$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2b24227e-4b42-4138-97ef-776285e988c1.roa File: 2b24227e-4b42-4138-97ef-776285e988c1.roa (raw, json) Hash identifier: BW5bVXOO67Kg0iwrkxTUDGK9HS4BOktxLOWkvDtPmAc= Subject key identifier: F1:E3:4A:A6:D9:95:7B:6A:A8:48:58:E0:C1:0A:38:65:E3:9F:92:87 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0E0D12FEB664F65D20EE0D3CDA358A8A7F8E8C8A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2b24227e-4b42-4138-97ef-776285e988c1.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:6080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:0d:12:fe:b6:64:f6:5d:20:ee:0d:3c:da:35:8a:8a:7f:8e:8c:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:48:e5:fa:f4:cc:31:37:a1:36:f8:4f:ab:42: 7a:e2:83:85:9e:52:e4:5a:be:02:77:d3:32:5f:c0: 9f:d1:2d:8b:d7:0f:73:9e:17:e2:86:20:7b:df:fb: f7:d1:fe:e5:dc:2c:fc:3a:a5:34:3d:6a:f3:19:e8: f9:8d:42:42:5f:13:f0:3a:20:a7:56:f3:e0:67:7d: bc:ef:53:90:79:f7:e4:e5:65:b5:5d:17:f0:3a:8c: e6:6b:e7:02:95:3a:b8:98:38:c7:e0:86:f6:d8:1f: ed:70:aa:b5:8f:f3:14:07:7c:13:bd:ea:6d:de:47: fd:79:18:49:a5:5a:cc:d4:25:8e:08:19:7c:6c:b0: 10:80:df:4e:85:f7:78:4d:55:72:5f:b2:32:13:18: f4:44:83:d0:81:be:04:40:04:74:27:b6:48:65:bc: 0c:92:8f:40:bc:d9:96:89:81:4f:d8:bf:51:70:91: a5:9c:e8:4d:f2:9e:02:c6:18:c7:1a:5e:45:e7:d1: 4a:44:69:08:a7:e3:a8:52:64:75:6e:9b:cb:4c:fc: 2a:92:4f:3f:16:51:41:8c:75:12:d1:e4:ba:e4:d4: a1:e3:04:ab:71:71:1f:b3:dd:36:ec:08:03:cd:c0: d6:a3:83:11:8e:dc:bf:f2:03:92:24:67:f5:09:1b: 49:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E3:4A:A6:D9:95:7B:6A:A8:48:58:E0:C1:0A:38:65:E3:9F:92:87 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2b24227e-4b42-4138-97ef-776285e988c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:6080::/46 Signature Algorithm: sha256WithRSAEncryption 28:66:00:5c:b1:bc:69:de:be:0d:96:7d:ee:9b:ad:b7:6d:d0: 76:e0:b4:99:ff:38:8a:50:5d:0a:1c:cb:01:21:25:40:13:aa: c8:d8:d8:0e:ca:c2:86:93:d0:e0:d2:aa:ae:c4:67:9e:22:75: 08:13:cf:59:14:ea:51:24:ce:66:d7:06:75:a0:6b:ef:1e:0b: c8:10:75:09:39:e3:e6:48:de:2c:3f:d0:59:2f:11:c4:19:bb: ee:f8:98:e8:49:8a:71:df:c7:b3:6f:a6:34:5a:04:31:96:c9: 48:fd:41:2b:38:92:a2:f2:ac:88:3f:5f:1b:b4:a7:1e:56:de: 85:57:3d:8e:56:df:a5:05:74:5c:0e:31:d3:b1:d0:7f:b2:ca: 43:75:c3:8d:59:58:dc:22:e9:f2:4f:b0:7a:f7:98:f0:42:f5: da:c5:b7:f3:30:16:a5:79:48:b0:25:05:26:4b:89:84:9d:29: 0b:af:ae:7d:bf:1b:47:f7:0a:67:58:9c:c0:23:b7:47:7b:6e: 5e:f8:c8:98:d5:a6:75:83:73:9c:6a:82:a8:bd:b9:3a:bb:c1: 80:76:72:2b:28:ff:22:83:a9:f5:7c:5f:97:c9:a3:9b:d2:30: c7:da:c0:00:f8:a3:91:89:4d:64:fe:66:2d:68:db:e5:f6:ca: 3f:ed:a0:d2 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUDg0S/rZk9l0g7g082jWKin+OjIowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAMDY0NmQzMWEwN2U4MWFiZDJlNzk5 NGYwZjE4M2Y3YjY0ZDEzMTU2OTJkMGQ1M2NhNzYzNGI0Y2NiMGVkNzQ1ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEjl+vTMMTehNvhPq0J64oOFnlLk Wr4Cd9MyX8Cf0S2L1w9znhfihiB73/v30f7l3Cz8OqU0PWrzGej5jUJCXxPwOiCn VvPgZ32871OQeffk5WW1XRfwOozma+cClTq4mDjH4Ib22B/tcKq1j/MUB3wTvept 3kf9eRhJpVrM1CWOCBl8bLAQgN9Ohfd4TVVyX7IyExj0RIPQgb4EQAR0J7ZIZbwM ko9AvNmWiYFP2L9RcJGlnOhN8p4CxhjHGl5F59FKRGkIp+OoUmR1bpvLTPwqkk8/ FlFBjHUS0eS65NSh4wSrcXEfs9027AgDzcDWo4MRjty/8gOSJGf1CRtJ2wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPHjSqbZlXtqqEhY4MEKOGXjn5KHMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJiMjQyMjdlLTRiNDItNDEzOC05N2VmLTc3NjI4NWU5ODhjMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba92CAMA0GCSqGSIb3DQEBCwUAA4IBAQAoZgBcsbxp3r4Nln3u m623bdB24LSZ/ziKUF0KHMsBISVAE6rI2NgOysKGk9Dg0qquxGeeInUIE89ZFOpR JM5m1wZ1oGvvHgvIEHUJOePmSN4sP9BZLxHEGbvu+JjoSYpx38ezb6Y0WgQxlslI /UErOJKi8qyIP18btKceVt6FVz2OVt+lBXRcDjHTsdB/sspDdcONWVjcIunyT7B6 95jwQvXaxbfzMBaleUiwJQUmS4mEnSkLr659vxtH9wpnWJzAI7dHe25e+MiY1aZ1 g3OcaoKovbk6u8GAdnIrKP8ig6n1fF+XyaOb0jDH2sAA+KORiU1k/mYtaNvl9so/ 7aDS -----END CERTIFICATE-----Generated at Wed Feb 5 04:03:00 2025 by rpki-client