$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c71bce5d-19d0-4490-bbf0-f89c982ac8d8.roa File: c71bce5d-19d0-4490-bbf0-f89c982ac8d8.roa (raw, json) Hash identifier: Gvox6/b4y/3fcOPef9RMfMjmxTJSvSfiSdSpS2A/P54= Subject key identifier: CB:98:94:60:E6:02:B8:CF:30:13:5D:5F:F0:C9:40:36:5C:76:35:80 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6718C0225DF07ACAAB07A3B746C1986C86DE7ABD Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c71bce5d-19d0-4490-bbf0-f89c982ac8d8.roa Signing time: Tue 25 Mar 2025 16:41:28 +0000 ROA not before: Tue 25 Mar 2025 16:41:28 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da18::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:18:c0:22:5d:f0:7a:ca:ab:07:a3:b7:46:c1:98:6c:86:de:7a:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 16:41:28 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=a1d50c063b57c849a1da0663b27ba0e262232220bbe37768a842725885c30d58, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d2:2b:76:b7:5d:48:1e:fa:ae:96:ae:db:ac: 99:1e:5c:14:ef:da:71:c6:65:9d:36:81:f0:57:4e: ea:5f:ca:cc:88:7e:6f:1b:fa:d0:32:e5:88:9e:4a: 19:4f:35:fb:31:09:15:6c:64:fd:44:df:84:78:41: 4a:4d:43:fa:9b:9f:ee:ef:43:7e:d9:fc:a7:78:07: bc:d0:32:59:8b:5e:75:27:39:03:12:e2:46:0d:a4: cc:aa:7c:39:b3:5d:75:1e:42:d1:d4:47:f7:51:56: 4d:8e:82:53:35:d9:55:21:e4:32:95:c6:87:c9:98: 95:a0:0c:e6:68:02:06:4f:3b:fb:89:b5:0a:2a:13: 2f:61:52:fe:c0:6b:f5:1c:87:40:a3:87:8c:41:04: 41:41:8f:51:ea:6f:2d:17:a0:a3:41:89:76:18:06: 1d:50:f6:21:60:03:ea:8b:7a:ef:58:c4:d0:56:58: e9:b8:06:d7:d9:c8:f6:4b:a3:f1:27:21:76:82:79: 21:0e:ae:f0:7f:0d:8b:ac:84:71:bb:a8:25:57:62: 5d:6b:10:1c:f1:69:a3:1c:a6:24:95:a1:99:3e:60: 77:c1:e4:45:4a:89:df:f4:95:13:ea:92:16:8f:67: fe:41:d6:bf:e7:6c:ae:89:1f:ce:3a:51:11:58:cc: fc:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:98:94:60:E6:02:B8:CF:30:13:5D:5F:F0:C9:40:36:5C:76:35:80 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c71bce5d-19d0-4490-bbf0-f89c982ac8d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da18::/36 Signature Algorithm: sha256WithRSAEncryption 57:f3:a7:8b:df:90:10:62:aa:96:22:8f:02:0d:a4:a9:d9:c1: 2c:86:2f:e8:66:b1:9e:43:d2:50:ac:3b:48:4f:c0:99:24:8d: 69:86:a4:cd:0d:ae:da:d0:a1:c4:6d:89:73:4a:a5:cb:6e:f7: c2:a7:74:a5:47:cd:ff:b7:49:5a:79:97:21:7b:f8:b8:30:fb: c5:5f:ef:4a:e2:5b:3f:8e:38:96:98:e9:76:9c:ce:91:7b:f0: f4:56:c1:97:0b:ce:94:4b:ea:2b:34:e0:10:03:f0:11:ed:0f: ac:e8:4b:a5:68:88:5c:6c:5a:6b:65:43:6d:dc:ee:54:8a:9b: b9:0f:a4:85:e2:68:88:f6:74:f8:3c:30:40:eb:c4:91:90:79: a6:84:bd:35:04:7f:34:53:07:e2:33:c1:1a:85:6f:3d:78:c4: 86:04:49:ca:f4:3a:da:f6:59:66:3b:f7:a2:f0:99:bb:ab:18: 6c:23:c5:f1:e1:17:b2:91:e5:04:b9:93:06:39:3b:43:38:95: a9:1f:6f:58:f2:d7:30:89:a1:19:bb:31:93:76:34:cf:b6:59: aa:48:a7:b0:99:ba:07:df:01:6a:60:de:e1:69:ae:e0:30:5a: 13:30:b9:71:ae:63:33:e0:0b:dc:13:0e:2c:15:62:33:e3:2f: a9:f5:06:53 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUZxjAIl3wesqrB6O3RsGYbIbeer0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE2NDEyOFoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAYTFkNTBjMDYzYjU3Yzg0OWExZGEw NjYzYjI3YmEwZTI2MjIzMjIyMGJiZTM3NzY4YTg0MjcyNTg4NWMzMGQ1ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdIrdrddSB76rpau26yZHlwU79px xmWdNoHwV07qX8rMiH5vG/rQMuWInkoZTzX7MQkVbGT9RN+EeEFKTUP6m5/u70N+ 2fyneAe80DJZi151JzkDEuJGDaTMqnw5s111HkLR1Ef3UVZNjoJTNdlVIeQylcaH yZiVoAzmaAIGTzv7ibUKKhMvYVL+wGv1HIdAo4eMQQRBQY9R6m8tF6CjQYl2GAYd UPYhYAPqi3rvWMTQVljpuAbX2cj2S6PxJyF2gnkhDq7wfw2LrIRxu6glV2JdaxAc 8WmjHKYklaGZPmB3weRFSonf9JUT6pIWj2f+Qda/52yuiR/OOlERWMz81wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMuYlGDmArjPMBNdX/DJQDZcdjWAMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M3MWJjZTVkLTE5ZDAtNDQ5MC1iYmYwLWY4OWM5ODJhYzhkOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaGAAwDQYJKoZIhvcNAQELBQADggEBAFfzp4vfkBBiqpYijwIN pKnZwSyGL+hmsZ5D0lCsO0hPwJkkjWmGpM0NrtrQocRtiXNKpctu98KndKVHzf+3 SVp5lyF7+Lgw+8Vf70riWz+OOJaY6XaczpF78PRWwZcLzpRL6is04BAD8BHtD6zo S6VoiFxsWmtlQ23c7lSKm7kPpIXiaIj2dPg8MEDrxJGQeaaEvTUEfzRTB+IzwRqF bz14xIYEScr0Otr2WWY796LwmburGGwjxfHhF7KR5QS5kwY5O0M4lakfb1jy1zCJ oRm7MZN2NM+2WapIp7CZugffAWpg3uFpruAwWhMwuXGuYzPgC9wTDiwVYjPjL6n1 BlM= -----END CERTIFICATE-----Generated at Thu Apr 17 17:38:50 2025 by rpki-client