$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/89fc56d6-b0ac-44ad-b01f-93dbcd9213fa.roa File: 89fc56d6-b0ac-44ad-b01f-93dbcd9213fa.roa (raw, json) Hash identifier: hM/1+p5HDrB7ktgpHd7mnvAoxWZglOqFVgkX4cr0Y80= Subject key identifier: D1:4F:C7:D8:35:1A:90:80:F8:83:64:88:9B:4F:01:DB:1A:89:0D:75 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3E140E840AB498584F4845ECB7C5F0D9C3512D84 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/89fc56d6-b0ac-44ad-b01f-93dbcd9213fa.roa Signing time: Tue 25 Mar 2025 16:41:23 +0000 ROA not before: Tue 25 Mar 2025 16:41:23 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1f:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:14:0e:84:0a:b4:98:58:4f:48:45:ec:b7:c5:f0:d9:c3:51:2d:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 16:41:23 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=1b2698f078a4e89583289e5ac7bbae5b93b882f2220e9d2d92f20bc14fc74126, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2c:27:d8:e4:67:21:98:84:44:16:40:3d:eb: 6f:50:18:3a:53:9b:68:cc:77:ba:9e:d0:ef:b1:a9: 36:ff:10:62:40:c6:13:1a:4e:1f:00:89:49:45:81: e8:c9:36:fe:22:26:41:eb:fc:13:ef:17:bd:e6:a2: d2:4b:91:25:b6:ee:75:2e:e6:68:9e:7d:f9:b9:18: e6:b3:67:42:3b:81:82:22:03:e3:83:57:64:64:f0: 20:3d:bb:3c:05:8d:43:db:41:05:1a:cb:03:24:38: 72:d9:c0:8d:cd:12:3e:b3:6c:51:ea:bd:89:14:19: bb:54:d9:8f:f3:42:d2:52:9c:92:43:9c:02:b2:e6: da:9e:a6:c3:c8:4f:db:8b:9a:b4:99:c1:e5:f4:87: 58:cd:28:69:ad:90:c3:ca:7c:55:8e:86:5d:43:86: eb:84:ca:76:d3:2c:38:8c:8e:cc:f8:e0:81:6a:c3: 2b:36:e6:b5:a2:31:43:e3:f9:0f:66:43:11:e3:cd: 77:33:c0:48:a4:4e:ac:d5:9e:26:61:90:1b:3a:66: 8e:7e:b5:b6:eb:2c:22:df:dc:57:61:5a:71:74:48: 0a:37:50:9c:74:0e:7b:b9:a3:86:58:9b:1c:20:14: a9:ef:c8:17:fa:5c:a2:97:5f:cb:27:4d:20:bf:db: c0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:4F:C7:D8:35:1A:90:80:F8:83:64:88:9B:4F:01:DB:1A:89:0D:75 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/89fc56d6-b0ac-44ad-b01f-93dbcd9213fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1f:400::/38 Signature Algorithm: sha256WithRSAEncryption 9c:73:ad:e2:ba:ec:c6:df:5b:61:0b:8f:31:c5:f6:51:b4:bd: 41:1f:7d:5d:e3:24:ca:0b:b4:47:05:20:2b:f4:7a:89:0a:20: 01:60:1d:cc:72:2f:66:7a:6f:87:e0:d8:ca:75:42:f6:51:ab: 4c:ca:bc:f9:32:ea:95:68:fb:73:be:61:5b:32:a5:06:54:46: f3:c3:17:0f:64:73:79:12:52:3b:f9:1a:3b:21:6c:b4:ca:e7: 4d:01:6a:70:17:f1:3b:95:d0:f8:2c:a1:ab:83:2f:95:46:75: c0:96:54:fd:7b:10:e8:a1:c2:6a:65:92:c3:32:00:2a:56:13: 22:b6:9f:b3:a4:a0:26:db:fb:05:0f:78:c7:54:9f:ba:32:8a: 1b:b9:8e:3b:9f:fe:db:3e:48:e2:3e:18:c9:14:ed:52:30:ee: ab:47:16:55:89:da:eb:4f:20:fc:eb:10:f5:86:8d:03:0e:b1: 00:e6:29:ff:e3:28:24:84:a6:a7:2e:03:8d:64:4f:ed:db:1c: 3d:45:4e:d7:2e:80:fd:3f:46:2e:44:4b:b9:01:92:63:7e:4c: 66:16:37:f4:b9:02:85:c2:3f:d5:4e:15:b1:30:de:2f:51:17: 6b:ba:33:aa:79:f5:43:d0:6d:37:64:35:a1:e0:7b:9e:4d:57: c2:90:08:e3 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUPhQOhAq0mFhPSEXst8Xw2cNRLYQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE2NDEyM1oX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAMWIyNjk4ZjA3OGE0ZTg5NTgzMjg5 ZTVhYzdiYmFlNWI5M2I4ODJmMjIyMGU5ZDJkOTJmMjBiYzE0ZmM3NDEyNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCwn2ORnIZiERBZAPetvUBg6U5to zHe6ntDvsak2/xBiQMYTGk4fAIlJRYHoyTb+IiZB6/wT7xe95qLSS5Eltu51LuZo nn35uRjms2dCO4GCIgPjg1dkZPAgPbs8BY1D20EFGssDJDhy2cCNzRI+s2xR6r2J FBm7VNmP80LSUpySQ5wCsubanqbDyE/bi5q0mcHl9IdYzShprZDDynxVjoZdQ4br hMp20yw4jI7M+OCBasMrNua1ojFD4/kPZkMR4813M8BIpE6s1Z4mYZAbOmaOfrW2 6ywi39xXYVpxdEgKN1CcdA57uaOGWJscIBSp78gX+lyil1/LJ00gv9vADwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNFPx9g1GpCA+INkiJtPAdsaiQ11MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg5ZmM1NmQ2LWIwYWMtNDRhZC1iMDFmLTkzZGJjZDkyMTNmYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaHwQwDQYJKoZIhvcNAQELBQADggEBAJxzreK67MbfW2ELjzHF 9lG0vUEffV3jJMoLtEcFICv0eokKIAFgHcxyL2Z6b4fg2Mp1QvZRq0zKvPky6pVo +3O+YVsypQZURvPDFw9kc3kSUjv5GjshbLTK500BanAX8TuV0PgsoauDL5VGdcCW VP17EOihwmplksMyACpWEyK2n7OkoCbb+wUPeMdUn7oyihu5jjuf/ts+SOI+GMkU 7VIw7qtHFlWJ2utPIPzrEPWGjQMOsQDmKf/jKCSEpqcuA41kT+3bHD1FTtcugP0/ Ri5ES7kBkmN+TGYWN/S5AoXCP9VOFbEw3i9RF2u6M6p59UPQbTdkNaHge55NV8KQ COM= -----END CERTIFICATE-----Generated at Thu Apr 17 18:14:03 2025 by rpki-client