$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/361d936c-1adc-484a-92e0-91a674c8ad9d.roa File: 361d936c-1adc-484a-92e0-91a674c8ad9d.roa (raw, json) Hash identifier: p8rMDYVBt3G7ujxQQTqbNWWnLTxjtpaLtov2bPhPNis= Subject key identifier: 5E:92:DD:2D:9E:5C:97:43:4D:C1:7A:D6:67:B4:E2:F1:D5:3C:B2:A7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5B93B803D45F3F936AE50A90F3E6DABFAA66F45A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/361d936c-1adc-484a-92e0-91a674c8ad9d.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:c0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:93:b8:03:d4:5f:3f:93:6a:e5:0a:90:f3:e6:da:bf:aa:66:f4:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:88:5b:31:7a:64:c9:70:09:34:1b:dd:44:b7: f8:d8:d2:d5:b8:57:37:93:90:05:f8:77:35:54:c8: 40:12:e6:c8:fc:85:8a:96:9f:42:33:30:ea:50:dd: c3:09:c2:4c:91:41:03:47:2e:db:6c:7a:f4:d5:d1: 07:d4:4f:de:f1:b4:11:c4:31:1e:03:fd:45:34:12: b7:89:18:c8:09:90:13:2b:62:96:be:2c:f7:95:c4: 38:1a:61:7c:0d:20:c5:98:30:db:11:cf:23:3d:81: 6c:8d:4d:5e:dc:52:f2:d6:ba:45:7c:af:8c:71:e6: 30:89:b8:e7:51:7b:e6:a0:7c:6f:9a:d6:f9:f6:99: 6a:93:5a:50:2d:f8:34:e9:86:3a:a2:25:88:d7:78: 90:23:54:f5:93:51:77:b9:71:78:28:56:d8:c9:57: 34:74:94:3b:6c:6b:88:c4:f4:47:c6:d5:42:dd:14: e7:e7:cd:0a:9c:60:79:85:ef:0f:06:16:b3:eb:bb: 61:93:96:36:47:42:af:76:a2:65:ab:ab:00:3e:d0: e7:72:f8:ae:3f:58:07:1d:ca:ed:d9:66:e6:e4:f3: b8:88:40:de:5a:76:9d:f8:a4:0e:47:8e:22:61:83: 98:2f:b0:bb:a9:f4:45:f4:c5:f2:21:0b:b4:b1:32: 75:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:92:DD:2D:9E:5C:97:43:4D:C1:7A:D6:67:B4:E2:F1:D5:3C:B2:A7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/361d936c-1adc-484a-92e0-91a674c8ad9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:c0c0::/48 Signature Algorithm: sha256WithRSAEncryption 42:72:77:3c:9a:73:59:6d:82:91:82:e2:a4:9b:5d:4a:82:d9: 05:48:90:ef:83:fc:1a:f9:e3:20:25:f0:27:83:15:f6:9c:f1: 7b:18:28:58:82:8e:3d:dc:24:20:c3:0a:5b:40:51:26:76:7e: d9:71:dd:2d:3f:5f:23:cb:11:36:4b:45:56:80:4d:22:e2:c4: 3c:6f:40:0b:7f:33:62:6c:bb:54:9c:7d:17:ba:5f:a3:8f:45: 73:60:fe:4f:dc:d4:38:c1:a0:54:de:9b:d6:dd:57:25:50:b2: 53:05:84:b5:8c:f1:9f:74:58:ae:69:bc:88:cb:59:5b:45:16: 62:01:d1:78:52:0d:17:c7:ec:dc:52:ac:74:49:ef:b0:b2:1f: 44:38:5a:6e:17:01:df:b6:b8:bf:e0:b3:f7:29:2e:6a:e9:30: a7:03:77:ea:16:5c:ef:56:99:fa:ba:09:00:ce:65:bf:3e:93: 14:2c:64:06:ed:e7:e9:72:59:0d:e2:b7:62:a0:b1:df:ec:a5: 93:f9:1f:64:20:3b:1c:ab:36:ad:5a:00:cf:66:24:0e:86:50: 99:b8:56:38:13:45:50:08:a6:24:61:28:4a:d5:e0:57:55:0b: 43:4b:c1:0b:e1:10:b6:ec:6a:7e:f4:87:9d:8b:6e:7a:f8:75: 7d:73:4c:be -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUW5O4A9RfP5Nq5QqQ8+bav6pm9FowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNANTdlNWFkYTZmMTNiNzQxYjg2NTQw MzlhMzA1YTc0ZGIzNzViZDU3M2JiYjNlMTM2MWVjZDcxMDgzYmI1YTI3YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4hbMXpkyXAJNBvdRLf42NLVuFc3 k5AF+Hc1VMhAEubI/IWKlp9CMzDqUN3DCcJMkUEDRy7bbHr01dEH1E/e8bQRxDEe A/1FNBK3iRjICZATK2KWviz3lcQ4GmF8DSDFmDDbEc8jPYFsjU1e3FLy1rpFfK+M ceYwibjnUXvmoHxvmtb59plqk1pQLfg06YY6oiWI13iQI1T1k1F3uXF4KFbYyVc0 dJQ7bGuIxPRHxtVC3RTn580KnGB5he8PBhaz67thk5Y2R0KvdqJlq6sAPtDncviu P1gHHcrt2Wbm5PO4iEDeWnad+KQOR44iYYOYL7C7qfRF9MXyIQu0sTJ1+wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFF6S3S2eXJdDTcF61me04vHVPLKnMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM2MWQ5MzZjLTFhZGMtNDg0YS05MmUwLTkxYTY3NGM4YWQ5ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaOMDAMA0GCSqGSIb3DQEBCwUAA4IBAQBCcnc8mnNZbYKRguKk m11KgtkFSJDvg/wa+eMgJfAngxX2nPF7GChYgo493CQgwwpbQFEmdn7Zcd0tP18j yxE2S0VWgE0i4sQ8b0ALfzNibLtUnH0Xul+jj0VzYP5P3NQ4waBU3pvW3VclULJT BYS1jPGfdFiuabyIy1lbRRZiAdF4Ug0Xx+zcUqx0Se+wsh9EOFpuFwHftri/4LP3 KS5q6TCnA3fqFlzvVpn6ugkAzmW/PpMULGQG7efpclkN4rdioLHf7KWT+R9kIDsc qzatWgDPZiQOhlCZuFY4E0VQCKYkYShK1eBXVQtDS8EL4RC27Gp+9Iedi256+HV9 c0y+ -----END CERTIFICATE-----Generated at Wed Feb 5 03:52:18 2025 by rpki-client