$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f2a4d99-6aa4-4f2b-8a7a-ee89f569501d.roa File: 2f2a4d99-6aa4-4f2b-8a7a-ee89f569501d.roa (raw, json) Hash identifier: RwwZM2HTmNVZpMk0bdVlJKP9wH1IQVqDTV+dAYrkKao= Subject key identifier: 17:B1:FD:40:04:62:B0:F2:37:C0:A8:8E:F1:B2:25:5C:B1:F2:0A:D3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 274C7783EA1D66B548FE55AA0D2EA60B2060421A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f2a4d99-6aa4-4f2b-8a7a-ee89f569501d.roa Signing time: Tue 25 Mar 2025 00:01:09 +0000 ROA not before: Tue 25 Mar 2025 00:01:09 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:9040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:4c:77:83:ea:1d:66:b5:48:fe:55:aa:0d:2e:a6:0b:20:60:42:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 00:01:09 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=5fa12e8aa12f617c3356ac7bc89b02df492d2098d5dd2c9a3174974f0cc42174, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fb:98:94:a6:4f:e3:be:02:7f:c7:c8:67:ac: ec:69:96:d0:cb:37:e1:1c:bb:df:9b:db:ee:ca:4f: 82:73:fd:e1:16:7c:ea:bb:8d:61:15:34:03:9f:54: 8b:90:15:dc:5d:e3:ef:06:36:60:e2:ea:77:17:04: 39:cb:cb:60:bb:50:c9:05:4e:29:4a:c5:3b:82:95: 7c:75:45:6e:d9:bb:3a:f7:33:1f:c9:2d:ce:ac:63: f6:6c:23:27:02:5c:58:71:23:2e:ef:40:7c:35:0c: 43:77:1a:1a:94:9e:4e:4c:f4:b1:fd:7e:e7:27:e3: 7d:1a:9f:b9:f5:1b:9b:59:8d:f7:f7:ea:81:90:ff: 85:3f:84:40:d5:a4:fe:26:e4:68:f0:8b:0b:2d:f4: ce:c4:96:5d:79:61:05:7d:3c:b9:77:89:cb:f5:65: 8c:92:20:0c:58:3f:58:44:cc:38:8f:9a:68:68:c7: 53:80:ed:ec:d2:81:47:fb:ff:6a:fd:9d:ff:48:66: dd:6d:1c:43:22:44:59:c5:df:9a:0a:79:5a:95:b5: 4c:03:3a:74:c5:f5:e9:f2:fa:d2:97:0a:0e:e1:50: 3c:bc:e4:ee:e6:55:3a:71:a8:59:15:5a:5d:d1:65: 4d:bd:80:e0:ec:a4:af:87:d5:61:2f:80:28:1f:e9: c7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B1:FD:40:04:62:B0:F2:37:C0:A8:8E:F1:B2:25:5C:B1:F2:0A:D3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f2a4d99-6aa4-4f2b-8a7a-ee89f569501d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:9040::/48 Signature Algorithm: sha256WithRSAEncryption a2:b4:46:a5:8e:d5:55:1e:c5:c3:49:81:1b:12:17:de:af:c2: c0:ae:c3:2e:ad:e0:ab:7b:3f:71:75:de:e9:b6:66:cb:de:2e: 59:7b:f7:61:dc:07:19:e6:3a:5e:54:c0:95:7d:b0:36:ec:19: 48:ad:8e:ea:4b:70:2a:75:74:64:a2:e8:9b:a0:a0:6c:b5:26: c2:bf:70:c9:b5:a3:d3:e2:b8:be:32:4b:19:d7:1d:3f:15:f4: b6:2e:50:00:ee:1a:1c:38:d4:02:33:82:83:44:c7:a2:4c:6c: 17:0a:0d:04:66:f8:a1:e0:37:1e:b0:53:65:78:99:29:9e:62: 14:ca:c7:99:44:d0:51:b5:6c:24:3f:d0:78:3f:d8:3b:e4:0f: 6b:86:c0:75:78:7a:e8:10:09:42:d3:05:ca:b6:b6:88:52:69: 26:00:9d:f3:79:85:66:6c:e7:d9:73:8d:df:61:fe:d3:11:fc: 71:4c:76:66:7c:36:2c:92:36:57:79:d3:9b:29:58:9c:77:26: f3:0e:c7:d4:d6:03:25:25:1a:89:4a:be:a4:96:50:5b:e5:a7: 98:0e:98:d5:28:19:9a:17:18:2e:67:97:e0:0e:d6:c8:a8:9b: df:71:8f:09:dd:5a:9f:39:40:68:52:e6:5a:87:e5:9b:ef:f3: 14:9e:7c:13 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUJ0x3g+odZrVI/lWqDS6mCyBgQhowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTAwMDEwOVoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNANWZhMTJlOGFhMTJmNjE3YzMzNTZh YzdiYzg5YjAyZGY0OTJkMjA5OGQ1ZGQyYzlhMzE3NDk3NGYwY2M0MjE3NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivuYlKZP474Cf8fIZ6zsaZbQyzfh HLvfm9vuyk+Cc/3hFnzqu41hFTQDn1SLkBXcXePvBjZg4up3FwQ5y8tgu1DJBU4p SsU7gpV8dUVu2bs69zMfyS3OrGP2bCMnAlxYcSMu70B8NQxDdxoalJ5OTPSx/X7n J+N9Gp+59RubWY339+qBkP+FP4RA1aT+JuRo8IsLLfTOxJZdeWEFfTy5d4nL9WWM kiAMWD9YRMw4j5poaMdTgO3s0oFH+/9q/Z3/SGbdbRxDIkRZxd+aCnlalbVMAzp0 xfXp8vrSlwoO4VA8vOTu5lU6cahZFVpd0WVNvYDg7KSvh9VhL4AoH+nH9QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBex/UAEYrDyN8CojvGyJVyx8grTMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJmMmE0ZDk5LTZhYTQtNGYyYi04YTdhLWVlODlmNTY5NTAxZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba9JBAMA0GCSqGSIb3DQEBCwUAA4IBAQCitEaljtVVHsXDSYEb Ehfer8LArsMureCrez9xdd7ptmbL3i5Ze/dh3AcZ5jpeVMCVfbA27BlIrY7qS3Aq dXRkouiboKBstSbCv3DJtaPT4ri+MksZ1x0/FfS2LlAA7hocONQCM4KDRMeiTGwX Cg0EZvih4DcesFNleJkpnmIUyseZRNBRtWwkP9B4P9g75A9rhsB1eHroEAlC0wXK traIUmkmAJ3zeYVmbOfZc43fYf7TEfxxTHZmfDYskjZXedObKVicdybzDsfU1gMl JRqJSr6kllBb5aeYDpjVKBmaFxguZ5fgDtbIqJvfcY8J3VqfOUBoUuZah+Wb7/MU nnwT -----END CERTIFICATE-----Generated at Thu Apr 17 17:43:41 2025 by rpki-client