$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3479d056-3c82-4999-8725-061e01b95c31.roa File: 3479d056-3c82-4999-8725-061e01b95c31.roa (raw, json) Hash identifier: odP0hb/TsrZb/k7Yo7pjZ8tW9Mz3aOBJtRmHcKbm0Nw= Subject key identifier: 26:97:96:6C:29:BF:4E:0F:0D:01:3C:37:A1:E9:31:8E:DB:AF:65:1B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 62C6D0F4B99BB8A803A39C43EE626745D6CA8E88 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3479d056-3c82-4999-8725-061e01b95c31.roa Signing time: Tue 25 Mar 2025 15:02:16 +0000 ROA not before: Tue 25 Mar 2025 15:02:16 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:90c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:c6:d0:f4:b9:9b:b8:a8:03:a3:9c:43:ee:62:67:45:d6:ca:8e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 15:02:16 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=0f0cb39c158ff9bb46609ef59493b182ed3d0d0849c9ad6f5d4819fdb8e5dbcb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1c:e6:39:9b:fe:95:67:41:cd:e4:61:ae:8a: 5a:f0:eb:e1:76:ed:22:7d:c3:8f:b4:7b:48:9f:6e: 32:63:75:12:e2:18:b1:15:ff:e1:d1:90:99:61:a8: 0e:86:4b:5b:97:8a:7f:2d:02:06:20:5f:62:af:33: 61:86:83:de:70:60:69:c0:42:0b:38:79:fc:1f:00: 84:42:4e:4b:08:d4:18:9f:d1:84:22:96:dd:74:d6: 80:c3:a4:b8:10:5a:cc:37:cb:6a:71:2d:3c:9b:09: 24:9c:a8:8e:1c:a8:e9:1c:4c:a5:35:4c:d0:35:20: 68:15:95:26:32:37:4d:72:46:97:a4:19:e5:17:d3: 6b:ad:04:69:0a:7b:73:cb:99:65:45:a5:55:de:51: 67:07:09:a2:5b:52:2b:98:30:c9:89:70:0b:5f:b8: b3:45:98:06:35:f3:eb:3a:34:9f:bb:c8:e2:db:ee: 75:fd:cd:9e:11:ba:83:75:95:e8:b8:11:97:c9:45: 69:da:f4:2a:e0:38:65:22:96:cc:bf:e4:a1:0b:50: a0:7f:ef:c8:63:03:b7:e5:03:6f:4e:59:1c:1c:42: 31:22:33:c5:ea:ae:68:e4:ad:52:97:03:2d:1c:89: 9a:f5:1e:50:10:2d:3d:0e:14:28:58:72:10:17:99: 3f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:97:96:6C:29:BF:4E:0F:0D:01:3C:37:A1:E9:31:8E:DB:AF:65:1B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3479d056-3c82-4999-8725-061e01b95c31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:90c0::/48 Signature Algorithm: sha256WithRSAEncryption 6a:b7:2f:b3:60:63:12:43:fd:43:ee:bd:de:77:0a:78:c0:23: c0:7c:27:5f:2e:3b:42:53:68:3f:23:e8:4b:d1:11:ef:c5:05: a2:8e:e5:82:0d:67:ff:30:cb:12:60:df:1e:57:19:e0:8e:87: fd:e2:c3:b6:9a:f3:ff:35:75:9b:df:85:27:ff:4a:17:2e:2f: aa:d1:8c:4e:9e:a1:5f:39:48:f2:70:e7:56:74:84:56:bf:7b: 15:f0:a8:65:63:20:c3:a5:3c:7b:e3:bb:6c:e4:36:a2:6e:21: 91:7d:cf:a3:4b:e0:77:61:96:b6:76:1d:db:48:ad:e1:e3:70: 51:e1:cf:c6:29:45:89:2b:8f:93:3e:01:85:bf:8d:1b:cc:c6: 97:26:41:44:16:34:10:ee:92:df:8e:f5:9f:f0:90:e1:d5:a6: 02:a5:18:47:c9:82:0a:47:fb:2b:6d:f9:33:69:6b:72:5b:54: b5:b9:24:89:4b:90:6c:15:f6:e2:e4:d7:fa:8d:0f:49:2a:38: 7c:00:f4:3f:58:e7:92:91:30:30:59:fe:e6:2f:f4:23:8c:a2: e0:48:f9:eb:c7:c2:2f:fc:db:31:0b:4c:28:b6:0d:59:14:d8: 30:dd:b6:2b:00:21:56:3a:bf:da:97:34:2a:7a:e2:68:38:0d: 8e:a8:32:04 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUYsbQ9LmbuKgDo5xD7mJnRdbKjogwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE1MDIxNloX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAMGYwY2IzOWMxNThmZjliYjQ2NjA5 ZWY1OTQ5M2IxODJlZDNkMGQwODQ5YzlhZDZmNWQ0ODE5ZmRiOGU1ZGJjYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBzmOZv+lWdBzeRhropa8Ovhdu0i fcOPtHtIn24yY3US4hixFf/h0ZCZYagOhktbl4p/LQIGIF9irzNhhoPecGBpwEIL OHn8HwCEQk5LCNQYn9GEIpbddNaAw6S4EFrMN8tqcS08mwkknKiOHKjpHEylNUzQ NSBoFZUmMjdNckaXpBnlF9NrrQRpCntzy5llRaVV3lFnBwmiW1IrmDDJiXALX7iz RZgGNfPrOjSfu8ji2+51/c2eEbqDdZXouBGXyUVp2vQq4DhlIpbMv+ShC1Cgf+/I YwO35QNvTlkcHEIxIjPF6q5o5K1SlwMtHIma9R5QEC09DhQoWHIQF5k//QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCaXlmwpv04PDQE8N6HpMY7br2UbMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM0NzlkMDU2LTNjODItNDk5OS04NzI1LTA2MWUwMWI5NWMzMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYZDAMA0GCSqGSIb3DQEBCwUAA4IBAQBqty+zYGMSQ/1D7r3e dwp4wCPAfCdfLjtCU2g/I+hL0RHvxQWijuWCDWf/MMsSYN8eVxngjof94sO2mvP/ NXWb34Un/0oXLi+q0YxOnqFfOUjycOdWdIRWv3sV8KhlYyDDpTx747ts5DaibiGR fc+jS+B3YZa2dh3bSK3h43BR4c/GKUWJK4+TPgGFv40bzMaXJkFEFjQQ7pLfjvWf 8JDh1aYCpRhHyYIKR/srbfkzaWtyW1S1uSSJS5BsFfbi5Nf6jQ9JKjh8APQ/WOeS kTAwWf7mL/QjjKLgSPnrx8Iv/NsxC0wotg1ZFNgw3bYrACFWOr/alzQqeuJoOA2O qDIE -----END CERTIFICATE-----Generated at Thu Apr 17 18:09:27 2025 by rpki-client