$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2e7ffe27-bb9f-402e-8f90-08945a4d91ee.roa File: 2e7ffe27-bb9f-402e-8f90-08945a4d91ee.roa (raw, json) Hash identifier: lyN1SQGyeJvJz/z7nMx0oYHl7ingzz8b6wNXSk8AZ9I= Subject key identifier: CB:60:B7:D1:3D:4E:11:75:8F:20:1F:46:B9:49:87:90:8A:EF:5B:E9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 71C23CE0D58A992B7A57B94070D38CFE3DF278FB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2e7ffe27-bb9f-402e-8f90-08945a4d91ee.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da36:6000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:c2:3c:e0:d5:8a:99:2b:7a:57:b9:40:70:d3:8c:fe:3d:f2:78:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0a:30:42:b1:19:ef:11:7b:a4:05:71:e4:26: 52:f3:3a:54:bb:19:6e:a4:2d:fa:ef:21:1c:f3:b0: 1c:6f:cc:61:7c:74:7f:74:f7:fc:7b:30:e1:fa:7d: 62:39:07:53:8f:df:fd:89:38:16:52:67:cc:31:3d: 1d:9c:e6:f9:c7:05:72:d5:5a:40:89:66:31:14:b4: 07:2d:af:b6:9c:0e:2e:8f:be:12:fe:3c:5c:15:b7: 37:77:f4:15:f8:a1:39:6f:4d:60:04:b2:0f:1d:e7: 74:19:23:b7:1f:4a:aa:85:31:43:e5:00:67:0f:6a: c1:6e:7d:38:1f:e5:7c:fb:5c:1b:2a:90:0c:de:94: 69:4d:32:04:f9:3c:42:36:ab:53:39:55:18:31:5e: 1a:34:37:e6:03:56:37:ba:01:2b:8d:fa:84:22:42: 0e:26:b0:8a:92:5a:43:2d:19:12:44:b8:c8:2a:f9: 3c:db:de:e4:38:3b:86:d0:69:1e:a5:f1:48:eb:55: 06:21:a2:8c:67:6a:d0:d8:f4:cb:ae:85:b3:38:64: ce:29:7c:9a:69:24:1e:5c:8a:a6:0c:65:a4:de:64: 37:2c:5f:a6:3e:7a:99:33:a2:66:e2:6c:37:d8:1c: 96:b5:be:a1:37:d0:4b:aa:a7:31:de:42:1b:16:2e: 4b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:60:B7:D1:3D:4E:11:75:8F:20:1F:46:B9:49:87:90:8A:EF:5B:E9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2e7ffe27-bb9f-402e-8f90-08945a4d91ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da36:6000::/40 Signature Algorithm: sha256WithRSAEncryption 42:fb:2a:20:a1:15:e1:1f:b1:91:91:61:ad:6e:fb:38:67:d8: 4c:75:96:5b:98:8c:4b:4f:dc:14:0e:90:4f:61:be:c8:62:ec: 9e:fd:5d:ad:17:8e:25:9a:02:69:07:97:83:b7:b8:1a:19:08: de:5e:ff:d0:26:43:a5:aa:4b:15:83:30:ad:ca:fb:2c:b2:89: c3:e2:1c:f0:0c:9d:eb:77:2e:67:25:d9:88:9e:46:7d:37:57: 36:fe:a2:c8:32:2d:80:8b:66:1b:4e:65:8a:d9:10:e6:3c:ef: 7d:27:5b:fb:17:56:1e:59:0d:89:57:8b:58:29:a8:b4:c8:ef: d2:44:5d:15:e4:2f:e4:d9:10:3e:d4:95:f2:0c:70:e3:41:91: 1b:15:78:91:cb:ab:20:06:df:c6:2d:e1:ca:f5:19:ec:92:d7: 52:47:ed:74:fb:bf:9d:20:f1:9a:04:8c:59:fe:f4:13:32:fa: 40:6e:b2:60:e7:5b:f8:62:3a:21:31:8b:7d:44:b4:3e:39:c4: 0f:ec:86:64:8f:15:99:bf:9f:1b:d5:87:18:0d:cd:32:53:06: 73:b6:1c:95:9c:8e:83:ff:ac:42:ea:5a:73:c6:93:c3:97:6d: f9:29:80:cd:17:2b:7f:b7:9c:9b:de:94:0f:65:a1:ae:17:9c: 26:ab:09:ed -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUccI84NWKmSt6V7lAcNOM/j3yePswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAZGY4NWE0MThjZDcxZTA3YzY4NmJk OGIzYzQ3MmEwMGI0ZjRhOWZiMGMzNjNiMWFjNGU4ZmZmYzIzZjM2OGY4YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQowQrEZ7xF7pAVx5CZS8zpUuxlu pC367yEc87Acb8xhfHR/dPf8ezDh+n1iOQdTj9/9iTgWUmfMMT0dnOb5xwVy1VpA iWYxFLQHLa+2nA4uj74S/jxcFbc3d/QV+KE5b01gBLIPHed0GSO3H0qqhTFD5QBn D2rBbn04H+V8+1wbKpAM3pRpTTIE+TxCNqtTOVUYMV4aNDfmA1Y3ugErjfqEIkIO JrCKklpDLRkSRLjIKvk8297kODuG0GkepfFI61UGIaKMZ2rQ2PTLroWzOGTOKXya aSQeXIqmDGWk3mQ3LF+mPnqZM6Jm4mw32ByWtb6hN9BLqqcx3kIbFi5LRQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMtgt9E9ThF1jyAfRrlJh5CK71vpMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJlN2ZmZTI3LWJiOWYtNDAyZS04ZjkwLTA4OTQ1YTRkOTFlZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaNmAwDQYJKoZIhvcNAQELBQADggEBAEL7KiChFeEfsZGRYa1u +zhn2Ex1lluYjEtP3BQOkE9hvshi7J79Xa0XjiWaAmkHl4O3uBoZCN5e/9AmQ6Wq SxWDMK3K+yyyicPiHPAMnet3Lmcl2YieRn03Vzb+osgyLYCLZhtOZYrZEOY8730n W/sXVh5ZDYlXi1gpqLTI79JEXRXkL+TZED7UlfIMcONBkRsVeJHLqyAG38Yt4cr1 GeyS11JH7XT7v50g8ZoEjFn+9BMy+kBusmDnW/hiOiExi31EtD45xA/shmSPFZm/ nxvVhxgNzTJTBnO2HJWcjoP/rELqWnPGk8OXbfkpgM0XK3+3nJvelA9loa4XnCar Ce0= -----END CERTIFICATE-----Generated at Wed Feb 5 04:00:52 2025 by rpki-client