$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b148abe3-0284-4eae-805f-b83c0f2291f5.roa File: b148abe3-0284-4eae-805f-b83c0f2291f5.roa (raw, json) Hash identifier: S9tLX1+eH1BBBbnbLhwRcw+zT9OzEManOc32GgCAfTQ= Subject key identifier: 7C:44:12:37:97:90:70:E9:2F:9E:09:CE:C1:C9:66:6E:14:FB:D2:0B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 62E4CA40C6460CF1F48BB5CC9952BBB702588F3E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b148abe3-0284-4eae-805f-b83c0f2291f5.roa Signing time: Wed 02 Apr 2025 00:00:18 +0000 ROA not before: Wed 02 Apr 2025 00:00:18 +0000 ROA not after: Wed 07 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daef:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:e4:ca:40:c6:46:0c:f1:f4:8b:b5:cc:99:52:bb:b7:02:58:8f:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 2 00:00:18 2025 GMT Not After : May 7 23:59:59 2025 GMT Subject: serialNumber=5d9044f487578b5aaff588f78860c273be28051ba59a616656d4924275baa596, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:76:cf:a9:94:5a:de:5a:d0:c8:79:1a:1f:5e: 40:01:18:d0:15:ed:96:6a:de:d8:84:db:56:27:d9: ad:7d:51:e5:ae:27:3a:d8:6c:aa:fd:ba:6b:00:0a: 43:02:7e:4e:31:ec:38:70:01:9a:57:52:ae:ac:f2: 98:3f:83:bd:be:08:f9:f1:93:a4:2b:84:05:c7:b1: 3b:08:86:c5:3e:e8:f3:de:03:db:13:35:e8:7b:a3: a3:15:a6:71:db:bd:dd:15:3b:5e:d3:fd:37:d0:d7: 2d:76:a8:a8:52:d8:e9:4e:35:63:2f:d1:5f:9f:fd: 58:07:6f:47:84:e3:cd:f0:2c:14:79:64:40:e2:cc: 57:85:91:2e:9b:92:05:5e:fd:60:be:01:5f:fc:71: 83:0a:5d:6b:8a:ca:8b:40:73:3f:fd:df:9f:57:89: 31:82:1f:c9:92:4e:4c:e4:b4:f8:70:09:8b:3e:2b: 1c:92:34:46:59:25:c0:8a:c8:29:ef:a4:e0:15:a7: 7e:02:9e:3f:45:b5:bf:cb:47:a9:82:07:5a:c0:62: 43:bf:59:54:16:61:a5:25:56:e4:93:48:ea:07:de: b8:ab:b2:0d:9e:f2:6e:06:a1:15:aa:17:e6:60:cd: 9a:5b:31:6a:a8:13:19:e6:a6:ac:3f:4f:89:53:e1: 48:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:44:12:37:97:90:70:E9:2F:9E:09:CE:C1:C9:66:6E:14:FB:D2:0B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b148abe3-0284-4eae-805f-b83c0f2291f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:2000::/40 Signature Algorithm: sha256WithRSAEncryption 5b:11:62:e2:25:ab:e9:f4:40:99:17:97:9a:3d:20:b3:32:9d: 42:36:0a:fd:e6:30:81:ca:63:ef:38:39:ce:d8:46:5c:f5:53: 71:b9:c0:7b:3c:bd:98:49:0e:44:d6:2d:43:93:58:bd:01:9b: 71:b3:43:16:43:2f:95:9b:73:96:c9:ea:61:bc:68:fa:22:52: 51:95:5b:2e:66:49:c5:a6:c0:64:15:c2:2b:2a:f4:1e:9e:bb: 8b:90:a3:4c:9c:e6:84:b6:7f:f2:96:f7:08:5c:68:7a:e6:45: ee:01:7a:eb:43:fc:88:8d:e2:c6:f0:42:f0:5b:06:3e:63:b0: 3c:10:b0:5a:b2:54:81:8c:ef:d9:2a:9a:db:6c:b2:2f:76:43: 58:a2:4f:70:f8:40:ef:63:65:1c:8c:c2:82:49:2e:86:d5:59: d3:16:c5:54:78:91:0c:8a:d6:e7:77:16:92:54:57:b1:02:da: 5d:91:02:62:a2:16:19:ff:bc:58:ef:c4:35:97:84:ea:06:6e: f6:0e:e6:e0:e4:89:00:42:ab:f4:57:38:fd:ca:57:8f:67:c6: 3f:fc:99:02:a2:1f:5d:ae:4f:28:f7:dd:8f:da:3a:16:5b:5a: 60:43:1a:9f:0b:87:10:3a:e6:2f:a5:59:ab:2d:78:61:6e:ec: 84:da:01:25 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUYuTKQMZGDPH0i7XMmVK7twJYjz4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQwMjAwMDAxOFoX DTI1MDUwNzIzNTk1OVowejFJMEcGA1UEBRNANWQ5MDQ0ZjQ4NzU3OGI1YWFmZjU4 OGY3ODg2MGMyNzNiZTI4MDUxYmE1OWE2MTY2NTZkNDkyNDI3NWJhYTU5NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHbPqZRa3lrQyHkaH15AARjQFe2W at7YhNtWJ9mtfVHlric62Gyq/bprAApDAn5OMew4cAGaV1KurPKYP4O9vgj58ZOk K4QFx7E7CIbFPujz3gPbEzXoe6OjFaZx273dFTte0/030NctdqioUtjpTjVjL9Ff n/1YB29HhOPN8CwUeWRA4sxXhZEum5IFXv1gvgFf/HGDCl1risqLQHM//d+fV4kx gh/Jkk5M5LT4cAmLPisckjRGWSXAisgp76TgFad+Ap4/RbW/y0epggdawGJDv1lU FmGlJVbkk0jqB964q7INnvJuBqEVqhfmYM2aWzFqqBMZ5qasP0+JU+FIwwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHxEEjeXkHDpL54JzsHJZm4U+9ILMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IxNDhhYmUzLTAyODQtNGVhZS04MDVmLWI4M2MwZjIyOTFmNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7yAwDQYJKoZIhvcNAQELBQADggEBAFsRYuIlq+n0QJkXl5o9 ILMynUI2Cv3mMIHKY+84Oc7YRlz1U3G5wHs8vZhJDkTWLUOTWL0Bm3GzQxZDL5Wb c5bJ6mG8aPoiUlGVWy5mScWmwGQVwisq9B6eu4uQo0yc5oS2f/KW9whcaHrmRe4B eutD/IiN4sbwQvBbBj5jsDwQsFqyVIGM79kqmttssi92Q1iiT3D4QO9jZRyMwoJJ LobVWdMWxVR4kQyK1ud3FpJUV7EC2l2RAmKiFhn/vFjvxDWXhOoGbvYO5uDkiQBC q/RXOP3KV49nxj/8mQKiH12uTyj33Y/aOhZbWmBDGp8LhxA65i+lWasteGFu7ITa ASU= -----END CERTIFICATE-----Generated at Thu Apr 17 17:36:31 2025 by rpki-client