$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e8d98555-8cba-45bc-a7cb-74d7b44bfbf5.roa File: e8d98555-8cba-45bc-a7cb-74d7b44bfbf5.roa (raw, json) Hash identifier: nNhLUFdg+g8oQ2+p3XRh+/zN/bcVhvpekvN4j/kHKYY= Subject key identifier: A5:FC:D7:04:F0:45:E3:9C:36:78:F4:9C:17:E1:55:59:5C:89:5D:37 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 129FE4BD3132689FA275274F0EC6022E8CCB0DA1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e8d98555-8cba-45bc-a7cb-74d7b44bfbf5.roa Signing time: Tue 25 Mar 2025 00:30:23 +0000 ROA not before: Tue 25 Mar 2025 00:30:23 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:a080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:9f:e4:bd:31:32:68:9f:a2:75:27:4f:0e:c6:02:2e:8c:cb:0d:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 00:30:23 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=507c471ede1c167f938bbf3de13f6d07c4623250d9558cb12e3bce957853c96b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:18:d2:50:4e:7f:eb:2a:57:fa:c2:76:96:7b: 13:e0:74:34:56:a2:16:ed:2f:d9:59:6e:c2:48:33: c0:d4:3b:89:f8:4d:76:6b:39:1d:f9:2d:19:65:4e: 8a:7c:dc:6f:d9:ca:77:a5:45:85:34:a7:d6:32:c0: 26:6c:3b:29:04:a2:18:07:79:15:ba:f5:9a:f3:df: 2a:98:da:9e:ec:25:bf:2a:f5:9f:82:57:df:8c:23: b5:a9:1e:ba:dc:1d:36:ad:b3:8b:7c:0e:8c:50:71: 31:79:d8:0d:c0:87:31:93:32:98:6c:83:3d:80:b1: 49:2b:81:bb:e5:75:a9:99:72:c3:0e:23:d8:19:4e: 1c:a2:66:3c:45:e7:5e:44:37:31:5f:71:68:48:67: 03:c2:e7:b3:fc:67:ef:cf:ff:5e:26:df:03:bf:a4: 44:24:6f:cd:a1:0a:34:04:55:48:50:88:30:23:f4: 86:0a:b1:07:23:37:67:f7:cd:ec:49:20:f6:ac:40: 1e:63:c7:47:a0:22:a9:5e:7e:83:5b:32:34:5d:74: 47:8c:6f:93:86:bd:2d:e7:e6:61:72:82:8a:ec:80: a9:b5:0b:81:23:b8:89:67:bb:90:59:63:2e:85:f2: 75:db:17:0e:42:0f:a4:97:29:9c:b9:8f:c2:9f:b9: b4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:FC:D7:04:F0:45:E3:9C:36:78:F4:9C:17:E1:55:59:5C:89:5D:37 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e8d98555-8cba-45bc-a7cb-74d7b44bfbf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:a080::/48 Signature Algorithm: sha256WithRSAEncryption 81:e5:e9:73:9e:4f:aa:9e:bb:93:61:94:46:48:04:ae:59:ee: e5:f8:7d:66:72:0f:43:27:33:59:75:d7:80:20:3f:d2:c1:0d: bd:99:ec:49:f7:c8:75:db:0b:8b:dc:f0:7b:a4:04:db:c9:46: d2:46:d1:2e:cb:cc:b9:c8:6b:65:92:bc:46:1d:b6:f6:9e:7c: 97:dd:32:ed:fc:9d:1f:1a:28:f4:c7:36:f7:97:9f:3f:9d:d2: 06:0e:24:3f:28:9b:ed:00:a7:d7:18:80:78:d1:85:20:67:d6: 33:aa:40:f4:22:a4:16:d3:51:7a:2c:05:9e:64:ce:bb:8c:a2: 7f:bf:84:86:f0:b0:eb:94:1a:b0:7c:f0:bc:34:03:db:b1:92: 40:a0:32:2b:d2:92:aa:90:b6:e4:f9:57:cb:f7:ba:46:a2:1d: 95:25:4e:2c:62:4f:09:0d:16:70:d6:2a:db:e0:a1:8e:4d:ee: 16:c2:99:28:04:0a:1d:af:37:81:8d:78:81:2e:d8:98:7c:fe: 06:87:0c:cb:64:0a:0b:4c:89:dc:42:dd:92:42:3d:54:48:0b: 2e:64:80:4d:dc:2d:e1:9c:64:d5:05:e5:0e:f9:7b:15:f3:34: ea:6d:32:8b:8d:10:38:bd:79:9f:ec:af:fd:1d:30:5a:9c:2d: 1d:6f:60:02 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUEp/kvTEyaJ+idSdPDsYCLozLDaEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTAwMzAyM1oX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNANTA3YzQ3MWVkZTFjMTY3ZjkzOGJi ZjNkZTEzZjZkMDdjNDYyMzI1MGQ5NTU4Y2IxMmUzYmNlOTU3ODUzYzk2YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxjSUE5/6ypX+sJ2lnsT4HQ0VqIW 7S/ZWW7CSDPA1DuJ+E12azkd+S0ZZU6KfNxv2cp3pUWFNKfWMsAmbDspBKIYB3kV uvWa898qmNqe7CW/KvWfglffjCO1qR663B02rbOLfA6MUHExedgNwIcxkzKYbIM9 gLFJK4G75XWpmXLDDiPYGU4comY8RedeRDcxX3FoSGcDwuez/Gfvz/9eJt8Dv6RE JG/NoQo0BFVIUIgwI/SGCrEHIzdn983sSSD2rEAeY8dHoCKpXn6DWzI0XXRHjG+T hr0t5+ZhcoKK7ICptQuBI7iJZ7uQWWMuhfJ12xcOQg+klymcuY/Cn7m0RQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKX81wTwReOcNnj0nBfhVVlciV03MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2U4ZDk4NTU1LThjYmEtNDViYy1hN2NiLTc0ZDdiNDRiZmJmNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/6CAMA0GCSqGSIb3DQEBCwUAA4IBAQCB5elznk+qnruTYZRG SASuWe7l+H1mcg9DJzNZddeAID/SwQ29mexJ98h12wuL3PB7pATbyUbSRtEuy8y5 yGtlkrxGHbb2nnyX3TLt/J0fGij0xzb3l58/ndIGDiQ/KJvtAKfXGIB40YUgZ9Yz qkD0IqQW01F6LAWeZM67jKJ/v4SG8LDrlBqwfPC8NAPbsZJAoDIr0pKqkLbk+VfL 97pGoh2VJU4sYk8JDRZw1irb4KGOTe4WwpkoBAodrzeBjXiBLtiYfP4GhwzLZAoL TIncQt2SQj1USAsuZIBN3C3hnGTVBeUO+XsV8zTqbTKLjRA4vXmf7K/9HTBanC0d b2AC -----END CERTIFICATE-----Generated at Thu Apr 17 17:50:41 2025 by rpki-client