$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6e03d559-5f6b-4f35-b42a-126f6eddced6.roa File: 6e03d559-5f6b-4f35-b42a-126f6eddced6.roa (raw, json) Hash identifier: e3IpqSwiV7aj/1zFWi9EZJ0HP53oC+zEUVZ6urjpBU8= Subject key identifier: A3:DB:7B:DB:B0:93:A3:FC:50:2A:7B:11:51:C3:8F:EA:4B:E6:D6:B5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 617A8DBA8F64A1411900B1A3C5D704E3F4D8150B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6e03d559-5f6b-4f35-b42a-126f6eddced6.roa Signing time: Tue 25 Mar 2025 16:11:34 +0000 ROA not before: Tue 25 Mar 2025 16:11:34 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:8800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:7a:8d:ba:8f:64:a1:41:19:00:b1:a3:c5:d7:04:e3:f4:d8:15:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 16:11:34 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=f398b12868795d08b6b6e878ae4f6a43ad2596416e7dd2c9d2fca67f00c2f324, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:90:03:45:fa:d3:78:fb:1c:f3:de:77:04:00: 8e:84:b3:92:23:92:db:c0:27:85:6d:e4:90:2c:58: d8:99:fc:d2:e1:22:c1:79:a2:75:36:a1:72:78:b5: b1:69:ec:22:bb:c2:84:45:73:70:58:71:f9:c5:9b: 70:0d:3e:83:2a:51:47:54:9d:ae:20:55:0c:c3:38: c7:9f:1c:c1:ac:e0:79:e7:eb:76:e6:e5:5f:0a:ea: 67:ae:1f:8b:a2:48:60:1d:76:65:18:d5:76:73:96: e7:78:aa:f2:5c:cf:e1:65:94:94:32:b6:1a:22:91: cc:99:37:c0:30:63:bc:ce:d9:03:c5:76:5a:4e:92: dd:c7:93:5c:4d:b2:c2:b1:99:0c:89:f4:b1:4d:36: 84:2f:2a:53:90:c6:26:5c:84:0b:91:c7:b4:d6:d8: db:80:70:71:b5:9a:1e:1f:7a:21:1b:81:c7:5a:fe: c0:63:cf:e6:18:52:e9:5a:ae:32:2d:e6:6d:41:fd: 73:a2:93:4e:d7:23:51:88:e3:98:65:d6:96:c8:1a: 37:70:7f:c1:cc:43:0a:ba:88:80:04:2d:45:2a:34: 52:11:dc:2b:23:78:2e:37:34:31:d0:b3:0c:22:ea: 0d:66:13:b3:b3:39:41:92:09:f0:5e:d5:6e:24:c1: cf:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:DB:7B:DB:B0:93:A3:FC:50:2A:7B:11:51:C3:8F:EA:4B:E6:D6:B5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6e03d559-5f6b-4f35-b42a-126f6eddced6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:8800::/40 Signature Algorithm: sha256WithRSAEncryption c9:16:e3:38:9c:0d:b2:71:09:1f:75:8b:cd:b5:3f:8b:9e:38: 44:06:76:5d:92:cf:8b:7f:5a:0c:d8:e9:49:86:1a:99:16:c9: c2:b0:77:25:23:13:41:ac:8b:34:1b:89:e3:9d:be:3e:74:93: 02:a9:ca:04:4f:cd:05:61:a9:1e:89:04:70:4a:46:c1:8b:90: 4f:c2:29:9a:9b:51:cc:c2:21:3c:78:31:e6:c4:eb:b3:20:7e: da:85:2d:86:ed:de:ef:cb:c6:76:cb:08:9b:f4:26:d4:6a:3d: a5:12:a9:61:fe:2a:b4:06:ae:7c:29:4d:78:f4:6e:23:35:b4: f4:14:83:ec:74:1a:0a:16:b8:bd:33:d5:da:97:50:24:a2:35: 06:de:33:d4:99:8d:f4:23:3f:0f:d7:bc:92:18:7d:7a:fb:54: c5:80:8f:fd:ed:6c:2e:bc:a6:b7:fc:0d:1a:bf:30:67:59:d3: 7a:b8:3b:80:75:c6:40:cf:65:c6:16:85:9a:ac:54:15:f0:4d: 87:f5:ff:fe:ef:8a:6a:d8:83:e6:7f:3a:8f:c3:26:6e:05:7d: 43:5e:e6:81:21:99:32:06:b8:ff:fc:77:61:a9:6c:87:94:89: 60:41:68:1e:51:54:84:aa:73:9d:32:ed:a8:f5:49:da:d5:d2: 60:93:85:54 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUYXqNuo9koUEZALGjxdcE4/TYFQswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE2MTEzNFoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAZjM5OGIxMjg2ODc5NWQwOGI2YjZl ODc4YWU0ZjZhNDNhZDI1OTY0MTZlN2RkMmM5ZDJmY2E2N2YwMGMyZjMyNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZADRfrTePsc8953BACOhLOSI5Lb wCeFbeSQLFjYmfzS4SLBeaJ1NqFyeLWxaewiu8KERXNwWHH5xZtwDT6DKlFHVJ2u IFUMwzjHnxzBrOB55+t25uVfCupnrh+LokhgHXZlGNV2c5bneKryXM/hZZSUMrYa IpHMmTfAMGO8ztkDxXZaTpLdx5NcTbLCsZkMifSxTTaELypTkMYmXIQLkce01tjb gHBxtZoeH3ohG4HHWv7AY8/mGFLpWq4yLeZtQf1zopNO1yNRiOOYZdaWyBo3cH/B zEMKuoiABC1FKjRSEdwrI3guNzQx0LMMIuoNZhOzszlBkgnwXtVuJMHPbwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKPbe9uwk6P8UCp7EVHDj+pL5ta1MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzZlMDNkNTU5LTVmNmItNGYzNS1iNDJhLTEyNmY2ZWRkY2VkNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9ogwDQYJKoZIhvcNAQELBQADggEBAMkW4zicDbJxCR91i821 P4ueOEQGdl2Sz4t/WgzY6UmGGpkWycKwdyUjE0GsizQbieOdvj50kwKpygRPzQVh qR6JBHBKRsGLkE/CKZqbUczCITx4MebE67MgftqFLYbt3u/LxnbLCJv0JtRqPaUS qWH+KrQGrnwpTXj0biM1tPQUg+x0GgoWuL0z1dqXUCSiNQbeM9SZjfQjPw/XvJIY fXr7VMWAj/3tbC68prf8DRq/MGdZ03q4O4B1xkDPZcYWhZqsVBXwTYf1//7vimrY g+Z/Oo/DJm4FfUNe5oEhmTIGuP/8d2GpbIeUiWBBaB5RVISqc50y7aj1SdrV0mCT hVQ= -----END CERTIFICATE-----Generated at Thu Apr 17 18:02:32 2025 by rpki-client