$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8926995e-bde5-49af-a989-17dd351a253f.roa File: 8926995e-bde5-49af-a989-17dd351a253f.roa (raw, json) Hash identifier: YoacKWwFHLjDZm3NHNs216/gS7NlorIfUs1EJBGK7P8= Subject key identifier: C1:2F:7F:44:35:68:F8:79:8C:56:61:B8:5C:F0:40:13:75:6F:EF:C8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 61743EA7A6FEB68C8D4A7B0517D5619DCB2BF241 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8926995e-bde5-49af-a989-17dd351a253f.roa Signing time: Tue 25 Mar 2025 16:01:39 +0000 ROA not before: Tue 25 Mar 2025 16:01:39 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:74:3e:a7:a6:fe:b6:8c:8d:4a:7b:05:17:d5:61:9d:cb:2b:f2:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 16:01:39 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=7c3ccb0a3b49e589d287130cd1374fd49e7cede3c79b78af7981bc9e19d95ca2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4c:0e:61:2a:cb:ea:25:08:87:92:99:61:64: 2c:5a:e5:ef:f6:5c:94:fb:64:b7:db:b6:2a:bc:29: 05:a5:6b:a1:0d:f0:c9:90:8d:60:fd:7b:7f:4f:64: cd:03:35:25:d6:cc:3b:85:91:4b:e3:3d:1c:2b:7d: b3:50:fb:ae:20:5c:8b:48:ec:c5:d7:82:ab:8a:ac: 85:bb:33:34:e4:33:94:7f:2c:76:e9:59:70:f7:61: 22:1f:3f:96:f7:1b:46:e7:a6:de:be:85:03:22:bc: eb:32:a1:fb:e1:52:76:d9:a0:b5:db:cb:91:49:99: 67:40:a7:18:47:48:11:78:c4:78:93:b3:ed:7c:e3: 8e:16:f4:54:87:96:a6:99:6c:e9:91:94:2b:0e:4a: 93:9b:90:a4:65:fa:98:c5:6f:8f:3b:4b:f9:3f:16: e7:db:c3:b6:f1:20:7e:62:41:04:83:22:dd:1a:47: 7e:76:fa:49:f2:d8:76:07:35:78:88:af:8f:06:2d: 59:a8:b4:b9:bf:64:7c:ef:7f:e5:19:90:9d:bf:20: 25:e1:9c:9e:97:15:79:3c:b6:2d:81:ed:3a:f6:18: a1:1b:98:63:67:41:e3:e5:62:f2:01:7d:fa:48:47: 96:8f:7a:be:e7:9e:78:ba:2d:72:ca:b7:c2:c5:6e: b9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:2F:7F:44:35:68:F8:79:8C:56:61:B8:5C:F0:40:13:75:6F:EF:C8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8926995e-bde5-49af-a989-17dd351a253f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:8000::/40 Signature Algorithm: sha256WithRSAEncryption 11:89:b8:4b:b5:4c:2b:74:0d:24:11:b4:47:6e:f6:83:bd:87: 11:d5:7c:59:6c:81:d4:a2:48:71:57:b9:fe:f0:84:0b:e1:fb: ac:0a:20:70:76:42:de:71:a8:14:0a:4e:6b:f7:6c:ad:29:5a: ea:59:0c:0e:56:04:37:46:37:f0:71:00:b8:e4:22:48:81:a9: 29:25:d3:1a:01:74:e0:b9:77:42:7e:37:10:ed:57:d9:2e:a1: 6e:6e:12:3c:7b:1a:cb:43:49:aa:0f:4e:fa:a4:b5:49:01:0a: 98:f7:18:d0:e7:59:76:a5:b8:a5:06:1e:5c:be:0a:3f:5b:b7: 13:98:15:68:1f:b0:67:8f:b6:85:b5:18:53:ca:02:c4:08:22: f4:97:05:14:4a:16:00:1a:4b:ad:b0:22:c7:df:63:3f:03:b3: 77:28:99:52:5c:aa:80:78:18:c8:fd:c0:29:62:8c:ad:b8:2f: b4:ec:fb:07:e6:19:4b:e0:ce:16:9f:e3:11:c6:92:4d:37:97: dd:40:ca:6a:19:b9:e5:e4:1d:a4:12:46:02:c6:4f:7e:fa:ad: 75:8e:6c:6b:b7:64:99:e4:a5:ad:cb:0b:83:3f:aa:a3:34:7e: ac:ef:c7:11:3d:a0:94:65:a3:85:54:b5:fd:f7:4b:a7:04:00: d9:7a:04:68 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUYXQ+p6b+toyNSnsFF9Vhncsr8kEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE2MDEzOVoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAN2MzY2NiMGEzYjQ5ZTU4OWQyODcx MzBjZDEzNzRmZDQ5ZTdjZWRlM2M3OWI3OGFmNzk4MWJjOWUxOWQ5NWNhMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkwOYSrL6iUIh5KZYWQsWuXv9lyU +2S327YqvCkFpWuhDfDJkI1g/Xt/T2TNAzUl1sw7hZFL4z0cK32zUPuuIFyLSOzF 14KriqyFuzM05DOUfyx26Vlw92EiHz+W9xtG56bevoUDIrzrMqH74VJ22aC128uR SZlnQKcYR0gReMR4k7PtfOOOFvRUh5ammWzpkZQrDkqTm5CkZfqYxW+PO0v5Pxbn 28O28SB+YkEEgyLdGkd+dvpJ8th2BzV4iK+PBi1ZqLS5v2R873/lGZCdvyAl4Zye lxV5PLYtge069hihG5hjZ0Hj5WLyAX36SEeWj3q+5554ui1yyrfCxW65EQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMEvf0Q1aPh5jFZhuFzwQBN1b+/IMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg5MjY5OTVlLWJkZTUtNDlhZi1hOTg5LTE3ZGQzNTFhMjUzZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+4AwDQYJKoZIhvcNAQELBQADggEBABGJuEu1TCt0DSQRtEdu 9oO9hxHVfFlsgdSiSHFXuf7whAvh+6wKIHB2Qt5xqBQKTmv3bK0pWupZDA5WBDdG N/BxALjkIkiBqSkl0xoBdOC5d0J+NxDtV9kuoW5uEjx7GstDSaoPTvqktUkBCpj3 GNDnWXaluKUGHly+Cj9btxOYFWgfsGePtoW1GFPKAsQIIvSXBRRKFgAaS62wIsff Yz8Ds3comVJcqoB4GMj9wClijK24L7Ts+wfmGUvgzhaf4xHGkk03l91AymoZueXk HaQSRgLGT376rXWObGu3ZJnkpa3LC4M/qqM0fqzvxxE9oJRlo4VUtf33S6cEANl6 BGg= -----END CERTIFICATE-----Generated at Thu Apr 17 18:19:23 2025 by rpki-client