$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b17b22ee-80a1-41f9-b887-0dcc173f823b.roa File: b17b22ee-80a1-41f9-b887-0dcc173f823b.roa (raw, json) Hash identifier: wOK+bydWoozxMFva2UnL+/oBGtRYoi2vRS7K3Hqedxw= Subject key identifier: 9C:A1:7E:55:4C:74:09:70:98:96:EB:D6:6D:1D:40:CD:5B:29:5B:C5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 079D63A89B41AAA43A1152532E0BE4D7ED123AD0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b17b22ee-80a1-41f9-b887-0dcc173f823b.roa Signing time: Tue 25 Mar 2025 15:41:07 +0000 ROA not before: Tue 25 Mar 2025 15:41:07 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:e040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:9d:63:a8:9b:41:aa:a4:3a:11:52:53:2e:0b:e4:d7:ed:12:3a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 15:41:07 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=c1dad4d6dc11e58daf90372a879d3eb2f6e65fa5361c079cd80e839df79bb4f0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d9:75:63:d0:ee:ec:38:af:f8:5a:2d:cc:b4: 21:2d:cd:d8:4a:7a:9c:8c:8d:7f:3a:d6:1f:77:3c: 99:7d:54:c7:42:92:52:be:ab:c2:b4:75:cd:e4:f1: b5:37:9a:76:02:b3:a1:04:11:36:51:e3:c2:2e:a1: ea:ea:80:d5:f1:7c:6e:bd:54:c3:86:48:96:57:84: ec:d9:b4:3c:5d:f5:9a:1e:21:78:8e:18:c8:2e:b5: 59:98:bb:ee:14:ce:ef:54:f5:7e:d4:af:d1:cc:3c: 83:21:19:cb:7a:b6:06:03:c6:67:47:95:b0:03:eb: 3f:69:d4:69:01:1e:87:5a:32:66:b1:f2:c4:33:53: c9:24:9c:a8:f0:e1:7c:5c:78:6b:d9:72:2d:9b:66: 7b:45:11:25:b6:fb:76:15:29:fe:b2:c9:63:37:10: 23:04:18:a9:de:df:30:46:6b:64:2d:90:e5:2e:a7: 8a:af:e0:98:61:93:d9:18:f1:d5:b6:25:33:1f:83: 93:47:59:b0:97:8c:99:38:ae:03:e3:a7:63:06:b5: c0:35:c9:83:0c:49:05:b4:5e:ef:d9:3b:c3:7f:e8: a3:f2:c8:10:02:19:b1:cb:c2:d2:2a:59:83:33:23: 62:aa:c8:bb:f8:fb:81:01:da:57:c3:be:ca:8b:a2: 23:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A1:7E:55:4C:74:09:70:98:96:EB:D6:6D:1D:40:CD:5B:29:5B:C5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b17b22ee-80a1-41f9-b887-0dcc173f823b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:e040::/46 Signature Algorithm: sha256WithRSAEncryption 8a:c8:4c:8e:3a:29:7a:86:9a:c6:a5:db:71:58:db:f5:25:a9: 0a:e0:d2:fd:c3:13:26:f2:55:1f:6a:c9:d3:2d:7e:9d:72:83: a7:85:af:ce:05:df:43:f5:e9:e0:01:48:0b:66:63:ae:46:49: 21:bf:4d:b6:65:b9:9c:d9:00:c8:33:03:20:20:87:45:8a:de: 90:ef:0f:16:17:93:cc:87:4e:a9:4a:f8:75:68:3b:82:7c:22: 56:8d:80:a8:5d:df:c8:f7:ab:3b:c4:3b:e9:72:68:ba:73:a8: 6e:b3:08:63:4d:57:b3:e6:99:ba:7f:c0:c5:96:24:04:45:98: 2a:56:85:6b:00:07:46:4e:fa:ce:41:2b:b8:3e:3e:50:e0:e1: cc:04:13:99:9b:fc:64:dd:29:83:3c:ca:3b:66:40:82:b9:f5: 1c:ec:8f:e4:ed:e2:7d:92:86:a5:d3:be:90:30:9d:1e:a8:96: d1:05:b1:a0:1e:34:6f:f5:34:0d:ae:bd:86:02:33:5a:52:e3: f3:86:74:1c:06:68:b6:a4:89:eb:7b:f2:1a:a6:68:7a:47:e3: 98:19:df:33:e5:4f:25:f9:38:33:88:72:d8:d8:06:c0:2a:a1: 5f:65:94:aa:cf:d7:ba:ab:77:79:10:07:9c:fa:2a:74:7b:56: 9c:25:25:ed -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUB51jqJtBqqQ6EVJTLgvk1+0SOtAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE1NDEwN1oX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAYzFkYWQ0ZDZkYzExZTU4ZGFmOTAz NzJhODc5ZDNlYjJmNmU2NWZhNTM2MWMwNzljZDgwZTgzOWRmNzliYjRmMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtl1Y9Du7Div+FotzLQhLc3YSnqc jI1/OtYfdzyZfVTHQpJSvqvCtHXN5PG1N5p2ArOhBBE2UePCLqHq6oDV8XxuvVTD hkiWV4Ts2bQ8XfWaHiF4jhjILrVZmLvuFM7vVPV+1K/RzDyDIRnLerYGA8ZnR5Ww A+s/adRpAR6HWjJmsfLEM1PJJJyo8OF8XHhr2XItm2Z7RREltvt2FSn+ssljNxAj BBip3t8wRmtkLZDlLqeKr+CYYZPZGPHVtiUzH4OTR1mwl4yZOK4D46djBrXANcmD DEkFtF7v2TvDf+ij8sgQAhmxy8LSKlmDMyNiqsi7+PuBAdpXw77Ki6IjlwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJyhflVMdAlwmJbr1m0dQM1bKVvFMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IxN2IyMmVlLTgwYTEtNDFmOS1iODg3LTBkY2MxNzNmODIzYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaeBAMA0GCSqGSIb3DQEBCwUAA4IBAQCKyEyOOil6hprGpdtx WNv1JakK4NL9wxMm8lUfasnTLX6dcoOnha/OBd9D9engAUgLZmOuRkkhv022Zbmc 2QDIMwMgIIdFit6Q7w8WF5PMh06pSvh1aDuCfCJWjYCoXd/I96s7xDvpcmi6c6hu swhjTVez5pm6f8DFliQERZgqVoVrAAdGTvrOQSu4Pj5Q4OHMBBOZm/xk3SmDPMo7 ZkCCufUc7I/k7eJ9koal076QMJ0eqJbRBbGgHjRv9TQNrr2GAjNaUuPzhnQcBmi2 pInre/Iapmh6R+OYGd8z5U8l+TgziHLY2AbAKqFfZZSqz9e6q3d5EAec+ip0e1ac JSXt -----END CERTIFICATE-----Generated at Thu Apr 17 17:24:37 2025 by rpki-client