$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f724fc4-af92-4f6e-9781-835f37854eec.roa File: 2f724fc4-af92-4f6e-9781-835f37854eec.roa (raw, json) Hash identifier: KodYeegcj58kY2XBib7LDbpJHRLeb3DmHxhN+ZUvPQ8= Subject key identifier: C0:5E:76:2B:C5:B4:84:D9:E6:B2:20:9F:93:DB:B0:B0:81:09:78:65 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4FEC063CBA6AD10E24C3EE6B826615E2EC3F1522 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f724fc4-af92-4f6e-9781-835f37854eec.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1f:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:ec:06:3c:ba:6a:d1:0e:24:c3:ee:6b:82:66:15:e2:ec:3f:15:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:28:30:bf:bb:7d:c8:c5:87:81:ff:b6:e1:36: bd:3b:f3:3e:8e:8e:7a:c0:cd:46:1b:34:cf:a8:75: 0f:3e:0a:44:96:34:92:dd:4b:39:4f:7a:c5:72:38: e2:a7:33:be:86:d6:e0:eb:00:ba:26:41:42:df:98: 29:ab:c7:59:5f:a4:31:b6:65:8c:e0:f3:01:98:cb: 01:e3:67:c6:9d:e5:36:38:ef:11:c9:69:04:9a:4f: 07:d6:2f:c3:1a:9a:9b:72:db:a8:91:db:0b:1f:b6: 2c:c6:3a:46:0a:89:af:9f:73:3f:e7:14:46:9a:a2: 29:88:59:70:29:15:d6:bb:28:23:74:9b:97:1a:bf: 27:f0:a3:a2:57:b5:e1:20:7c:1a:95:6e:2b:9d:c9: b8:1c:f7:21:1d:b5:6d:92:bc:a3:84:60:9a:7a:62: 73:68:56:8f:57:42:55:ff:13:2b:4b:43:1a:dc:81: 3a:65:85:fd:ef:35:ca:fa:9a:ec:c0:e6:2e:46:ec: 71:25:88:e5:3d:ab:92:9c:eb:aa:f5:04:0a:08:88: ba:f3:43:e3:bf:ab:00:56:10:56:e3:0c:34:20:a8: 92:29:c6:95:4f:8c:23:37:a5:26:74:5a:8f:ee:ea: 9f:90:ca:73:b9:8b:73:18:19:61:91:75:52:1c:8a: be:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:5E:76:2B:C5:B4:84:D9:E6:B2:20:9F:93:DB:B0:B0:81:09:78:65 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f724fc4-af92-4f6e-9781-835f37854eec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1f:c00::/38 Signature Algorithm: sha256WithRSAEncryption 09:06:4e:49:52:14:a9:c6:65:4d:e1:66:47:f4:9c:36:13:86: ae:a9:a3:b6:54:a4:80:67:c4:b9:64:db:81:4c:c4:d3:b5:17: 60:6a:0d:58:c1:21:a4:be:a1:bf:15:96:cc:54:40:91:69:87: 61:53:f3:09:49:07:f1:43:fb:73:6b:3f:23:cf:75:27:42:5d: 79:8d:2f:de:82:4b:b7:c1:4a:49:5f:32:8b:b8:57:19:6f:ca: a4:a1:a0:be:f6:be:cc:cd:dd:4a:1b:87:8d:f1:db:a8:59:b5: 00:9a:5c:98:2d:06:56:18:3e:5c:01:58:67:06:2e:b9:03:53: 67:ce:10:88:52:8c:f3:88:40:6b:db:7e:c1:94:01:ec:6c:f1: 3f:ff:1b:c5:83:42:46:95:93:11:21:10:c4:a8:39:1e:ea:c2: e6:23:73:aa:52:e3:86:f4:85:74:1f:25:2d:8b:a3:87:5a:c0: 46:80:2c:77:cb:50:15:d4:43:c7:00:3b:be:75:00:6f:eb:de: 35:6b:4a:f7:03:49:0a:af:c0:dc:14:95:3f:eb:d2:9f:25:95: 15:d3:a6:1a:03:2c:49:2c:46:d8:02:58:29:55:2f:1c:e3:c5: ba:97:6e:b8:b5:3f:b2:fd:b0:f5:2f:a0:7f:03:61:2b:0b:3c: 53:44:fe:87 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUT+wGPLpq0Q4kw+5rgmYV4uw/FSIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNANDA5YjNiMDVjZTZiZWFjNjUyNGI1 NjU1NzgxZjkyMTUzOGVkZjVhMjQ1MjA4ZTExZTU5YzQwMDhlYmQ2NDM4MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSgwv7t9yMWHgf+24Ta9O/M+jo56 wM1GGzTPqHUPPgpEljSS3Us5T3rFcjjipzO+htbg6wC6JkFC35gpq8dZX6QxtmWM 4PMBmMsB42fGneU2OO8RyWkEmk8H1i/DGpqbctuokdsLH7YsxjpGComvn3M/5xRG mqIpiFlwKRXWuygjdJuXGr8n8KOiV7XhIHwalW4rncm4HPchHbVtkryjhGCaemJz aFaPV0JV/xMrS0Ma3IE6ZYX97zXK+prswOYuRuxxJYjlPauSnOuq9QQKCIi680Pj v6sAVhBW4ww0IKiSKcaVT4wjN6UmdFqP7uqfkMpzuYtzGBlhkXVSHIq+rwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMBedivFtITZ5rIgn5PbsLCBCXhlMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJmNzI0ZmM0LWFmOTItNGY2ZS05NzgxLTgzNWYzNzg1NGVlYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaHwwwDQYJKoZIhvcNAQELBQADggEBAAkGTklSFKnGZU3hZkf0 nDYThq6po7ZUpIBnxLlk24FMxNO1F2BqDVjBIaS+ob8VlsxUQJFph2FT8wlJB/FD +3NrPyPPdSdCXXmNL96CS7fBSklfMou4VxlvyqShoL72vszN3Uobh43x26hZtQCa XJgtBlYYPlwBWGcGLrkDU2fOEIhSjPOIQGvbfsGUAexs8T//G8WDQkaVkxEhEMSo OR7qwuYjc6pS44b0hXQfJS2Lo4dawEaALHfLUBXUQ8cAO751AG/r3jVrSvcDSQqv wNwUlT/r0p8llRXTphoDLEksRtgCWClVLxzjxbqXbri1P7L9sPUvoH8DYSsLPFNE /oc= -----END CERTIFICATE-----Generated at Wed Feb 5 04:07:59 2025 by rpki-client