$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/adeabc19-780e-43ac-afd2-4be579d3530a.roa File: adeabc19-780e-43ac-afd2-4be579d3530a.roa (raw, json) Hash identifier: ecCfPtvZlS4JlvVJsYDqEaPR3Vrv7EGaVjIsBUTpD7s= Subject key identifier: 87:CA:2F:A1:36:A3:23:6C:3F:27:BC:A0:6A:96:D1:B3:A9:EC:3A:BF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0D3515B23FD9045124F0284D3BBCC37681B6E69C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/adeabc19-780e-43ac-afd2-4be579d3530a.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da10:8400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:35:15:b2:3f:d9:04:51:24:f0:28:4d:3b:bc:c3:76:81:b6:e6:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a7:b6:00:ff:50:22:04:e6:29:59:09:b9:e0: cb:17:21:da:5d:1d:00:c6:e2:81:5b:48:92:bc:52: 78:56:b7:6a:1e:10:e6:67:62:20:cc:7b:78:e2:34: de:7d:08:69:21:2d:13:f6:8d:f9:51:c0:c8:37:54: 75:26:8d:c9:6f:03:8c:42:d7:85:60:b6:00:fc:4c: 18:b7:5c:c4:41:8c:ab:ef:84:d5:a7:c9:78:82:96: a9:75:5e:7a:05:92:0a:15:73:e6:3b:06:f7:3e:72: 5a:d3:6a:f2:72:4f:d5:12:51:aa:a7:44:2a:3f:95: 44:a9:4b:ec:38:3a:3b:46:6d:a4:c4:59:7d:07:5f: 2d:8d:7a:71:8c:dc:24:76:ee:bd:e6:85:6f:4b:b2: 75:86:ad:9f:6d:a2:1a:91:62:4c:de:ed:e9:37:ab: ac:cb:10:02:de:04:b9:79:fe:37:b8:00:82:2a:a7: 19:e3:68:f6:40:8d:6e:cb:aa:f7:6d:b1:6d:25:24: b6:34:1f:4e:58:df:7b:7a:70:c1:de:f8:6a:e0:44: 15:82:fd:aa:e3:b8:ec:f7:ba:54:17:78:68:ec:28: 13:8e:10:e9:29:e4:c9:85:a2:bf:a6:a8:1e:44:41: e2:17:61:4f:90:33:03:17:81:8c:d6:ef:a4:e7:1c: cf:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CA:2F:A1:36:A3:23:6C:3F:27:BC:A0:6A:96:D1:B3:A9:EC:3A:BF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/adeabc19-780e-43ac-afd2-4be579d3530a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da10:8400::/38 Signature Algorithm: sha256WithRSAEncryption 43:90:91:b9:38:8b:68:b4:25:b5:2d:aa:07:e7:d5:3f:e0:fb: 20:d2:7d:1e:43:16:10:6b:e5:ce:6f:30:cc:f0:d1:82:4a:ec: b2:02:5d:13:37:48:d1:0e:80:f0:7b:dd:7f:bf:0c:2f:c0:79: fb:b4:fb:8a:69:d1:b6:dd:16:a7:1a:cd:42:c9:1a:cd:c2:28: fb:3e:88:1d:2e:f4:6e:19:17:bb:f3:f7:5d:d4:22:9f:a8:e3: 42:27:ec:5d:c2:df:d9:cf:49:32:20:1c:a9:82:3b:d7:c8:e0: dd:29:57:ea:05:3e:1b:db:14:88:53:21:34:fd:61:d6:49:be: a3:ea:80:bc:d1:d5:5e:0f:70:5b:47:78:da:a3:9e:b9:2f:a2: 30:4e:cf:d7:8e:c3:19:df:59:bd:3a:1e:18:e7:79:6d:ee:9b: 5e:d7:33:e0:67:e6:5d:ba:73:66:65:57:ab:3c:8c:e3:24:0b: 1d:a8:0e:0d:6c:31:86:2a:2d:10:d6:c2:b7:3b:92:be:7f:6c: ee:86:5b:37:56:46:28:9e:ad:01:d5:86:d7:41:ba:1d:54:dd: 81:02:ae:5c:2a:f2:a8:16:b9:61:60:df:7f:b5:c7:fd:11:1b: a8:5f:1a:c8:00:ad:76:e9:45:1c:25:e5:90:36:80:7f:17:d9: 1b:00:9c:4c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUDTUVsj/ZBFEk8ChNO7zDdoG25pwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAMDEzNTdlNDU1ZjFmYTExOTg3ZWNm YTE0Nzc4NDI5MzVjNTZiZTg1N2ZhMzYyZmU4MzU4NGUzMWJjYWM4YzYzZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKe2AP9QIgTmKVkJueDLFyHaXR0A xuKBW0iSvFJ4VrdqHhDmZ2IgzHt44jTefQhpIS0T9o35UcDIN1R1Jo3JbwOMQteF YLYA/EwYt1zEQYyr74TVp8l4gpapdV56BZIKFXPmOwb3PnJa02ryck/VElGqp0Qq P5VEqUvsODo7Rm2kxFl9B18tjXpxjNwkdu695oVvS7J1hq2fbaIakWJM3u3pN6us yxAC3gS5ef43uACCKqcZ42j2QI1uy6r3bbFtJSS2NB9OWN97enDB3vhq4EQVgv2q 47js97pUF3ho7CgTjhDpKeTJhaK/pqgeREHiF2FPkDMDF4GM1u+k5xzPZwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIfKL6E2oyNsPye8oGqW0bOp7Dq/MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FkZWFiYzE5LTc4MGUtNDNhYy1hZmQyLTRiZTU3OWQzNTMwYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaEIQwDQYJKoZIhvcNAQELBQADggEBAEOQkbk4i2i0JbUtqgfn 1T/g+yDSfR5DFhBr5c5vMMzw0YJK7LICXRM3SNEOgPB73X+/DC/Aefu0+4pp0bbd FqcazULJGs3CKPs+iB0u9G4ZF7vz913UIp+o40In7F3C39nPSTIgHKmCO9fI4N0p V+oFPhvbFIhTITT9YdZJvqPqgLzR1V4PcFtHeNqjnrkvojBOz9eOwxnfWb06Hhjn eW3um17XM+Bn5l26c2ZlV6s8jOMkCx2oDg1sMYYqLRDWwrc7kr5/bO6GWzdWRiie rQHVhtdBuh1U3YECrlwq8qgWuWFg33+1x/0RG6hfGsgArXbpRRwl5ZA2gH8X2RsA nEw= -----END CERTIFICATE-----Generated at Wed Feb 5 03:49:32 2025 by rpki-client