e: bd:4b:e2:00:f1:87:ec:15:a4:72:d0:04:a9:0f:d0:21:87:4a: 18:10:35:03:5e:48:1c:3d:1b:dc:f9:67:bd:41:e3:8c:8c:f7: d9:91:27:93:99:73:3f:e5:1c:48:6b:b4:58:69:ec:9d:81:ff: 10:0e:26:d8:5e:db:f7:f2:6a:4b:f2:04:6e:b0:6a:ea:d1:6a: 58:52:24:1e:ab:b2:da:eb:9e:c2:9b:b6:6f:3a:38:af:cc:47: de:f3:9f:0b:4a:e4:22:61:69:08:3e:dc:8c:18:66:96:46:bf: 91:0d:4b:63:22:49:1a:91:c8:11:d1:37:06:f7:bc:17:72:6f: 5c:d2:b2:06:90:a3:f0:70:2f:4a:5d:3f:cb:32:ad:99:54:98: 86:34:09:67:ec:9c:0e:82:c9:e7:54:f5:d0:70:ac:e7:98:fe: 9b:0d:3a:d7:44:18:d2:c6:ec:56:33:b9:6e:ca:36:e5:bc:3a: 79:17:88:75:9f:1a:f8:bd:a1:41:b9:06:18:b9:2e:7d:d8:30: e8:a9:61:60:f8:95:44:b9:7c:6b:5d:ed:37:99:15:54:68:b0: 57:85:a4:59:d7:c7:cd:fd:be:cf:71:99:63:12:91:1f:5d:1b: f8:7d:86:85 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUXbLbBlCB+WP0eV7aXf4tdqipUjwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwOTE1MzAyM1oX DTI1MDcxNDIzNTk1OVowejFJMEcGA1UEBRNAOGM5YThhYzU0N2Q2MzZmNzk2NDMx ZjhhN2I4ZGZmMzIzZmU5YmM2NTBlNDk1MGNjZWNlNmEzZDNjZWRmNzc4YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrB2Uff6bUqfA+LucnkEovCkR4rv AuC0DG+txmPMnlxjInLd4mZNXv37y3UMcpuUjp221iu1oCtL6xLosjpe/0gzuUiP Vqns/AwdqiZz7WNe/G4ghqHiq2nKXE8De5hDMorw52x50QXZFWzAQHT67DVqTOt+ boUGTMMjfl04TMnufsAjaFTHZAL9SpTp9C0B0FBUeRUI+ObC1Q4t5ygW9hjOQbv3 co5oRwm4PnQ3TkJjo8pN5r8n2s2K6/kamOMpqyGaZoskk35dn5CbAM29OZQ+H75R WC0KEGjPcHpxce0jNIa25T56X/PhJbNnXFWWTp8faR+pITb7WvpFsrE0awIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCqn3vwY9I9+J7M9eHqO18rPilj5MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UxZWUwY2E2LTQwOTktNGY4NC04ZTA1LWZmMDJkNjdhNTgwYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8igwDQYJKoZIhvcNAQELBQADggEBAHvXmtmgpi3iP7RUHP7Q yDE7Xr1L4gDxh+wVpHLQBKkP0CGHShgQNQNeSBw9G9z5Z71B44yM99mRJ5OZcz/l HEhrtFhp7J2B/xAOJthe2/fyakvyBG6waurRalhSJB6rstrrnsKbtm86OK/MR97z nwtK5CJhaQg+3IwYZpZGv5ENS2MiSRqRyBHRNwb3vBdyb1zSsgaQo/BwL0pdP8sy rZlUmIY0CWfsnA6CyedU9dBwrOeY/psNOtdEGNLG7FYzuW7KNuW8OnkXiHWfGvi9 oUG5Bhi5Ln3YMOipYWD4lUS5fGtd7TeZFVRosFeFpFnXx839vs9xmWMSkR9dG/h9 hoU= -----END CERTIFICATE-----Generated at Sat Jun 14 06:05:16 2025 by rpki-client