$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f79388ce-7d40-4e2d-99a2-f64918866a6d.roa File: f79388ce-7d40-4e2d-99a2-f64918866a6d.roa (raw, json) Hash identifier: WjCB83vnCaUS0skCvjhM9fVrv9Meo/IaFe+2Nn/jYgM= Subject key identifier: 38:A2:82:B4:B7:6E:CF:E5:55:34:E2:A1:6B:48:8B:B4:2F:29:5C:1E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 461EA6A7BFE5267E9CBFC8CBF1D5D10EFA390F93 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f79388ce-7d40-4e2d-99a2-f64918866a6d.roa Signing time: Wed 02 Apr 2025 00:00:55 +0000 ROA not before: Wed 02 Apr 2025 00:00:55 +0000 ROA not after: Wed 07 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daef:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:1e:a6:a7:bf:e5:26:7e:9c:bf:c8:cb:f1:d5:d1:0e:fa:39:0f:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 2 00:00:55 2025 GMT Not After : May 7 23:59:59 2025 GMT Subject: serialNumber=dd677b06204eba6b6d80b59da3825b8a4288eca91e25cd7715923441ce1d21f4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:79:ef:8d:93:b5:70:e2:82:ef:22:76:79:ad: df:2f:21:30:91:9d:12:d1:cc:83:5d:6a:12:15:5e: c2:fb:61:fe:b6:b1:6e:7a:f4:9f:d3:4e:e7:00:8d: df:6c:00:d5:0d:f4:59:f0:13:c5:56:e5:9e:c0:07: 2e:bb:5d:4f:a3:84:43:9f:d7:d4:47:3e:d3:e0:8b: 2e:d6:83:36:ad:ac:e4:bd:27:f6:14:60:92:f5:55: 48:55:2a:72:b2:87:85:15:c3:56:55:df:e7:ef:2c: dd:97:96:d4:2a:97:99:fe:2b:99:15:e5:fc:48:c8: e2:f9:90:61:37:4b:f8:fa:d3:72:1d:6c:9d:8d:e3: 83:e5:3d:e3:14:6d:78:e2:82:ca:d5:b4:45:05:0f: 51:6f:fe:6e:1b:5b:10:6d:ac:bd:fb:bb:21:94:24: e3:8f:ea:81:bf:65:67:43:d6:3d:a6:7a:1f:c8:d5: 10:92:6d:ab:90:b6:91:13:9a:46:a6:5c:f3:4d:0d: 2f:49:80:6e:26:ce:33:3a:bf:c7:6c:ad:ca:1f:4c: 15:2a:6d:cd:93:c7:31:42:5a:26:d8:37:28:73:b3: e1:82:52:db:26:f6:04:92:62:a3:4a:75:fb:8a:fa: 35:1f:ee:40:bd:f6:c0:df:ec:c4:ad:fc:2e:c1:55: 64:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A2:82:B4:B7:6E:CF:E5:55:34:E2:A1:6B:48:8B:B4:2F:29:5C:1E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f79388ce-7d40-4e2d-99a2-f64918866a6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:7000::/40 Signature Algorithm: sha256WithRSAEncryption c5:e5:3a:56:57:b7:c4:4a:16:aa:d5:9b:0e:77:4e:a2:30:72: 9a:80:3a:8f:b7:fe:20:d9:f8:8e:e7:76:d5:ab:5c:fc:cc:1c: b3:12:90:0d:76:05:43:6e:09:8e:e6:52:f2:4d:f1:2b:d2:60: 97:40:f4:7c:89:25:9a:a6:fb:c1:ad:a9:d9:c3:8f:bd:b4:aa: a8:c6:af:1c:f4:51:40:2d:72:d2:8e:3b:31:73:ef:17:67:d5: 11:7f:03:bc:04:e3:3b:74:86:57:68:2f:ec:8e:35:d1:ec:a4: ea:6d:ef:58:45:e5:a1:9c:29:9f:75:c3:ec:75:ca:df:38:0d: 24:57:de:59:02:da:0b:38:44:4f:a5:c8:76:a3:92:1a:f1:73: f2:99:93:be:13:cf:e3:e6:7a:c0:52:30:e1:e0:04:d4:22:ae: 61:58:bc:b8:27:19:fd:d7:23:41:61:dc:9a:67:d9:ba:87:0b: 0d:34:00:c1:e8:e1:07:7c:e9:94:f5:4f:fd:99:78:4c:40:cc: 94:66:7c:27:68:dd:16:0f:7c:bf:88:1b:f0:ce:ed:30:03:c3: 29:6f:fd:95:b1:11:de:01:a3:40:69:86:5a:f5:70:69:ca:68: 97:97:83:d3:9e:98:ef:82:82:15:54:45:9e:90:e8:fc:13:83: 5a:a1:80:fa -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIURh6mp7/lJn6cv8jL8dXRDvo5D5MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQwMjAwMDA1NVoX DTI1MDUwNzIzNTk1OVowejFJMEcGA1UEBRNAZGQ2NzdiMDYyMDRlYmE2YjZkODBi NTlkYTM4MjViOGE0Mjg4ZWNhOTFlMjVjZDc3MTU5MjM0NDFjZTFkMjFmNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3nvjZO1cOKC7yJ2ea3fLyEwkZ0S 0cyDXWoSFV7C+2H+trFuevSf007nAI3fbADVDfRZ8BPFVuWewAcuu11Po4RDn9fU Rz7T4Isu1oM2razkvSf2FGCS9VVIVSpysoeFFcNWVd/n7yzdl5bUKpeZ/iuZFeX8 SMji+ZBhN0v4+tNyHWydjeOD5T3jFG144oLK1bRFBQ9Rb/5uG1sQbay9+7shlCTj j+qBv2VnQ9Y9pnofyNUQkm2rkLaRE5pGplzzTQ0vSYBuJs4zOr/HbK3KH0wVKm3N k8cxQlom2Dcoc7PhglLbJvYEkmKjSnX7ivo1H+5AvfbA3+zErfwuwVVklwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDiigrS3bs/lVTTioWtIi7QvKVweMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y3OTM4OGNlLTdkNDAtNGUyZC05OWEyLWY2NDkxODg2NmE2ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba73AwDQYJKoZIhvcNAQELBQADggEBAMXlOlZXt8RKFqrVmw53 TqIwcpqAOo+3/iDZ+I7ndtWrXPzMHLMSkA12BUNuCY7mUvJN8SvSYJdA9HyJJZqm +8GtqdnDj720qqjGrxz0UUAtctKOOzFz7xdn1RF/A7wE4zt0hldoL+yONdHspOpt 71hF5aGcKZ91w+x1yt84DSRX3lkC2gs4RE+lyHajkhrxc/KZk74Tz+PmesBSMOHg BNQirmFYvLgnGf3XI0Fh3Jpn2bqHCw00AMHo4Qd86ZT1T/2ZeExAzJRmfCdo3RYP fL+IG/DO7TADwylv/ZWxEd4Bo0Bphlr1cGnKaJeXg9OemO+CghVURZ6Q6PwTg1qh gPo= -----END CERTIFICATE-----Generated at Thu Apr 17 17:50:41 2025 by rpki-client