$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d0716d05-e421-4b76-b3d0-5a92c5c93094.roa File: d0716d05-e421-4b76-b3d0-5a92c5c93094.roa (raw, json) Hash identifier: l8kX0vQjssA3yQN6dqosP8HAr1TK4BovkdOLx0WBZIA= Subject key identifier: 6B:1A:4B:97:6C:0D:CF:8C:54:E9:50:0A:7E:F6:82:83:FD:A8:58:6A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 75678F5A3D936A9204B51F7BC7F2866CAB9D853E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d0716d05-e421-4b76-b3d0-5a92c5c93094.roa Signing time: Mon 24 Mar 2025 15:01:09 +0000 ROA not before: Mon 24 Mar 2025 15:01:09 +0000 ROA not after: Mon 28 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:70c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:67:8f:5a:3d:93:6a:92:04:b5:1f:7b:c7:f2:86:6c:ab:9d:85:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 24 15:01:09 2025 GMT Not After : Apr 28 23:59:59 2025 GMT Subject: serialNumber=3d63f847497bc613d8b746b19859c9490acb996104332f6e655c9e801ad491d6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:18:c7:c0:54:06:7c:4d:36:49:76:6d:0b:2e: 50:35:5f:f7:91:74:b7:79:f3:96:b4:d8:aa:09:be: a1:de:89:e8:a5:15:f7:23:29:4c:3d:41:55:e7:87: 97:c3:25:01:6b:4e:96:43:a1:26:02:66:ec:47:48: d0:2e:19:d6:33:d9:ac:39:b6:53:a3:90:2a:e9:ad: ee:e8:6d:36:77:88:ca:4a:c1:95:b7:4b:4f:dd:12: 4e:32:d3:c5:5e:8d:88:b2:19:81:78:fd:c4:78:04: 64:c8:04:23:25:58:b0:52:21:fa:fc:c7:5e:53:76: d9:01:15:8d:51:1b:fa:6c:d1:20:9e:3b:e6:2b:4c: 70:15:42:ae:64:79:18:4f:22:5d:88:84:55:ac:d1: fb:4b:f1:5f:15:5e:70:8c:49:1c:37:f7:a6:3a:cc: ca:18:0a:67:96:c1:65:97:d7:73:67:96:1a:fb:cd: aa:59:50:82:1f:ce:25:92:ac:4c:5c:86:93:b6:de: 91:10:10:68:20:1b:e7:b0:12:6c:5f:3e:01:04:af: 65:9a:44:1d:a9:f1:13:61:ed:1b:a1:1b:e6:46:d4: 84:4c:e2:85:ff:d3:a3:d9:e3:66:9c:e8:ed:cf:53: 20:5c:b3:51:1e:66:1a:0c:9e:97:71:c3:21:51:c6: 4b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:1A:4B:97:6C:0D:CF:8C:54:E9:50:0A:7E:F6:82:83:FD:A8:58:6A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d0716d05-e421-4b76-b3d0-5a92c5c93094.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:70c0::/48 Signature Algorithm: sha256WithRSAEncryption 24:aa:16:a3:f7:07:b2:5c:2b:81:2f:a7:12:fc:cf:71:19:bc: 32:97:01:46:8d:41:15:92:63:6c:73:5e:3a:53:21:93:07:e1: eb:08:df:ca:57:38:c2:ee:31:fa:ac:50:b6:12:b3:f5:71:a6: fe:39:9b:82:4c:f4:ad:ec:e6:5b:17:73:fd:4c:87:b1:31:c5: 86:c5:a0:b4:8e:30:fb:95:d0:c2:cf:b8:ec:7d:8f:72:be:c7: 40:20:83:17:5b:c3:56:88:ca:8f:83:c2:c5:74:30:82:87:c2: 4a:bc:40:e6:b4:60:84:38:27:9d:29:db:e7:57:18:a1:8e:c5: 18:36:6a:99:76:0d:67:b9:b3:3b:96:e4:61:40:75:5f:75:47: 91:00:83:49:a8:5c:b2:b2:6b:f2:79:07:2c:f4:4c:31:7b:1f: c7:c0:14:7f:d3:f0:48:72:02:42:6d:14:45:c6:15:02:d8:3a: 7a:47:70:cf:26:81:1b:2d:13:3c:fc:63:49:d7:56:fe:0e:9e: 43:c9:cf:31:d9:90:7d:7c:63:47:5c:1e:b7:ac:55:fa:ba:23: 0d:75:52:c4:39:70:15:99:10:23:0f:ac:e9:34:e3:f3:ea:c7: 03:f3:a0:d5:ed:f6:2b:fa:d7:e9:7d:e7:c4:a1:72:ad:b0:67: cd:cc:e4:22 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUdWePWj2TapIEtR97x/KGbKudhT4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNDE1MDEwOVoX DTI1MDQyODIzNTk1OVowejFJMEcGA1UEBRNAM2Q2M2Y4NDc0OTdiYzYxM2Q4Yjc0 NmIxOTg1OWM5NDkwYWNiOTk2MTA0MzMyZjZlNjU1YzllODAxYWQ0OTFkNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xjHwFQGfE02SXZtCy5QNV/3kXS3 efOWtNiqCb6h3onopRX3IylMPUFV54eXwyUBa06WQ6EmAmbsR0jQLhnWM9msObZT o5Aq6a3u6G02d4jKSsGVt0tP3RJOMtPFXo2IshmBeP3EeARkyAQjJViwUiH6/Mde U3bZARWNURv6bNEgnjvmK0xwFUKuZHkYTyJdiIRVrNH7S/FfFV5wjEkcN/emOszK GApnlsFll9dzZ5Ya+82qWVCCH84lkqxMXIaTtt6REBBoIBvnsBJsXz4BBK9lmkQd qfETYe0boRvmRtSETOKF/9Oj2eNmnOjtz1MgXLNRHmYaDJ6XccMhUcZLzQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGsaS5dsDc+MVOlQCn72goP9qFhqMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2QwNzE2ZDA1LWU0MjEtNGI3Ni1iM2QwLTVhOTJjNWM5MzA5NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/3DAMA0GCSqGSIb3DQEBCwUAA4IBAQAkqhaj9weyXCuBL6cS /M9xGbwylwFGjUEVkmNsc146UyGTB+HrCN/KVzjC7jH6rFC2ErP1cab+OZuCTPSt 7OZbF3P9TIexMcWGxaC0jjD7ldDCz7jsfY9yvsdAIIMXW8NWiMqPg8LFdDCCh8JK vEDmtGCEOCedKdvnVxihjsUYNmqZdg1nubM7luRhQHVfdUeRAINJqFyysmvyeQcs 9Ewxex/HwBR/0/BIcgJCbRRFxhUC2Dp6R3DPJoEbLRM8/GNJ11b+Dp5Dyc8x2ZB9 fGNHXB63rFX6uiMNdVLEOXAVmRAjD6zpNOPz6scD86DV7fYr+tfpfefEoXKtsGfN zOQi -----END CERTIFICATE-----Generated at Thu Apr 17 17:43:41 2025 by rpki-client