$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d3bae790-01d7-4b6e-a0f0-9305bcbd4a37.roa File: d3bae790-01d7-4b6e-a0f0-9305bcbd4a37.roa (raw, json) Hash identifier: X4ryzvoREbzhLjZrljGfnNqtSRSPBB8M+x2qwoiqtM8= Subject key identifier: 99:2A:0F:FA:A8:42:D5:25:A4:20:00:E8:94:5F:37:9A:14:70:73:99 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4CE319C6981EB0CE76F4281A3FE310DE140ABD77 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d3bae790-01d7-4b6e-a0f0-9305bcbd4a37.roa Signing time: Tue 25 Mar 2025 15:10:58 +0000 ROA not before: Tue 25 Mar 2025 15:10:58 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:e3:19:c6:98:1e:b0:ce:76:f4:28:1a:3f:e3:10:de:14:0a:bd:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 15:10:58 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=8d7316ec574c1b3ce521d30a0ad4660fecda3943f1434ff84290df493d26821b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:26:7e:0d:e0:46:fc:b6:ab:d2:24:dc:fa:97: d1:30:79:cb:ab:d3:7d:b2:81:3d:26:46:c9:15:2d: 28:d1:17:71:99:3a:1c:a1:4c:64:7a:a8:9c:cc:54: 1b:bd:28:76:33:5a:55:07:b4:3f:4a:93:5c:2e:87: 72:11:09:a9:0b:80:0d:1b:ec:d2:0c:ce:dd:c4:f3: b3:09:40:62:0c:11:89:ed:33:d1:17:da:67:b1:6d: 75:52:68:51:b9:07:6a:dc:34:88:74:45:d1:9c:ac: ae:dd:29:26:4e:36:46:ef:fc:e0:0d:8a:87:36:91: d4:3c:6b:22:b9:19:57:95:f2:4e:fd:a6:e3:8d:62: 58:f2:e7:0a:78:10:ad:3f:0e:94:7f:9c:db:cd:7d: 91:60:fa:07:a1:45:d7:2a:94:d9:e3:d0:e4:66:44: 84:97:44:f8:bc:a4:62:b7:e0:97:b0:23:ef:07:89: 7f:87:b7:d2:ee:35:cc:a4:b0:a7:98:05:46:68:ac: 4b:c5:0f:11:04:5c:73:03:43:12:52:55:66:78:98: 35:eb:4b:f4:04:78:da:18:2c:d6:e9:ca:33:0f:1e: d6:c4:5e:dd:c4:2f:8c:ad:fb:3e:71:cc:70:27:ff: 0c:f8:a2:46:66:98:2f:89:24:3b:c7:5c:84:7f:ac: d0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:2A:0F:FA:A8:42:D5:25:A4:20:00:E8:94:5F:37:9A:14:70:73:99 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d3bae790-01d7-4b6e-a0f0-9305bcbd4a37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:4000::/40 Signature Algorithm: sha256WithRSAEncryption ca:bd:dd:d1:86:b7:17:d8:d2:76:c6:b8:45:49:89:17:ce:07: a3:2f:a4:27:45:91:b7:ab:0e:5b:05:30:84:e6:bc:c3:4c:cb: fd:7a:f8:98:91:7c:15:f8:42:17:b9:71:05:a7:ab:10:c4:2d: a0:ed:35:cf:7c:7d:8d:19:a2:13:8a:80:bf:e4:df:f8:93:7c: 1a:db:0b:ce:3e:ec:82:b2:1e:f3:96:25:3b:20:17:70:71:ac: f5:89:9c:4b:4a:1e:e7:b9:3e:ef:ee:e2:31:87:45:9c:96:00: 64:e5:59:2f:2f:7f:05:60:cc:b0:b5:11:51:9c:90:ce:0b:94: bf:07:d2:01:79:eb:9b:20:38:f5:0f:b9:3c:30:72:d5:ad:05: e8:72:a5:44:37:a6:a9:65:bf:d3:43:e8:53:24:77:a1:97:87: b4:65:6f:3b:77:57:11:f3:11:5f:dd:93:d8:42:a4:81:9f:12: ff:d9:7b:43:b4:b0:67:2c:41:3d:db:da:eb:71:2f:4a:1b:eb: b8:28:66:24:e5:e4:bc:59:f1:0e:18:b3:6c:15:ee:4e:04:ad: aa:c3:b2:6b:44:36:8d:17:d5:a3:ae:21:c0:34:37:c1:95:80: ee:e3:ee:60:72:2b:ae:f3:71:06:2b:35:0f:c5:5b:b4:de:3f: 32:3e:1d:ba -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUTOMZxpgesM529CgaP+MQ3hQKvXcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE1MTA1OFoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAOGQ3MzE2ZWM1NzRjMWIzY2U1MjFk MzBhMGFkNDY2MGZlY2RhMzk0M2YxNDM0ZmY4NDI5MGRmNDkzZDI2ODIxYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryZ+DeBG/Lar0iTc+pfRMHnLq9N9 soE9JkbJFS0o0RdxmTocoUxkeqiczFQbvSh2M1pVB7Q/SpNcLodyEQmpC4ANG+zS DM7dxPOzCUBiDBGJ7TPRF9pnsW11UmhRuQdq3DSIdEXRnKyu3SkmTjZG7/zgDYqH NpHUPGsiuRlXlfJO/abjjWJY8ucKeBCtPw6Uf5zbzX2RYPoHoUXXKpTZ49DkZkSE l0T4vKRit+CXsCPvB4l/h7fS7jXMpLCnmAVGaKxLxQ8RBFxzA0MSUlVmeJg160v0 BHjaGCzW6cozDx7WxF7dxC+Mrfs+ccxwJ/8M+KJGZpgviSQ7x1yEf6zQEwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJkqD/qoQtUlpCAA6JRfN5oUcHOZMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2QzYmFlNzkwLTAxZDctNGI2ZS1hMGYwLTkzMDViY2JkNGEzNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaAEAwDQYJKoZIhvcNAQELBQADggEBAMq93dGGtxfY0nbGuEVJ iRfOB6MvpCdFkberDlsFMITmvMNMy/16+JiRfBX4Qhe5cQWnqxDELaDtNc98fY0Z ohOKgL/k3/iTfBrbC84+7IKyHvOWJTsgF3BxrPWJnEtKHue5Pu/u4jGHRZyWAGTl WS8vfwVgzLC1EVGckM4LlL8H0gF565sgOPUPuTwwctWtBehypUQ3pqllv9ND6FMk d6GXh7Rlbzt3VxHzEV/dk9hCpIGfEv/Ze0O0sGcsQT3b2utxL0ob67goZiTl5LxZ 8Q4Ys2wV7k4ErarDsmtENo0X1aOuIcA0N8GVgO7j7mByK67zcQYrNQ/FW7TePzI+ Hbo= -----END CERTIFICATE-----Generated at Thu Apr 17 17:31:42 2025 by rpki-client