$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/85e8dd5d-d1d3-457f-b7e2-bddbb26d55f1.roa File: 85e8dd5d-d1d3-457f-b7e2-bddbb26d55f1.roa (raw, json) Hash identifier: t2DotKD1J76EYK03QlX5xcG29sr5vP5T4qwwGSazrqU= Subject key identifier: A0:9B:FA:97:86:AF:29:3E:EE:08:A6:BC:09:E8:4C:76:E2:C5:6E:96 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5CA5AB4F8C5DEB60CD5E6560B93F71C911B45BB1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/85e8dd5d-d1d3-457f-b7e2-bddbb26d55f1.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:f000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:a5:ab:4f:8c:5d:eb:60:cd:5e:65:60:b9:3f:71:c9:11:b4:5b:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0c:23:b4:35:95:77:84:c0:a9:89:12:dd:d7: 39:48:23:8d:56:2f:2a:56:43:82:db:c7:be:74:75: 78:e8:80:7c:35:09:c6:e8:76:04:0d:e8:b9:a7:55: 0c:7b:35:54:5a:8b:c1:df:f8:be:e7:66:05:3e:4d: ed:4b:b4:90:da:b6:ed:f2:9a:db:50:00:78:4b:f6: 39:29:9c:06:23:32:ba:2f:bf:22:cf:74:53:80:ab: 0b:38:12:37:a2:23:a9:73:f8:98:d6:3c:24:a7:1d: 3d:c1:5c:85:be:d8:da:33:21:e1:48:f9:6a:1e:b2: 6a:fe:a3:cf:ee:a2:a8:e4:3b:66:5d:a5:e6:93:46: 9e:f2:dd:df:cb:f6:1d:f9:d1:de:c7:08:06:ef:5e: 39:25:31:c0:13:87:e0:d1:bb:14:37:6a:ec:9b:85: f9:e0:cb:d6:13:20:e8:27:c0:fc:61:46:51:3a:49: 66:47:03:99:a0:f1:60:df:3f:63:01:e2:d1:ba:95: 70:a3:b3:65:94:c0:07:ab:b7:54:18:64:6b:d2:7e: 80:7c:da:4b:b7:80:23:1e:ae:2c:43:ce:c8:5e:6d: 88:57:04:fd:1d:ec:8f:b9:ea:46:20:89:a6:48:07: d3:bf:57:c9:72:0a:51:9d:ae:7e:8c:58:c7:bc:7f: 0d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:9B:FA:97:86:AF:29:3E:EE:08:A6:BC:09:E8:4C:76:E2:C5:6E:96 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/85e8dd5d-d1d3-457f-b7e2-bddbb26d55f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:f000::/40 Signature Algorithm: sha256WithRSAEncryption 7a:80:38:6a:69:d3:77:85:93:b9:20:5c:89:5d:7a:74:2c:1d: f6:6d:8a:91:87:6a:1b:2e:72:d2:f5:8a:72:73:27:cd:0b:2c: 26:59:97:34:bc:63:68:23:6f:c9:48:6e:fe:1b:c8:9c:a0:6c: 77:fa:4e:a3:98:cf:d6:77:47:53:ea:b2:48:1a:90:65:85:b7: 9a:e4:87:16:98:f2:4f:7d:98:24:c8:2b:65:85:30:7b:b9:14: 86:84:53:1b:ab:e6:ab:18:59:ee:a5:aa:81:72:5e:e1:49:9f: a5:3e:11:02:e1:8b:52:3a:9d:67:90:10:45:f0:31:61:34:c8: 0f:e7:2e:41:c4:da:3d:19:31:63:b4:a8:5d:4d:cb:55:d2:cc: 8f:ce:90:99:28:ce:ca:59:92:f9:07:90:0c:28:49:a8:78:98: 9f:00:37:d0:ac:16:a6:c4:21:af:a2:52:63:5f:30:ef:42:4d: 5e:f9:e2:b3:b5:0b:e8:1b:37:c7:55:34:6e:9e:f2:0c:bd:d4: 4a:e6:1a:b3:7e:ae:49:30:0a:71:13:04:9f:70:b3:5c:2b:85: 75:b8:91:97:6b:0f:6e:f0:05:86:e1:4f:87:68:39:5b:d9:d0: 63:0a:d5:52:c5:64:a8:c1:9c:53:af:93:e8:15:a9:97:30:c1: 7e:39:d8:23 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUXKWrT4xd62DNXmVguT9xyRG0W7EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAY2RmMDNmMTkxZDA3ZDFjNThkNTIz ZjhmNjgwNzYxYTM3ZTYyNzg1MzE2MTc0ZTdjZTE5OWEzNDhhNzZlZmVmOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wwjtDWVd4TAqYkS3dc5SCONVi8q VkOC28e+dHV46IB8NQnG6HYEDei5p1UMezVUWovB3/i+52YFPk3tS7SQ2rbt8prb UAB4S/Y5KZwGIzK6L78iz3RTgKsLOBI3oiOpc/iY1jwkpx09wVyFvtjaMyHhSPlq HrJq/qPP7qKo5DtmXaXmk0ae8t3fy/Yd+dHexwgG7145JTHAE4fg0bsUN2rsm4X5 4MvWEyDoJ8D8YUZROklmRwOZoPFg3z9jAeLRupVwo7NllMAHq7dUGGRr0n6AfNpL t4AjHq4sQ87IXm2IVwT9HeyPuepGIImmSAfTv1fJcgpRna5+jFjHvH8N6QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKCb+peGryk+7gimvAnoTHbixW6WMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg1ZThkZDVkLWQxZDMtNDU3Zi1iN2UyLWJkZGJiMjZkNTVmMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaafAwDQYJKoZIhvcNAQELBQADggEBAHqAOGpp03eFk7kgXIld enQsHfZtipGHahsuctL1inJzJ80LLCZZlzS8Y2gjb8lIbv4byJygbHf6TqOYz9Z3 R1PqskgakGWFt5rkhxaY8k99mCTIK2WFMHu5FIaEUxur5qsYWe6lqoFyXuFJn6U+ EQLhi1I6nWeQEEXwMWE0yA/nLkHE2j0ZMWO0qF1Ny1XSzI/OkJkozspZkvkHkAwo Sah4mJ8AN9CsFqbEIa+iUmNfMO9CTV754rO1C+gbN8dVNG6e8gy91ErmGrN+rkkw CnETBJ9ws1wrhXW4kZdrD27wBYbhT4doOVvZ0GMK1VLFZKjBnFOvk+gVqZcwwX45 2CM= -----END CERTIFICATE-----Generated at Wed Feb 5 03:50:36 2025 by rpki-client