$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5bbba35a-ebdf-420c-9fbe-831fe4124982.roa File: 5bbba35a-ebdf-420c-9fbe-831fe4124982.roa (raw, json) Hash identifier: mDsyveRl1d3NzloExAbN1Q74GRxgplXPXfjn4OPbNbI= Subject key identifier: 9A:21:5A:55:18:12:F3:BB:EE:89:6A:CB:DC:A8:23:66:62:8C:E1:90 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 44DF84C79B15B6EBF7988F9F809929318A58B28A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5bbba35a-ebdf-420c-9fbe-831fe4124982.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:6040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:df:84:c7:9b:15:b6:eb:f7:98:8f:9f:80:99:29:31:8a:58:b2:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e1:73:56:af:4b:6c:e9:4e:21:08:aa:4c:f8: ee:5d:7a:31:51:90:8d:62:a2:60:cc:13:23:1b:64: b0:99:5a:a1:0f:c1:3c:aa:46:67:a8:b9:2d:ae:f9: 12:99:1c:bb:72:40:74:bd:06:4c:19:9b:59:63:6b: c1:2d:1c:1b:46:a0:12:37:85:58:c1:46:39:25:6b: cc:91:86:7a:66:e4:40:91:bb:35:34:19:7d:69:59: 00:62:72:ed:57:66:85:8d:97:81:f7:a4:7a:46:da: 17:8f:44:e5:f1:f9:29:8b:1a:ee:c5:ef:3e:64:b0: a0:7a:8c:34:04:01:03:ad:56:2b:3c:3a:08:48:d7: e8:1b:b6:27:b7:39:cd:ab:42:05:64:31:48:e0:f4: 48:0f:6f:ac:75:0f:64:49:a8:60:6e:9f:dc:51:1f: 2a:0e:98:67:35:b7:94:96:75:2b:da:91:ac:8b:65: 75:b8:3c:0f:4b:43:3d:a3:fa:37:34:63:33:c6:bc: 76:15:a3:74:24:f1:08:fa:d0:bc:23:bc:e3:3a:c5: 55:df:57:d3:48:e7:33:c6:73:25:15:ce:b7:b4:21: bd:c2:a1:c3:ea:62:59:18:d7:cf:67:01:ef:a7:df: 39:26:3d:9a:17:6b:e6:09:a2:ab:45:43:aa:6b:f0: f5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:21:5A:55:18:12:F3:BB:EE:89:6A:CB:DC:A8:23:66:62:8C:E1:90 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5bbba35a-ebdf-420c-9fbe-831fe4124982.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:6040::/46 Signature Algorithm: sha256WithRSAEncryption a6:df:97:be:c2:82:e1:59:ee:87:bf:fe:9d:b5:d4:02:30:85: 98:8b:c3:d5:48:cc:1b:a2:04:11:45:2f:31:ed:74:ac:25:01: 76:82:76:56:9e:e5:88:70:20:fb:29:74:5d:12:12:eb:9f:a5: b6:f4:20:80:4e:69:2b:23:a1:91:e8:81:99:dd:21:e4:06:07: 51:a8:35:9f:1b:04:6e:ff:0f:61:37:6f:8b:96:27:54:83:92: 8a:b9:32:34:c4:1d:f3:62:10:cf:46:a8:8b:32:15:42:0a:29: e1:07:2e:fa:c8:8d:cb:e9:39:c5:9c:fd:41:62:ca:bf:91:20: 27:94:ed:90:37:f7:4c:bd:fd:46:54:71:8f:0d:af:ab:2b:cc: 7d:14:20:c6:1b:7f:28:c4:d3:78:55:00:69:12:11:9e:63:8b: cd:c4:42:5a:07:44:26:15:98:b7:91:58:3c:ef:83:63:66:f7: a9:78:68:91:f2:39:2a:22:25:9a:f5:fe:f4:dd:ab:31:4e:39: 09:44:73:1e:e7:ea:f9:28:5d:0f:53:51:4a:bc:dd:65:54:84: 58:8d:78:c0:24:cd:d0:c3:14:28:6f:d0:94:07:3c:54:54:cc: 0a:ac:91:0b:24:eb:1b:88:24:21:fc:0d:4e:31:87:5e:79:08: d2:fe:34:60 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIURN+Ex5sVtuv3mI+fgJkpMYpYsoowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAYTRiMjk0NjgxOWVlMjJlMDc3NWRh ZDM3OWMyMTY2MTExZGZhYzQxNDJkN2QyMTk4OTE0Y2E4MDU1OTUyZTVjMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuFzVq9LbOlOIQiqTPjuXXoxUZCN YqJgzBMjG2SwmVqhD8E8qkZnqLktrvkSmRy7ckB0vQZMGZtZY2vBLRwbRqASN4VY wUY5JWvMkYZ6ZuRAkbs1NBl9aVkAYnLtV2aFjZeB96R6RtoXj0Tl8fkpixruxe8+ ZLCgeow0BAEDrVYrPDoISNfoG7YntznNq0IFZDFI4PRID2+sdQ9kSahgbp/cUR8q DphnNbeUlnUr2pGsi2V1uDwPS0M9o/o3NGMzxrx2FaN0JPEI+tC8I7zjOsVV31fT SOczxnMlFc63tCG9wqHD6mJZGNfPZwHvp985Jj2aF2vmCaKrRUOqa/D1+QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJohWlUYEvO77olqy9yoI2ZijOGQMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzViYmJhMzVhLWViZGYtNDIwYy05ZmJlLTgzMWZlNDEyNDk4Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba+2BAMA0GCSqGSIb3DQEBCwUAA4IBAQCm35e+woLhWe6Hv/6d tdQCMIWYi8PVSMwbogQRRS8x7XSsJQF2gnZWnuWIcCD7KXRdEhLrn6W29CCATmkr I6GR6IGZ3SHkBgdRqDWfGwRu/w9hN2+LlidUg5KKuTI0xB3zYhDPRqiLMhVCCinh By76yI3L6TnFnP1BYsq/kSAnlO2QN/dMvf1GVHGPDa+rK8x9FCDGG38oxNN4VQBp EhGeY4vNxEJaB0QmFZi3kVg874NjZvepeGiR8jkqIiWa9f703asxTjkJRHMe5+r5 KF0PU1FKvN1lVIRYjXjAJM3QwxQob9CUBzxUVMwKrJELJOsbiCQh/A1OMYdeeQjS /jRg -----END CERTIFICATE-----Generated at Wed Feb 5 03:51:27 2025 by rpki-client