$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c2c34d45-d139-4122-8407-d2263ceee098.roa File: c2c34d45-d139-4122-8407-d2263ceee098.roa (raw, json) Hash identifier: R63x0ushfEvUxvlG1fYUciscVhty/i7ASZC2007TPN0= Subject key identifier: 61:42:52:E7:9E:16:38:E2:91:09:ED:12:B5:51:5F:B1:10:5A:A9:20 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5430F070CA68A852A2CD1646E5DECA81F8269A5B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c2c34d45-d139-4122-8407-d2263ceee098.roa Signing time: Tue 25 Mar 2025 16:20:57 +0000 ROA not before: Tue 25 Mar 2025 16:20:57 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da32:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:30:f0:70:ca:68:a8:52:a2:cd:16:46:e5:de:ca:81:f8:26:9a:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 16:20:57 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=ce44b5be8615a7758264c2589e07e2a3e8f5ad73518c16f44e3c28d436f8dbab, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3c:50:e9:2d:14:1a:5b:d3:f6:4b:23:11:60: 0e:81:da:2e:76:25:ff:68:a6:08:a0:0c:b9:f2:19: 0a:37:e5:77:ba:3f:03:16:8b:e3:aa:bb:ee:72:23: 24:e9:f6:3b:79:a4:e9:5b:88:18:be:9f:54:96:19: 99:6a:bc:a8:03:17:5b:5f:a9:96:f2:3d:28:bf:00: f2:c0:d3:f7:bb:aa:27:58:6b:2b:67:77:2f:bd:c5: 48:97:fc:c1:65:31:de:4f:0d:72:3d:c0:90:30:c4: e6:7b:98:fe:7e:02:d0:68:fa:5f:91:af:ac:61:4a: 50:4e:d4:b6:a7:f5:16:26:7b:29:db:bb:22:8f:5e: 53:1d:3f:02:59:5a:3b:0b:23:1a:0b:92:c6:d4:22: 7b:a9:ca:68:1b:ad:71:52:58:12:0a:b7:1f:4e:da: 6d:00:24:31:64:d2:07:ed:61:63:ff:71:af:06:df: 06:83:b7:5c:27:d7:8c:56:44:4e:7f:aa:0f:6f:86: 86:a9:ab:5d:a6:a1:ac:65:19:08:67:00:f8:29:34: aa:86:6a:19:ef:0f:7c:09:97:62:d1:17:e2:fb:eb: 62:cf:c1:39:53:5c:03:e0:55:98:cd:99:96:5e:0e: 7e:49:d7:ac:3a:72:8b:88:b7:35:c5:01:b8:a9:e7: a3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:42:52:E7:9E:16:38:E2:91:09:ED:12:B5:51:5F:B1:10:5A:A9:20 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c2c34d45-d139-4122-8407-d2263ceee098.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da32:e000::/40 Signature Algorithm: sha256WithRSAEncryption 61:e4:44:cb:e9:29:a9:dc:6f:97:d1:9b:10:68:c9:4b:33:97: 73:f8:c9:64:d6:f6:43:01:6e:ee:e7:d0:15:03:84:0d:b8:7f: be:45:7a:18:4a:92:d6:59:91:44:30:d1:be:06:49:01:8f:96: 27:ef:c7:8f:85:ef:11:c8:9c:c1:a3:ff:87:a9:c7:c1:3c:bd: a1:dd:4e:6e:01:10:38:c3:f0:60:b8:07:7c:2c:be:b5:28:5a: dc:1b:81:b3:12:76:2b:25:06:d8:a3:e6:8e:18:02:17:d6:ce: ca:81:43:3e:86:ba:5a:8e:43:3f:17:f8:58:d5:56:89:d1:cc: 96:1b:ad:34:e7:ed:f4:88:59:a4:d7:db:80:b4:f7:d6:c3:75: 80:c1:be:94:25:27:b8:d9:cd:9e:15:26:60:64:ef:6d:fa:19: 8d:88:34:65:09:a0:1e:72:f6:84:d8:21:0b:1e:96:17:d4:a7: 1f:27:03:a2:16:f0:11:6b:88:1f:ac:70:17:46:64:fb:9a:77: a0:c8:53:f1:c3:e5:54:6c:fb:e5:48:8f:b2:88:87:f0:b3:48: 88:ce:6d:13:97:53:88:d3:1f:06:4c:95:eb:d5:1e:1b:af:ae: 87:51:fe:c1:1b:c4:d1:2e:35:8e:b8:80:83:e7:f4:cd:6d:73: 00:ee:97:16 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUVDDwcMpoqFKizRZG5d7KgfgmmlswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE2MjA1N1oX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAY2U0NGI1YmU4NjE1YTc3NTgyNjRj MjU4OWUwN2UyYTNlOGY1YWQ3MzUxOGMxNmY0NGUzYzI4ZDQzNmY4ZGJhYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzxQ6S0UGlvT9ksjEWAOgdoudiX/ aKYIoAy58hkKN+V3uj8DFovjqrvuciMk6fY7eaTpW4gYvp9UlhmZaryoAxdbX6mW 8j0ovwDywNP3u6onWGsrZ3cvvcVIl/zBZTHeTw1yPcCQMMTme5j+fgLQaPpfka+s YUpQTtS2p/UWJnsp27sij15THT8CWVo7CyMaC5LG1CJ7qcpoG61xUlgSCrcfTtpt ACQxZNIH7WFj/3GvBt8Gg7dcJ9eMVkROf6oPb4aGqatdpqGsZRkIZwD4KTSqhmoZ 7w98CZdi0Rfi++tiz8E5U1wD4FWYzZmWXg5+SdesOnKLiLc1xQG4qeej7wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGFCUueeFjjikQntErVRX7EQWqkgMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2MyYzM0ZDQ1LWQxMzktNDEyMi04NDA3LWQyMjYzY2VlZTA5OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaMuAwDQYJKoZIhvcNAQELBQADggEBAGHkRMvpKancb5fRmxBo yUszl3P4yWTW9kMBbu7n0BUDhA24f75FehhKktZZkUQw0b4GSQGPlifvx4+F7xHI nMGj/4epx8E8vaHdTm4BEDjD8GC4B3wsvrUoWtwbgbMSdislBtij5o4YAhfWzsqB Qz6GulqOQz8X+FjVVonRzJYbrTTn7fSIWaTX24C099bDdYDBvpQlJ7jZzZ4VJmBk 7236GY2INGUJoB5y9oTYIQselhfUpx8nA6IW8BFriB+scBdGZPuad6DIU/HD5VRs ++VIj7KIh/CzSIjObROXU4jTHwZMlevVHhuvrodR/sEbxNEuNY64gIPn9M1tcwDu lxY= -----END CERTIFICATE-----Generated at Thu Apr 17 17:46:01 2025 by rpki-client