$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a71f2535-4413-48f8-a671-86e26e5062e1.roa File: a71f2535-4413-48f8-a671-86e26e5062e1.roa (raw, json) Hash identifier: RKO1uWYa18OCycIkUOXmRd1pI9spg3lHA54ZGs1Xslk= Subject key identifier: D2:2B:F7:99:6A:6F:D5:50:BA:F0:FA:7F:A9:92:A5:6F:38:8D:3E:DA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1288BB79E3BAECACBC739E6E5DA58084CD8A20D3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a71f2535-4413-48f8-a671-86e26e5062e1.roa Signing time: Tue 25 Mar 2025 16:30:43 +0000 ROA not before: Tue 25 Mar 2025 16:30:43 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da14:8400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:88:bb:79:e3:ba:ec:ac:bc:73:9e:6e:5d:a5:80:84:cd:8a:20:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 16:30:43 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=ba03311c06ba650534ea570ab04dc9f1f4dbf455561e8d2e45cb410d67a00ba2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ac:20:9c:ba:45:f5:73:40:53:bc:64:51:0f: 56:fc:77:a4:d1:3c:e2:c6:b2:2d:26:71:6e:d9:5a: 92:d0:55:0a:65:15:56:da:57:de:5a:4f:dc:ff:5e: fa:ca:c4:e8:e6:5f:fb:fe:c8:b6:16:2a:4a:68:f8: 4f:59:0d:06:72:03:31:d1:5e:35:9e:76:bf:88:a9: 79:82:44:2b:dc:c5:a3:61:c7:08:89:98:7c:94:64: c9:7f:cd:04:8f:a2:99:d3:7c:6c:60:b2:d5:93:8d: de:ac:f4:21:10:f9:2a:57:2c:a9:9f:3d:eb:74:84: 30:a7:c8:32:8d:6c:33:4e:72:bb:41:22:10:72:8b: 90:ea:e4:ae:b9:f3:f6:72:75:6a:41:36:44:f1:51: 07:7e:90:95:75:62:8e:ae:bb:6e:4c:57:23:52:33: af:3b:ef:a7:fc:a4:de:c9:c5:50:73:e2:04:8c:d3: d0:e3:bb:ec:a3:b8:f0:c7:a3:ca:d5:22:81:16:25: e4:25:08:e1:ba:fb:dc:d0:81:59:b6:fb:b3:02:ad: 87:89:dc:52:89:9b:04:7b:ea:79:4a:84:b6:76:fc: 99:14:e1:99:8a:74:96:31:c4:dd:0c:dc:d1:32:b9: c0:4d:07:5a:9d:d8:ca:45:39:fa:20:70:7c:74:6f: 0f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2B:F7:99:6A:6F:D5:50:BA:F0:FA:7F:A9:92:A5:6F:38:8D:3E:DA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a71f2535-4413-48f8-a671-86e26e5062e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da14:8400::/38 Signature Algorithm: sha256WithRSAEncryption 5b:61:d5:02:96:7c:bf:c0:26:9c:44:b2:d0:76:24:76:83:d4: 79:b4:9b:d7:6a:91:c7:7a:54:e7:c1:37:54:70:29:32:9a:dc: 09:5d:98:02:ba:68:26:ea:67:39:29:38:83:90:3b:60:a5:c9: 55:5a:93:5b:78:fe:06:fa:da:96:ea:52:f7:16:0e:b9:2e:86: 80:3a:21:34:44:21:0e:1d:9f:da:fe:d2:39:4a:2d:51:9d:32: e1:b3:a5:6c:0e:70:4e:12:62:ba:89:6d:a6:9f:d3:6b:59:30: 82:f2:7c:c2:1f:e3:21:49:06:dc:98:17:e1:35:c0:d3:12:86: a3:79:ec:88:53:00:a6:8e:ad:01:58:1b:5b:30:d7:02:e7:0e: 5f:01:53:13:48:b4:b8:de:06:ad:2c:8d:93:6f:43:5b:b2:26: 50:5e:60:c5:f5:bf:0a:6a:0b:35:ab:9c:ae:d8:80:e5:2d:f3: 49:56:b6:ca:c0:ba:bd:a4:63:b3:e8:13:d6:fd:b1:c2:8f:20: 03:fc:1c:08:bb:89:60:9a:0d:80:b8:d9:59:86:52:65:b7:62: bc:c9:2d:0b:0c:2e:87:b9:ce:71:29:c9:bb:67:71:da:ff:7d: bf:02:d7:7b:92:be:cb:f8:26:54:05:0d:8e:7e:61:a6:44:00: a2:81:ab:11 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUEoi7eeO67Ky8c55uXaWAhM2KINMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE2MzA0M1oX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAYmEwMzMxMWMwNmJhNjUwNTM0ZWE1 NzBhYjA0ZGM5ZjFmNGRiZjQ1NTU2MWU4ZDJlNDVjYjQxMGQ2N2EwMGJhMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKwgnLpF9XNAU7xkUQ9W/Hek0Tzi xrItJnFu2VqS0FUKZRVW2lfeWk/c/176ysTo5l/7/si2FipKaPhPWQ0GcgMx0V41 nna/iKl5gkQr3MWjYccIiZh8lGTJf80Ej6KZ03xsYLLVk43erPQhEPkqVyypnz3r dIQwp8gyjWwzTnK7QSIQcouQ6uSuufP2cnVqQTZE8VEHfpCVdWKOrrtuTFcjUjOv O++n/KTeycVQc+IEjNPQ47vso7jwx6PK1SKBFiXkJQjhuvvc0IFZtvuzAq2HidxS iZsEe+p5SoS2dvyZFOGZinSWMcTdDNzRMrnATQdandjKRTn6IHB8dG8PhwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNIr95lqb9VQuvD6f6mSpW84jT7aMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E3MWYyNTM1LTQ0MTMtNDhmOC1hNjcxLTg2ZTI2ZTUwNjJlMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaFIQwDQYJKoZIhvcNAQELBQADggEBAFth1QKWfL/AJpxEstB2 JHaD1Hm0m9dqkcd6VOfBN1RwKTKa3AldmAK6aCbqZzkpOIOQO2ClyVVak1t4/gb6 2pbqUvcWDrkuhoA6ITREIQ4dn9r+0jlKLVGdMuGzpWwOcE4SYrqJbaaf02tZMILy fMIf4yFJBtyYF+E1wNMShqN57IhTAKaOrQFYG1sw1wLnDl8BUxNItLjeBq0sjZNv Q1uyJlBeYMX1vwpqCzWrnK7YgOUt80lWtsrAur2kY7PoE9b9scKPIAP8HAi7iWCa DYC42VmGUmW3YrzJLQsMLoe5znEpybtncdr/fb8C13uSvsv4JlQFDY5+YaZEAKKB qxE= -----END CERTIFICATE-----Generated at Thu Apr 17 18:07:09 2025 by rpki-client