$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3be470fa-f903-4416-9c0c-3ad2cb584a8d.roa File: 3be470fa-f903-4416-9c0c-3ad2cb584a8d.roa (raw, json) Hash identifier: ulPpQeW1mcw3Bwtx+9/Pxx/IYOu+ASySMqhqInFlYl0= Subject key identifier: 42:6E:47:15:61:BA:B4:AB:4A:29:34:F5:4C:E8:65:AD:F4:06:A0:EB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: BB0C41335299CE81F617317BFB6F1F549719F0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3be470fa-f903-4416-9c0c-3ad2cb584a8d.roa Signing time: Tue 25 Mar 2025 00:50:16 +0000 ROA not before: Tue 25 Mar 2025 00:50:16 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:8080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: bb:0c:41:33:52:99:ce:81:f6:17:31:7b:fb:6f:1f:54:97:19:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 00:50:16 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=ac9d4eb8e113b26e81ba8e80b53c21f169fd1e898b0e0b78fa686f47035d446a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0c:46:3f:77:ec:11:46:21:26:f2:ee:11:c8: f8:fb:fd:da:d2:6e:81:6d:da:e5:af:7b:63:69:67: 7c:72:e2:54:0c:c1:f8:1a:75:79:c9:ea:ee:65:5c: fb:b2:c2:80:7c:50:a5:8f:e5:e6:62:4b:b1:bc:cf: 3b:08:fc:ec:2c:f3:21:54:42:54:fd:a3:e5:ea:93: 76:24:ca:3b:16:7c:54:f0:f8:32:0d:df:63:f0:52: 72:71:61:d7:05:df:82:15:24:1a:bf:1c:76:3c:ed: bd:8a:50:05:51:ac:3c:91:b9:c4:99:ee:fe:d2:91: f5:a2:a2:4a:40:84:7e:33:d9:7a:8a:eb:32:75:51: ef:7b:6e:2d:e7:06:3c:42:b2:ca:3e:b6:b6:4d:f5: 97:21:37:88:d1:26:90:cf:e3:9f:ca:03:f1:ae:b9: f6:7b:2e:22:fa:1a:fd:17:bf:97:da:32:9b:a9:e6: 6e:26:7a:12:38:06:33:db:f2:57:38:53:15:1e:2f: e9:d1:79:29:3f:60:60:73:e5:9c:09:2f:15:1a:27: f6:25:d9:a0:c9:84:f6:fb:b5:54:8e:2e:b0:9f:37: 21:83:70:ec:d8:de:67:08:a6:65:26:ba:c9:73:20: c2:d9:6f:27:bb:cc:b5:d2:87:91:65:38:27:2f:53: 6b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6E:47:15:61:BA:B4:AB:4A:29:34:F5:4C:E8:65:AD:F4:06:A0:EB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3be470fa-f903-4416-9c0c-3ad2cb584a8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:8080::/46 Signature Algorithm: sha256WithRSAEncryption 56:72:b0:2a:c8:fc:de:ef:fd:53:6e:71:2f:3a:d2:cc:3a:81: a2:9d:d7:5b:ad:61:71:bd:a1:e6:36:ee:aa:e5:7f:91:9f:14: c3:ce:04:67:15:e7:11:5f:12:c9:c1:6e:09:00:cf:09:6b:82: 59:b6:b7:b1:f2:7e:6f:78:a7:c6:e6:49:52:33:b4:90:75:0a: 2f:7e:81:59:e7:14:0f:6e:51:38:0b:fa:4c:d8:4d:36:f2:a0: 54:69:f6:99:91:32:60:1e:8b:7a:bd:f8:8b:24:aa:5f:68:a5: 0a:9f:4c:34:10:b5:c2:49:f1:a1:c4:50:a7:ef:c4:89:a3:70: 8b:a4:50:73:c6:64:bc:ac:bb:9a:3f:d2:6f:93:71:b5:0e:98: 1a:c7:a6:58:66:3f:ef:6f:1a:30:a3:53:20:d0:cd:60:30:d0: 84:03:a5:4c:9e:64:b5:56:c8:fa:f1:2e:3a:45:9a:a0:e5:94: df:9c:8e:5a:17:57:bf:7d:9b:f6:5f:52:ea:81:5b:ea:8c:1d: d3:37:4a:fb:99:d5:c7:19:c5:1b:3a:49:fe:cd:1c:91:82:24: ed:e1:5c:8d:d3:db:e0:fb:69:84:1c:b5:ce:36:c5:d6:ac:53: 3b:2d:db:b6:1e:fa:3d:86:a8:65:00:19:bc:7a:91:ac:e4:6e: 04:0e:82:f4 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUALsMQTNSmc6B9hcxe/tvH1SXGfAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTAwNTAxNloX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAYWM5ZDRlYjhlMTEzYjI2ZTgxYmE4 ZTgwYjUzYzIxZjE2OWZkMWU4OThiMGUwYjc4ZmE2ODZmNDcwMzVkNDQ2YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugxGP3fsEUYhJvLuEcj4+/3a0m6B bdrlr3tjaWd8cuJUDMH4GnV5yeruZVz7ssKAfFClj+XmYkuxvM87CPzsLPMhVEJU /aPl6pN2JMo7FnxU8PgyDd9j8FJycWHXBd+CFSQavxx2PO29ilAFUaw8kbnEme7+ 0pH1oqJKQIR+M9l6iusydVHve24t5wY8QrLKPra2TfWXITeI0SaQz+OfygPxrrn2 ey4i+hr9F7+X2jKbqeZuJnoSOAYz2/JXOFMVHi/p0XkpP2Bgc+WcCS8VGif2Jdmg yYT2+7VUji6wnzchg3Ds2N5nCKZlJrrJcyDC2W8nu8y10oeRZTgnL1NrNQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEJuRxVhurSrSik09UzoZa30BqDrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNiZTQ3MGZhLWY5MDMtNDQxNi05YzBjLTNhZDJjYjU4NGE4ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba94CAMA0GCSqGSIb3DQEBCwUAA4IBAQBWcrAqyPze7/1TbnEv OtLMOoGinddbrWFxvaHmNu6q5X+RnxTDzgRnFecRXxLJwW4JAM8Ja4JZtrex8n5v eKfG5klSM7SQdQovfoFZ5xQPblE4C/pM2E028qBUafaZkTJgHot6vfiLJKpfaKUK n0w0ELXCSfGhxFCn78SJo3CLpFBzxmS8rLuaP9Jvk3G1Dpgax6ZYZj/vbxowo1Mg 0M1gMNCEA6VMnmS1Vsj68S46RZqg5ZTfnI5aF1e/fZv2X1LqgVvqjB3TN0r7mdXH GcUbOkn+zRyRgiTt4VyN09vg+2mEHLXONsXWrFM7Ldu2Hvo9hqhlABm8epGs5G4E DoL0 -----END CERTIFICATE-----Generated at Thu Apr 17 17:31:44 2025 by rpki-client