$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/38ae37ad-50db-4547-8df2-8cdcc56e5ca1.roa File: 38ae37ad-50db-4547-8df2-8cdcc56e5ca1.roa (raw, json) Hash identifier: pXmCRgqIYyVd2icpd9X6IB79z6vsGQ3ig++5+hmt8jg= Subject key identifier: 31:9C:36:B5:42:39:00:6D:63:00:FC:36:18:80:97:03:B3:92:AB:D3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 179FEA11279967AFED2C61E7F65AF71DAF037436 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/38ae37ad-50db-4547-8df2-8cdcc56e5ca1.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da32::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:9f:ea:11:27:99:67:af:ed:2c:61:e7:f6:5a:f7:1d:af:03:74:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:b6:3e:65:6e:91:ba:59:4a:b2:92:65:6d:2e: ac:3c:7b:0f:74:67:87:fb:86:09:72:ad:74:d8:00: 97:6e:a5:b7:9a:21:a8:59:e1:9a:02:32:a9:91:5a: 28:f0:8c:8c:0c:70:27:80:4b:bc:90:5a:6e:38:a3: 21:cb:42:03:75:75:63:ec:a4:eb:1e:23:5b:7f:68: 90:20:1d:8b:0a:ae:3f:37:a9:df:5d:4d:53:e0:0a: 87:df:0b:ac:53:20:f7:de:79:da:7b:7e:99:a0:f8: 19:cc:1a:27:70:29:56:67:a0:ae:e0:f4:62:8c:e4: 20:72:28:61:61:ae:46:5b:ec:c4:9e:4f:95:c0:7a: 4e:98:e2:16:a0:8c:ae:7f:9a:4d:ad:60:80:9f:d6: c4:16:00:78:e5:7a:cc:62:6b:cf:71:c2:a4:82:84: 3d:fc:20:f9:e9:7f:08:5a:f4:74:44:cd:8c:54:c4: 10:8e:3b:53:a6:1c:58:91:a9:f0:2c:ed:c5:08:6f: 13:f4:e1:1e:24:f1:25:f7:d0:0b:22:0f:b1:70:7e: 35:cf:51:25:95:ce:98:81:33:7f:de:cd:7a:d7:9f: ad:c1:72:56:4e:80:c5:02:af:5d:2d:f9:75:e1:cf: a5:1a:83:89:b6:47:97:e0:a0:88:49:a1:7e:e8:95: 6a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:9C:36:B5:42:39:00:6D:63:00:FC:36:18:80:97:03:B3:92:AB:D3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/38ae37ad-50db-4547-8df2-8cdcc56e5ca1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da32::/32 Signature Algorithm: sha256WithRSAEncryption 36:bc:c3:1c:39:37:fc:3f:7e:da:54:4b:9d:dd:3a:b6:83:dd: a2:16:03:4a:e2:12:0a:38:c4:0e:bc:71:98:18:b2:cb:be:af: f7:4d:fa:ba:61:9d:b3:bd:54:11:51:c8:df:4a:bd:1f:0c:05: a7:6f:f6:f4:9e:16:de:14:e2:f3:1f:7f:4c:7e:89:5d:6d:31: 31:8a:81:b3:c3:4c:2c:17:f4:21:c4:9c:05:6c:2e:e6:16:09: 0b:f3:04:8c:ff:a8:20:a5:38:5a:ae:3e:34:19:e9:18:38:a8: e2:a2:4b:19:02:f9:a4:55:78:49:56:8f:c0:fc:77:bd:85:8f: 41:b8:92:a3:cc:0e:26:66:83:b8:39:4a:48:39:87:d9:25:51: 33:7e:3c:8b:33:bc:21:d6:d3:9e:7b:3c:b8:a6:88:da:09:32: d0:27:4f:d2:72:51:ea:73:97:42:3c:1b:be:28:06:df:b4:f9: 9f:dd:04:1f:99:c3:e5:3c:2d:4f:c0:11:d7:6c:37:86:bb:18: c9:e6:2a:82:38:74:6e:f8:6e:b2:04:cf:84:e1:60:d6:0d:48: 60:d9:7a:2d:02:71:7a:ea:88:81:9f:3f:d8:20:4b:8a:fb:a9: 8c:26:58:5c:8f:78:cb:5c:27:14:14:1b:a9:c4:e5:78:83:da: 1a:97:53:e1 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUF5/qESeZZ6/tLGHn9lr3Ha8DdDYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAZmY2YTRjY2FjNmIyY2U5NTllN2E4 Zjc3YzU3ZTlkMGQ4NjY5ZmQ3NTM0ZTdlZDI3ODM2Nzg0Mjk2OTZlOWZlMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+bY+ZW6RullKspJlbS6sPHsPdGeH +4YJcq102ACXbqW3miGoWeGaAjKpkVoo8IyMDHAngEu8kFpuOKMhy0IDdXVj7KTr HiNbf2iQIB2LCq4/N6nfXU1T4AqH3wusUyD33nnae36ZoPgZzBoncClWZ6Cu4PRi jOQgcihhYa5GW+zEnk+VwHpOmOIWoIyuf5pNrWCAn9bEFgB45XrMYmvPccKkgoQ9 /CD56X8IWvR0RM2MVMQQjjtTphxYkanwLO3FCG8T9OEeJPEl99ALIg+xcH41z1El lc6YgTN/3s1615+twXJWToDFAq9dLfl14c+lGoOJtkeX4KCISaF+6JVqPwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFDGcNrVCOQBtYwD8NhiAlwOzkqvTMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM4YWUzN2FkLTUwZGItNDU0Ny04ZGYyLThjZGNjNTZlNWNhMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAbaMjANBgkqhkiG9w0BAQsFAAOCAQEANrzDHDk3/D9+2lRLnd06 toPdohYDSuISCjjEDrxxmBiyy76v9036umGds71UEVHI30q9HwwFp2/29J4W3hTi 8x9/TH6JXW0xMYqBs8NMLBf0IcScBWwu5hYJC/MEjP+oIKU4Wq4+NBnpGDio4qJL GQL5pFV4SVaPwPx3vYWPQbiSo8wOJmaDuDlKSDmH2SVRM348izO8IdbTnns8uKaI 2gky0CdP0nJR6nOXQjwbvigG37T5n90EH5nD5TwtT8AR12w3hrsYyeYqgjh0bvhu sgTPhOFg1g1IYNl6LQJxeuqIgZ8/2CBLivupjCZYXI94y1wnFBQbqcTleIPaGpdT 4Q== -----END CERTIFICATE-----Generated at Wed Feb 5 04:05:07 2025 by rpki-client