$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5c3824f8-42e9-4418-8966-1b2766cf39bd.roa File: 5c3824f8-42e9-4418-8966-1b2766cf39bd.roa (raw, json) Hash identifier: 3mgkZct2mvE/3tGxp0yJLDJqXhogwkIdbBkYeqgt/IM= Subject key identifier: A2:42:ED:36:2F:04:02:2D:99:9C:9E:16:78:84:0F:78:AF:71:8D:BA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5FC3A1279FAE9B7C24DD6EA1A96D2904E5DF365B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5c3824f8-42e9-4418-8966-1b2766cf39bd.roa Signing time: Fri 28 Feb 2025 18:51:11 +0000 ROA not before: Fri 28 Feb 2025 18:51:11 +0000 ROA not after: Fri 04 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf1:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 17 Mar 2025 16:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:c3:a1:27:9f:ae:9b:7c:24:dd:6e:a1:a9:6d:29:04:e5:df:36:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 28 18:51:11 2025 GMT Not After : Apr 4 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9b:40:08:d9:4d:06:61:26:36:52:08:7f:df: 28:bc:9b:fb:65:ae:a1:d1:39:9b:f0:79:10:a5:f6: 95:b5:83:3b:3d:7e:5f:5e:88:21:fc:9b:2d:2c:fd: 41:9d:00:d0:9c:3b:d1:4d:54:42:31:e1:1b:8f:09: c2:c6:22:1c:dc:6f:b8:94:0b:30:d5:9e:27:e0:6a: 48:c0:21:96:65:61:89:87:15:38:e9:83:75:c9:a9: 26:63:8a:dc:27:f3:4c:7c:37:5b:05:74:45:3d:d7: 42:56:25:87:d2:b5:ff:1e:ce:d5:42:c2:b6:9e:1e: 8f:5d:71:64:8b:d8:94:49:ab:0a:82:7e:2e:47:2a: 0e:c5:be:43:3e:d9:72:96:09:e1:13:2d:c3:82:d9: 4f:d0:f2:c4:79:8d:f4:80:4e:26:86:d2:a1:06:96: 28:94:9a:86:5e:eb:ef:6d:5b:80:16:6c:dc:7b:d1: ba:83:ba:1c:70:09:16:13:25:93:f1:d3:84:f8:92: 87:97:6f:7d:ff:a6:af:ee:5e:31:03:59:f8:14:ae: 0d:7b:0c:e1:87:ff:f1:fd:2f:00:8f:e1:3f:1f:31: ed:8b:a8:b7:59:e1:17:08:96:83:2f:de:7e:20:de: 96:7b:1b:37:ce:60:52:23:54:48:ea:fc:e7:4d:bd: d1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:42:ED:36:2F:04:02:2D:99:9C:9E:16:78:84:0F:78:AF:71:8D:BA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5c3824f8-42e9-4418-8966-1b2766cf39bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf1:7000::/40 Signature Algorithm: sha256WithRSAEncryption 35:d4:3e:2b:b1:40:e4:1b:12:2a:e2:2a:aa:c2:2f:70:09:f3: e0:ba:d2:56:23:e4:55:54:5c:d6:17:f2:31:73:fa:82:25:23: a2:5b:c2:a5:24:83:e6:5c:89:fb:7d:fc:49:7f:14:92:10:a3: 73:4d:58:b2:aa:83:58:d8:66:1d:92:8a:97:06:0c:4d:cf:60: ea:a7:c4:fe:3f:05:e2:fa:8d:09:72:f3:de:ae:4f:41:11:60: 9a:91:0c:b7:a6:b7:c8:49:cb:e2:c0:a7:37:a5:e8:42:ad:61: b6:18:87:ff:fd:ad:c8:32:69:98:2e:fa:cc:79:bc:29:48:86: 03:99:16:cd:e5:51:8d:82:0e:21:2b:4d:41:11:86:40:72:8d: d2:e6:dd:73:49:1d:11:28:e3:e3:7c:d7:4b:45:fd:c7:ab:0c: f9:73:d4:93:f4:e1:35:f3:e7:96:1f:71:96:06:cf:ec:5a:97: 2e:20:e0:95:73:4d:b4:cc:91:32:0d:01:ff:3f:cd:4e:4b:8b: ee:38:d8:8f:25:31:31:ef:36:39:40:3e:b0:18:10:7d:6c:3a: 54:e2:f0:1e:13:1b:12:e2:af:06:46:2e:39:b7:e9:09:26:11: 1a:ed:81:3c:1a:27:cd:dd:cc:02:f8:f8:8e:2e:60:3d:8a:62: e1:6f:b9:f4 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUX8OhJ5+um3wk3W6hqW0pBOXfNlswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIyODE4NTExMVoX DTI1MDQwNDIzNTk1OVowejFJMEcGA1UEBRNAMzY5YjEwMjJiMDdkZjYzYWZjMzdj YTJlOWYyMjBkYTIzZDE0MGVjOTZkMmQyYmVmZTJlYzY2ZTllNjc5NjMyMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZtACNlNBmEmNlIIf98ovJv7Za6h 0Tmb8HkQpfaVtYM7PX5fXogh/JstLP1BnQDQnDvRTVRCMeEbjwnCxiIc3G+4lAsw 1Z4n4GpIwCGWZWGJhxU46YN1yakmY4rcJ/NMfDdbBXRFPddCViWH0rX/Hs7VQsK2 nh6PXXFki9iUSasKgn4uRyoOxb5DPtlylgnhEy3DgtlP0PLEeY30gE4mhtKhBpYo lJqGXuvvbVuAFmzce9G6g7occAkWEyWT8dOE+JKHl299/6av7l4xA1n4FK4Newzh h//x/S8Aj+E/HzHti6i3WeEXCJaDL95+IN6Wexs3zmBSI1RI6vznTb3RUQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKJC7TYvBAItmZyeFniED3ivcY26MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVjMzgyNGY4LTQyZTktNDQxOC04OTY2LTFiMjc2NmNmMzliZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8XAwDQYJKoZIhvcNAQELBQADggEBADXUPiuxQOQbEiriKqrC L3AJ8+C60lYj5FVUXNYX8jFz+oIlI6JbwqUkg+Zcift9/El/FJIQo3NNWLKqg1jY Zh2SipcGDE3PYOqnxP4/BeL6jQly896uT0ERYJqRDLemt8hJy+LApzel6EKtYbYY h//9rcgyaZgu+sx5vClIhgOZFs3lUY2CDiErTUERhkByjdLm3XNJHREo4+N810tF /cerDPlz1JP04TXz55YfcZYGz+xaly4g4JVzTbTMkTINAf8/zU5Li+442I8lMTHv NjlAPrAYEH1sOlTi8B4TGxLirwZGLjm36QkmERrtgTwaJ83dzAL4+I4uYD2KYuFv ufQ= -----END CERTIFICATE-----Generated at Thu Mar 13 23:39:54 2025 by rpki-client