$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1f3ead6a-6f37-4ea7-bee1-19dac2bedd8c.roa File: 1f3ead6a-6f37-4ea7-bee1-19dac2bedd8c.roa (raw, json) Hash identifier: DnkFni5s2a3pQPt2c8nLnI8gM7ShBhgP7L2Xzm7hqw8= Subject key identifier: B8:0A:30:5C:84:40:FD:1D:B7:CD:95:C7:EE:20:97:71:75:BC:F6:DA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 248B9690B2B051651A7DACAFE9C083AAF360BE60 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1f3ead6a-6f37-4ea7-bee1-19dac2bedd8c.roa Signing time: Tue 25 Mar 2025 15:11:06 +0000 ROA not before: Tue 25 Mar 2025 15:11:06 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:7040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:8b:96:90:b2:b0:51:65:1a:7d:ac:af:e9:c0:83:aa:f3:60:be:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 15:11:06 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=19e98fe7310322adacb56d2300f9e934154bb9d33b85e62d5c657a47e19636af, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:75:67:e1:aa:31:81:6d:10:33:dc:07:50:83: 34:77:9b:43:38:6c:fb:8e:fc:e6:e6:13:c7:db:96: 90:68:4d:83:0f:62:b5:8c:4a:00:4a:f7:4e:26:17: 58:b7:be:3d:da:5a:df:a4:d0:1f:ea:92:2d:0b:88: 9b:a3:2a:74:43:72:40:e1:d4:18:97:be:e2:af:cf: 12:9c:15:d3:00:3e:08:95:79:b7:1d:7d:82:54:ce: 9f:38:20:39:3f:c9:90:e2:7b:1e:ae:47:48:6e:04: f9:d9:e1:b1:97:98:7e:f9:08:57:b2:33:cd:18:f3: ba:d5:dc:20:e9:84:2b:20:e3:89:c1:ce:31:2a:85: 40:e5:b2:3a:4d:32:87:fd:d6:89:88:1e:8b:0f:19: ac:2b:84:0b:ab:91:48:76:37:67:41:2d:74:06:60: d9:50:1e:c5:70:36:86:45:bc:48:18:ee:37:d4:44: 5f:b3:be:bf:59:99:f3:94:9e:3a:26:72:f0:9a:47: 04:95:d4:ec:f1:85:cb:fd:b6:1f:85:96:ad:5f:e5: 27:d5:ce:be:15:f8:8f:d6:5f:77:e0:0c:32:84:f2: 68:bc:6c:be:06:ea:34:4f:f5:37:de:59:31:7f:fd: 94:c9:62:73:c1:7b:99:af:3f:cd:c4:a3:d6:54:0a: d8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:0A:30:5C:84:40:FD:1D:B7:CD:95:C7:EE:20:97:71:75:BC:F6:DA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1f3ead6a-6f37-4ea7-bee1-19dac2bedd8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:7040::/48 Signature Algorithm: sha256WithRSAEncryption 24:4f:5c:45:c3:70:32:0c:df:82:bc:f3:b1:3e:5f:25:e9:ad: 05:12:61:cd:23:e6:e0:9f:f4:42:72:b8:e6:e5:47:d5:cc:81: b0:e4:69:1d:79:6a:bc:62:36:0a:79:51:c1:af:14:27:46:24: e0:3c:39:54:28:52:7d:bf:23:cd:df:41:99:e9:85:ec:25:67: 8e:66:7a:86:47:9e:da:01:18:97:de:10:08:ab:34:fd:ed:e3: 58:89:96:77:64:3c:1b:85:1e:ec:55:05:b7:d2:65:86:3e:20: 6a:23:d1:f5:c9:89:9e:b4:21:8a:82:43:f9:4a:8a:34:d7:cb: 11:d9:b1:0a:b5:0b:3a:55:6c:75:27:e3:1a:f3:76:43:48:ef: 66:db:0b:2c:37:1e:c0:a8:fa:eb:16:e8:85:f5:50:e7:ba:6f: 45:b2:e6:58:28:31:10:3c:d1:fc:eb:70:1d:f1:8d:93:bb:15: c2:ac:64:35:40:86:ca:27:8f:f8:6f:08:73:39:a9:0a:85:f3: 8e:97:c3:a6:91:87:dc:ab:cf:0c:d1:0a:dc:61:e9:70:81:26: 40:e0:bd:01:37:b2:17:30:ed:b6:66:32:af:e7:e1:f9:37:10: b7:97:c7:cf:87:7d:88:57:4a:64:90:15:57:4a:76:fb:ef:77: 47:af:0f:17 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUJIuWkLKwUWUafayv6cCDqvNgvmAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE1MTEwNloX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAMTllOThmZTczMTAzMjJhZGFjYjU2 ZDIzMDBmOWU5MzQxNTRiYjlkMzNiODVlNjJkNWM2NTdhNDdlMTk2MzZhZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonVn4aoxgW0QM9wHUIM0d5tDOGz7 jvzm5hPH25aQaE2DD2K1jEoASvdOJhdYt7492lrfpNAf6pItC4iboyp0Q3JA4dQY l77ir88SnBXTAD4IlXm3HX2CVM6fOCA5P8mQ4nserkdIbgT52eGxl5h++QhXsjPN GPO61dwg6YQrIOOJwc4xKoVA5bI6TTKH/daJiB6LDxmsK4QLq5FIdjdnQS10BmDZ UB7FcDaGRbxIGO431ERfs76/WZnzlJ46JnLwmkcEldTs8YXL/bYfhZatX+Un1c6+ FfiP1l934AwyhPJovGy+Buo0T/U33lkxf/2UyWJzwXuZrz/NxKPWVArYgQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLgKMFyEQP0dt82Vx+4gl3F1vPbaMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFmM2VhZDZhLTZmMzctNGVhNy1iZWUxLTE5ZGFjMmJlZGQ4Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8nBAMA0GCSqGSIb3DQEBCwUAA4IBAQAkT1xFw3AyDN+CvPOx Pl8l6a0FEmHNI+bgn/RCcrjm5UfVzIGw5GkdeWq8YjYKeVHBrxQnRiTgPDlUKFJ9 vyPN30GZ6YXsJWeOZnqGR57aARiX3hAIqzT97eNYiZZ3ZDwbhR7sVQW30mWGPiBq I9H1yYmetCGKgkP5Soo018sR2bEKtQs6VWx1J+Ma83ZDSO9m2wssNx7AqPrrFuiF 9VDnum9FsuZYKDEQPNH863Ad8Y2TuxXCrGQ1QIbKJ4/4bwhzOakKhfOOl8OmkYfc q88M0QrcYelwgSZA4L0BN7IXMO22ZjKv5+H5NxC3l8fPh32IV0pkkBVXSnb773dH rw8X -----END CERTIFICATE-----Generated at Thu Apr 17 17:36:29 2025 by rpki-client