$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d57e8e3c-8605-46f3-8465-e0a444cd661d.roa File: d57e8e3c-8605-46f3-8465-e0a444cd661d.roa (raw, json) Hash identifier: jClTZIQ5jTPtfCjxOMLV04QgpVjmmKKclsS/KlAg0Xg= Subject key identifier: 1F:E4:73:17:08:2B:A0:FE:34:A1:93:FD:79:49:86:D4:66:92:E6:D8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 17C31B0C688D629FA89190BCA5325BA90F9B468F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d57e8e3c-8605-46f3-8465-e0a444cd661d.roa Signing time: Wed 02 Apr 2025 00:01:05 +0000 ROA not before: Wed 02 Apr 2025 00:01:05 +0000 ROA not after: Wed 07 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da68:8800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:c3:1b:0c:68:8d:62:9f:a8:91:90:bc:a5:32:5b:a9:0f:9b:46:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 2 00:01:05 2025 GMT Not After : May 7 23:59:59 2025 GMT Subject: serialNumber=71fde61e03d3ffb31b7cb068bb2864770302f457836118990535c503caf48d06, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ee:60:d6:ed:62:14:5b:0e:ac:44:a3:d6:cb: 95:0e:ba:88:8d:b1:8c:25:f1:97:a9:a9:45:65:50: 6a:c0:fc:4d:e7:ab:0e:b9:b7:7e:6b:e1:9a:fe:fa: 73:97:a3:20:da:3d:4d:a9:bb:18:d6:e8:d5:4b:b8: 48:b3:9d:25:55:cf:21:9e:7b:fa:ed:07:e3:91:c6: 40:a6:06:1e:42:d6:6b:82:6d:d2:29:46:be:0f:6a: 91:e2:84:79:08:0f:7c:8d:2b:fe:8a:cc:bb:b3:2a: e1:6b:db:5f:12:3c:4a:b8:10:e5:5b:2d:dc:19:b3: 1b:e3:64:b7:74:3b:d7:57:c2:f6:b1:c4:01:b3:9f: 07:7e:34:7c:92:cf:a2:33:a7:00:b9:29:48:f7:e4: c7:95:87:2a:47:45:48:c6:6e:ce:aa:bd:17:fe:ee: 02:a3:1c:e0:1e:3c:56:54:e5:34:e7:b1:79:7d:80: 18:a9:a0:11:50:15:c6:88:89:72:68:af:59:7f:e2: d0:bd:0e:bb:38:60:84:c9:18:a5:f3:3f:2f:42:19: 0a:33:bd:ab:0f:0a:2a:9a:eb:5c:1e:5b:29:cb:35: 8e:32:fe:cf:d0:ed:ce:ea:0a:7f:c0:0c:80:08:2f: 4e:39:23:b5:f4:0f:97:e8:8c:83:de:cd:e4:f9:cb: 27:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E4:73:17:08:2B:A0:FE:34:A1:93:FD:79:49:86:D4:66:92:E6:D8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d57e8e3c-8605-46f3-8465-e0a444cd661d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da68:8800::/40 Signature Algorithm: sha256WithRSAEncryption 85:d3:4d:61:dd:8a:75:2f:93:5b:9b:29:d7:1d:a4:fc:18:c5: 18:47:b2:b5:62:1a:63:9b:0b:df:c7:c9:3b:53:df:88:44:b2: 72:09:74:2d:29:18:43:6b:46:e1:02:8f:0e:59:76:87:9b:b0: 3d:d6:76:b9:a0:cb:6b:ea:39:86:3a:e8:7a:d3:31:9a:b3:79: 23:a7:19:fa:e0:c7:6c:2a:9a:6b:1a:77:45:8c:89:3e:eb:02: 8e:4d:60:2e:e2:34:fa:e6:8e:c4:bf:ee:54:e0:6f:72:ff:d2: 56:af:8b:d1:5f:16:23:8a:53:b4:b8:01:36:24:cd:a0:c0:37: 6d:9a:22:c5:81:7b:ba:cc:95:47:43:10:92:0a:c2:74:87:8c: cf:e2:be:f8:d5:b8:c0:e0:0d:23:e9:94:1f:80:c0:5a:ee:96: 61:01:97:a3:c8:f4:a1:35:a6:ba:10:99:3e:73:be:7f:fc:8d: d5:14:71:a9:74:c6:28:ea:c4:1f:4c:9a:45:a0:d5:24:26:aa: 32:17:a5:ee:2c:e9:47:88:71:ea:a5:2e:50:fd:c2:de:1e:49: d3:fe:bf:23:98:92:47:9e:f2:fb:10:19:b4:2e:ee:79:d1:e9: f9:a6:12:4a:fe:a8:10:5d:93:4a:83:be:ad:b0:c9:ee:21:86: 06:ff:fc:0d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUF8MbDGiNYp+okZC8pTJbqQ+bRo8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQwMjAwMDEwNVoX DTI1MDUwNzIzNTk1OVowejFJMEcGA1UEBRNANzFmZGU2MWUwM2QzZmZiMzFiN2Ni MDY4YmIyODY0NzcwMzAyZjQ1NzgzNjExODk5MDUzNWM1MDNjYWY0OGQwNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+5g1u1iFFsOrESj1suVDrqIjbGM JfGXqalFZVBqwPxN56sOubd+a+Ga/vpzl6Mg2j1NqbsY1ujVS7hIs50lVc8hnnv6 7QfjkcZApgYeQtZrgm3SKUa+D2qR4oR5CA98jSv+isy7syrha9tfEjxKuBDlWy3c GbMb42S3dDvXV8L2scQBs58HfjR8ks+iM6cAuSlI9+THlYcqR0VIxm7Oqr0X/u4C oxzgHjxWVOU057F5fYAYqaARUBXGiIlyaK9Zf+LQvQ67OGCEyRil8z8vQhkKM72r DwoqmutcHlspyzWOMv7P0O3O6gp/wAyACC9OOSO19A+X6IyD3s3k+csnlwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFB/kcxcIK6D+NKGT/XlJhtRmkubYMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q1N2U4ZTNjLTg2MDUtNDZmMy04NDY1LWUwYTQ0NGNkNjYxZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaIgwDQYJKoZIhvcNAQELBQADggEBAIXTTWHdinUvk1ubKdcd pPwYxRhHsrViGmObC9/HyTtT34hEsnIJdC0pGENrRuECjw5ZdoebsD3Wdrmgy2vq OYY66HrTMZqzeSOnGfrgx2wqmmsad0WMiT7rAo5NYC7iNPrmjsS/7lTgb3L/0lav i9FfFiOKU7S4ATYkzaDAN22aIsWBe7rMlUdDEJIKwnSHjM/ivvjVuMDgDSPplB+A wFrulmEBl6PI9KE1proQmT5zvn/8jdUUcal0xijqxB9MmkWg1SQmqjIXpe4s6UeI ceqlLlD9wt4eSdP+vyOYkkee8vsQGbQu7nnR6fmmEkr+qBBdk0qDvq2wye4hhgb/ /A0= -----END CERTIFICATE-----Generated at Thu Apr 17 18:11:50 2025 by rpki-client