$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b7c6468e-0b79-42cc-99f4-c6816c6a1f95.roa File: b7c6468e-0b79-42cc-99f4-c6816c6a1f95.roa (raw, json) Hash identifier: /SGJtz6+hDLXCSYKEIFsMsBXuAeKxfwkRL8/WekjLjA= Subject key identifier: A9:80:3D:0B:40:26:5C:34:58:8A:56:06:13:12:2E:F6:17:E1:A8:88 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3B587498FBD08265FB70B3B37DD05DBC768B28AD Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b7c6468e-0b79-42cc-99f4-c6816c6a1f95.roa Signing time: Tue 25 Mar 2025 16:40:34 +0000 ROA not before: Tue 25 Mar 2025 16:40:34 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1c:8800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:58:74:98:fb:d0:82:65:fb:70:b3:b3:7d:d0:5d:bc:76:8b:28:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 16:40:34 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=7deddd678605518deb07e827117ed99a9a121bde6ff250d5622fa7262b320952, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7b:5b:5f:77:b5:27:3f:b2:71:18:48:e0:42: ec:8c:cd:a3:d8:4d:27:e9:87:d6:56:db:ea:48:f6: 22:6a:1e:c2:f1:69:94:c3:7a:81:b6:c7:e5:16:85: 9a:7c:31:1e:c6:f4:68:23:20:3d:05:5e:42:53:a8: 56:23:30:68:30:af:86:4c:e3:b7:54:ba:83:f2:8f: 6d:67:97:fb:f1:8e:47:00:ec:44:5f:58:fc:54:00: 5b:e0:72:51:ec:7d:bb:ac:71:cc:27:4d:4f:d5:e3: 73:3c:36:75:e3:ef:8a:96:45:8f:ac:7d:e3:a5:e2: 6c:20:a6:70:19:a3:b6:c8:35:7d:b2:7e:ef:45:96: bd:d9:92:28:2c:7c:81:ed:a6:66:56:27:67:0c:35: f5:5d:c7:05:f1:90:eb:88:54:f2:8b:11:e7:7a:ff: 06:8f:b3:37:08:d3:ec:3b:7a:0a:91:69:16:28:07: d4:2c:2b:82:0f:72:0f:ea:fc:a6:21:3e:32:6b:5b: 39:0f:b7:45:76:e2:7c:93:34:94:77:8a:6d:27:4b: f6:9a:46:79:5c:56:f1:7c:4d:20:cd:98:69:c5:d5: bb:03:69:29:a6:a3:a1:be:e1:97:d2:ed:1d:c6:40: 17:ca:33:e2:60:0d:cc:97:95:99:ea:73:ae:ac:c1: 3c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:80:3D:0B:40:26:5C:34:58:8A:56:06:13:12:2E:F6:17:E1:A8:88 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b7c6468e-0b79-42cc-99f4-c6816c6a1f95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1c:8800::/38 Signature Algorithm: sha256WithRSAEncryption b3:5e:17:20:97:f8:bd:15:7d:90:76:2d:34:bc:79:d3:3d:0b: 50:7d:38:98:6f:1d:e2:51:0f:2f:01:76:94:16:ff:3d:e9:e7: fc:1b:4c:82:62:0f:89:e9:9c:91:87:9e:9c:04:4f:6f:95:31: 94:ec:0e:86:6d:65:f8:97:c7:df:e9:6a:a8:b4:ea:fe:11:a7: 75:bf:30:9b:32:00:2f:97:34:00:5c:ac:f6:e9:e7:12:af:4e: 09:29:97:bc:cd:d8:70:82:a4:62:2a:b0:55:f2:d3:64:bb:36: 9e:91:83:f5:c5:47:27:a0:7d:3a:22:24:41:67:f7:0b:bb:36: 53:fe:d5:6e:30:9f:c8:e1:3e:75:cf:5b:f5:86:bb:f7:c8:08: 6c:ba:56:17:ca:1e:ca:c7:e0:ea:2d:96:05:b2:e5:33:b1:e4: 17:94:37:0d:96:eb:8b:65:14:62:a4:ef:5c:bb:9d:dc:41:75: 15:43:52:4b:1c:52:1b:07:43:95:f0:54:65:97:30:fb:78:e3: 8b:50:56:97:a7:bb:dc:87:7b:4a:da:4e:a7:8e:a3:99:60:f4: b4:8c:22:bc:44:5f:c4:ad:e2:f3:4c:85:be:02:8e:e1:f9:8d: 64:45:d8:1e:8c:49:22:bd:06:73:cc:7c:28:8d:00:6e:df:4a: 31:7a:a0:64 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUO1h0mPvQgmX7cLOzfdBdvHaLKK0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE2NDAzNFoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAN2RlZGRkNjc4NjA1NTE4ZGViMDdl ODI3MTE3ZWQ5OWE5YTEyMWJkZTZmZjI1MGQ1NjIyZmE3MjYyYjMyMDk1MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ntbX3e1Jz+ycRhI4ELsjM2j2E0n 6YfWVtvqSPYiah7C8WmUw3qBtsflFoWafDEexvRoIyA9BV5CU6hWIzBoMK+GTOO3 VLqD8o9tZ5f78Y5HAOxEX1j8VABb4HJR7H27rHHMJ01P1eNzPDZ14++KlkWPrH3j peJsIKZwGaO2yDV9sn7vRZa92ZIoLHyB7aZmVidnDDX1XccF8ZDriFTyixHnev8G j7M3CNPsO3oKkWkWKAfULCuCD3IP6vymIT4ya1s5D7dFduJ8kzSUd4ptJ0v2mkZ5 XFbxfE0gzZhpxdW7A2kppqOhvuGX0u0dxkAXyjPiYA3Ml5WZ6nOurME8owIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKmAPQtAJlw0WIpWBhMSLvYX4aiIMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I3YzY0NjhlLTBiNzktNDJjYy05OWY0LWM2ODE2YzZhMWY5NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaHIgwDQYJKoZIhvcNAQELBQADggEBALNeFyCX+L0VfZB2LTS8 edM9C1B9OJhvHeJRDy8BdpQW/z3p5/wbTIJiD4npnJGHnpwET2+VMZTsDoZtZfiX x9/paqi06v4Rp3W/MJsyAC+XNABcrPbp5xKvTgkpl7zN2HCCpGIqsFXy02S7Np6R g/XFRyegfToiJEFn9wu7NlP+1W4wn8jhPnXPW/WGu/fICGy6VhfKHsrH4OotlgWy 5TOx5BeUNw2W64tlFGKk71y7ndxBdRVDUkscUhsHQ5XwVGWXMPt444tQVpenu9yH e0raTqeOo5lg9LSMIrxEX8St4vNMhb4CjuH5jWRF2B6MSSK9BnPMfCiNAG7fSjF6 oGQ= -----END CERTIFICATE-----Generated at Thu Apr 17 17:26:54 2025 by rpki-client