$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9771a9b1-0ca1-4d5c-aabf-23e3c1aeecb3.roa File: 9771a9b1-0ca1-4d5c-aabf-23e3c1aeecb3.roa (raw, json) Hash identifier: JW4+Gs0VQmMdR8ILedbgfbVfHnAVMt8ilK36cjOblcA= Subject key identifier: 21:31:47:4E:56:A1:C4:14:B5:61:7A:35:B0:13:FF:1C:5E:C5:F5:90 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3F80720190A359D066EA98B0E7E9B87FDD1A7609 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9771a9b1-0ca1-4d5c-aabf-23e3c1aeecb3.roa Signing time: Tue 25 Mar 2025 16:50:43 +0000 ROA not before: Tue 25 Mar 2025 16:50:43 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1a:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:80:72:01:90:a3:59:d0:66:ea:98:b0:e7:e9:b8:7f:dd:1a:76:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 16:50:43 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=8f0b57d293a07c11200b0072be0d2324fbdd3bf75c55509ca40a52767bc34a98, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:37:5a:a9:ac:3e:a4:0c:b9:32:c0:22:17:75: fc:a9:d3:c2:7a:ff:2b:1c:64:92:73:f6:3e:da:da: 8c:fb:50:e4:eb:45:40:40:93:31:62:f4:64:55:7e: 1d:60:7a:c2:52:1f:41:2f:1d:ff:72:dd:ff:d8:99: 5f:83:4e:34:ad:3d:20:44:e8:1e:e3:14:2a:fc:16: 87:d1:d3:52:47:60:1e:dd:92:2b:49:73:3e:89:20: ff:00:af:a0:76:1f:9b:97:35:96:ed:4d:04:c9:0a: 61:b5:f3:d4:22:ac:a7:96:d1:7d:a3:a5:f1:ef:57: a3:b0:54:a9:fd:22:04:f2:23:05:26:dc:98:b8:85: 99:e7:30:15:a7:c7:1a:58:7a:bd:b0:a8:86:96:ab: da:40:20:26:98:e5:fc:9a:b1:d8:b1:26:ea:c8:5c: e2:58:ee:18:64:15:4d:60:9f:5f:0f:d8:c0:a2:47: 7e:e0:7b:36:b7:f5:5b:22:1b:68:76:da:31:66:34: a0:c6:f0:c8:52:4f:f9:5b:62:74:c3:a6:c6:23:e9: 6e:7d:b9:43:1e:4c:be:b6:ad:5f:2f:06:b5:db:75: 4f:74:9b:57:1a:74:c2:24:74:9a:f7:cf:63:49:3a: ff:bc:45:e8:f5:01:c9:af:04:82:3d:f4:96:5d:59: 11:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:31:47:4E:56:A1:C4:14:B5:61:7A:35:B0:13:FF:1C:5E:C5:F5:90 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9771a9b1-0ca1-4d5c-aabf-23e3c1aeecb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1a:800::/38 Signature Algorithm: sha256WithRSAEncryption 70:47:81:81:e9:95:a2:20:45:6f:8f:4f:fc:2b:73:e2:cd:31: 63:98:7a:7f:02:a8:9d:84:c9:53:c2:f1:ae:da:72:44:d1:7c: 7b:78:2e:fe:4d:64:bc:27:65:98:71:a5:07:19:f8:b4:26:5c: 1c:42:5a:01:2d:42:75:5d:52:83:f0:0e:ea:b1:68:3d:20:b8: c0:95:84:12:f4:1a:db:48:5c:f5:af:e3:50:98:fd:fc:66:ea: 45:be:1f:94:b3:cf:f7:6b:4a:1e:82:52:17:a4:67:e3:6b:b4: 51:26:9c:ba:0a:6d:64:74:2c:bc:91:c4:57:80:7b:4a:fd:95: 52:91:45:4e:77:91:42:b4:26:86:86:e7:56:22:3c:42:5d:f1: ae:be:71:0d:f0:67:0e:42:3a:b3:f1:d6:31:ac:9a:5c:77:8d: 1c:74:e3:17:a6:17:8a:35:d7:d5:58:ae:d3:19:74:92:be:65: 30:2d:98:f5:8e:16:f9:4b:e7:8f:b4:2b:e2:d1:38:03:f3:fe: 73:da:d9:9d:35:46:8e:1d:c8:80:ee:9d:39:ff:8d:c4:ae:55: 7b:86:50:f0:04:dd:57:91:2a:c9:11:aa:1f:34:05:bc:6a:2a: 63:6e:e4:38:53:3b:66:26:7e:d9:3c:29:3d:de:3d:aa:ac:b2: b4:79:2e:c5 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUP4ByAZCjWdBm6piw5+m4f90adgkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE2NTA0M1oX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAOGYwYjU3ZDI5M2EwN2MxMTIwMGIw MDcyYmUwZDIzMjRmYmRkM2JmNzVjNTU1MDljYTQwYTUyNzY3YmMzNGE5ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDdaqaw+pAy5MsAiF3X8qdPCev8r HGSSc/Y+2tqM+1Dk60VAQJMxYvRkVX4dYHrCUh9BLx3/ct3/2Jlfg040rT0gROge 4xQq/BaH0dNSR2Ae3ZIrSXM+iSD/AK+gdh+blzWW7U0EyQphtfPUIqynltF9o6Xx 71ejsFSp/SIE8iMFJtyYuIWZ5zAVp8caWHq9sKiGlqvaQCAmmOX8mrHYsSbqyFzi WO4YZBVNYJ9fD9jAokd+4Hs2t/VbIhtodtoxZjSgxvDIUk/5W2J0w6bGI+lufblD Hky+tq1fLwa123VPdJtXGnTCJHSa989jSTr/vEXo9QHJrwSCPfSWXVkRWwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCExR05WocQUtWF6NbAT/xxexfWQMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk3NzFhOWIxLTBjYTEtNGQ1Yy1hYWJmLTIzZTNjMWFlZWNiMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaGggwDQYJKoZIhvcNAQELBQADggEBAHBHgYHplaIgRW+PT/wr c+LNMWOYen8CqJ2EyVPC8a7ackTRfHt4Lv5NZLwnZZhxpQcZ+LQmXBxCWgEtQnVd UoPwDuqxaD0guMCVhBL0GttIXPWv41CY/fxm6kW+H5Szz/drSh6CUhekZ+NrtFEm nLoKbWR0LLyRxFeAe0r9lVKRRU53kUK0JoaG51YiPEJd8a6+cQ3wZw5COrPx1jGs mlx3jRx04xemF4o119VYrtMZdJK+ZTAtmPWOFvlL54+0K+LROAPz/nPa2Z01Ro4d yIDunTn/jcSuVXuGUPAE3VeRKskRqh80BbxqKmNu5DhTO2Ymftk8KT3ePaqssrR5 LsU= -----END CERTIFICATE-----Generated at Thu Apr 17 17:29:15 2025 by rpki-client