$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e3f46d7a-1a65-481b-80ff-a3a9036a5e8e.roa File: e3f46d7a-1a65-481b-80ff-a3a9036a5e8e.roa (raw, json) Hash identifier: 2DqsVCfx3kEn3fxesdEBIy8Uxrs9rwBc5vyuHtkgGHg= Subject key identifier: B9:F3:A3:94:C2:F3:68:A2:0A:AE:D0:80:59:48:5E:10:4B:88:86:3D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5257A0FE5BD7C1D36F34DACE8DED3F2DCD10EBEF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e3f46d7a-1a65-481b-80ff-a3a9036a5e8e.roa Signing time: Tue 25 Mar 2025 00:31:35 +0000 ROA not before: Tue 25 Mar 2025 00:31:35 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:c000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:57:a0:fe:5b:d7:c1:d3:6f:34:da:ce:8d:ed:3f:2d:cd:10:eb:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 00:31:35 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=95136071089cc960c8d3d690b451f01e3c19bd0ea8ee8091ee6026a49df2f154, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:22:ba:6c:48:ec:8a:8d:1f:9a:99:ca:5b:66: 5d:b1:68:0d:ce:b0:1d:c1:08:bc:1d:31:59:b0:1b: c4:2e:04:69:6f:9c:82:d9:6c:56:7c:7d:f7:40:99: 6c:33:d9:91:45:7a:b9:95:cb:e7:40:ab:f1:3e:13: 19:22:ba:52:4e:7f:5c:51:34:79:40:b0:d2:12:3e: 3a:60:26:af:8e:1f:56:3d:67:1f:8f:ae:44:7d:f9: 2c:68:bc:e3:f8:c7:76:e3:63:14:16:4d:8e:6c:41: b2:7b:d0:03:6f:7a:cc:ad:89:f7:aa:cb:e4:c5:c1: ab:f8:78:2a:a4:a8:3e:be:b4:68:d8:2f:4a:fa:1b: bb:73:08:f1:60:0f:f7:a3:8f:fe:4c:1c:07:88:28: dd:e7:f5:87:00:d4:4c:4c:2b:2b:33:54:2d:cc:fa: f3:22:cf:0f:55:69:cb:cf:d1:07:4f:47:84:be:83: 9f:40:b0:b1:be:68:2a:e4:73:6d:b4:bc:cc:73:7b: e8:27:07:26:d6:8b:37:b2:39:c4:1b:a7:fe:78:24: 60:54:5e:a9:d2:25:f8:5a:21:71:40:37:e9:de:07: 82:1c:18:78:b3:27:74:d6:a2:63:1b:9b:5f:27:55: 1a:ce:e9:70:30:f7:96:d0:59:29:ae:8d:33:67:d4: 06:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F3:A3:94:C2:F3:68:A2:0A:AE:D0:80:59:48:5E:10:4B:88:86:3D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e3f46d7a-1a65-481b-80ff-a3a9036a5e8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:c000::/40 Signature Algorithm: sha256WithRSAEncryption a5:15:db:f7:33:33:89:dd:16:52:58:0f:18:60:cc:c5:55:eb: f3:c7:2c:ea:4d:08:da:f9:a9:50:5e:b2:f5:b6:75:50:74:d1: 51:97:9e:75:21:64:3b:6e:95:a3:a2:5d:5d:14:1a:75:1b:5e: 2b:cf:23:39:d3:99:a7:91:db:8c:8a:d0:08:c0:fa:de:f4:0a: 0f:54:b9:a8:c1:1a:4e:61:57:92:e1:87:a1:e8:4a:2b:de:86: 69:83:32:71:3a:a6:5b:14:9e:4a:45:df:00:c6:c0:e9:3a:95: 5d:87:32:53:90:1f:2a:08:5c:32:04:54:0e:fc:24:b3:89:79: bd:ed:ba:cb:58:10:7a:45:e2:62:ba:f0:9c:b3:b7:2d:3a:88: 86:67:2f:87:68:51:92:21:9a:df:cb:3b:03:73:c4:cc:9e:02: 85:39:32:14:bc:2d:da:02:7e:82:97:5a:13:d5:10:50:6e:46: 15:5b:e2:2b:32:11:99:9b:4f:d2:6e:b4:e7:70:40:6d:37:9e: d1:03:b0:f6:44:9f:3c:aa:be:20:2d:74:31:3d:d6:c2:41:46: 71:95:40:9d:c8:bb:cb:a8:f8:ab:f5:74:8b:79:bb:4a:30:40: 06:ad:df:ef:88:90:6a:15:ab:74:ed:85:6c:07:b7:04:e6:a0: 43:9e:be:6b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUUleg/lvXwdNvNNrOje0/Lc0Q6+8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTAwMzEzNVoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAOTUxMzYwNzEwODljYzk2MGM4ZDNk NjkwYjQ1MWYwMWUzYzE5YmQwZWE4ZWU4MDkxZWU2MDI2YTQ5ZGYyZjE1NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCK6bEjsio0fmpnKW2ZdsWgNzrAd wQi8HTFZsBvELgRpb5yC2WxWfH33QJlsM9mRRXq5lcvnQKvxPhMZIrpSTn9cUTR5 QLDSEj46YCavjh9WPWcfj65EffksaLzj+Md242MUFk2ObEGye9ADb3rMrYn3qsvk xcGr+HgqpKg+vrRo2C9K+hu7cwjxYA/3o4/+TBwHiCjd5/WHANRMTCsrM1QtzPrz Is8PVWnLz9EHT0eEvoOfQLCxvmgq5HNttLzMc3voJwcm1os3sjnEG6f+eCRgVF6p 0iX4WiFxQDfp3geCHBh4syd01qJjG5tfJ1UazulwMPeW0Fkpro0zZ9QGEwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLnzo5TC82iiCq7QgFlIXhBLiIY9MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UzZjQ2ZDdhLTFhNjUtNDgxYi04MGZmLWEzYTkwMzZhNWU4ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYcAwDQYJKoZIhvcNAQELBQADggEBAKUV2/czM4ndFlJYDxhg zMVV6/PHLOpNCNr5qVBesvW2dVB00VGXnnUhZDtulaOiXV0UGnUbXivPIznTmaeR 24yK0AjA+t70Cg9UuajBGk5hV5Lhh6HoSivehmmDMnE6plsUnkpF3wDGwOk6lV2H MlOQHyoIXDIEVA78JLOJeb3tustYEHpF4mK68Jyzty06iIZnL4doUZIhmt/LOwNz xMyeAoU5MhS8LdoCfoKXWhPVEFBuRhVb4isyEZmbT9JutOdwQG03ntEDsPZEnzyq viAtdDE91sJBRnGVQJ3Iu8uo+Kv1dIt5u0owQAat3++IkGoVq3TthWwHtwTmoEOe vms= -----END CERTIFICATE-----Generated at Thu Apr 17 17:31:41 2025 by rpki-client