$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c97fd121-51cc-4711-a755-0eefb435ec81.roa File: c97fd121-51cc-4711-a755-0eefb435ec81.roa (raw, json) Hash identifier: jBfEjayQcTWFdmV8HDmuj873pUB+kOXHsJRJuDRWR6s= Subject key identifier: 4E:74:F4:49:A7:68:AB:0D:9E:B7:86:03:AE:A1:31:0D:8C:9D:48:EE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1C0A58B514C1A0907E1527D5FFEE74FE5BC6CE05 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c97fd121-51cc-4711-a755-0eefb435ec81.roa Signing time: Wed 16 Apr 2025 00:00:47 +0000 ROA not before: Wed 16 Apr 2025 00:00:47 +0000 ROA not after: Wed 21 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:0a:58:b5:14:c1:a0:90:7e:15:27:d5:ff:ee:74:fe:5b:c6:ce:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 16 00:00:47 2025 GMT Not After : May 21 23:59:59 2025 GMT Subject: serialNumber=0c86d51c18bfcdccf9f0271cb95c5a8f4c780908a5d52b010553ff85016bd78d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fe:8c:aa:bf:01:4a:03:91:76:1f:63:b2:23: f3:45:9c:29:69:42:60:7a:d2:74:ad:60:2a:e6:2c: e2:0d:ee:0c:be:74:58:80:60:a8:45:d8:ca:c0:ed: b5:5f:1e:6e:78:d5:61:aa:41:6c:79:30:ff:71:02: 40:ef:b2:92:9c:89:02:89:40:ee:0a:eb:ae:86:69: 0c:d4:0d:45:ef:f3:f0:e2:50:d3:7a:e1:0d:b9:cd: 4f:c2:b7:fa:db:e9:ab:c8:08:f4:03:61:38:00:2d: 03:a6:75:55:53:4c:d5:b6:cd:b5:9e:f1:70:f5:2f: 07:9f:34:dc:4f:86:c5:5d:86:e5:f7:44:67:68:04: f5:48:5f:61:3e:62:8f:d5:b4:b4:1b:90:b1:99:69: f1:a5:06:75:23:ab:69:8f:19:e5:82:8b:dc:bb:3c: 9a:67:7e:62:7b:53:55:9d:66:e2:fb:a8:80:f0:12: 4c:c0:3b:99:80:b2:37:9c:22:62:a7:1e:58:f8:fd: b2:e8:3c:7b:44:01:3d:b2:7c:34:dd:3d:11:c9:82: 31:6d:d0:3d:a9:25:05:ea:55:e5:e2:45:13:af:8e: e8:4c:f8:f0:00:61:45:d2:fd:9e:10:25:3b:64:b4: 28:40:0a:45:a2:8f:bb:3e:d3:13:76:dc:0b:c4:d3: e5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:74:F4:49:A7:68:AB:0D:9E:B7:86:03:AE:A1:31:0D:8C:9D:48:EE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c97fd121-51cc-4711-a755-0eefb435ec81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:800::/40 Signature Algorithm: sha256WithRSAEncryption 10:d6:38:f1:86:52:43:79:6b:37:af:a7:8d:7d:ed:16:b2:79: 67:1b:09:31:13:7e:ff:fb:3c:0d:49:81:bd:e4:2b:82:ad:6a: f1:f5:45:96:9a:8e:b1:4e:a6:37:a3:b6:c8:93:b7:5a:02:b8: 3e:8d:2e:28:45:54:8d:07:96:41:97:ba:4d:a1:c9:0d:f8:82: 0e:de:3e:46:9a:15:b3:f6:71:a7:83:ca:81:15:ed:e2:44:60: 22:28:3e:9c:17:44:d7:37:d3:3c:eb:93:93:11:b1:96:5b:00: cb:2f:d5:ce:48:94:97:80:a6:30:b2:16:12:23:b5:79:63:31: dd:70:d9:3b:08:c0:77:ca:2e:97:8a:e4:25:75:92:0a:f4:66: 4c:51:46:6e:7c:d1:9a:e8:96:7c:bd:b3:ae:58:18:18:a4:33: c2:d0:be:3e:04:19:1f:45:d0:49:4e:b2:9f:b2:44:e7:d7:94: 97:f2:a4:e9:b3:a3:b6:71:da:c2:e8:f9:82:44:ea:1a:e8:01: 12:00:f6:07:3c:69:84:5d:ed:11:06:95:94:c4:a9:e7:7a:e4: 77:de:af:95:b8:68:16:bd:13:97:39:ed:f5:26:bd:c7:65:a8: f8:06:78:c8:ed:57:94:46:8b:74:88:9c:b3:9b:ad:39:e5:f0: b6:b0:c2:1b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUHApYtRTBoJB+FSfV/+50/lvGzgUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxNjAwMDA0N1oX DTI1MDUyMTIzNTk1OVowejFJMEcGA1UEBRNAMGM4NmQ1MWMxOGJmY2RjY2Y5ZjAy NzFjYjk1YzVhOGY0Yzc4MDkwOGE1ZDUyYjAxMDU1M2ZmODUwMTZiZDc4ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyf6Mqr8BSgORdh9jsiPzRZwpaUJg etJ0rWAq5iziDe4MvnRYgGCoRdjKwO21Xx5ueNVhqkFseTD/cQJA77KSnIkCiUDu CuuuhmkM1A1F7/Pw4lDTeuENuc1Pwrf62+mryAj0A2E4AC0DpnVVU0zVts21nvFw 9S8HnzTcT4bFXYbl90RnaAT1SF9hPmKP1bS0G5CxmWnxpQZ1I6tpjxnlgovcuzya Z35ie1NVnWbi+6iA8BJMwDuZgLI3nCJipx5Y+P2y6Dx7RAE9snw03T0RyYIxbdA9 qSUF6lXl4kUTr47oTPjwAGFF0v2eECU7ZLQoQApFoo+7PtMTdtwLxNPl4wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFE509EmnaKsNnreGA66hMQ2MnUjuMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M5N2ZkMTIxLTUxY2MtNDcxMS1hNzU1LTBlZWZiNDM1ZWM4MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9ggwDQYJKoZIhvcNAQELBQADggEBABDWOPGGUkN5azevp419 7RayeWcbCTETfv/7PA1Jgb3kK4KtavH1RZaajrFOpjejtsiTt1oCuD6NLihFVI0H lkGXuk2hyQ34gg7ePkaaFbP2caeDyoEV7eJEYCIoPpwXRNc30zzrk5MRsZZbAMsv 1c5IlJeApjCyFhIjtXljMd1w2TsIwHfKLpeK5CV1kgr0ZkxRRm580Zrolny9s65Y GBikM8LQvj4EGR9F0ElOsp+yROfXlJfypOmzo7Zx2sLo+YJE6hroARIA9gc8aYRd 7REGlZTEqed65Hfer5W4aBa9E5c57fUmvcdlqPgGeMjtV5RGi3SInLObrTnl8Law whs= -----END CERTIFICATE-----Generated at Thu Apr 17 17:55:35 2025 by rpki-client