$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/debc584f-82ae-4052-973f-96282869d7c9.roa File: debc584f-82ae-4052-973f-96282869d7c9.roa (raw, json) Hash identifier: hfpDHW74xa3ESIpUilrHIDitowzzQBGoTdcKqnlFMU8= Subject key identifier: 38:A5:39:C6:D7:AC:CF:C1:AE:83:AB:9F:CB:33:5E:58:A1:FB:92:80 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 520A95EDE7F19F75694A96CC5E9077FDE6421817 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/debc584f-82ae-4052-973f-96282869d7c9.roa Signing time: Tue 25 Mar 2025 00:10:11 +0000 ROA not before: Tue 25 Mar 2025 00:10:11 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:20c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:0a:95:ed:e7:f1:9f:75:69:4a:96:cc:5e:90:77:fd:e6:42:18:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 00:10:11 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=b77bcd58e3520be45bf441f2ea7a55a4ea6980df4c6d2511a5e17162953039c2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d9:0d:f9:95:a4:d7:44:b9:5e:5d:c3:de:93: 3c:40:2d:fd:f8:e0:d3:59:98:d7:90:4a:ea:61:f6: 50:a2:35:a2:80:e0:c7:42:d5:be:12:00:6e:cd:bb: bd:10:86:72:6e:52:e0:a4:d4:86:d8:d1:e4:86:1f: 94:5c:8b:b4:98:0f:9e:59:1d:48:00:e0:fa:0b:2e: b1:09:e2:c3:38:3c:40:56:e5:d4:f6:8e:b4:c2:49: 75:07:0c:4a:14:11:15:d0:78:5d:85:bd:6a:0c:e0: c5:19:fa:0c:1a:f5:93:26:12:56:41:85:8d:d8:aa: ce:e9:41:01:9b:30:13:9b:65:d1:b7:a5:7f:32:ed: 02:c3:34:02:72:98:8e:98:8f:ed:ba:fc:c7:25:f7: f7:16:f2:ca:5d:4e:2a:a1:0e:7c:8a:32:4d:44:3d: 35:ee:b6:f6:de:bd:ef:22:a1:a8:62:98:c4:8e:94: b3:98:2d:56:89:37:e4:13:b2:f0:9b:7d:3c:75:bc: fb:71:69:fc:63:dd:27:9d:50:5c:6e:12:3f:a1:a1: 82:fa:c5:34:bc:55:7b:56:92:b1:09:27:85:69:fc: af:c3:47:e3:07:00:b5:e4:eb:02:be:05:7d:b6:17: c7:f1:1e:56:af:f6:76:06:0f:29:09:f9:e0:e2:76: eb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A5:39:C6:D7:AC:CF:C1:AE:83:AB:9F:CB:33:5E:58:A1:FB:92:80 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/debc584f-82ae-4052-973f-96282869d7c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:20c0::/48 Signature Algorithm: sha256WithRSAEncryption 8a:22:72:10:58:f0:0a:c5:22:d9:77:af:fc:00:02:9a:2f:74: f3:29:f1:a5:f0:65:52:40:1c:33:94:af:48:9f:a9:3d:45:07: a9:07:fe:58:5c:83:f5:9d:ff:aa:fb:c1:52:54:52:14:6c:11: 0f:8d:28:48:7c:0b:3d:b8:f3:b5:88:27:35:ce:48:73:0c:dd: 02:a6:a0:4b:54:bf:91:4e:de:7b:4b:cf:8d:8d:a9:a1:de:e3: d0:91:ce:b8:e1:22:97:b9:7c:e8:5c:be:e1:dc:09:f9:97:b4: f9:e9:a2:d5:84:62:ae:cc:35:2f:13:b5:3c:ce:20:d1:57:8b: 0b:a2:64:2e:58:49:fe:d5:bf:86:6f:8e:6f:10:7a:7e:6a:a5: 31:75:49:44:c8:46:c5:88:29:a9:fc:02:64:0a:14:99:7e:6a: c5:a2:35:57:33:09:99:e6:41:18:48:f3:24:47:aa:97:24:3b: f2:61:3a:5c:9b:9d:84:d8:60:1c:e4:8f:fd:f8:e7:6e:76:a6: 6b:1e:2d:27:11:a1:58:1e:9c:d0:11:5d:43:2f:24:43:0e:9c: 39:20:5c:d1:63:ff:3a:59:b2:ad:7c:ca:5d:ba:73:d0:34:52: e1:aa:a4:79:45:4f:49:ee:de:5d:20:1d:45:d8:64:52:fb:6c: cd:39:21:98 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUUgqV7efxn3VpSpbMXpB3/eZCGBcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTAwMTAxMVoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAYjc3YmNkNThlMzUyMGJlNDViZjQ0 MWYyZWE3YTU1YTRlYTY5ODBkZjRjNmQyNTExYTVlMTcxNjI5NTMwMzljMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodkN+ZWk10S5Xl3D3pM8QC39+ODT WZjXkErqYfZQojWigODHQtW+EgBuzbu9EIZyblLgpNSG2NHkhh+UXIu0mA+eWR1I AOD6Cy6xCeLDODxAVuXU9o60wkl1BwxKFBEV0Hhdhb1qDODFGfoMGvWTJhJWQYWN 2KrO6UEBmzATm2XRt6V/Mu0CwzQCcpiOmI/tuvzHJff3FvLKXU4qoQ58ijJNRD01 7rb23r3vIqGoYpjEjpSzmC1WiTfkE7Lwm308dbz7cWn8Y90nnVBcbhI/oaGC+sU0 vFV7VpKxCSeFafyvw0fjBwC15OsCvgV9thfH8R5Wr/Z2Bg8pCfng4nbrDQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDilOcbXrM/BroOrn8szXlih+5KAMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RlYmM1ODRmLTgyYWUtNDA1Mi05NzNmLTk2MjgyODY5ZDdjOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYSDAMA0GCSqGSIb3DQEBCwUAA4IBAQCKInIQWPAKxSLZd6/8 AAKaL3TzKfGl8GVSQBwzlK9In6k9RQepB/5YXIP1nf+q+8FSVFIUbBEPjShIfAs9 uPO1iCc1zkhzDN0CpqBLVL+RTt57S8+Njamh3uPQkc644SKXuXzoXL7h3An5l7T5 6aLVhGKuzDUvE7U8ziDRV4sLomQuWEn+1b+Gb45vEHp+aqUxdUlEyEbFiCmp/AJk ChSZfmrFojVXMwmZ5kEYSPMkR6qXJDvyYTpcm52E2GAc5I/9+OdudqZrHi0nEaFY HpzQEV1DLyRDDpw5IFzRY/86WbKtfMpdunPQNFLhqqR5RU9J7t5dIB1F2GRS+2zN OSGY -----END CERTIFICATE-----Generated at Thu Apr 17 18:04:48 2025 by rpki-client