$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/80cc7c37-3012-4875-809a-e11a9f2ebbbb.roa File: 80cc7c37-3012-4875-809a-e11a9f2ebbbb.roa (raw, json) Hash identifier: Eyr+Bahwi1aVwV9jiJE5gbZsxTqMc+48v/fDGePjBT8= Subject key identifier: 31:89:60:CB:80:04:89:82:10:4E:97:81:25:F9:AF:EC:26:4D:12:16 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6DF71C7100E473DF35548818F988E2BF25FE1FA0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/80cc7c37-3012-4875-809a-e11a9f2ebbbb.roa Signing time: Tue 25 Mar 2025 15:00:26 +0000 ROA not before: Tue 25 Mar 2025 15:00:26 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:c8c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:f7:1c:71:00:e4:73:df:35:54:88:18:f9:88:e2:bf:25:fe:1f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 15:00:26 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=dbd57c67fbc51f5ab4259d894e1da3c9b4eab75d54a9a9e3291ae9c1c88baeed, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3d:54:bb:2c:c2:f6:e1:73:a3:83:07:68:e0: 46:4d:5a:9e:f8:e7:a4:94:23:87:70:29:c3:c2:c5: a7:d9:e9:ab:52:e9:90:5e:4e:e1:c8:a0:23:3f:07: ed:b5:dd:0f:f8:4c:46:62:2f:65:8a:53:86:0a:6b: b6:b7:ce:80:75:f0:0f:24:95:67:9e:58:08:40:9b: d9:f3:d7:80:6c:cf:6f:60:e0:d1:69:ea:62:81:51: 44:3b:37:a5:1b:e2:69:4b:99:43:85:2b:ff:d9:96: 2c:bd:7a:7e:61:00:d5:b2:23:55:86:cf:db:da:b2: cd:18:17:a5:91:6d:53:6e:aa:7b:d1:a7:d7:50:b3: 86:ab:ae:46:4e:69:ed:e6:44:db:a8:ac:0e:0e:c2: ba:f7:e2:21:fa:f4:95:47:23:f0:e2:6d:0b:5a:be: cb:04:a4:d5:24:ff:11:b3:14:6b:a5:36:09:2e:42: 26:a0:4a:57:cf:88:7c:c8:79:46:f0:35:56:31:b7: c2:57:c0:dc:64:c0:fd:b5:29:35:f2:20:e4:ba:df: 63:35:13:11:d1:a9:68:7b:9d:d1:e0:cb:20:79:87: 93:ac:53:0e:ad:19:ee:24:47:d3:35:20:ea:cf:76: 66:d5:a3:17:cb:81:51:5e:91:65:79:6e:4f:f2:b1: 14:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:89:60:CB:80:04:89:82:10:4E:97:81:25:F9:AF:EC:26:4D:12:16 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/80cc7c37-3012-4875-809a-e11a9f2ebbbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:c8c0::/46 Signature Algorithm: sha256WithRSAEncryption bb:68:79:ec:09:e5:7e:76:cd:eb:be:97:a3:1d:40:20:72:9f: e9:c5:19:86:36:79:19:2a:68:d5:92:04:c6:40:ab:e5:3d:9a: 2c:9a:9f:23:5b:a3:68:98:ca:8a:91:81:a5:a7:e9:05:43:99: 21:cc:ef:f9:1b:08:90:76:47:d5:bd:f1:87:93:94:4f:34:28: f4:e1:fb:2e:e2:29:d9:31:0d:72:60:32:7c:fe:7d:5b:44:0b: 97:43:f7:f9:82:d6:cd:5a:b4:da:9b:3c:43:a7:83:3e:97:d6: 37:83:36:2e:97:b3:b5:dc:e9:21:ca:0f:b6:de:f8:c3:0c:24: 9d:4d:fd:1c:75:77:97:5b:fb:30:f8:73:98:07:ce:a3:b2:a4: c8:a1:bb:01:e5:a5:18:59:d2:21:4e:b4:4e:28:05:2b:50:c7: 88:34:05:db:fe:09:5c:3b:94:9d:b0:8e:d9:11:ff:87:b1:a6: 5b:a7:d9:ec:8d:e2:70:4b:16:bf:56:04:1a:7c:22:97:f6:20: 61:18:44:bd:f3:c5:23:be:e4:8a:fd:b1:4f:63:4f:3d:1b:49: 46:99:30:e5:d8:20:4c:d7:7e:c0:5c:5a:ff:9b:57:36:51:b5: e0:87:9e:d3:c9:d4:61:e2:c7:ce:aa:ba:1b:2a:58:7d:cb:64: 30:5e:d8:00 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUbfcccQDkc981VIgY+YjivyX+H6AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE1MDAyNloX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAZGJkNTdjNjdmYmM1MWY1YWI0MjU5 ZDg5NGUxZGEzYzliNGVhYjc1ZDU0YTlhOWUzMjkxYWU5YzFjODhiYWVlZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT1UuyzC9uFzo4MHaOBGTVqe+Oek lCOHcCnDwsWn2emrUumQXk7hyKAjPwfttd0P+ExGYi9lilOGCmu2t86AdfAPJJVn nlgIQJvZ89eAbM9vYODRaepigVFEOzelG+JpS5lDhSv/2ZYsvXp+YQDVsiNVhs/b 2rLNGBelkW1Tbqp70afXULOGq65GTmnt5kTbqKwODsK69+Ih+vSVRyPw4m0LWr7L BKTVJP8RsxRrpTYJLkImoEpXz4h8yHlG8DVWMbfCV8DcZMD9tSk18iDkut9jNRMR 0aloe53R4MsgeYeTrFMOrRnuJEfTNSDqz3Zm1aMXy4FRXpFleW5P8rEUyQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDGJYMuABImCEE6XgSX5r+wmTRIWMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgwY2M3YzM3LTMwMTItNDg3NS04MDlhLWUxMWE5ZjJlYmJiYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaacjAMA0GCSqGSIb3DQEBCwUAA4IBAQC7aHnsCeV+ds3rvpej HUAgcp/pxRmGNnkZKmjVkgTGQKvlPZosmp8jW6NomMqKkYGlp+kFQ5khzO/5GwiQ dkfVvfGHk5RPNCj04fsu4inZMQ1yYDJ8/n1bRAuXQ/f5gtbNWrTamzxDp4M+l9Y3 gzYul7O13Okhyg+23vjDDCSdTf0cdXeXW/sw+HOYB86jsqTIobsB5aUYWdIhTrRO KAUrUMeINAXb/glcO5SdsI7ZEf+HsaZbp9nsjeJwSxa/VgQafCKX9iBhGES988Uj vuSK/bFPY089G0lGmTDl2CBM137AXFr/m1c2UbXgh57TydRh4sfOqrobKlh9y2Qw XtgA -----END CERTIFICATE-----Generated at Thu Apr 17 17:55:33 2025 by rpki-client