$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/98286ddc-f06b-49d3-856d-cb91877b813e.roa File: 98286ddc-f06b-49d3-856d-cb91877b813e.roa (raw, json) Hash identifier: 60us9g+f22Ew2YTLkXINLq8UfTi0ORI0NuafjcuKYx8= Subject key identifier: 3E:CC:B4:9F:17:DE:56:ED:C4:F5:66:B3:83:A0:ED:06:8F:61:C0:74 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 598CE468D954BA3CDF38A451DEBB812D7E519C48 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/98286ddc-f06b-49d3-856d-cb91877b813e.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:a080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:8c:e4:68:d9:54:ba:3c:df:38:a4:51:de:bb:81:2d:7e:51:9c:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:82:16:3d:a8:27:5b:17:8b:69:b6:dd:8c:90: 9f:38:b8:e8:ba:6d:7e:37:9d:90:86:11:3c:9b:4d: c9:1c:eb:2d:68:35:b3:58:03:bf:23:c4:d8:7e:46: 96:65:68:0a:96:4a:cf:ee:f9:45:2a:41:e0:c1:3a: 86:f8:92:a5:3a:74:55:b5:df:f2:f1:35:03:e1:5b: ab:74:dc:43:5a:e6:5f:1b:2c:dc:4c:d4:cb:42:d4: 6e:28:85:f8:df:3c:9a:60:a6:06:62:69:75:28:d2: 58:a0:a9:3e:fc:b3:76:83:f0:83:da:0c:ad:bb:a2: 19:65:a9:25:26:e5:24:55:66:09:19:03:c8:9e:b3: ce:08:6d:74:9f:c8:d1:77:6f:83:e1:51:be:0b:8a: 2b:b4:c0:32:eb:d6:eb:ad:50:9d:c7:df:c9:9e:d6: d6:06:18:8c:41:cf:84:ab:eb:13:2d:f3:47:61:ea: f4:3c:bd:83:e6:d3:f7:bb:0d:45:6b:1d:db:06:e7: 73:a0:04:2e:72:e1:85:b1:c0:77:8d:1e:4a:47:b1: f5:a3:f0:4a:78:8d:9b:95:f0:1f:69:f2:0a:77:21: 6a:e3:38:ab:58:98:79:85:11:85:3c:e9:13:45:d8: 79:60:ca:66:ab:b7:6e:ae:77:6c:df:f9:55:9e:ea: 64:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CC:B4:9F:17:DE:56:ED:C4:F5:66:B3:83:A0:ED:06:8F:61:C0:74 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/98286ddc-f06b-49d3-856d-cb91877b813e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:a080::/48 Signature Algorithm: sha256WithRSAEncryption 60:67:bf:aa:34:96:72:e0:83:5d:d3:49:f4:76:0f:01:81:a3: 78:b9:57:8d:b5:3c:b5:3c:dc:b9:7e:8a:48:ad:04:02:72:d9: c5:b3:10:65:c1:f9:aa:b0:1b:84:47:cc:08:29:52:ea:c4:58: 02:c6:a5:f7:96:20:9a:5d:e9:a5:c3:0c:16:aa:1a:7c:1e:db: 3a:36:a6:ce:38:f0:cb:60:b2:db:2d:fc:10:4e:77:74:cd:2c: 82:86:bc:38:d2:e3:60:10:02:ae:d2:36:3b:f7:28:32:4a:7a: c0:79:a1:ae:cc:0c:da:94:db:2f:11:16:24:6c:95:2f:32:b1: a8:d6:2e:11:3b:07:11:ff:93:c0:72:b5:88:b2:05:19:9f:80: 72:b4:54:ec:05:36:b9:1b:d6:8c:db:bc:28:7d:0f:39:2f:3a: 40:58:b2:f0:b6:9d:a5:34:ff:82:ec:56:55:e0:ab:27:32:81: 58:53:04:9e:f7:f9:9c:38:47:a4:8f:c5:6d:f7:ab:d5:46:a1: f7:cc:ce:6b:db:61:46:e4:ed:0d:2a:9d:54:03:88:15:0f:7e: df:4e:01:78:e9:e1:88:be:54:8d:9f:28:91:58:23:3f:c7:62: 04:7f:38:81:c6:11:3d:d5:d1:48:ea:a3:3d:46:ef:1b:02:68: e3:21:63:53 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUWYzkaNlUujzfOKRR3ruBLX5RnEgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNANTNkMTZkNTgxZjliMzg1ZWI4Yjc3 YjAxYzQ2MzBmYzhjMTlhNzcyNWI1M2IxM2VkNmU1ODVmMTgwYjQyZGJiZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIIWPagnWxeLabbdjJCfOLjoum1+ N52QhhE8m03JHOstaDWzWAO/I8TYfkaWZWgKlkrP7vlFKkHgwTqG+JKlOnRVtd/y 8TUD4VurdNxDWuZfGyzcTNTLQtRuKIX43zyaYKYGYml1KNJYoKk+/LN2g/CD2gyt u6IZZaklJuUkVWYJGQPInrPOCG10n8jRd2+D4VG+C4ortMAy69brrVCdx9/JntbW BhiMQc+Eq+sTLfNHYer0PL2D5tP3uw1Fax3bBudzoAQucuGFscB3jR5KR7H1o/BK eI2blfAfafIKdyFq4zirWJh5hRGFPOkTRdh5YMpmq7durnds3/lVnupkNQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFD7MtJ8X3lbtxPVms4Og7QaPYcB0MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk4Mjg2ZGRjLWYwNmItNDlkMy04NTZkLWNiOTE4NzdiODEzZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba9KCAMA0GCSqGSIb3DQEBCwUAA4IBAQBgZ7+qNJZy4INd00n0 dg8BgaN4uVeNtTy1PNy5fopIrQQCctnFsxBlwfmqsBuER8wIKVLqxFgCxqX3liCa XemlwwwWqhp8Hts6NqbOOPDLYLLbLfwQTnd0zSyChrw40uNgEAKu0jY79ygySnrA eaGuzAzalNsvERYkbJUvMrGo1i4ROwcR/5PAcrWIsgUZn4BytFTsBTa5G9aM27wo fQ85LzpAWLLwtp2lNP+C7FZV4KsnMoFYUwSe9/mcOEekj8Vt96vVRqH3zM5r22FG 5O0NKp1UA4gVD37fTgF46eGIvlSNnyiRWCM/x2IEfziBxhE91dFI6qM9Ru8bAmjj IWNT -----END CERTIFICATE-----Generated at Wed Feb 5 04:08:46 2025 by rpki-client