$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6a37e2e0-7837-401c-a03e-a8f996e737fe.roa File: 6a37e2e0-7837-401c-a03e-a8f996e737fe.roa (raw, json) Hash identifier: 3qe5LD1eX8tJ3ytA32o9U461C+JSpoDY4RbnhB6U5Hw= Subject key identifier: 93:A9:22:CC:56:D8:C4:8D:B8:24:CC:11:41:1B:3D:04:9D:3A:E0:F0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0CA96524CC07BC42A0A169AAE52767D42DEF29F4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6a37e2e0-7837-401c-a03e-a8f996e737fe.roa Signing time: Tue 25 Mar 2025 15:51:58 +0000 ROA not before: Tue 25 Mar 2025 15:51:58 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:c0c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:a9:65:24:cc:07:bc:42:a0:a1:69:aa:e5:27:67:d4:2d:ef:29:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 15:51:58 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=37c41f8bf936480321d7efff790134798ff2b30024bc2d59d8171d411777f655, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:dd:23:a2:70:44:7c:39:c8:2f:fe:e5:ae:a5: f0:df:3b:d9:02:03:80:df:39:76:3b:dd:1d:f6:e7: 85:ca:57:93:45:99:ba:f0:c5:70:ef:48:eb:20:14: e3:18:70:96:6a:90:cc:6c:d9:9e:bd:1f:af:5b:d7: a3:87:9f:a0:68:ef:0c:06:a8:6d:24:60:dc:7e:01: e5:83:5d:8b:0c:c5:31:c3:35:9b:7e:85:2a:ca:4a: 55:73:09:67:99:4a:a1:db:bd:df:8e:ef:f6:93:58: 72:18:4e:f5:ca:72:4f:4e:b8:78:27:57:cc:85:13: 07:e2:6d:e4:95:4c:f7:e0:36:94:af:20:98:bf:b7: a8:6c:a4:10:d9:27:7f:3e:2f:76:97:a8:2f:2d:43: 65:96:a5:bd:70:86:37:5f:5a:de:67:ac:27:3d:83: 0a:dd:64:15:70:13:9b:45:86:c8:bf:bc:2a:0b:ef: c1:19:81:25:e3:72:28:b0:72:ad:3c:9e:37:7d:bb: 01:00:98:6b:2a:8a:15:9b:51:34:f4:5b:31:51:d4: ad:2b:ec:b3:14:65:48:5e:f5:4d:52:a7:58:3e:6b: 59:0f:43:c6:07:6e:c9:5c:c8:38:3a:53:0b:22:1f: 57:ab:8d:5e:b3:d1:f7:af:20:95:f9:c4:f2:b9:6b: fc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A9:22:CC:56:D8:C4:8D:B8:24:CC:11:41:1B:3D:04:9D:3A:E0:F0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6a37e2e0-7837-401c-a03e-a8f996e737fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:c0c0::/46 Signature Algorithm: sha256WithRSAEncryption 63:e1:30:4e:73:ad:d7:7a:26:17:34:f2:50:c4:03:ce:26:e2: 5d:79:2f:c1:54:ff:d6:6f:9a:32:a6:fb:a4:90:d5:aa:b6:6a: bf:7c:c5:5c:8a:93:be:9f:fb:e9:8c:25:82:d0:5c:fe:68:c6: 70:d2:51:ae:8f:a5:07:74:65:5e:b1:96:5f:4d:23:72:61:ee: 67:31:f2:84:3d:c3:36:eb:86:f9:21:d7:18:27:18:53:ba:c8: 72:61:fe:69:6b:48:6f:57:e3:c0:6e:ad:0e:2d:e6:8d:ea:40: 7e:f1:f8:f0:6e:89:e0:e8:5c:ab:02:e7:73:f7:db:9a:80:0c: ec:7f:0c:cc:e0:10:55:8d:38:4a:01:b6:c0:a6:b8:12:9d:05: d2:a1:45:76:da:ff:f7:86:e6:65:2e:ee:0b:b9:f9:4c:dc:b1: a6:cd:13:8b:b9:07:83:22:86:f4:3e:c3:fe:08:7f:93:3d:85: 77:4c:a9:cb:d7:76:75:73:a2:d4:15:ee:1e:30:ad:14:f5:d4: 9a:51:be:a2:19:0e:16:9e:d4:8d:4a:fb:9b:c7:53:2f:44:8e: 06:7a:a1:96:bc:18:ff:e0:c9:3c:b1:4f:3c:78:3e:1a:52:0b: ad:57:dc:07:69:c9:bc:d0:44:2f:89:37:3a:e4:59:9a:1d:2a: a6:95:bb:73 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUDKllJMwHvEKgoWmq5Sdn1C3vKfQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE1NTE1OFoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAMzdjNDFmOGJmOTM2NDgwMzIxZDdl ZmZmNzkwMTM0Nzk4ZmYyYjMwMDI0YmMyZDU5ZDgxNzFkNDExNzc3ZjY1NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo90jonBEfDnIL/7lrqXw3zvZAgOA 3zl2O90d9ueFyleTRZm68MVw70jrIBTjGHCWapDMbNmevR+vW9ejh5+gaO8MBqht JGDcfgHlg12LDMUxwzWbfoUqykpVcwlnmUqh273fju/2k1hyGE71ynJPTrh4J1fM hRMH4m3klUz34DaUryCYv7eobKQQ2Sd/Pi92l6gvLUNllqW9cIY3X1reZ6wnPYMK 3WQVcBObRYbIv7wqC+/BGYEl43IosHKtPJ43fbsBAJhrKooVm1E09FsxUdStK+yz FGVIXvVNUqdYPmtZD0PGB27JXMg4OlMLIh9Xq41es9H3ryCV+cTyuWv8OQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJOpIsxW2MSNuCTMEUEbPQSdOuDwMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzZhMzdlMmUwLTc4MzctNDAxYy1hMDNlLWE4Zjk5NmU3MzdmZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba98DAMA0GCSqGSIb3DQEBCwUAA4IBAQBj4TBOc63XeiYXNPJQ xAPOJuJdeS/BVP/Wb5oypvukkNWqtmq/fMVcipO+n/vpjCWC0Fz+aMZw0lGuj6UH dGVesZZfTSNyYe5nMfKEPcM264b5IdcYJxhTushyYf5pa0hvV+PAbq0OLeaN6kB+ 8fjwbong6FyrAudz99uagAzsfwzM4BBVjThKAbbAprgSnQXSoUV22v/3huZlLu4L uflM3LGmzROLuQeDIob0PsP+CH+TPYV3TKnL13Z1c6LUFe4eMK0U9dSaUb6iGQ4W ntSNSvubx1MvRI4GeqGWvBj/4Mk8sU88eD4aUgutV9wHacm80EQviTc65FmaHSqm lbtz -----END CERTIFICATE-----Generated at Thu Apr 17 17:34:08 2025 by rpki-client