$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2a886a6c-2239-4f2b-b527-519cf5a4bab5.roa File: 2a886a6c-2239-4f2b-b527-519cf5a4bab5.roa (raw, json) Hash identifier: Q7lvuYmMNQR97lxEL45bt7qg6C/9FgMum9lRcn5vTe0= Subject key identifier: C7:C2:5D:88:5A:F0:F8:6D:2B:D5:83:E5:4B:ED:A1:1D:32:2C:0E:5D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2BBD0BC7FF214986D0E0EAAB40B78376957E4E4D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2a886a6c-2239-4f2b-b527-519cf5a4bab5.roa Signing time: Tue 25 Mar 2025 15:41:51 +0000 ROA not before: Tue 25 Mar 2025 15:41:51 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:bd:0b:c7:ff:21:49:86:d0:e0:ea:ab:40:b7:83:76:95:7e:4e:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 15:41:51 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=35086f0141886bfe9aa06ba75ebf7171669996b9f39e7dd62602920a742e6765, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ac:81:bd:f4:9f:27:08:ae:85:c4:ca:52:16: 7a:bf:ea:4b:2f:aa:c9:86:2e:04:a5:f3:38:a5:c2: d6:c4:74:c1:d6:e6:48:b0:63:e2:f5:c9:9b:51:99: b2:91:82:5f:f3:52:29:3a:d8:f7:85:ab:7d:18:36: 8f:18:f4:dd:0d:9a:47:45:73:74:ea:97:f6:a0:52: cc:ea:c8:86:fc:58:81:f4:8a:2a:86:23:4a:c3:5a: 0d:44:8b:23:8a:5a:a9:f8:4b:63:0f:9a:8a:6c:2d: eb:26:5e:3a:e8:4d:72:31:b3:37:d1:b8:db:f5:ab: 0b:80:8d:88:d2:9a:8e:de:2d:8a:44:f6:97:a2:7a: 1a:4f:c6:4c:28:8b:1f:d6:92:67:7b:83:89:f3:44: c9:b5:65:95:eb:b0:f6:2f:cf:38:bd:8f:7b:88:1e: d6:b0:00:eb:ce:f5:72:57:05:f0:d6:0d:36:81:8f: 45:91:c4:54:43:f4:51:a2:87:d9:ea:67:34:01:5a: 57:e8:ea:d3:0d:30:2b:25:c0:9e:37:fe:0a:6e:8c: 45:c3:ea:0a:6f:f5:90:fc:2b:cd:56:6f:88:ff:00: 9b:a0:94:9f:6c:11:2f:17:85:cb:57:4f:7e:97:d0: 0b:32:1a:90:ea:68:c4:8d:73:ac:b7:75:55:4a:91: 3e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C2:5D:88:5A:F0:F8:6D:2B:D5:83:E5:4B:ED:A1:1D:32:2C:0E:5D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2a886a6c-2239-4f2b-b527-519cf5a4bab5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:4000::/40 Signature Algorithm: sha256WithRSAEncryption 05:81:fb:6d:9f:dc:c2:af:c8:64:78:06:f0:c3:e0:0b:ac:27: b1:2d:79:8a:cb:99:00:fe:74:c1:91:f5:ee:b3:82:2d:6d:18: 23:fd:bf:69:08:4b:ea:90:e0:f4:fe:e6:1c:84:56:6e:75:be: df:31:41:8a:ac:75:4e:01:24:9f:34:e6:8d:11:7b:c4:26:aa: dd:e0:81:f3:c3:31:5f:ee:b7:eb:a8:80:db:64:19:b1:5c:c3: d0:11:c3:f9:4e:09:0e:4a:cf:04:a4:9f:6c:6e:e1:3c:74:d4: 50:c8:89:3d:3d:86:1a:24:37:91:4b:63:6b:c8:33:01:78:3f: fb:df:a5:61:29:9d:6a:ba:e9:5b:88:d2:52:30:5a:22:6f:4b: d3:84:5c:79:fa:66:c4:4a:50:fa:12:b2:98:83:d0:bd:0c:1f: 2c:0d:0e:47:c3:b5:c8:79:18:a7:64:63:5c:a4:1b:7a:ff:06: 80:68:ed:f0:7f:ab:f0:af:78:e4:3f:b9:d9:5b:6a:d0:e7:99: f3:01:75:74:da:d6:0a:0d:a6:c5:59:9b:26:bf:81:34:90:20: 85:3a:9d:11:9c:f4:88:21:08:31:8b:81:94:70:79:88:7f:3a: b0:aa:55:62:c8:b9:09:99:40:ba:8e:76:8f:5a:cf:f3:0b:72: 83:87:cc:f0 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUK70Lx/8hSYbQ4OqrQLeDdpV+Tk0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE1NDE1MVoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAMzUwODZmMDE0MTg4NmJmZTlhYTA2 YmE3NWViZjcxNzE2Njk5OTZiOWYzOWU3ZGQ2MjYwMjkyMGE3NDJlNjc2NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qyBvfSfJwiuhcTKUhZ6v+pLL6rJ hi4EpfM4pcLWxHTB1uZIsGPi9cmbUZmykYJf81IpOtj3hat9GDaPGPTdDZpHRXN0 6pf2oFLM6siG/FiB9IoqhiNKw1oNRIsjilqp+EtjD5qKbC3rJl466E1yMbM30bjb 9asLgI2I0pqO3i2KRPaXonoaT8ZMKIsf1pJne4OJ80TJtWWV67D2L884vY97iB7W sADrzvVyVwXw1g02gY9FkcRUQ/RRoofZ6mc0AVpX6OrTDTArJcCeN/4KboxFw+oK b/WQ/CvNVm+I/wCboJSfbBEvF4XLV09+l9ALMhqQ6mjEjXOst3VVSpE+TQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMfCXYha8PhtK9WD5UvtoR0yLA5dMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJhODg2YTZjLTIyMzktNGYyYi1iNTI3LTUxOWNmNWE0YmFiNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaUAwDQYJKoZIhvcNAQELBQADggEBAAWB+22f3MKvyGR4BvDD 4AusJ7EteYrLmQD+dMGR9e6zgi1tGCP9v2kIS+qQ4PT+5hyEVm51vt8xQYqsdU4B JJ805o0Re8Qmqt3ggfPDMV/ut+uogNtkGbFcw9ARw/lOCQ5KzwSkn2xu4Tx01FDI iT09hhokN5FLY2vIMwF4P/vfpWEpnWq66VuI0lIwWiJvS9OEXHn6ZsRKUPoSspiD 0L0MHywNDkfDtch5GKdkY1ykG3r/BoBo7fB/q/CveOQ/udlbatDnmfMBdXTa1goN psVZmya/gTSQIIU6nRGc9IghCDGLgZRweYh/OrCqVWLIuQmZQLqOdo9az/MLcoOH zPA= -----END CERTIFICATE-----Generated at Thu Apr 17 17:53:17 2025 by rpki-client