$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2c45a5ec-fccb-48b2-b7d2-891164aa8a70.roa File: 2c45a5ec-fccb-48b2-b7d2-891164aa8a70.roa (raw, json) Hash identifier: 5YVc1PvNn3Bv8wrPI48HaPr2f2CKdJ/qePYxj357xl8= Subject key identifier: 0E:6F:8A:E8:62:9D:AD:81:6E:5C:91:85:E4:DE:B7:5C:B2:AB:2E:EF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4637062273B3C05358892908D739B28CFCCCE676 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2c45a5ec-fccb-48b2-b7d2-891164aa8a70.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:2040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:37:06:22:73:b3:c0:53:58:89:29:08:d7:39:b2:8c:fc:cc:e6:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f7:2d:f4:6c:97:e1:57:94:1c:9b:18:95:80: 90:1f:83:74:55:1c:dd:0e:26:0f:a5:d6:97:8a:f0: e3:3c:42:1a:7f:e2:7e:fe:9b:e4:2e:2e:f3:db:1e: f8:00:a0:c7:d6:a7:5d:bb:a7:2b:7c:26:98:72:4a: e5:c4:b8:77:d7:27:46:40:c2:47:5d:40:84:95:19: 2d:75:03:63:0a:62:d3:4b:b8:0d:0d:2a:1d:eb:1f: 55:38:a9:8e:b6:58:4b:48:f4:3b:b9:9b:58:7c:8c: 61:be:2f:cf:bb:0e:61:54:18:a2:d9:48:f8:02:4d: 3b:3d:ac:38:6d:32:f4:9b:77:a7:20:af:8b:ef:c0: 31:b8:ec:38:4f:8c:1b:b3:77:a4:2e:1e:fd:67:3d: 87:69:c1:14:7d:74:e4:26:ca:aa:95:0c:e4:11:35: e7:41:7d:7c:bc:c4:e5:9a:55:fc:71:40:89:50:fe: e2:1f:6f:32:7a:55:c5:1d:42:99:1d:eb:da:df:b1: 72:ff:7a:32:4d:62:bc:35:a9:e5:be:c2:85:98:a3: af:22:82:48:b8:cb:ef:79:2e:b5:3f:31:11:5f:d4: c1:18:b4:e6:57:18:39:1f:52:b6:0b:ed:25:29:e6: c7:a9:62:83:e6:a0:dd:d8:01:bc:7c:2c:12:41:19: 9a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:6F:8A:E8:62:9D:AD:81:6E:5C:91:85:E4:DE:B7:5C:B2:AB:2E:EF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2c45a5ec-fccb-48b2-b7d2-891164aa8a70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:2040::/46 Signature Algorithm: sha256WithRSAEncryption 26:3d:10:65:2d:5a:b0:8b:61:9c:52:ba:ce:41:3f:78:34:88: 8d:b5:db:b8:e9:df:d2:67:e0:93:56:e3:0a:44:8a:d9:ee:34: a8:00:30:6b:e4:b8:cf:97:a8:73:7a:71:e6:02:56:e5:48:47: e3:41:c1:10:9b:db:19:c1:b6:ea:41:fa:de:53:b0:8d:76:fa: 72:60:fe:0b:e0:88:18:28:7a:10:b8:a2:47:e5:13:76:58:e2: 02:e1:8d:00:42:fa:97:7d:1d:bd:88:b5:c0:3d:7f:e7:95:3e: 20:2f:ee:6e:a0:79:b4:b4:b6:09:e9:5d:53:00:ef:49:fb:c4: 3a:40:2f:85:6a:3f:3c:c9:66:58:03:53:30:ed:d4:8d:ab:43: 4a:3e:8d:11:5f:1c:55:63:16:0d:4a:df:af:4a:90:9b:db:03: 17:9c:42:34:f2:76:4e:d0:1d:7c:75:41:70:f9:ee:df:46:f9: 4c:1a:cf:c3:9e:38:56:37:d0:f5:ec:31:23:65:6c:10:46:79: 1c:5b:a2:17:2d:bf:d6:45:93:f8:f4:d9:5c:19:0f:0e:2b:75: 9f:3a:15:f6:ce:59:d8:3e:3e:ab:e8:21:ea:1c:64:ef:8c:2a: a4:e0:df:52:65:e3:12:41:1c:37:62:2e:b0:e6:6c:9a:cf:bb: 63:b4:34:8e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIURjcGInOzwFNYiSkI1zmyjPzM5nYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAMGE2NDNjMjk1ZDE5NzZlOGQxYjRj NDY4ZTEyNDliZDBjZmQzYTEyZjU4NTdmMGQ2N2I2NTA5YjZhMmFlY2ZjMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/ct9GyX4VeUHJsYlYCQH4N0VRzd DiYPpdaXivDjPEIaf+J+/pvkLi7z2x74AKDH1qddu6crfCaYckrlxLh31ydGQMJH XUCElRktdQNjCmLTS7gNDSod6x9VOKmOtlhLSPQ7uZtYfIxhvi/Puw5hVBii2Uj4 Ak07Paw4bTL0m3enIK+L78AxuOw4T4wbs3ekLh79Zz2HacEUfXTkJsqqlQzkETXn QX18vMTlmlX8cUCJUP7iH28yelXFHUKZHeva37Fy/3oyTWK8NanlvsKFmKOvIoJI uMvveS61PzERX9TBGLTmVxg5H1K2C+0lKebHqWKD5qDd2AG8fCwSQRmarQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFA5viuhina2BblyRheTet1yyqy7vMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJjNDVhNWVjLWZjY2ItNDhiMi1iN2QyLTg5MTE2NGFhOGE3MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba9yBAMA0GCSqGSIb3DQEBCwUAA4IBAQAmPRBlLVqwi2GcUrrO QT94NIiNtdu46d/SZ+CTVuMKRIrZ7jSoADBr5LjPl6hzenHmAlblSEfjQcEQm9sZ wbbqQfreU7CNdvpyYP4L4IgYKHoQuKJH5RN2WOIC4Y0AQvqXfR29iLXAPX/nlT4g L+5uoHm0tLYJ6V1TAO9J+8Q6QC+Faj88yWZYA1Mw7dSNq0NKPo0RXxxVYxYNSt+v SpCb2wMXnEI08nZO0B18dUFw+e7fRvlMGs/DnjhWN9D17DEjZWwQRnkcW6IXLb/W RZP49NlcGQ8OK3WfOhX2zlnYPj6r6CHqHGTvjCqk4N9SZeMSQRw3Yi6w5myaz7tj tDSO -----END CERTIFICATE-----Generated at Wed Feb 5 04:00:28 2025 by rpki-client