$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ac0c8cf4-caa0-4579-b051-75576113c6b6.roa File: ac0c8cf4-caa0-4579-b051-75576113c6b6.roa (raw, json) Hash identifier: 8DaahoVW4OM54IOLdxqFJQhJxL5nYOP1OnxPdT1N/hY= Subject key identifier: BE:73:22:DB:FC:FF:EF:10:C3:76:D5:F0:BF:79:91:CC:98:F8:06:DC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5165711131AA677B849EC4C3DB9CDE6DB4C87DEA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ac0c8cf4-caa0-4579-b051-75576113c6b6.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da36:a000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:65:71:11:31:aa:67:7b:84:9e:c4:c3:db:9c:de:6d:b4:c8:7d:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:fa:66:e0:62:a9:01:d2:02:0a:45:1a:3b:bd: 86:73:4b:67:3e:33:ce:bc:06:ba:74:d6:a2:1e:15: 6d:f2:31:5b:d4:34:0d:2d:df:56:62:25:89:0d:aa: da:1c:b1:f2:d6:36:2e:25:cc:b5:76:41:05:bf:fe: a9:9a:39:2b:a2:8a:7f:ee:dd:db:bb:1a:3a:96:b0: 5a:fb:bd:57:b0:a6:12:28:0d:ab:ac:40:2f:cd:24: a3:91:7e:3e:27:9c:8a:a5:6a:fc:4b:06:d9:50:f3: 56:b1:6f:34:44:7d:30:84:fe:93:b7:d7:e8:60:ee: 12:44:43:d1:df:6a:2a:e1:f5:44:3b:39:c2:7a:1e: 89:1f:e0:21:f5:aa:c8:c2:19:8d:22:15:d3:ac:af: 2c:ad:83:71:08:ce:0e:57:9c:77:94:4c:48:25:f6: 82:f3:95:4a:7a:ea:90:df:b0:39:15:a2:d7:1d:e6: 02:f1:e2:e1:b5:80:c9:5a:66:50:5e:3c:c3:ab:22: 80:a8:b8:ad:ac:5e:a5:e0:98:ca:10:12:a3:72:eb: b6:7e:a3:1d:5b:30:f4:ed:ed:e8:b3:15:80:ee:f1: 87:f0:23:b2:50:32:12:65:51:27:01:6e:4c:3e:fa: e3:3f:41:ae:71:f6:05:ae:a7:1b:5f:f9:e6:b6:ac: 4f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:73:22:DB:FC:FF:EF:10:C3:76:D5:F0:BF:79:91:CC:98:F8:06:DC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ac0c8cf4-caa0-4579-b051-75576113c6b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da36:a000::/40 Signature Algorithm: sha256WithRSAEncryption 8f:af:4c:18:e4:93:b7:fd:46:ea:a3:f9:96:8f:b2:6f:5b:3f: f0:b2:9a:a8:1c:53:a6:6b:7c:55:58:43:9c:07:e2:06:e2:1f: 29:23:17:12:b2:dc:17:ac:73:0d:bf:71:77:16:e7:b1:d5:70: 53:d2:8a:21:0a:43:50:1a:b0:f2:f9:d6:fc:55:39:1a:76:26: 2b:58:00:d6:f7:9c:84:96:94:6e:61:57:67:34:d6:ad:cb:02: e2:62:4b:62:ce:3a:4f:14:0e:93:8a:bf:ad:28:e6:7a:63:8a: df:cb:cf:13:78:b1:49:3b:2f:b0:39:f6:bd:70:8f:66:cc:af: d9:bf:68:bb:1c:c4:2e:16:8e:a4:85:c2:cf:05:6a:bb:e7:b0: e1:cc:4f:09:8f:79:44:36:d2:47:95:46:60:56:06:55:e1:73: 65:dc:28:70:5a:f7:86:93:a3:7a:6e:6a:6d:e8:4a:52:c1:9e: 3d:ed:61:cc:75:7c:b8:e3:a8:6c:47:e7:05:f7:c5:91:17:89: 8e:cd:ab:0b:bd:ef:30:b9:8b:fe:85:c9:e1:ce:fb:99:a8:dd: ad:21:e6:55:3e:6a:c1:92:bb:f9:f3:6f:49:63:18:03:d9:67: 30:0f:cd:89:02:84:04:f4:fa:30:91:22:66:0b:c8:09:f4:02: 0f:89:04:7d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUUWVxETGqZ3uEnsTD25zebbTIfeowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAYzdlMTViYzEyYTJiMzlmZjlkNWNj NWM3NWM0MDcyMjZmZDMzMWM0ZjMwNmZjNDdkYWYwMTVkMjExZmFhNDY0MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Ppm4GKpAdICCkUaO72Gc0tnPjPO vAa6dNaiHhVt8jFb1DQNLd9WYiWJDaraHLHy1jYuJcy1dkEFv/6pmjkroop/7t3b uxo6lrBa+71XsKYSKA2rrEAvzSSjkX4+J5yKpWr8SwbZUPNWsW80RH0whP6Tt9fo YO4SREPR32oq4fVEOznCeh6JH+Ah9arIwhmNIhXTrK8srYNxCM4OV5x3lExIJfaC 85VKeuqQ37A5FaLXHeYC8eLhtYDJWmZQXjzDqyKAqLitrF6l4JjKEBKjcuu2fqMd WzD07e3osxWA7vGH8COyUDISZVEnAW5MPvrjP0GucfYFrqcbX/nmtqxP5wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFL5zItv8/+8Qw3bV8L95kcyY+AbcMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FjMGM4Y2Y0LWNhYTAtNDU3OS1iMDUxLTc1NTc2MTEzYzZiNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaNqAwDQYJKoZIhvcNAQELBQADggEBAI+vTBjkk7f9Ruqj+ZaP sm9bP/CymqgcU6ZrfFVYQ5wH4gbiHykjFxKy3Bescw2/cXcW57HVcFPSiiEKQ1Aa sPL51vxVORp2JitYANb3nISWlG5hV2c01q3LAuJiS2LOOk8UDpOKv60o5npjit/L zxN4sUk7L7A59r1wj2bMr9m/aLscxC4WjqSFws8FarvnsOHMTwmPeUQ20keVRmBW BlXhc2XcKHBa94aTo3puam3oSlLBnj3tYcx1fLjjqGxH5wX3xZEXiY7Nqwu97zC5 i/6FyeHO+5mo3a0h5lU+asGSu/nzb0ljGAPZZzAPzYkChAT0+jCRImYLyAn0Ag+J BH0= -----END CERTIFICATE-----Generated at Wed Feb 5 03:54:42 2025 by rpki-client