$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/22d65c52-15d0-4b0e-a9e4-35cebf9f101f.roa File: 22d65c52-15d0-4b0e-a9e4-35cebf9f101f.roa (raw, json) Hash identifier: O5FlwVJ1rrWOGqhkDMu7leulR4KJJ6rgQro6rGCUw+E= Subject key identifier: C8:09:51:D8:5E:C1:6F:B6:F6:D6:CC:C0:BD:DC:98:C5:69:FE:53:66 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2E8F33A360CFD3C2B5FBAF39BF6B621C7CE23648 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/22d65c52-15d0-4b0e-a9e4-35cebf9f101f.roa Signing time: Wed 02 Apr 2025 00:00:08 +0000 ROA not before: Wed 02 Apr 2025 00:00:08 +0000 ROA not after: Wed 07 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daef:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 00:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:8f:33:a3:60:cf:d3:c2:b5:fb:af:39:bf:6b:62:1c:7c:e2:36:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Apr 2 00:00:08 2025 GMT Not After : May 7 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:42:d1:da:8e:6e:b5:0a:3c:8b:9c:2b:b6:ec: cc:1b:52:61:54:06:98:57:68:75:04:86:71:d7:ae: 4c:ac:8b:c3:b8:19:4b:9c:7a:af:0b:7c:ce:46:4a: 5a:a9:a3:0a:b6:2d:6d:20:2d:da:01:64:b0:35:8b: a6:f1:86:49:74:10:cb:41:bf:06:fe:56:9b:d8:4d: f8:ee:5d:cf:cc:95:2e:c7:49:88:cf:16:e6:ca:24: d0:cd:a9:0a:52:e3:12:de:e1:94:c4:9d:bf:a0:df: 6d:32:7b:e9:3d:fe:3b:d9:ad:57:06:d0:50:ac:b5: c4:5a:bc:c4:ef:22:eb:80:bd:6d:fe:16:dd:ca:2f: 36:4b:05:d9:5d:c6:f1:cc:98:43:2d:d9:d5:6a:65: 0a:fd:ea:ec:6b:b8:7b:be:55:f5:a6:c3:6f:11:a4: 1b:d1:be:73:16:c6:10:e1:37:53:2d:92:cf:d6:1a: 7b:db:96:dd:2d:5f:63:65:17:89:94:ad:91:36:b6: d8:7a:30:59:cb:05:53:62:66:94:1c:bf:47:1b:f0: e9:2d:eb:64:b9:0b:d5:7f:16:c7:26:ad:59:a1:45: ba:62:06:e6:b3:98:9d:2b:21:02:88:1e:ae:73:1f: f4:06:18:4d:a9:04:de:66:bc:44:b0:d3:78:7b:81: a8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:09:51:D8:5E:C1:6F:B6:F6:D6:CC:C0:BD:DC:98:C5:69:FE:53:66 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/22d65c52-15d0-4b0e-a9e4-35cebf9f101f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:e000::/40 Signature Algorithm: sha256WithRSAEncryption b5:84:d0:cc:ad:de:f4:c8:b9:cd:eb:22:ee:f1:cc:88:0a:ad: 34:0d:af:ed:b6:fc:0b:3b:2a:4d:00:48:cf:2a:2c:c9:75:f2: 50:4e:32:e0:bc:26:0a:50:6a:b9:98:30:17:b6:48:e0:7f:4d: ff:92:9a:9c:a1:a1:79:73:0f:ff:9d:5b:4a:88:4e:61:a9:cc: 85:0a:a5:e3:72:d3:e4:12:48:83:11:fa:f7:1e:d0:0b:00:9a: 45:33:08:b9:c5:98:7c:ae:6b:5a:26:6a:09:7b:44:bf:59:9c: 57:81:cd:8c:98:e0:1a:cb:93:6f:8d:0b:90:91:30:86:69:ce: a6:8a:4b:33:06:ac:85:71:0a:c7:95:a8:dd:29:80:06:f1:67: 9b:4e:1d:57:b2:cb:c9:c2:a5:9d:70:fd:85:02:2d:4d:77:ec: 66:0a:10:0b:44:08:90:42:9c:2b:18:77:48:47:cf:40:16:d9: 99:98:92:76:f1:e4:61:ba:28:44:24:70:c8:ad:50:e3:d9:91: e2:fe:0b:4e:3b:fd:04:df:08:1b:5a:9b:95:03:30:c8:f4:30: 4b:b5:c6:a2:54:35:8c:17:9a:68:98:be:b6:78:c9:b7:f3:84: c2:00:de:91:ca:7a:be:f1:96:95:81:37:b0:4a:12:e7:6e:34: be:59:1e:90 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIULo8zo2DP08K1+685v2tiHHziNkgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQwMjAwMDAwOFoX DTI1MDUwNzIzNTk1OVowejFJMEcGA1UEBRNAY2Q5NTYxMjI5NmYwODNmMGQzOThm OWU4NTZmYjJhZWJkOWJlY2Q0NjY1ZmU3OGYxZjNmZWEyYTAzMTU0NzAyZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0LR2o5utQo8i5wrtuzMG1JhVAaY V2h1BIZx165MrIvDuBlLnHqvC3zORkpaqaMKti1tIC3aAWSwNYum8YZJdBDLQb8G /lab2E347l3PzJUux0mIzxbmyiTQzakKUuMS3uGUxJ2/oN9tMnvpPf472a1XBtBQ rLXEWrzE7yLrgL1t/hbdyi82SwXZXcbxzJhDLdnVamUK/ersa7h7vlX1psNvEaQb 0b5zFsYQ4TdTLZLP1hp725bdLV9jZReJlK2RNrbYejBZywVTYmaUHL9HG/DpLetk uQvVfxbHJq1ZoUW6Ygbms5idKyECiB6ucx/0BhhNqQTeZrxEsNN4e4GodQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMgJUdhewW+29tbMwL3cmMVp/lNmMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIyZDY1YzUyLTE1ZDAtNGIwZS1hOWU0LTM1Y2ViZjlmMTAxZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7+AwDQYJKoZIhvcNAQELBQADggEBALWE0Myt3vTIuc3rIu7x zIgKrTQNr+22/As7Kk0ASM8qLMl18lBOMuC8JgpQarmYMBe2SOB/Tf+SmpyhoXlz D/+dW0qITmGpzIUKpeNy0+QSSIMR+vce0AsAmkUzCLnFmHyua1omagl7RL9ZnFeB zYyY4BrLk2+NC5CRMIZpzqaKSzMGrIVxCseVqN0pgAbxZ5tOHVeyy8nCpZ1w/YUC LU137GYKEAtECJBCnCsYd0hHz0AW2ZmYknbx5GG6KEQkcMitUOPZkeL+C047/QTf CBtam5UDMMj0MEu1xqJUNYwXmmiYvrZ4ybfzhMIA3pHKer7xlpWBN7BKEuduNL5Z HpA= -----END CERTIFICATE-----Generated at Fri Apr 4 23:25:38 2025 by rpki-client