$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8a70bac7-1fe2-4277-8de7-58400dca08bb.roa File: 8a70bac7-1fe2-4277-8de7-58400dca08bb.roa (raw, json) Hash identifier: 6BJpSRgeJha30IBnv+QY2Q6ulKydyKmsIbCFkBXPAjE= Subject key identifier: 93:C4:C0:86:45:22:57:E2:44:4E:75:05:C3:DD:BB:E8:50:22:61:C9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 248A9CC4D7ED4F98235F04F2D5CD45EDA6C86C28 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8a70bac7-1fe2-4277-8de7-58400dca08bb.roa Signing time: Sat 01 Feb 2025 00:00:00 +0000 ROA not before: Sat 01 Feb 2025 00:00:00 +0000 ROA not after: Sat 08 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:b0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:8a:9c:c4:d7:ed:4f:98:23:5f:04:f2:d5:cd:45:ed:a6:c8:6c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 1 00:00:00 2025 GMT Not After : Mar 8 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2d:1e:6d:17:cd:8a:f5:97:30:76:14:4b:a3: a4:17:22:e0:c7:d1:4d:d2:4c:ea:7f:62:9a:b0:f5: cc:3d:d6:19:9b:6a:81:38:64:1a:b9:3c:1c:ad:ca: ca:e4:4a:6a:4a:93:91:79:af:ea:81:d2:52:8e:44: aa:ed:ae:3a:9a:2d:aa:23:75:95:41:35:9c:4e:fc: 25:75:46:96:c7:5e:4f:cb:5f:8a:9b:92:23:b2:cd: f5:f1:d9:c6:98:af:17:81:1b:55:c8:ca:fd:25:55: 51:71:4c:ef:84:b9:c5:6f:d9:f7:45:01:d9:da:2e: b1:97:5c:b1:3d:21:b5:49:fc:89:6b:54:f3:4d:7f: fb:f6:e2:7d:59:c6:bb:14:cc:58:9c:76:97:dc:0b: f7:29:72:48:8b:7a:70:e4:0f:76:57:0d:65:0e:7e: da:db:27:cc:f3:8a:e6:c0:e0:43:e5:ad:aa:29:06: c1:47:a5:2e:e0:81:3d:67:00:7a:47:dd:e5:02:a4: f5:8e:73:fa:e7:bd:30:5c:f0:91:40:90:da:ee:44: 5d:9a:0d:95:a9:b6:3b:4c:c5:07:34:22:86:17:6d: f4:97:4e:b5:c0:f6:9d:4d:14:18:48:45:6e:2a:c3: 15:19:e6:f0:69:63:8e:ee:06:67:18:a8:d5:42:04: 00:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C4:C0:86:45:22:57:E2:44:4E:75:05:C3:DD:BB:E8:50:22:61:C9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8a70bac7-1fe2-4277-8de7-58400dca08bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:b0c0::/48 Signature Algorithm: sha256WithRSAEncryption 12:93:7e:fb:ca:ff:13:6e:a8:b6:66:c2:75:04:40:05:0c:dc: 6e:96:50:aa:0b:b3:98:b6:e9:ad:f3:37:96:58:82:40:a1:7c: 5c:83:89:87:f6:4d:66:32:33:9b:0e:77:24:f9:06:8c:6f:75: e2:7f:be:5d:24:fc:77:ef:7f:78:10:c8:b2:83:99:2d:ff:78: 7b:8d:31:fe:75:e4:32:f0:9e:ff:74:db:33:a5:b3:ef:aa:14: ca:cf:d5:ad:70:bb:49:90:4e:f2:70:19:b4:32:57:09:b5:24: c0:5e:5f:e5:b9:1e:97:33:ca:e3:7c:d2:ee:0a:1c:bf:9e:a9: e4:76:ec:b0:90:59:2c:e9:5c:fc:c3:73:99:16:f1:0c:e8:11: cc:8c:de:c7:ea:39:1a:ed:0a:2e:20:a5:54:16:72:47:43:63: 7d:eb:63:12:ba:3f:54:c3:52:58:db:b3:03:43:e0:94:c4:5e: a1:2d:85:fb:b9:eb:cc:85:5e:c7:dd:30:64:33:a0:c5:9d:42: 3e:ec:56:53:ab:2f:94:84:4f:13:f0:63:01:26:b4:63:13:ea: fd:9d:67:cd:fd:bf:25:da:24:32:eb:54:a0:be:1a:a3:51:a5: d3:e0:b2:15:14:68:3f:8d:ae:54:1b:e7:8d:0c:62:5f:80:c2: f2:7b:92:1f -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUJIqcxNftT5gjXwTy1c1F7abIbCgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMTAwMDAwMFoX DTI1MDMwODIzNTk1OVowejFJMEcGA1UEBRNAMzAzNDFiM2YyM2Q3MjU4NzQ4MWVj YjRmN2IyYjhlZTcxZTkwYWJhODg1N2M3ODdmMDEzN2UzNzAxOGM4NDQ2YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1S0ebRfNivWXMHYUS6OkFyLgx9FN 0kzqf2KasPXMPdYZm2qBOGQauTwcrcrK5EpqSpORea/qgdJSjkSq7a46mi2qI3WV QTWcTvwldUaWx15Py1+Km5Ijss318dnGmK8XgRtVyMr9JVVRcUzvhLnFb9n3RQHZ 2i6xl1yxPSG1SfyJa1TzTX/79uJ9Wca7FMxYnHaX3Av3KXJIi3pw5A92Vw1lDn7a 2yfM84rmwOBD5a2qKQbBR6Uu4IE9ZwB6R93lAqT1jnP6570wXPCRQJDa7kRdmg2V qbY7TMUHNCKGF230l061wPadTRQYSEVuKsMVGebwaWOO7gZnGKjVQgQAFwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJPEwIZFIlfiRE51BcPdu+hQImHJMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhhNzBiYWM3LTFmZTItNDI3Ny04ZGU3LTU4NDAwZGNhMDhiYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba9LDAMA0GCSqGSIb3DQEBCwUAA4IBAQASk377yv8Tbqi2ZsJ1 BEAFDNxullCqC7OYtumt8zeWWIJAoXxcg4mH9k1mMjObDnck+QaMb3Xif75dJPx3 7394EMiyg5kt/3h7jTH+deQy8J7/dNszpbPvqhTKz9WtcLtJkE7ycBm0MlcJtSTA Xl/luR6XM8rjfNLuChy/nqnkduywkFks6Vz8w3OZFvEM6BHMjN7H6jka7QouIKVU FnJHQ2N962MSuj9Uw1JY27MDQ+CUxF6hLYX7uevMhV7H3TBkM6DFnUI+7FZTqy+U hE8T8GMBJrRjE+r9nWfN/b8l2iQy61SgvhqjUaXT4LIVFGg/ja5UG+eNDGJfgMLy e5If -----END CERTIFICATE-----Generated at Wed Feb 5 04:09:56 2025 by rpki-client