$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/34f0a7a2-e26e-4df2-8831-0d777cdb488c.roa File: 34f0a7a2-e26e-4df2-8831-0d777cdb488c.roa (raw, json) Hash identifier: jOBKeEEgK6PwdiBWS9fdnVrqnsdKsVMgvgbvRrdHJc8= Subject key identifier: A8:EE:5D:7F:47:C2:D1:6F:C4:EF:D1:F6:D7:7D:79:2B:00:91:13:A5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6118F77C7D39B4CDCCA3B810D50A3E1728895337 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/34f0a7a2-e26e-4df2-8831-0d777cdb488c.roa Signing time: Tue 25 Mar 2025 15:41:39 +0000 ROA not before: Tue 25 Mar 2025 15:41:39 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:2840::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:18:f7:7c:7d:39:b4:cd:cc:a3:b8:10:d5:0a:3e:17:28:89:53:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 15:41:39 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=94ff03e3332b213e066d2799677cdf5d4c54bd7ce1050f478d14b0346e7f2011, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:7b:df:36:0d:87:7f:57:a5:ca:31:b4:b3:27: d8:57:7d:95:64:69:66:81:ad:ba:5c:51:8d:f6:c1: e5:85:2b:ca:d0:0c:8d:1d:c6:ab:02:bf:56:73:dd: 46:ee:54:24:23:35:16:f5:8c:27:d4:60:66:1c:b6: 7c:73:97:99:21:f9:b9:85:d0:ea:9b:ab:84:ba:f1: 81:d2:9f:76:c3:65:c2:17:30:dc:5c:d8:ed:ff:8f: be:33:5f:b6:d4:be:2b:40:a9:d9:d4:27:bd:ce:1c: 9f:3c:dc:23:df:c2:34:2f:8e:8d:2f:3f:40:a9:10: 16:cd:1d:34:0b:5d:25:ee:ff:db:14:34:a3:5e:db: c5:0b:68:1e:f4:ba:5a:ed:b4:ff:1f:f6:85:c8:bd: ad:9e:d6:5c:56:a1:65:9c:63:08:f4:10:54:46:34: db:75:a1:22:65:e7:ed:ce:a4:0a:d2:8f:dd:b9:28: 87:94:8b:12:fb:9c:86:b8:34:1e:c5:e3:08:73:4f: 89:84:69:f6:5b:c6:48:82:92:37:34:66:9a:62:00: 07:50:99:34:0f:bb:03:12:cd:a5:8c:be:5a:ed:7a: 32:6f:3d:6e:ed:91:0b:ce:30:a3:78:0f:06:12:79: ce:09:33:f8:80:fd:b6:27:19:61:49:e9:6b:dd:40: 16:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:EE:5D:7F:47:C2:D1:6F:C4:EF:D1:F6:D7:7D:79:2B:00:91:13:A5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/34f0a7a2-e26e-4df2-8831-0d777cdb488c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:2840::/46 Signature Algorithm: sha256WithRSAEncryption ad:84:3a:5d:46:68:14:56:89:71:9d:5b:17:48:b0:89:3b:d2: 83:07:a2:58:9b:1c:52:14:26:a4:46:9f:1c:ff:9f:ff:31:33: 43:6b:45:86:40:ed:28:9d:43:1e:89:0f:de:89:68:71:06:33: ea:5f:93:a2:02:99:fa:e8:6f:ab:5d:af:03:4a:b6:00:39:ab: 1c:3d:c8:81:df:fa:21:36:da:a9:9a:1e:66:8c:6b:81:6a:db: 1f:14:f9:32:f0:93:e3:10:79:b4:a2:ed:42:73:64:8f:b7:59: 5b:2f:dd:d3:e0:c1:92:b9:76:bc:04:9e:84:86:db:4e:fb:5d: 5d:4f:bf:8d:f0:33:41:36:43:39:1c:b3:13:a9:99:c3:4e:ec: dd:ab:ce:0c:43:e8:b0:d2:9c:8e:ea:ff:f8:22:fd:4f:49:12: eb:0f:bd:bf:6a:b9:ba:df:c3:39:53:2a:2a:95:a7:db:c9:4f: 9a:d8:0e:01:bf:1f:6d:33:4e:36:74:65:45:54:96:c1:7c:58: 8b:6c:e4:7b:16:e1:f6:7b:9f:2f:71:11:c3:0b:f9:7b:37:0f: 29:9a:f9:62:fc:1a:90:c3:14:ea:67:f6:96:e3:72:07:07:5a: 1a:f4:b5:7c:0f:80:e2:67:17:db:dc:0e:c5:85:3f:33:2f:6a: c3:2b:20:19 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUYRj3fH05tM3Mo7gQ1Qo+FyiJUzcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE1NDEzOVoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAOTRmZjAzZTMzMzJiMjEzZTA2NmQy Nzk5Njc3Y2RmNWQ0YzU0YmQ3Y2UxMDUwZjQ3OGQxNGIwMzQ2ZTdmMjAxMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XvfNg2Hf1elyjG0syfYV32VZGlm ga26XFGN9sHlhSvK0AyNHcarAr9Wc91G7lQkIzUW9Ywn1GBmHLZ8c5eZIfm5hdDq m6uEuvGB0p92w2XCFzDcXNjt/4++M1+21L4rQKnZ1Ce9zhyfPNwj38I0L46NLz9A qRAWzR00C10l7v/bFDSjXtvFC2ge9Lpa7bT/H/aFyL2tntZcVqFlnGMI9BBURjTb daEiZeftzqQK0o/duSiHlIsS+5yGuDQexeMIc0+JhGn2W8ZIgpI3NGaaYgAHUJk0 D7sDEs2ljL5a7Xoybz1u7ZELzjCjeA8GEnnOCTP4gP22JxlhSelr3UAWuQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKjuXX9HwtFvxO/R9td9eSsAkROlMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM0ZjBhN2EyLWUyNmUtNGRmMi04ODMxLTBkNzc3Y2RiNDg4Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaShAMA0GCSqGSIb3DQEBCwUAA4IBAQCthDpdRmgUVolxnVsX SLCJO9KDB6JYmxxSFCakRp8c/5//MTNDa0WGQO0onUMeiQ/eiWhxBjPqX5OiApn6 6G+rXa8DSrYAOascPciB3/ohNtqpmh5mjGuBatsfFPky8JPjEHm0ou1Cc2SPt1lb L93T4MGSuXa8BJ6EhttO+11dT7+N8DNBNkM5HLMTqZnDTuzdq84MQ+iw0pyO6v/4 Iv1PSRLrD72/arm638M5UyoqlafbyU+a2A4Bvx9tM042dGVFVJbBfFiLbOR7FuH2 e58vcRHDC/l7Nw8pmvli/BqQwxTqZ/aW43IHB1oa9LV8D4DiZxfb3A7FhT8zL2rD KyAZ -----END CERTIFICATE-----Generated at Thu Apr 17 17:46:00 2025 by rpki-client