$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/29fe97d9-befe-4ea9-8151-d76ea6e9a705.roa File: 29fe97d9-befe-4ea9-8151-d76ea6e9a705.roa (raw, json) Hash identifier: hwvMUPUGAS4XOmqdaMFCWzuSGWE6fE+C85mh0JkZXLU= Subject key identifier: CB:97:EE:4E:10:4C:E6:49:3B:05:41:A6:76:A3:3B:EE:EF:35:EF:C5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4BC95DD4405815B0C3BC566A882F2DCA15979C92 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/29fe97d9-befe-4ea9-8151-d76ea6e9a705.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:2880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:c9:5d:d4:40:58:15:b0:c3:bc:56:6a:88:2f:2d:ca:15:97:9c:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:62:02:9e:56:57:85:4e:f5:60:94:1b:63:b1: 3a:09:12:86:69:a8:c6:41:10:27:1b:1c:e9:94:2f: be:ba:a5:69:a6:b5:de:61:cf:fc:d0:1b:49:53:82: 37:97:b1:4f:da:48:50:e4:7d:0c:cb:62:76:22:a3: 37:f5:38:d3:25:f3:80:c2:26:4f:f8:88:8d:38:2d: 73:d6:b7:bc:ce:58:62:fc:ac:fd:26:60:b6:56:a0: 83:1a:4b:a5:cf:37:3e:be:f1:32:7e:f3:90:66:33: 3e:45:59:ca:6b:a5:b2:27:55:9a:8b:10:c0:6e:10: 74:b3:68:bc:04:ab:d1:37:66:8e:36:cd:96:fd:d4: ff:5f:ed:6c:ae:b5:db:48:18:cd:92:a7:4d:92:71: 18:1e:64:c9:03:ce:98:8d:81:a9:99:4e:76:4c:b6: 85:93:f9:e4:37:da:fa:85:06:cb:44:86:e9:f5:fe: 9a:26:95:f1:b8:0b:7a:5b:86:47:50:80:7f:24:c2: 80:78:df:48:50:62:d0:6c:4f:0a:0a:92:f0:d6:01: ab:35:24:34:4c:2d:3b:da:c7:05:60:7c:4b:cd:5e: 12:30:e7:44:5b:ec:ae:5a:6b:85:dc:f2:40:92:7b: 26:a0:8c:0c:07:97:fe:cb:ca:e7:06:01:21:4a:9f: 71:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:97:EE:4E:10:4C:E6:49:3B:05:41:A6:76:A3:3B:EE:EF:35:EF:C5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/29fe97d9-befe-4ea9-8151-d76ea6e9a705.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:2880::/48 Signature Algorithm: sha256WithRSAEncryption 16:3f:cb:47:a8:12:25:0a:8a:da:19:4f:e7:94:fd:80:1f:b2: 86:a9:85:36:61:90:1b:5f:6e:ba:be:b3:f1:29:ed:33:5e:dd: a9:77:d8:6b:d0:9a:8d:6f:1a:f6:c0:af:24:38:fe:07:5d:71: e5:a3:a9:62:21:46:84:b6:27:31:10:d7:ba:99:91:7e:31:24: 19:e3:de:94:3f:72:32:7f:62:5f:7d:70:af:83:8d:59:d4:99: 5a:95:de:81:a5:e6:ea:a9:b0:b3:7c:8e:66:27:db:89:80:27: d7:ce:f5:e0:a9:25:b5:9c:d0:90:e2:f6:97:26:74:2b:00:df: f2:a0:b0:0a:ce:d2:b5:a1:69:b7:8d:82:42:68:e2:66:e6:57: 2e:c9:66:d6:c1:17:c2:e6:c7:f2:a6:4a:3c:ba:82:bc:59:83: 5f:c0:cc:57:42:a9:80:7b:85:66:9b:f3:93:e3:fd:c8:30:94: 6d:c0:fd:d0:00:93:a5:89:44:12:34:1b:74:7e:cf:03:cc:62: cc:be:98:c4:cf:68:3a:55:c8:c5:16:67:51:72:42:1a:d9:6e: c5:02:9d:07:17:a6:b8:12:fe:64:24:95:cb:66:78:a0:f4:f3: 9d:28:ba:7a:78:f8:d1:f2:fd:80:65:e7:45:74:13:ce:6a:6c: 8e:c4:66:ed -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUS8ld1EBYFbDDvFZqiC8tyhWXnJIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNANTVkMGI2MzU5OWU0MDE5MTA5NTYz N2JkNDVhZDFmMmI5ZGE2ODQ3NjVhNzBlYjBiMWJmY2E5YmI0NDk3M2IwZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmICnlZXhU71YJQbY7E6CRKGaajG QRAnGxzplC++uqVpprXeYc/80BtJU4I3l7FP2khQ5H0My2J2IqM39TjTJfOAwiZP +IiNOC1z1re8zlhi/Kz9JmC2VqCDGkulzzc+vvEyfvOQZjM+RVnKa6WyJ1WaixDA bhB0s2i8BKvRN2aONs2W/dT/X+1srrXbSBjNkqdNknEYHmTJA86YjYGpmU52TLaF k/nkN9r6hQbLRIbp9f6aJpXxuAt6W4ZHUIB/JMKAeN9IUGLQbE8KCpLw1gGrNSQ0 TC072scFYHxLzV4SMOdEW+yuWmuF3PJAknsmoIwMB5f+y8rnBgEhSp9xPwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMuX7k4QTOZJOwVBpnajO+7vNe/FMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI5ZmU5N2Q5LWJlZmUtNGVhOS04MTUxLWQ3NmVhNmU5YTcwNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/yiAMA0GCSqGSIb3DQEBCwUAA4IBAQAWP8tHqBIlCoraGU/n lP2AH7KGqYU2YZAbX266vrPxKe0zXt2pd9hr0JqNbxr2wK8kOP4HXXHlo6liIUaE ticxENe6mZF+MSQZ496UP3Iyf2JffXCvg41Z1Jlald6BpebqqbCzfI5mJ9uJgCfX zvXgqSW1nNCQ4vaXJnQrAN/yoLAKztK1oWm3jYJCaOJm5lcuyWbWwRfC5sfypko8 uoK8WYNfwMxXQqmAe4Vmm/OT4/3IMJRtwP3QAJOliUQSNBt0fs8DzGLMvpjEz2g6 VcjFFmdRckIa2W7FAp0HF6a4Ev5kJJXLZnig9POdKLp6ePjR8v2AZedFdBPOamyO xGbt -----END CERTIFICATE-----Generated at Wed Feb 5 04:04:05 2025 by rpki-client