$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3b49e771-8c61-46ae-95d2-9d6609249da0.roa File: 3b49e771-8c61-46ae-95d2-9d6609249da0.roa (raw, json) Hash identifier: P5j+AAatcJgM5DYfYffsvl/iQ8FkVtT0R0Z/DOtVrak= Subject key identifier: F9:64:75:3A:CF:32:30:9E:C9:49:E4:B3:5C:BF:E7:23:F1:38:47:E1 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6284961462345491AB28DC801C3E85393069B73F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3b49e771-8c61-46ae-95d2-9d6609249da0.roa Signing time: Tue 25 Mar 2025 16:50:52 +0000 ROA not before: Tue 25 Mar 2025 16:50:52 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da19:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:84:96:14:62:34:54:91:ab:28:dc:80:1c:3e:85:39:30:69:b7:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 16:50:52 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=8364c5227814eb42a2dce797ebf0507c1f3c29e3c51fe9e04b4a767001415f87, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:56:84:5c:e9:84:c2:9d:df:29:4b:4f:2e:f6: c1:30:2e:5b:f0:51:ba:03:2e:fd:d4:c3:a5:ef:f1: cb:b5:65:17:44:66:71:5f:cc:3b:a2:08:1c:1d:16: 25:23:4c:c1:b6:fa:69:b4:29:c9:24:a1:c1:87:0f: 8b:8d:37:d5:96:ac:69:04:48:21:9a:02:97:fe:1e: b5:95:10:20:d0:69:eb:fb:e1:83:4d:b4:aa:28:3f: 27:9b:57:4b:90:cf:a9:b4:7f:4c:53:79:52:6e:49: 82:af:11:37:58:ca:47:f8:8c:13:85:46:bf:a1:10: 3b:7c:2c:cb:66:69:57:8b:ac:b1:93:d1:da:87:cd: 8a:a8:d9:de:89:49:f7:1d:41:40:61:bc:22:28:69: 74:a3:04:c9:83:77:5f:83:0f:4a:c7:da:cf:ac:a8: d1:80:53:e3:5d:fe:25:c7:fd:48:a1:9f:e5:87:6f: 9c:d3:40:88:a7:40:5a:1f:de:e2:dd:b8:45:ed:c1: 22:7e:1b:23:db:ed:52:3a:8f:5b:b3:e4:fa:90:54: f3:c4:43:bb:11:af:0a:f2:40:27:a2:a9:ff:44:6a: 5f:60:a5:69:7f:b3:d3:de:65:56:1f:1f:42:a9:31: 2a:69:2b:76:ad:bc:87:d0:62:7a:0b:33:d6:60:fd: 1b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:64:75:3A:CF:32:30:9E:C9:49:E4:B3:5C:BF:E7:23:F1:38:47:E1 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3b49e771-8c61-46ae-95d2-9d6609249da0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da19:800::/38 Signature Algorithm: sha256WithRSAEncryption 46:ce:af:12:7e:42:78:e4:c5:ba:0e:16:d4:c4:3a:99:75:8e: a1:2b:85:42:30:3f:0a:c4:a9:f0:82:db:fe:8c:ae:9a:97:86: c2:b6:3e:99:b2:25:64:9e:ec:36:93:bd:94:b7:c2:3b:78:aa: bf:7b:bf:b0:42:a5:b3:b2:3c:4f:3e:70:35:6a:a0:fe:ce:f3: 0d:12:f9:c1:dc:08:36:68:a8:22:59:9e:97:18:65:80:82:9d: c9:1a:82:e9:47:ad:bc:e5:29:1f:09:e3:87:63:fe:fd:0a:55: 16:4f:37:9f:0a:86:c8:76:de:00:12:a4:cd:02:72:d4:dd:e6: d5:a1:cd:59:07:2d:d4:80:6b:3e:23:d5:72:08:8d:57:12:45: 47:a4:0b:30:12:79:2f:5e:38:9f:b2:d6:7f:86:36:3b:11:f1: d5:b0:58:70:0b:46:3d:ae:80:79:e4:cf:8e:02:df:d4:e2:6f: f6:9d:01:3a:97:e4:44:51:33:4b:98:04:51:ff:ca:39:2b:63: 4c:84:17:82:c4:46:11:bb:51:69:7f:25:3f:de:04:5e:92:b1: ff:f6:1e:fa:09:84:f3:92:20:5e:9f:32:3b:22:7f:db:19:96: ed:ae:fe:dd:db:c2:a5:35:9b:ef:0f:7b:e5:f1:17:ef:b3:35: 13:42:35:0b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUYoSWFGI0VJGrKNyAHD6FOTBptz8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE2NTA1MloX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAODM2NGM1MjI3ODE0ZWI0MmEyZGNl Nzk3ZWJmMDUwN2MxZjNjMjllM2M1MWZlOWUwNGI0YTc2NzAwMTQxNWY4NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1aEXOmEwp3fKUtPLvbBMC5b8FG6 Ay791MOl7/HLtWUXRGZxX8w7oggcHRYlI0zBtvpptCnJJKHBhw+LjTfVlqxpBEgh mgKX/h61lRAg0Gnr++GDTbSqKD8nm1dLkM+ptH9MU3lSbkmCrxE3WMpH+IwThUa/ oRA7fCzLZmlXi6yxk9Hah82KqNneiUn3HUFAYbwiKGl0owTJg3dfgw9Kx9rPrKjR gFPjXf4lx/1IoZ/lh2+c00CIp0BaH97i3bhF7cEifhsj2+1SOo9bs+T6kFTzxEO7 Ea8K8kAnoqn/RGpfYKVpf7PT3mVWHx9CqTEqaSt2rbyH0GJ6CzPWYP0bVQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPlkdTrPMjCeyUnks1y/5yPxOEfhMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNiNDllNzcxLThjNjEtNDZhZS05NWQyLTlkNjYwOTI0OWRhMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaGQgwDQYJKoZIhvcNAQELBQADggEBAEbOrxJ+QnjkxboOFtTE Opl1jqErhUIwPwrEqfCC2/6MrpqXhsK2PpmyJWSe7DaTvZS3wjt4qr97v7BCpbOy PE8+cDVqoP7O8w0S+cHcCDZoqCJZnpcYZYCCnckagulHrbzlKR8J44dj/v0KVRZP N58Khsh23gASpM0CctTd5tWhzVkHLdSAaz4j1XIIjVcSRUekCzASeS9eOJ+y1n+G NjsR8dWwWHALRj2ugHnkz44C39Tib/adATqX5ERRM0uYBFH/yjkrY0yEF4LERhG7 UWl/JT/eBF6Ssf/2HvoJhPOSIF6fMjsif9sZlu2u/t3bwqU1m+8Pe+XxF++zNRNC NQs= -----END CERTIFICATE-----Generated at Thu Apr 17 18:07:11 2025 by rpki-client