$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/85858219-71cc-46f9-9c59-e75c9c1f8098.roa File: 85858219-71cc-46f9-9c59-e75c9c1f8098.roa (raw, json) Hash identifier: pLSsBFcO0tTQ/us1vTsVZWqgH0f7hKTGT6QnZ6gRVDA= Subject key identifier: 2C:15:A7:3C:54:C3:5D:F6:DA:3A:5A:ED:45:90:91:82:94:98:DC:CF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0641BD0FCBA21475E9D7199E1B24B1881E1A198F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/85858219-71cc-46f9-9c59-e75c9c1f8098.roa Signing time: Tue 25 Mar 2025 00:40:22 +0000 ROA not before: Tue 25 Mar 2025 00:40:22 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:c800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:41:bd:0f:cb:a2:14:75:e9:d7:19:9e:1b:24:b1:88:1e:1a:19:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 00:40:22 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=11d69ade936cac2236ddb98504f70a4a9264e5b0607ed5f1551557a9a10bf7e0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:10:0e:58:8f:63:09:e1:08:05:c1:53:38:92: 07:b4:ed:b3:41:49:2c:2b:d0:23:8f:7b:1a:d8:e8: 2a:00:08:39:06:0d:92:2f:9b:47:59:bd:8e:15:6c: cd:84:bc:4f:ed:cd:ea:b8:e2:f7:c8:e8:5b:ea:a2: f3:d0:a8:61:fa:59:19:61:7b:4a:c8:5b:58:62:87: 81:de:5c:64:3c:7c:a6:dd:1e:b4:68:66:2b:0f:cc: 81:5d:9d:94:3d:ac:7a:7c:08:2d:ea:d6:ab:e4:6f: a2:24:07:d1:fd:4a:02:dd:67:a8:a0:ee:14:b3:c1: db:be:f9:53:78:76:d1:ae:0c:fd:a7:89:d2:4b:c5: be:79:91:2c:06:52:7b:3e:b2:5c:ef:68:e6:66:7c: 1f:bb:f7:cb:e4:ba:73:fb:05:f8:00:cb:c5:d1:2c: 3e:35:83:38:51:da:e0:fb:da:17:7f:61:7a:be:0a: 08:fc:50:58:46:23:98:60:d1:77:d8:a6:e7:fb:1a: a2:39:3c:45:84:68:b1:83:8b:18:61:4d:99:ad:d6: a6:0c:e7:1d:3d:f9:ac:a8:da:d8:c6:93:1b:de:38: ec:38:f7:46:26:70:0d:0f:00:42:30:e8:24:d8:2c: 16:ba:a4:ed:4a:cf:f7:be:b7:fc:17:85:42:22:ba: d6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:15:A7:3C:54:C3:5D:F6:DA:3A:5A:ED:45:90:91:82:94:98:DC:CF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/85858219-71cc-46f9-9c59-e75c9c1f8098.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:c800::/40 Signature Algorithm: sha256WithRSAEncryption 0a:ad:5b:08:cd:e8:af:19:16:3c:75:2b:99:d5:f0:25:7c:62: d0:42:72:9e:d7:58:5c:58:b0:ca:1c:35:50:7e:83:28:f9:7d: a6:ef:04:94:53:10:32:12:00:f8:0a:ef:db:00:46:7f:3a:88: 89:b2:f3:8c:8e:a9:d7:d9:e1:b6:1f:4f:97:48:c2:d4:15:5a: af:2a:a8:07:6b:4a:e3:e5:ac:28:43:db:aa:d8:82:92:e4:1e: 96:3a:0e:09:cd:85:40:25:7e:3e:9d:13:4e:c0:ec:ee:ca:c2: aa:73:e9:cc:6f:9a:19:b2:eb:65:ed:a1:10:a4:99:4c:45:89: 84:e5:19:1e:97:f7:2e:87:0d:a0:cc:4a:9e:63:f3:3a:47:02: 3a:07:d7:c9:4d:8b:57:c3:d3:ab:ac:90:a4:73:1e:a8:58:8e: 61:ea:1f:cc:dd:98:1a:9e:34:85:bb:e0:d8:0c:f2:c8:12:9b: ea:b1:75:38:00:24:24:11:8d:f5:6a:40:17:c6:1a:70:d8:3d: 82:20:7a:96:c0:9e:61:3c:cb:1a:27:9d:8e:8d:1c:c1:98:f7: 9a:75:35:a8:d2:ce:7a:9a:b7:63:6a:2e:61:34:ba:28:e2:bb: 4a:7a:a7:bb:0a:77:c6:23:28:cc:a6:ef:c9:96:cc:6f:28:61: 98:09:8f:f9 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBkG9D8uiFHXp1xmeGySxiB4aGY8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTAwNDAyMloX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAMTFkNjlhZGU5MzZjYWMyMjM2ZGRi OTg1MDRmNzBhNGE5MjY0ZTViMDYwN2VkNWYxNTUxNTU3YTlhMTBiZjdlMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8BAOWI9jCeEIBcFTOJIHtO2zQUks K9Ajj3sa2OgqAAg5Bg2SL5tHWb2OFWzNhLxP7c3quOL3yOhb6qLz0Khh+lkZYXtK yFtYYoeB3lxkPHym3R60aGYrD8yBXZ2UPax6fAgt6tar5G+iJAfR/UoC3WeooO4U s8HbvvlTeHbRrgz9p4nSS8W+eZEsBlJ7PrJc72jmZnwfu/fL5Lpz+wX4AMvF0Sw+ NYM4Udrg+9oXf2F6vgoI/FBYRiOYYNF32Kbn+xqiOTxFhGixg4sYYU2ZrdamDOcd PfmsqNrYxpMb3jjsOPdGJnANDwBCMOgk2CwWuqTtSs/3vrf8F4VCIrrWiwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCwVpzxUw1322jpa7UWQkYKUmNzPMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg1ODU4MjE5LTcxY2MtNDZmOS05YzU5LWU3NWM5YzFmODA5OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaAMgwDQYJKoZIhvcNAQELBQADggEBAAqtWwjN6K8ZFjx1K5nV 8CV8YtBCcp7XWFxYsMocNVB+gyj5fabvBJRTEDISAPgK79sARn86iImy84yOqdfZ 4bYfT5dIwtQVWq8qqAdrSuPlrChD26rYgpLkHpY6DgnNhUAlfj6dE07A7O7Kwqpz 6cxvmhmy62XtoRCkmUxFiYTlGR6X9y6HDaDMSp5j8zpHAjoH18lNi1fD06uskKRz HqhYjmHqH8zdmBqeNIW74NgM8sgSm+qxdTgAJCQRjfVqQBfGGnDYPYIgepbAnmE8 yxonnY6NHMGY95p1NajSznqat2NqLmE0uijiu0p6p7sKd8YjKMym78mWzG8oYZgJ j/k= -----END CERTIFICATE-----Generated at Thu Apr 17 18:07:08 2025 by rpki-client