$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3aaf1f3c-55b8-419c-bcaf-892b30f3ef3c.roa File: 3aaf1f3c-55b8-419c-bcaf-892b30f3ef3c.roa (raw, json) Hash identifier: t2FHLI4ssGkAb+wRtMm0kghxX3yYrt+IBIdYrSYOWZY= Subject key identifier: E3:1A:2C:8E:E1:1A:90:64:36:14:2E:9F:35:0D:EA:D0:B9:82:AE:A4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4EF6F0A6A414A7750679AC6ACD980E4E83E735C5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3aaf1f3c-55b8-419c-bcaf-892b30f3ef3c.roa Signing time: Tue 25 Mar 2025 16:00:16 +0000 ROA not before: Tue 25 Mar 2025 16:00:16 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:6000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:f6:f0:a6:a4:14:a7:75:06:79:ac:6a:cd:98:0e:4e:83:e7:35:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 16:00:16 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=b85456ad7ec9dd1f7c090fcb2079408d87e965b457761e0b39ba6c1fa8b8feb6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:77:40:30:da:fa:df:31:93:55:0b:d3:ce:d3: ff:98:5c:90:36:71:e1:a7:96:d1:e0:e9:75:0d:ec: 6d:44:be:70:e3:3e:f5:c5:02:db:33:bc:92:3a:a5: 66:ae:e5:de:fb:46:3b:38:09:2d:32:60:b1:22:90: ce:93:0d:64:63:47:d6:1a:29:8c:e4:3a:1a:74:01: 15:47:f1:f1:72:15:e4:e9:cf:1e:43:9d:57:cd:cc: fe:f2:ac:ba:68:f1:60:4c:a0:28:1c:f4:01:3c:50: a1:83:bc:e7:52:0d:d6:b5:f9:39:53:22:1a:39:cb: ab:b1:6a:a9:a7:cd:e2:3f:c7:d9:48:36:55:20:a3: e0:22:9e:bc:8c:d7:6a:a9:61:53:29:14:b8:c8:a2: 8e:28:55:b6:65:63:14:e2:00:65:4b:de:66:87:6d: 0a:bc:23:61:b2:b9:72:63:32:a4:85:95:f7:6c:e4: 86:61:a7:7a:4a:b1:81:7e:c7:dd:e7:f2:6f:ec:6a: a3:87:9a:81:03:8f:2e:80:bd:c3:ef:9a:ea:0f:d0: e0:45:92:39:6a:56:98:9e:31:08:b0:d1:94:73:ab: 6a:3a:4c:de:10:7e:03:20:c4:22:3a:f6:73:8d:10: 3d:8f:e9:8c:06:1f:e8:2f:0f:8d:4e:02:57:f8:80: 45:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:1A:2C:8E:E1:1A:90:64:36:14:2E:9F:35:0D:EA:D0:B9:82:AE:A4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3aaf1f3c-55b8-419c-bcaf-892b30f3ef3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:6000::/40 Signature Algorithm: sha256WithRSAEncryption 9c:f7:f3:5e:55:2c:4a:da:35:ca:a3:f3:a4:e7:8e:8e:ea:75: 63:d2:b0:5f:a4:1c:b2:c6:21:ed:d2:fa:60:95:13:46:1d:48: 4d:aa:42:c7:c0:fe:92:39:e9:29:12:fb:88:d3:3f:14:b2:b1: 5d:6b:37:00:dd:3f:97:bd:df:71:db:a6:22:d0:b9:96:3b:5e: 67:76:92:56:2d:cc:cf:d9:e6:5d:16:9c:1d:7c:8d:b7:28:36: f9:54:21:5b:67:eb:51:60:dd:d0:55:8e:fa:31:3a:21:49:da: 22:f6:b2:e5:5f:17:31:02:42:bb:b1:4a:e6:03:fd:af:09:de: e6:fa:31:ba:14:03:ca:77:19:eb:16:e1:4d:b0:7b:ec:64:d9: 3e:87:25:7b:46:68:80:f6:70:cd:65:02:78:ad:19:f8:35:ac: ff:4a:7f:79:db:37:1f:eb:60:94:8c:d4:d9:db:52:7b:36:b4: 46:a0:33:d9:8f:00:b4:6d:42:4d:b7:ca:08:fd:59:2a:41:4f: 35:54:06:9d:d4:0e:3b:e6:cd:a7:3e:37:41:8a:b8:9e:2d:10: e6:5f:fd:e1:17:9d:03:e9:92:51:c2:ee:ee:98:e4:ff:ed:5f: 25:74:ca:e6:e3:d6:4a:0f:d4:1c:48:f4:5e:27:79:01:04:06: 67:f5:0b:01 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUTvbwpqQUp3UGeaxqzZgOToPnNcUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE2MDAxNloX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAYjg1NDU2YWQ3ZWM5ZGQxZjdjMDkw ZmNiMjA3OTQwOGQ4N2U5NjViNDU3NzYxZTBiMzliYTZjMWZhOGI4ZmViNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3dAMNr63zGTVQvTztP/mFyQNnHh p5bR4Ol1DextRL5w4z71xQLbM7ySOqVmruXe+0Y7OAktMmCxIpDOkw1kY0fWGimM 5DoadAEVR/HxchXk6c8eQ51Xzcz+8qy6aPFgTKAoHPQBPFChg7znUg3Wtfk5UyIa OcursWqpp83iP8fZSDZVIKPgIp68jNdqqWFTKRS4yKKOKFW2ZWMU4gBlS95mh20K vCNhsrlyYzKkhZX3bOSGYad6SrGBfsfd5/Jv7Gqjh5qBA48ugL3D75rqD9DgRZI5 alaYnjEIsNGUc6tqOkzeEH4DIMQiOvZzjRA9j+mMBh/oLw+NTgJX+IBFNQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOMaLI7hGpBkNhQunzUN6tC5gq6kMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNhYWYxZjNjLTU1YjgtNDE5Yy1iY2FmLTg5MmIzMGYzZWYzYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+2AwDQYJKoZIhvcNAQELBQADggEBAJz3815VLEraNcqj86Tn jo7qdWPSsF+kHLLGIe3S+mCVE0YdSE2qQsfA/pI56SkS+4jTPxSysV1rNwDdP5e9 33HbpiLQuZY7Xmd2klYtzM/Z5l0WnB18jbcoNvlUIVtn61Fg3dBVjvoxOiFJ2iL2 suVfFzECQruxSuYD/a8J3ub6MboUA8p3GesW4U2we+xk2T6HJXtGaID2cM1lAnit Gfg1rP9Kf3nbNx/rYJSM1NnbUns2tEagM9mPALRtQk23ygj9WSpBTzVUBp3UDjvm zac+N0GKuJ4tEOZf/eEXnQPpklHC7u6Y5P/tXyV0yubj1koP1BxI9F4neQEEBmf1 CwE= -----END CERTIFICATE-----Generated at Thu Apr 17 17:29:16 2025 by rpki-client