$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2bd5b0e3-83d1-4984-85cc-d619e19416c0.roa File: 2bd5b0e3-83d1-4984-85cc-d619e19416c0.roa (raw, json) Hash identifier: 6QSBHc8BhvThCoXpfYQihUDqBWGi/UmZqpaPUFo9AOY= Subject key identifier: 9A:DB:7A:C2:EA:71:05:A8:48:84:60:D8:C7:20:E1:66:68:E4:C0:ED Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6F65D4EBD996144178B2D47734BE7FE1C7324891 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2bd5b0e3-83d1-4984-85cc-d619e19416c0.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:6080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:65:d4:eb:d9:96:14:41:78:b2:d4:77:34:be:7f:e1:c7:32:48:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ec:da:9a:3e:02:ac:15:70:1f:d1:8e:b7:83: e3:05:d6:4d:51:53:b9:f0:10:2e:56:5e:2a:b7:5b: c8:20:1e:52:78:14:f8:82:1b:55:2f:8a:7a:1e:74: 8f:77:53:59:2d:71:a4:ba:d0:5e:de:b3:61:9a:08: 0c:44:4b:ff:b7:17:ce:4e:52:d0:b5:9b:e5:48:87: 7d:86:7f:b3:39:bd:69:17:ee:e1:8f:5d:a1:1d:ed: 32:b9:96:2f:8e:e2:ba:09:6a:36:08:6d:00:53:bd: 37:c4:00:5f:76:3e:08:70:fc:56:ad:e4:9a:1c:23: 2d:9e:7a:cb:a2:1f:58:4f:7a:04:fd:f6:97:f0:d4: 10:29:d9:28:91:a6:4f:c3:0f:71:d9:c4:08:f0:d6: c1:dd:91:9d:0c:c1:47:60:eb:c0:7d:6d:83:31:91: 05:2f:85:04:67:b4:e7:92:d6:a5:fa:84:55:24:b9: 4c:aa:09:f3:38:10:b6:fa:48:92:e1:0c:2b:be:1f: 82:fd:f1:99:3b:f2:77:17:f7:e9:73:a1:f6:c8:69: a6:32:15:e9:b8:dd:c3:b8:52:57:ba:f1:36:3f:65: 45:dc:a7:42:85:dd:40:60:04:e3:54:68:80:6b:ab: 63:43:33:a5:93:57:8b:3b:e3:c1:8f:5a:ba:5a:3d: 48:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:DB:7A:C2:EA:71:05:A8:48:84:60:D8:C7:20:E1:66:68:E4:C0:ED X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2bd5b0e3-83d1-4984-85cc-d619e19416c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:6080::/46 Signature Algorithm: sha256WithRSAEncryption a0:63:a7:e4:3e:0a:7b:21:2e:73:aa:11:71:94:19:39:0e:50: e7:67:13:02:e2:b6:84:f0:59:b3:25:50:d3:ff:21:e2:b8:a3: f2:32:59:6b:56:cd:ed:a8:92:ed:88:b0:5f:62:c4:1f:5d:bc: b4:4d:7f:a9:f7:df:ae:66:da:7e:24:6f:48:e3:36:dc:9d:63: fa:37:63:df:e8:f9:22:cd:07:cc:88:bc:d4:40:36:74:8d:4b: bf:3b:61:42:de:d3:98:a1:00:86:3a:60:3b:4d:0f:e7:ba:c2: 51:48:53:60:69:98:6d:7b:92:96:9b:29:2a:d5:a4:e1:82:98: cc:df:da:1b:fe:e2:5b:24:01:dd:2f:76:95:83:ac:da:05:c2: 42:89:28:88:28:67:d3:a1:dc:21:c9:25:82:98:5a:9c:79:af: 3c:80:fe:d1:52:fd:66:91:be:e3:e5:d0:5e:83:85:a0:d7:b0: 37:49:71:dd:ce:0c:5d:72:5f:d7:26:f2:26:fa:23:8e:20:1a: 37:c9:f4:4f:76:ec:21:eb:1c:2e:d5:2d:63:ad:0f:c8:2c:c8: 8e:d7:d8:33:60:40:6d:6f:82:1f:37:a1:d5:c4:65:a8:58:8c: 5f:7c:1b:85:ad:84:38:79:9b:72:bc:4b:df:4e:89:12:5e:a4: 6f:9c:5d:d5 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUb2XU69mWFEF4stR3NL5/4ccySJEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAMDkzZDNjNmQzOTc1ODdhODM1YmM1 ODIyOTlhMmFlNTI2MzcwYjhlMzMzN2Y0OWYzNTc1OGFiZDUwZWFlNjA3NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuzamj4CrBVwH9GOt4PjBdZNUVO5 8BAuVl4qt1vIIB5SeBT4ghtVL4p6HnSPd1NZLXGkutBe3rNhmggMREv/txfOTlLQ tZvlSId9hn+zOb1pF+7hj12hHe0yuZYvjuK6CWo2CG0AU703xABfdj4IcPxWreSa HCMtnnrLoh9YT3oE/faX8NQQKdkokaZPww9x2cQI8NbB3ZGdDMFHYOvAfW2DMZEF L4UEZ7Tnktal+oRVJLlMqgnzOBC2+kiS4Qwrvh+C/fGZO/J3F/fpc6H2yGmmMhXp uN3DuFJXuvE2P2VF3KdChd1AYATjVGiAa6tjQzOlk1eLO+PBj1q6Wj1ICQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJrbesLqcQWoSIRg2Mcg4WZo5MDtMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJiZDViMGUzLTgzZDEtNDk4NC04NWNjLWQ2MTllMTk0MTZjMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaWCAMA0GCSqGSIb3DQEBCwUAA4IBAQCgY6fkPgp7IS5zqhFx lBk5DlDnZxMC4raE8FmzJVDT/yHiuKPyMllrVs3tqJLtiLBfYsQfXby0TX+p99+u Ztp+JG9I4zbcnWP6N2Pf6PkizQfMiLzUQDZ0jUu/O2FC3tOYoQCGOmA7TQ/nusJR SFNgaZhte5KWmykq1aThgpjM39ob/uJbJAHdL3aVg6zaBcJCiSiIKGfTodwhySWC mFqcea88gP7RUv1mkb7j5dBeg4Wg17A3SXHdzgxdcl/XJvIm+iOOIBo3yfRPduwh 6xwu1S1jrQ/ILMiO19gzYEBtb4IfN6HVxGWoWIxffBuFrYQ4eZtyvEvfTokSXqRv nF3V -----END CERTIFICATE-----Generated at Wed Feb 5 04:10:22 2025 by rpki-client