$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b5e49098-482a-409f-86fa-7f86369cecc8.roa File: b5e49098-482a-409f-86fa-7f86369cecc8.roa (raw, json) Hash identifier: Nr4Nk2wb5Kd+C+ij7EZB8JGBLloWZwHZpRr3FCCH/Hk= Subject key identifier: A1:35:A6:EB:F1:9E:44:73:9B:82:86:2F:FB:1F:E2:DF:77:1E:D4:11 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4CCBBE2D52479102C85BD610024462D961110222 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b5e49098-482a-409f-86fa-7f86369cecc8.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:2840::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:cb:be:2d:52:47:91:02:c8:5b:d6:10:02:44:62:d9:61:11:02:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:81:b7:a4:45:65:98:e0:18:5a:1e:ec:c6:a7: cc:21:05:7b:57:1a:e1:48:f8:2c:f2:98:98:aa:b4: d1:2f:c0:ee:5b:f7:4b:d7:45:45:12:e6:00:90:49: 8b:a4:47:ac:dc:ea:d7:66:28:9e:61:0f:db:6f:3f: 27:32:f3:2b:71:9f:7d:a2:13:74:81:15:c5:09:5d: 28:07:5e:a2:b3:9b:0c:e5:63:ac:d3:f7:4e:30:30: 2d:7f:60:77:9a:ae:00:5c:c0:21:18:a1:eb:00:ac: d8:07:b9:95:4a:2e:fa:26:d5:e3:dc:5a:04:e3:77: 57:9e:55:c3:0b:6e:3e:65:2d:33:6d:34:e0:ad:c2: 67:bb:5b:69:bf:8d:be:a7:5e:26:c2:45:58:73:50: 8e:68:52:a4:47:ed:e9:cb:25:1b:7a:86:e3:30:9f: 2a:39:02:1d:38:e8:a9:89:2d:ec:26:23:76:5b:fd: 9a:7b:34:56:bc:43:ff:52:9c:40:5d:4c:ec:bf:af: 17:84:a0:aa:11:8a:26:81:a2:bf:2d:64:95:81:c4: 63:a5:a9:5d:63:1f:36:47:f7:71:46:0f:2e:96:cd: e9:20:fa:6c:d3:ab:2e:1b:53:6a:15:e9:bf:bf:df: f1:28:ab:d0:2a:ae:e4:e2:d5:85:42:ad:ad:42:3b: dc:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:35:A6:EB:F1:9E:44:73:9B:82:86:2F:FB:1F:E2:DF:77:1E:D4:11 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b5e49098-482a-409f-86fa-7f86369cecc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:2840::/46 Signature Algorithm: sha256WithRSAEncryption 40:7b:5d:05:dd:22:13:1d:89:7d:71:f2:1b:97:f3:98:47:7d: a3:72:04:5e:40:85:fe:a5:8c:ac:c0:6f:9a:81:12:74:b4:cf: 93:8b:79:36:b3:06:16:48:62:7f:aa:d8:b6:cb:ce:8f:90:26: a6:50:da:39:e3:65:1b:70:f5:97:ea:b0:14:47:ff:25:d1:6d: bf:99:01:c3:1f:d0:30:07:e6:fb:50:d4:08:12:56:c7:d6:61: 83:e0:83:23:59:0e:c6:ee:3e:f9:00:17:1e:0c:5a:a5:39:b2: 6d:85:e4:62:db:3c:9e:9f:4b:72:1c:00:a6:d0:65:75:b6:db: 48:1f:21:da:29:2b:75:ee:cc:4d:1b:1e:10:b3:81:dc:e7:e9: 78:f6:2c:54:46:2a:58:aa:2e:b7:a4:27:c5:ea:dc:0a:09:bd: 0f:2e:50:92:fe:9f:5c:b8:7c:19:8a:50:8d:9e:27:77:f9:c9: 8e:0c:cc:b7:17:d1:5e:15:98:99:ca:81:e5:5e:f7:ea:ca:51: 40:d5:4a:d7:0e:83:a1:a2:74:f3:b1:f5:44:94:39:71:a2:7d: 88:d3:08:f0:2e:74:00:c4:bf:92:e2:4d:9e:e0:3a:a5:3d:15: 02:fc:1d:97:f0:61:97:2c:97:47:e1:a5:c8:50:84:27:c6:43: 7e:da:13:a3 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUTMu+LVJHkQLIW9YQAkRi2WERAiIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAYzM3MTQ2ODcyMjJlMzJlMzNlYWU3 ZjE3YjY4MTBmYzEwZWYyYjA4NTVkNDAxYmNmMDQ3OGJjMDZkN2M1ZWE2OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4G3pEVlmOAYWh7sxqfMIQV7Vxrh SPgs8piYqrTRL8DuW/dL10VFEuYAkEmLpEes3OrXZiieYQ/bbz8nMvMrcZ99ohN0 gRXFCV0oB16is5sM5WOs0/dOMDAtf2B3mq4AXMAhGKHrAKzYB7mVSi76JtXj3FoE 43dXnlXDC24+ZS0zbTTgrcJnu1tpv42+p14mwkVYc1COaFKkR+3pyyUbeobjMJ8q OQIdOOipiS3sJiN2W/2aezRWvEP/UpxAXUzsv68XhKCqEYomgaK/LWSVgcRjpald Yx82R/dxRg8uls3pIPps06suG1NqFem/v9/xKKvQKq7k4tWFQq2tQjvcIQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKE1puvxnkRzm4KGL/sf4t93HtQRMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I1ZTQ5MDk4LTQ4MmEtNDA5Zi04NmZhLTdmODYzNjljZWNjOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba+yhAMA0GCSqGSIb3DQEBCwUAA4IBAQBAe10F3SITHYl9cfIb l/OYR32jcgReQIX+pYyswG+agRJ0tM+Ti3k2swYWSGJ/qti2y86PkCamUNo542Ub cPWX6rAUR/8l0W2/mQHDH9AwB+b7UNQIElbH1mGD4IMjWQ7G7j75ABceDFqlObJt heRi2zyen0tyHACm0GV1tttIHyHaKSt17sxNGx4Qs4Hc5+l49ixURipYqi63pCfF 6twKCb0PLlCS/p9cuHwZilCNnid3+cmODMy3F9FeFZiZyoHlXvfqylFA1UrXDoOh onTzsfVElDlxon2I0wjwLnQAxL+S4k2e4DqlPRUC/B2X8GGXLJdH4aXIUIQnxkN+ 2hOj -----END CERTIFICATE-----Generated at Wed Feb 5 04:07:05 2025 by rpki-client