$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/74b1fe31-3591-4da8-95f4-39ba57fac545.roa File: 74b1fe31-3591-4da8-95f4-39ba57fac545.roa (raw, json) Hash identifier: zVjLWesh9iVklgHwGilsjbVrKEy4FKd6Yb1EllVIPBs= Subject key identifier: DA:38:06:4E:5D:36:90:A2:28:DB:DD:56:86:03:2D:F7:FE:62:07:B8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 61CDBDD280603C4DE57366657ED05E0A6D479DE6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/74b1fe31-3591-4da8-95f4-39ba57fac545.roa Signing time: Sat 29 Mar 2025 00:01:15 +0000 ROA not before: Sat 29 Mar 2025 00:01:15 +0000 ROA not after: Sat 03 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf1:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:cd:bd:d2:80:60:3c:4d:e5:73:66:65:7e:d0:5e:0a:6d:47:9d:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 29 00:01:15 2025 GMT Not After : May 3 23:59:59 2025 GMT Subject: serialNumber=55a644fac489e7723e54002f9761df0af1fd48bd4103561bb6571eff103273fc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0f:b3:c1:2c:5e:0d:dc:8f:1d:db:97:ae:52: d3:f1:34:32:ca:f2:b4:1c:83:23:2e:07:5c:ac:5c: 5d:39:ce:00:8c:72:b0:02:cd:e7:13:ad:6d:e3:14: ad:f0:10:c6:29:f8:a2:46:7a:b9:9a:0a:5e:da:d4: 5f:db:d1:8f:8b:92:d5:d7:7d:5c:5e:9c:79:3f:c8: cc:b8:d6:d4:bf:0b:16:1f:21:33:e6:fd:e2:22:cd: 03:10:c7:70:48:be:2b:7a:f7:4b:e6:e0:3e:3b:b6: 88:19:23:08:f6:f9:f9:0f:3a:1f:96:8f:76:69:e3: c9:d5:24:d5:d9:0e:ca:2b:f2:c1:bc:08:47:92:42: 01:f7:a7:04:e6:a6:2a:8c:7a:e8:7f:fd:c7:78:8a: 40:4a:ed:fb:2a:53:7c:31:d9:f5:ec:91:f0:35:70: db:17:c3:fe:5d:c8:0a:7f:f5:42:00:47:99:2e:28: 13:6b:10:05:62:37:59:02:37:17:a0:17:95:83:ce: 5d:39:24:ea:a2:39:ac:3e:95:55:ad:4a:c9:a7:a6: a4:71:78:2c:01:cc:ca:33:26:09:26:65:b1:fd:19: f1:83:84:bd:00:82:18:25:06:c8:7b:15:14:6b:f9: af:dc:2c:11:c8:2b:5f:92:82:b6:ed:46:38:8d:1f: f0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:38:06:4E:5D:36:90:A2:28:DB:DD:56:86:03:2D:F7:FE:62:07:B8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/74b1fe31-3591-4da8-95f4-39ba57fac545.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf1:1000::/40 Signature Algorithm: sha256WithRSAEncryption 3d:dd:94:a7:99:41:98:b2:6f:5d:bd:d2:d6:66:88:b3:13:37: 31:75:49:d1:d8:84:3d:9e:14:1e:40:83:3e:b4:96:3a:e9:13: 1b:a5:80:a8:a8:75:8a:03:9f:b9:38:48:ad:be:90:e6:8c:79: c8:00:07:ba:24:f9:b9:b6:d9:1e:d1:19:36:c5:31:10:a4:c2: 46:0f:d8:f3:c5:a5:71:6e:88:bd:7a:77:b9:43:95:65:01:5f: b1:3f:1f:75:ae:ee:ff:40:9e:dd:3f:2e:c7:9e:1d:b9:a7:4d: e4:17:8a:58:3e:5c:af:99:72:b6:7e:28:63:d1:84:7c:23:06: f8:8a:5e:a3:f9:61:64:f1:b5:52:6e:3a:bc:28:fa:20:c5:86: f1:88:fd:76:f2:5b:92:d4:26:cc:64:9b:a0:d7:7d:5a:6c:db: eb:fb:f8:29:74:ea:b0:6a:ab:2f:02:9b:f9:4f:1e:b6:e1:cf: 69:a6:d5:4c:98:7a:6b:e0:2b:64:26:c1:35:eb:75:18:2a:0f: 2c:28:68:5a:c3:19:d3:21:c7:1a:9e:08:1f:6d:d4:7a:82:ff: 5e:5a:d8:1e:8d:c5:f6:e5:df:33:06:31:21:5f:b4:1f:97:9e: 64:39:ac:83:60:77:5a:1c:7b:34:87:d3:2e:29:6f:0a:e3:23: 5c:85:d2:fb -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUYc290oBgPE3lc2ZlftBeCm1HneYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyOTAwMDExNVoX DTI1MDUwMzIzNTk1OVowejFJMEcGA1UEBRNANTVhNjQ0ZmFjNDg5ZTc3MjNlNTQw MDJmOTc2MWRmMGFmMWZkNDhiZDQxMDM1NjFiYjY1NzFlZmYxMDMyNzNmYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg+zwSxeDdyPHduXrlLT8TQyyvK0 HIMjLgdcrFxdOc4AjHKwAs3nE61t4xSt8BDGKfiiRnq5mgpe2tRf29GPi5LV131c Xpx5P8jMuNbUvwsWHyEz5v3iIs0DEMdwSL4revdL5uA+O7aIGSMI9vn5Dzoflo92 aePJ1STV2Q7KK/LBvAhHkkIB96cE5qYqjHrof/3HeIpASu37KlN8Mdn17JHwNXDb F8P+XcgKf/VCAEeZLigTaxAFYjdZAjcXoBeVg85dOSTqojmsPpVVrUrJp6akcXgs AczKMyYJJmWx/Rnxg4S9AIIYJQbIexUUa/mv3CwRyCtfkoK27UY4jR/wzwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNo4Bk5dNpCiKNvdVoYDLff+Yge4MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc0YjFmZTMxLTM1OTEtNGRhOC05NWY0LTM5YmE1N2ZhYzU0NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8RAwDQYJKoZIhvcNAQELBQADggEBAD3dlKeZQZiyb1290tZm iLMTNzF1SdHYhD2eFB5Agz60ljrpExulgKiodYoDn7k4SK2+kOaMecgAB7ok+bm2 2R7RGTbFMRCkwkYP2PPFpXFuiL16d7lDlWUBX7E/H3Wu7v9Ant0/LseeHbmnTeQX ilg+XK+ZcrZ+KGPRhHwjBviKXqP5YWTxtVJuOrwo+iDFhvGI/XbyW5LUJsxkm6DX fVps2+v7+Cl06rBqqy8Cm/lPHrbhz2mm1UyYemvgK2QmwTXrdRgqDywoaFrDGdMh xxqeCB9t1HqC/15a2B6Nxfbl3zMGMSFftB+XnmQ5rINgd1ocezSH0y4pbwrjI1yF 0vs= -----END CERTIFICATE-----Generated at Thu Apr 17 18:09:28 2025 by rpki-client