$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0e74d4fa-2768-4aa2-ad5e-e62ed2b50858.roa File: 0e74d4fa-2768-4aa2-ad5e-e62ed2b50858.roa (raw, json) Hash identifier: 92fJO0wawv27MlhwnaXJho7hy8ROIcDp173d4jHaMQA= Subject key identifier: 6D:A8:E0:C2:75:01:9A:76:3D:53:FE:B8:45:AC:84:8C:A2:63:7E:4F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 65A044E4A3BE4967EA62236FF9C7954570B5BA3C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0e74d4fa-2768-4aa2-ad5e-e62ed2b50858.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:1080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:a0:44:e4:a3:be:49:67:ea:62:23:6f:f9:c7:95:45:70:b5:ba:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d0:90:5e:7e:f9:55:1d:c1:39:80:08:66:f2: ba:b2:ec:5e:f8:c4:db:1d:b4:ec:60:4e:44:b4:92: 5b:81:cc:63:80:f7:0a:33:bc:f3:0a:e8:78:76:03: 62:a3:70:ab:69:46:93:41:c8:68:de:b8:61:46:a5: 80:de:05:e6:85:f8:64:cf:6a:a0:b1:62:b1:b4:0c: eb:e5:95:32:2c:5f:3f:54:6a:39:ab:8e:93:c9:53: 76:aa:20:ec:44:df:32:01:9b:85:a6:d8:30:a2:b4: bb:11:0c:e3:bf:61:34:a5:3a:a9:0d:95:62:1b:13: 3b:31:f3:fe:9f:95:b4:8d:03:fe:eb:33:89:51:4c: a9:f5:84:12:24:2f:e4:ca:99:cd:42:4e:2b:19:59: 08:e6:54:86:7f:0b:87:8b:b5:33:12:88:82:a2:4b: 5b:4a:be:c0:88:98:e7:e7:8c:35:63:3a:4c:6e:87: f0:54:a8:11:d5:95:25:fe:c1:5a:c5:d4:46:23:3f: 29:3f:5b:9e:49:92:de:2a:74:d1:9f:86:b9:d5:79: 10:ff:10:00:f4:55:82:f8:1f:a0:0c:f0:03:5a:25: 3a:3d:4a:f4:02:12:99:ed:b4:8d:8b:f2:7c:6b:56: 51:b9:4d:23:4e:b8:15:d8:d7:fb:b6:d6:14:96:e6: a7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:A8:E0:C2:75:01:9A:76:3D:53:FE:B8:45:AC:84:8C:A2:63:7E:4F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0e74d4fa-2768-4aa2-ad5e-e62ed2b50858.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:1080::/48 Signature Algorithm: sha256WithRSAEncryption 74:71:fa:ab:00:93:f3:1e:be:83:bf:27:28:4b:71:68:fc:df: 64:bb:54:1c:1b:ac:d1:f9:07:80:e4:49:a7:ee:d8:64:f3:40: 9d:01:80:24:2b:cc:40:6d:54:75:fa:c9:ae:14:75:70:df:e4: 75:36:ef:36:d2:10:64:a1:aa:b4:c6:67:78:b6:fc:bb:41:66: 7f:59:7c:9a:99:30:71:87:54:51:0b:13:ef:40:04:65:22:0c: f2:4e:56:31:99:9f:d7:74:a5:e2:46:38:e8:52:53:9d:7a:b2: 32:73:9d:7f:d6:de:5b:e5:1a:6b:2c:ac:0b:7f:aa:2f:e0:c4: f4:15:e0:59:46:91:f3:cc:ba:76:16:e9:91:ec:e1:24:a3:40: b1:cb:84:22:fb:3c:81:1f:eb:e6:e1:aa:16:da:c8:47:e4:27: 77:5d:80:b1:06:10:27:b5:af:47:01:5e:b3:07:5a:6e:fe:70: d3:1a:24:48:6f:d7:b3:0f:a3:55:af:23:26:00:18:d8:3c:ce: 28:75:f3:05:07:b2:10:ea:cd:0f:24:00:30:71:15:02:f4:c5: 5d:ff:03:37:a9:67:8a:e3:27:b8:ba:b2:96:ea:3e:15:c5:95: fa:6a:2b:36:48:68:35:bf:12:72:d7:06:c9:ff:6e:8b:6d:71: bb:7a:6f:1d -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUZaBE5KO+SWfqYiNv+ceVRXC1ujwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAMzJhNWZlYzZhMDcxMmEyMzllNDgx M2Q4MTM0N2NhZTFlMTRjNDBlNzE4NzNkNmIyMGQ0NTE2MGNiOWZkNzNmZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tCQXn75VR3BOYAIZvK6suxe+MTb HbTsYE5EtJJbgcxjgPcKM7zzCuh4dgNio3CraUaTQcho3rhhRqWA3gXmhfhkz2qg sWKxtAzr5ZUyLF8/VGo5q46TyVN2qiDsRN8yAZuFptgworS7EQzjv2E0pTqpDZVi GxM7MfP+n5W0jQP+6zOJUUyp9YQSJC/kypnNQk4rGVkI5lSGfwuHi7UzEoiCoktb Sr7AiJjn54w1YzpMbofwVKgR1ZUl/sFaxdRGIz8pP1ueSZLeKnTRn4a51XkQ/xAA 9FWC+B+gDPADWiU6PUr0AhKZ7bSNi/J8a1ZRuU0jTrgV2Nf7ttYUluan0QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFG2o4MJ1AZp2PVP+uEWshIyiY35PMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBlNzRkNGZhLTI3NjgtNGFhMi1hZDVlLWU2MmVkMmI1MDg1OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8hCAMA0GCSqGSIb3DQEBCwUAA4IBAQB0cfqrAJPzHr6Dvyco S3Fo/N9ku1QcG6zR+QeA5Emn7thk80CdAYAkK8xAbVR1+smuFHVw3+R1Nu820hBk oaq0xmd4tvy7QWZ/WXyamTBxh1RRCxPvQARlIgzyTlYxmZ/XdKXiRjjoUlOderIy c51/1t5b5RprLKwLf6ov4MT0FeBZRpHzzLp2FumR7OEko0Cxy4Qi+zyBH+vm4aoW 2shH5Cd3XYCxBhAnta9HAV6zB1pu/nDTGiRIb9ezD6NVryMmABjYPM4odfMFB7IQ 6s0PJAAwcRUC9MVd/wM3qWeK4ye4urKW6j4VxZX6ais2SGg1vxJy1wbJ/26LbXG7 em8d -----END CERTIFICATE-----Generated at Wed Feb 5 04:07:12 2025 by rpki-client