$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6f9cb38f-ec0a-4ab9-8c8d-3a7fbdc93515.roa File: 6f9cb38f-ec0a-4ab9-8c8d-3a7fbdc93515.roa (raw, json) Hash identifier: CNrBSvG1MaIkVjEHOFkIgkm74DwF+/hxCrxOd99r7m8= Subject key identifier: BB:60:98:DD:C7:0E:79:2A:D3:71:71:92:B1:C3:F6:98:5A:D9:84:C7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 72F02E3DD560DC511554C1E0ED6A816B13135986 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6f9cb38f-ec0a-4ab9-8c8d-3a7fbdc93515.roa Signing time: Tue 25 Mar 2025 15:01:15 +0000 ROA not before: Tue 25 Mar 2025 15:01:15 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:2080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:f0:2e:3d:d5:60:dc:51:15:54:c1:e0:ed:6a:81:6b:13:13:59:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 15:01:15 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=66aef7e89702f1990a7ef4167c3ab04285ea00efe73dae3ef404ba5e08428045, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:97:08:36:3a:19:f0:b1:c6:aa:bf:6f:60:88: ed:02:42:1b:6e:2d:a7:59:22:2b:0f:f4:fb:0e:2c: 21:ab:ff:be:26:b6:2c:92:47:80:96:fd:f1:0e:e6: 46:ea:76:c7:02:de:35:99:94:a4:4b:07:ac:12:b2: 74:4f:2b:72:d6:3d:1c:66:bd:f9:1f:7a:59:6c:66: 8e:c0:05:d8:be:35:59:80:7d:d3:26:b7:48:de:63: c8:80:ab:2f:d2:46:13:1d:72:fc:b2:e5:63:23:75: b4:22:00:4b:f0:5d:ac:58:f1:f1:e0:e9:31:13:ba: 0f:bf:2d:34:93:47:1a:8f:fb:69:a1:25:d5:ad:29: ee:ec:f6:e7:71:ec:cd:c1:44:77:7b:15:fb:49:59: d5:9d:93:8b:01:84:54:90:e8:d8:23:e2:97:59:2d: 44:68:d4:c0:d2:19:c1:d4:26:64:3b:20:73:2e:6a: 09:09:4e:09:ef:71:10:06:49:ac:06:8c:30:1e:73: c5:8d:58:ee:f9:57:c3:1a:40:80:8f:10:cd:49:48: 16:a1:ca:15:92:02:5c:ee:b0:c2:34:02:a4:f1:b5: 96:10:84:a7:16:cc:5c:07:95:31:b1:84:d2:8d:7e: 59:67:e6:e4:88:77:59:a1:c9:ef:34:03:7a:41:51: 1c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:60:98:DD:C7:0E:79:2A:D3:71:71:92:B1:C3:F6:98:5A:D9:84:C7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6f9cb38f-ec0a-4ab9-8c8d-3a7fbdc93515.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:2080::/48 Signature Algorithm: sha256WithRSAEncryption 6a:f1:b3:49:6b:a4:e3:48:bf:0a:46:4c:52:41:b9:e5:8c:90: 1e:0e:2c:c4:36:63:c6:4f:dc:00:43:02:4a:00:61:d6:f4:ce: 7b:0d:bd:b5:2f:f8:74:47:76:19:58:be:97:50:a7:b9:7f:98: 0c:65:3b:13:40:cb:c1:91:da:11:55:a1:07:9e:00:c1:ae:ca: 96:d0:93:51:6c:28:61:9a:b4:53:12:8e:df:e2:b7:2b:29:28: 25:cb:ea:dc:ac:07:a7:43:02:d7:1c:f2:b0:84:ee:9b:9e:3b: 9a:3c:c5:d6:7f:84:24:f7:8f:df:8c:f4:7e:d6:e6:30:af:ad: f9:13:9d:31:fb:cd:e7:75:30:a0:48:8c:10:a9:86:a5:e3:7b: 6a:1f:86:f3:8d:15:88:b6:70:ca:fb:07:04:91:a9:f0:d3:0b: 86:41:52:be:69:42:2d:4b:3f:2d:63:e1:42:33:36:fd:5f:c0: b7:c7:9d:e1:16:ce:75:29:c8:de:40:31:7b:2d:7b:1c:bf:50: 25:b4:f4:9a:d4:b6:13:8a:98:b0:40:39:78:31:b2:50:14:0c: 82:03:2c:2f:67:5b:06:77:cf:35:4d:61:bf:cd:b7:3a:27:bd: 7e:96:80:06:59:f7:69:26:da:bc:ae:76:0b:3f:48:46:a7:2e: f3:52:29:6a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUcvAuPdVg3FEVVMHg7WqBaxMTWYYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE1MDExNVoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNANjZhZWY3ZTg5NzAyZjE5OTBhN2Vm NDE2N2MzYWIwNDI4NWVhMDBlZmU3M2RhZTNlZjQwNGJhNWUwODQyODA0NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpcINjoZ8LHGqr9vYIjtAkIbbi2n WSIrD/T7Diwhq/++JrYskkeAlv3xDuZG6nbHAt41mZSkSwesErJ0Tyty1j0cZr35 H3pZbGaOwAXYvjVZgH3TJrdI3mPIgKsv0kYTHXL8suVjI3W0IgBL8F2sWPHx4Okx E7oPvy00k0caj/tpoSXVrSnu7PbncezNwUR3exX7SVnVnZOLAYRUkOjYI+KXWS1E aNTA0hnB1CZkOyBzLmoJCU4J73EQBkmsBowwHnPFjVju+VfDGkCAjxDNSUgWocoV kgJc7rDCNAKk8bWWEISnFsxcB5UxsYTSjX5ZZ+bkiHdZocnvNAN6QVEcIwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLtgmN3HDnkq03FxkrHD9pha2YTHMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzZmOWNiMzhmLWVjMGEtNGFiOS04YzhkLTNhN2ZiZGM5MzUxNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/yCAMA0GCSqGSIb3DQEBCwUAA4IBAQBq8bNJa6TjSL8KRkxS QbnljJAeDizENmPGT9wAQwJKAGHW9M57Db21L/h0R3YZWL6XUKe5f5gMZTsTQMvB kdoRVaEHngDBrsqW0JNRbChhmrRTEo7f4rcrKSgly+rcrAenQwLXHPKwhO6bnjua PMXWf4Qk94/fjPR+1uYwr635E50x+83ndTCgSIwQqYal43tqH4bzjRWItnDK+wcE kanw0wuGQVK+aUItSz8tY+FCMzb9X8C3x53hFs51KcjeQDF7LXscv1AltPSa1LYT ipiwQDl4MbJQFAyCAywvZ1sGd881TWG/zbc6J71+loAGWfdpJtq8rnYLP0hGpy7z Uilq -----END CERTIFICATE-----Generated at Thu Apr 17 17:34:06 2025 by rpki-client