$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/85e8dd5d-d1d3-457f-b7e2-bddbb26d55f1.roa File: 85e8dd5d-d1d3-457f-b7e2-bddbb26d55f1.roa (raw, json) Hash identifier: 6o3ZRWIjKdHupPhI27c5x+jElCmzKX3behwxdZbyILc= Subject key identifier: 01:25:3B:01:60:49:AD:32:9B:64:DD:8C:44:B3:92:9A:6C:31:57:DB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4D1163D9044D52AAE57E0D6734A880536FD9DAA7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/85e8dd5d-d1d3-457f-b7e2-bddbb26d55f1.roa Signing time: Tue 25 Mar 2025 15:50:57 +0000 ROA not before: Tue 25 Mar 2025 15:50:57 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:f000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:11:63:d9:04:4d:52:aa:e5:7e:0d:67:34:a8:80:53:6f:d9:da:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 15:50:57 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=b56b8a76e3cc9214bf6e0e0f1a0f5a341f6fb3b94a98c08e0c15021929b4ea16, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:35:57:d7:4d:d7:e7:8c:b0:43:8d:4a:29:a7: 07:b2:13:0f:6d:2e:69:e7:3a:b1:49:d8:76:20:52: 89:e2:f8:e3:49:ad:f7:63:57:63:22:03:72:3f:7c: ca:e5:c1:8b:9e:00:9c:f4:60:8c:2a:b4:f2:05:a5: 6d:2f:2d:b6:98:ef:ad:8f:87:49:bb:01:c8:a3:09: 7c:64:6e:ed:79:69:66:d7:4e:37:30:32:54:46:c1: 43:43:b1:87:af:01:31:42:e7:e2:df:26:74:75:44: fa:31:ab:73:12:c6:6e:93:5c:0d:48:f9:99:b5:06: 1c:3d:4a:95:4f:b4:ae:b8:24:2d:d6:dd:de:7f:40: 9b:49:fa:da:36:5c:be:f2:cf:ed:67:b8:ed:01:48: 00:c7:ae:bd:9f:05:ba:12:37:99:80:fd:64:b6:72: 61:96:fe:a8:c6:09:70:15:69:76:13:1e:2b:eb:56: c1:53:e4:94:0f:ef:85:12:1c:68:cc:9f:ae:0a:06: 82:5c:e3:cc:d9:11:ce:b7:22:b4:50:71:ec:f2:88: bc:ae:00:c6:ab:e6:c7:ea:aa:39:65:88:c3:5c:68: 2e:c7:f1:dd:cc:a7:81:a0:59:bc:f3:8e:33:ed:2c: 02:b3:2a:ab:70:3a:14:20:c1:84:71:4b:f5:c7:0d: c3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:25:3B:01:60:49:AD:32:9B:64:DD:8C:44:B3:92:9A:6C:31:57:DB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/85e8dd5d-d1d3-457f-b7e2-bddbb26d55f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:f000::/40 Signature Algorithm: sha256WithRSAEncryption 2e:96:0c:cf:bb:ed:92:0f:4c:32:a1:15:f8:94:c6:28:86:fd: 83:71:b3:57:d6:a4:6c:fe:6d:3b:a4:fd:f7:56:73:cb:16:1c: 3d:a9:13:46:56:a7:ad:bf:0f:0a:8b:6e:9d:f3:96:77:a0:fb: d9:4f:d7:d0:5e:b5:57:26:ab:89:0b:84:f4:e7:ea:f9:f2:c0: 55:b1:8e:ea:27:e8:35:f2:20:9d:b1:3a:c5:e6:4a:ef:d7:96: a2:b9:d9:29:3c:28:a0:d4:0d:54:94:f5:92:16:23:ff:7c:63: 4b:08:4e:1c:88:84:5b:69:2a:b3:15:46:6d:7e:d5:ee:75:b0: c8:41:ea:b7:18:1d:71:14:b4:79:c7:cb:44:25:5d:dc:e6:f8: f9:44:bc:54:5e:9c:e6:d5:1c:b1:bb:5f:17:4d:19:6a:de:61: a4:6c:be:3c:90:e0:90:2a:89:ee:e4:02:63:1d:7c:0f:f4:7b: f2:6b:d5:ce:7b:d3:a1:94:cb:5b:7f:a3:1b:3e:bc:a4:46:39: 7e:55:27:e7:67:a4:50:51:4b:df:37:35:83:d4:57:e2:3b:9b: 75:5e:da:2f:dd:ef:79:b7:28:f4:b3:c3:30:c0:b2:41:67:c6: 2a:cc:81:23:a2:78:e5:ae:c4:91:f2:07:c1:5a:38:d7:91:48: dd:c3:8f:04 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUTRFj2QRNUqrlfg1nNKiAU2/Z2qcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE1NTA1N1oX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAYjU2YjhhNzZlM2NjOTIxNGJmNmUw ZTBmMWEwZjVhMzQxZjZmYjNiOTRhOThjMDhlMGMxNTAyMTkyOWI0ZWExNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDVX103X54ywQ41KKacHshMPbS5p 5zqxSdh2IFKJ4vjjSa33Y1djIgNyP3zK5cGLngCc9GCMKrTyBaVtLy22mO+tj4dJ uwHIowl8ZG7teWlm1043MDJURsFDQ7GHrwExQufi3yZ0dUT6MatzEsZuk1wNSPmZ tQYcPUqVT7SuuCQt1t3ef0CbSfraNly+8s/tZ7jtAUgAx669nwW6EjeZgP1ktnJh lv6oxglwFWl2Ex4r61bBU+SUD++FEhxozJ+uCgaCXOPM2RHOtyK0UHHs8oi8rgDG q+bH6qo5ZYjDXGgux/HdzKeBoFm8844z7SwCsyqrcDoUIMGEcUv1xw3DiwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAElOwFgSa0ym2TdjESzkppsMVfbMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg1ZThkZDVkLWQxZDMtNDU3Zi1iN2UyLWJkZGJiMjZkNTVmMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaafAwDQYJKoZIhvcNAQELBQADggEBAC6WDM+77ZIPTDKhFfiU xiiG/YNxs1fWpGz+bTuk/fdWc8sWHD2pE0ZWp62/DwqLbp3zlneg+9lP19BetVcm q4kLhPTn6vnywFWxjuon6DXyIJ2xOsXmSu/XlqK52Sk8KKDUDVSU9ZIWI/98Y0sI ThyIhFtpKrMVRm1+1e51sMhB6rcYHXEUtHnHy0QlXdzm+PlEvFRenObVHLG7XxdN GWreYaRsvjyQ4JAqie7kAmMdfA/0e/Jr1c5706GUy1t/oxs+vKRGOX5VJ+dnpFBR S983NYPUV+I7m3Ve2i/d73m3KPSzwzDAskFnxirMgSOieOWuxJHyB8FaONeRSN3D jwQ= -----END CERTIFICATE-----Generated at Thu Apr 17 17:31:41 2025 by rpki-client