$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cd5cb441-c1c6-4659-800f-ed9315d23ae9.roa File: cd5cb441-c1c6-4659-800f-ed9315d23ae9.roa (raw, json) Hash identifier: GabBwiblcgXzOjERntDfnWKppMjAxLf2wi+0XQLaGaw= Subject key identifier: E6:C6:6C:48:AC:AE:AD:43:D2:AB:5F:A5:5F:24:4C:E0:8D:71:39:AC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6D050987C50D39F0D9BEFAD07E53C08B139C8ABE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cd5cb441-c1c6-4659-800f-ed9315d23ae9.roa Signing time: Tue 25 Mar 2025 16:21:07 +0000 ROA not before: Tue 25 Mar 2025 16:21:07 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da36:c800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:05:09:87:c5:0d:39:f0:d9:be:fa:d0:7e:53:c0:8b:13:9c:8a:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 16:21:07 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=05a7a51d59eff2b8bdc8d0e30ee6f6d50b8c33e3b212271acae695bbfb332588, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f6:0e:70:c9:fd:36:a4:ef:10:18:78:43:d1: be:4b:6c:ce:90:61:ce:02:a3:fd:ea:d2:ab:7e:32: 25:d7:7f:72:8b:28:e0:09:a6:9b:6e:a6:75:db:17: d2:08:72:c6:91:d9:6e:54:4b:b6:ed:ee:d1:71:13: 40:9c:15:fd:7d:fd:75:69:90:d0:31:c0:57:bd:a0: 8b:da:b5:8a:0c:05:b8:70:a7:73:89:c1:15:44:82: 24:4e:22:73:e4:f7:cb:d2:36:df:af:91:2f:68:02: 64:ed:4d:e5:47:d7:57:24:e9:4f:41:be:00:63:d6: fb:0a:b1:81:24:0f:cf:ce:88:22:7d:ea:45:0c:e0: 1b:00:f0:82:a0:91:fe:c6:54:9a:d1:00:29:4a:e3: f0:26:31:a5:e7:a2:6d:f3:98:51:18:66:5f:83:58: 56:63:2d:09:d9:00:05:be:72:ac:a3:89:ed:c5:96: 2d:1b:32:6b:2c:80:ae:b4:3f:8d:42:30:cc:87:84: ee:91:9e:45:00:63:ab:18:77:3e:b1:98:05:10:f0: bb:cb:83:f7:10:b4:c8:ce:88:81:1b:fe:58:09:93: 13:d7:c0:34:9d:5a:99:ec:8a:02:7e:20:4b:bd:db: d6:5a:05:06:fb:87:da:06:da:39:5a:6e:7f:54:33: c3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C6:6C:48:AC:AE:AD:43:D2:AB:5F:A5:5F:24:4C:E0:8D:71:39:AC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cd5cb441-c1c6-4659-800f-ed9315d23ae9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da36:c800::/40 Signature Algorithm: sha256WithRSAEncryption 44:96:c6:31:1b:85:4d:95:55:41:6d:1a:1e:8b:4a:47:96:59: 82:b1:4c:e2:f3:68:c7:26:38:c5:62:6a:8d:55:5f:16:9d:c5: e9:8b:40:9e:c3:95:f0:e8:b9:13:1e:5b:2e:fa:b2:dc:24:54: f4:34:3c:89:d6:d6:d4:21:31:15:65:6f:24:f1:da:d3:5e:a7: 97:83:bb:a0:13:e1:27:ac:78:7d:07:de:a7:73:f7:05:91:c7: f8:32:e3:ca:29:2e:20:3f:88:db:9b:ac:7d:c1:e3:20:ed:d3: 95:86:0d:48:c7:0b:2e:1a:0e:48:ea:b1:e3:5c:54:f3:87:dd: be:19:9d:18:44:0c:99:06:68:a3:3c:92:da:90:33:a1:63:82: 1b:8c:9d:0b:76:60:e5:e3:8f:be:4b:58:c3:82:d0:3d:4a:b1: 80:88:07:84:72:7c:13:2e:9f:12:6f:20:f3:a7:5b:d1:c0:94: aa:47:f8:de:69:32:c7:13:72:21:43:42:82:da:12:9a:68:f4: bf:74:d7:4d:ba:b6:20:cd:e0:6a:1d:eb:a9:cf:e1:35:fa:b2: e6:f7:22:fb:3d:57:71:8f:00:5f:08:dc:72:a6:43:92:f7:65: 37:f7:2a:f4:31:86:ef:6a:22:cf:e1:ed:55:07:df:6b:82:c8: 22:b2:71:05 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUbQUJh8UNOfDZvvrQflPAixOcir4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE2MjEwN1oX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAMDVhN2E1MWQ1OWVmZjJiOGJkYzhk MGUzMGVlNmY2ZDUwYjhjMzNlM2IyMTIyNzFhY2FlNjk1YmJmYjMzMjU4ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vYOcMn9NqTvEBh4Q9G+S2zOkGHO AqP96tKrfjIl139yiyjgCaabbqZ12xfSCHLGkdluVEu27e7RcRNAnBX9ff11aZDQ McBXvaCL2rWKDAW4cKdzicEVRIIkTiJz5PfL0jbfr5EvaAJk7U3lR9dXJOlPQb4A Y9b7CrGBJA/PzogifepFDOAbAPCCoJH+xlSa0QApSuPwJjGl56Jt85hRGGZfg1hW Yy0J2QAFvnKso4ntxZYtGzJrLICutD+NQjDMh4TukZ5FAGOrGHc+sZgFEPC7y4P3 ELTIzoiBG/5YCZMT18A0nVqZ7IoCfiBLvdvWWgUG+4faBto5Wm5/VDPDowIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFObGbEisrq1D0qtfpV8kTOCNcTmsMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2NkNWNiNDQxLWMxYzYtNDY1OS04MDBmLWVkOTMxNWQyM2FlOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaNsgwDQYJKoZIhvcNAQELBQADggEBAESWxjEbhU2VVUFtGh6L SkeWWYKxTOLzaMcmOMViao1VXxadxemLQJ7DlfDouRMeWy76stwkVPQ0PInW1tQh MRVlbyTx2tNep5eDu6AT4SeseH0H3qdz9wWRx/gy48opLiA/iNubrH3B4yDt05WG DUjHCy4aDkjqseNcVPOH3b4ZnRhEDJkGaKM8ktqQM6FjghuMnQt2YOXjj75LWMOC 0D1KsYCIB4RyfBMunxJvIPOnW9HAlKpH+N5pMscTciFDQoLaEppo9L901026tiDN 4God66nP4TX6sub3Ivs9V3GPAF8I3HKmQ5L3ZTf3KvQxhu9qIs/h7VUH32uCyCKy cQU= -----END CERTIFICATE-----Generated at Thu Apr 17 17:38:49 2025 by rpki-client