$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0664f42a-f6ce-418d-8061-7cf7cf9a3637.roa File: 0664f42a-f6ce-418d-8061-7cf7cf9a3637.roa (raw, json) Hash identifier: Juk43A3k8tQ1cnXOojuQzIPEG81ahC30FXVO7cmFFVg= Subject key identifier: C3:B6:FA:D4:FB:31:82:43:96:36:17:90:33:23:1D:79:AE:C8:09:44 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 46FF014E815831D48F2FB25DE4EBE94DEA960747 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0664f42a-f6ce-418d-8061-7cf7cf9a3637.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:2800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:ff:01:4e:81:58:31:d4:8f:2f:b2:5d:e4:eb:e9:4d:ea:96:07:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e9:50:d0:9b:fc:09:93:44:1f:3a:83:f0:a7: eb:e0:38:1b:d5:4e:7d:0e:49:59:43:2b:34:cf:af: 6f:07:4d:2c:fa:ec:bf:aa:f3:a4:d8:c4:89:7d:78: 31:89:36:b3:1c:31:4c:ff:f2:3b:6e:ce:34:67:35: e6:13:43:8f:5b:7b:cc:41:63:e6:8e:55:84:4c:bf: ad:c3:fd:70:38:c0:9c:1d:85:32:00:4a:f7:02:e6: 56:ba:36:53:d1:33:00:5a:44:72:0d:10:c1:cc:1e: 5b:40:a4:69:5e:09:51:d7:49:b5:91:f3:70:30:e2: 71:69:ca:5d:ab:b3:47:85:3a:ec:6b:2f:6f:51:df: e6:c8:97:9f:f4:fa:e1:58:a0:41:8f:ec:40:8f:37: cb:b3:82:f6:28:24:35:72:32:07:b2:00:4e:5a:58: f0:38:30:15:74:0d:91:1d:d7:cb:a9:cc:2d:f6:13: 15:b3:b8:ab:c5:30:68:54:c9:8e:7e:4b:ab:6f:5d: 4a:70:45:ed:83:c6:37:7f:34:87:e1:1e:10:9f:69: 0f:3d:ed:5b:f3:cf:7f:d3:3a:0b:7f:e0:57:0c:d8: 0e:c6:50:ff:75:64:a8:aa:35:c9:86:6c:7c:ab:1b: 41:22:9b:99:94:7d:0f:18:c1:05:70:ac:7b:c7:01: 5f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B6:FA:D4:FB:31:82:43:96:36:17:90:33:23:1D:79:AE:C8:09:44 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0664f42a-f6ce-418d-8061-7cf7cf9a3637.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:2800::/40 Signature Algorithm: sha256WithRSAEncryption 4f:91:a9:fd:58:97:8e:92:0e:e3:be:5d:68:01:f4:8c:4c:6e: 3e:26:12:7d:0b:2f:e3:42:a9:93:7f:4e:fa:fb:db:2c:85:ae: d2:7b:f4:ba:11:5f:7e:b7:8b:cd:2b:32:fb:22:a9:ca:d7:52: 49:81:ec:96:d2:eb:f9:6a:2c:35:7f:e5:3a:ac:da:c9:61:04: af:c7:93:af:b2:f4:01:8b:ae:48:e6:4c:5e:ae:26:e1:40:75: 15:8d:c3:84:04:17:12:58:d7:79:9b:80:5c:0f:a0:63:d4:40: 57:97:34:02:69:61:eb:ff:c0:48:1f:42:f1:0e:bb:97:fb:58: 59:0c:8a:90:d9:f8:ba:7c:9b:a1:79:ee:3f:17:0b:fa:fa:07: bf:00:a0:d9:57:24:ff:2d:70:8d:af:f7:c0:da:6c:5b:b6:8a: 68:a7:cd:ce:1d:c6:85:e8:59:e7:19:12:dd:86:f1:59:99:ad: 7c:bb:ae:96:40:e8:7a:22:03:4a:f4:7a:bd:2b:64:69:49:bd: 81:40:86:2c:32:6c:32:b3:84:c6:12:90:a8:69:a5:b2:e2:04: 70:fb:b7:c9:c2:45:ba:08:29:d0:5a:5f:40:5b:53:93:51:4d: ca:f8:61:66:0e:d0:b7:a8:6f:fa:4f:6d:6d:a2:a7:4a:27:4e: 90:62:65:7f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIURv8BToFYMdSPL7Jd5OvpTeqWB0cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAZGY4ZmQzYjU5MzlmNTk1MmE3MTk3 M2FmM2MzODcyMWVmY2FhZDFmMjQ0YTU5MWU2OTliZGVjOThkOWQwYWExOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOlQ0Jv8CZNEHzqD8Kfr4Dgb1U59 DklZQys0z69vB00s+uy/qvOk2MSJfXgxiTazHDFM//I7bs40ZzXmE0OPW3vMQWPm jlWETL+tw/1wOMCcHYUyAEr3AuZWujZT0TMAWkRyDRDBzB5bQKRpXglR10m1kfNw MOJxacpdq7NHhTrsay9vUd/myJef9PrhWKBBj+xAjzfLs4L2KCQ1cjIHsgBOWljw ODAVdA2RHdfLqcwt9hMVs7irxTBoVMmOfkurb11KcEXtg8Y3fzSH4R4Qn2kPPe1b 889/0zoLf+BXDNgOxlD/dWSoqjXJhmx8qxtBIpuZlH0PGMEFcKx7xwFftwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMO2+tT7MYJDljYXkDMjHXmuyAlEMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA2NjRmNDJhLWY2Y2UtNDE4ZC04MDYxLTdjZjdjZjlhMzYzNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9igwDQYJKoZIhvcNAQELBQADggEBAE+Rqf1Yl46SDuO+XWgB 9IxMbj4mEn0LL+NCqZN/Tvr72yyFrtJ79LoRX363i80rMvsiqcrXUkmB7JbS6/lq LDV/5Tqs2slhBK/Hk6+y9AGLrkjmTF6uJuFAdRWNw4QEFxJY13mbgFwPoGPUQFeX NAJpYev/wEgfQvEOu5f7WFkMipDZ+Lp8m6F57j8XC/r6B78AoNlXJP8tcI2v98Da bFu2iminzc4dxoXoWecZEt2G8VmZrXy7rpZA6HoiA0r0er0rZGlJvYFAhiwybDKz hMYSkKhppbLiBHD7t8nCRboIKdBaX0BbU5NRTcr4YWYO0Leob/pPbW2ip0onTpBi ZX8= -----END CERTIFICATE-----Generated at Wed Feb 5 04:01:43 2025 by rpki-client