$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/df32b4dc-f216-4f87-832d-d0230fac751f.roa File: df32b4dc-f216-4f87-832d-d0230fac751f.roa (raw, json) Hash identifier: gx4Ac3h1eM/Rpp80Giyl0A1L+PdM4ruvVoDzCFLK6Ko= Subject key identifier: 49:8D:CB:EB:DC:F7:8B:4A:02:A0:20:B0:71:BF:04:DD:14:90:DD:0B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 37978C845DF8F677B7953894D5B7C4633F88157E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/df32b4dc-f216-4f87-832d-d0230fac751f.roa Signing time: Tue 25 Mar 2025 15:02:09 +0000 ROA not before: Tue 25 Mar 2025 15:02:09 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:9000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:97:8c:84:5d:f8:f6:77:b7:95:38:94:d5:b7:c4:63:3f:88:15:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 15:02:09 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=5a1a6fe486e7214068981f5a710a42aefb3581052ee36d57e718a81ec8676538, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c0:2e:86:50:98:48:24:24:71:06:b2:e6:94: 11:5d:4f:0e:84:5e:37:73:54:3f:82:18:61:1b:37: 53:4b:db:d0:3f:98:8b:5a:df:c9:db:f0:bb:31:f1: ed:98:d2:65:60:7a:68:8a:b4:82:27:22:c5:eb:c2: 18:d7:4b:99:08:39:9d:57:fb:82:03:6c:0f:e9:07: 7e:55:cc:14:f6:a7:eb:3e:df:cb:b9:fb:41:0e:b4: 72:43:50:6b:91:ad:61:b5:0d:49:25:10:01:25:4e: 8a:4d:04:6d:8e:68:71:45:57:42:08:55:0f:9d:6b: 7c:d6:dc:d3:41:9f:ed:b4:e7:37:3f:56:f8:98:68: 8c:84:af:d2:b3:0d:f1:ac:84:55:42:4a:f0:0e:28: 04:b9:73:6b:d5:58:1e:9a:7d:e8:28:03:d0:62:83: 19:a6:0b:e8:1d:66:a8:1e:79:7f:24:42:44:a0:94: 03:56:1f:d3:69:d5:db:48:cf:37:62:02:0d:83:e6: ea:03:6c:a5:36:b9:9c:61:2a:4e:63:cf:75:7a:77: 9d:53:74:2f:4f:ad:fa:7b:47:e6:85:21:ec:e5:97: 2c:23:2a:7a:29:33:bd:1f:13:82:77:e6:99:4c:73: 5b:37:aa:84:86:24:8f:37:96:4f:0a:a0:db:2b:4b: fb:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:8D:CB:EB:DC:F7:8B:4A:02:A0:20:B0:71:BF:04:DD:14:90:DD:0B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/df32b4dc-f216-4f87-832d-d0230fac751f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:9000::/40 Signature Algorithm: sha256WithRSAEncryption 3f:f9:5b:53:6d:25:8a:23:96:2b:07:a9:3b:eb:46:a8:8f:0c: 29:c3:6f:00:36:46:12:ab:55:0b:19:02:7c:56:6a:76:7b:fe: 71:c2:3a:8d:20:4b:0d:bf:7a:4f:63:47:0b:f5:b1:72:85:f2: 18:46:dd:e6:8e:61:c7:20:bc:4d:bd:3b:5f:ca:20:bb:32:b1: aa:ca:b7:d0:d0:64:b0:32:0a:c9:cd:7d:61:dd:ce:40:28:0f: b7:fb:8d:83:07:db:44:ea:ca:5d:34:7a:ad:d0:8c:2a:90:ea: 25:a0:5f:52:e9:43:91:8a:88:18:9e:cc:77:d9:2b:53:49:2b: fd:22:4d:c8:79:89:9f:b4:c0:77:97:c6:18:31:0e:88:41:28: 53:a6:ae:31:bd:74:65:1d:c9:61:c6:ec:7a:ba:29:4f:e8:8a: a4:00:83:ae:53:76:39:25:97:fb:83:72:a3:d9:e5:ee:b0:d4: db:e9:8e:f8:bf:2e:de:e6:1d:03:9b:8b:42:76:75:ec:7e:60: 11:3e:38:80:e2:83:40:bd:9e:28:d2:ba:dc:9e:11:a2:5b:9c: ce:3e:c0:1f:1c:fb:9f:08:c8:da:be:46:6d:da:ad:b6:92:dc: 39:9c:70:03:f3:a8:48:cd:8c:0c:e5:e2:89:05:db:2c:8f:c3: 2d:0e:65:54 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUN5eMhF349ne3lTiU1bfEYz+IFX4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE1MDIwOVoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNANWExYTZmZTQ4NmU3MjE0MDY4OTgx ZjVhNzEwYTQyYWVmYjM1ODEwNTJlZTM2ZDU3ZTcxOGE4MWVjODY3NjUzODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssAuhlCYSCQkcQay5pQRXU8OhF43 c1Q/ghhhGzdTS9vQP5iLWt/J2/C7MfHtmNJlYHpoirSCJyLF68IY10uZCDmdV/uC A2wP6Qd+VcwU9qfrPt/LuftBDrRyQ1Brka1htQ1JJRABJU6KTQRtjmhxRVdCCFUP nWt81tzTQZ/ttOc3P1b4mGiMhK/Ssw3xrIRVQkrwDigEuXNr1Vgemn3oKAPQYoMZ pgvoHWaoHnl/JEJEoJQDVh/TadXbSM83YgINg+bqA2ylNrmcYSpOY891enedU3Qv T636e0fmhSHs5ZcsIyp6KTO9HxOCd+aZTHNbN6qEhiSPN5ZPCqDbK0v7kQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEmNy+vc94tKAqAgsHG/BN0UkN0LMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RmMzJiNGRjLWYyMTYtNGY4Ny04MzJkLWQwMjMwZmFjNzUxZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8pAwDQYJKoZIhvcNAQELBQADggEBAD/5W1NtJYojlisHqTvr RqiPDCnDbwA2RhKrVQsZAnxWanZ7/nHCOo0gSw2/ek9jRwv1sXKF8hhG3eaOYccg vE29O1/KILsysarKt9DQZLAyCsnNfWHdzkAoD7f7jYMH20Tqyl00eq3QjCqQ6iWg X1LpQ5GKiBiezHfZK1NJK/0iTch5iZ+0wHeXxhgxDohBKFOmrjG9dGUdyWHG7Hq6 KU/oiqQAg65Tdjkll/uDcqPZ5e6w1Nvpjvi/Lt7mHQObi0J2dex+YBE+OIDig0C9 nijSutyeEaJbnM4+wB8c+58IyNq+Rm3arbaS3DmccAPzqEjNjAzl4okF2yyPwy0O ZVQ= -----END CERTIFICATE-----Generated at Thu Apr 17 17:48:18 2025 by rpki-client