$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cf35e264-b53a-4b49-a7c8-5b159b7ccfd7.roa File: cf35e264-b53a-4b49-a7c8-5b159b7ccfd7.roa (raw, json) Hash identifier: EYpzaEXtyObJaqNu3saeODSR35veFMdBghduoiYyamw= Subject key identifier: 00:EB:18:4A:CC:4A:E7:F6:97:D4:FB:A8:E3:E8:EE:FD:9B:F4:A7:FD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3C32445AFC85CC1A30E13896F299B1D4333D4AA2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cf35e264-b53a-4b49-a7c8-5b159b7ccfd7.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf1:4800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:32:44:5a:fc:85:cc:1a:30:e1:38:96:f2:99:b1:d4:33:3d:4a:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f5:62:e4:3d:9f:8d:e3:64:ac:9f:e1:55:b9: 93:cf:31:6e:62:f3:13:77:b3:0b:fc:f8:d5:bf:cd: 78:c1:b0:d5:80:23:0f:57:88:a4:b0:9d:bf:70:f2: 2d:5a:2b:c0:09:7d:8d:86:75:a5:4f:86:91:7c:7c: 24:5f:c5:ca:bb:a6:99:a2:27:cb:66:cb:e0:73:8b: c6:05:9c:da:99:15:61:d9:c7:74:ff:42:e7:4c:83: 81:46:20:78:e7:3f:3b:8b:02:28:c5:27:d2:c8:33: e0:be:42:26:3c:87:36:b9:3e:62:29:fa:0e:82:e9: b5:b6:67:51:51:a1:6b:6b:46:e6:72:7f:08:6b:32: a8:63:33:08:b3:55:58:54:15:5f:c0:ed:59:be:54: 71:24:46:c3:55:d3:4a:c6:81:f7:51:29:ab:cf:1b: 87:c4:52:3f:0a:f9:66:81:dc:7b:9a:6f:0c:b1:ea: 40:d6:fa:5c:3e:ec:f9:5b:c8:84:97:be:f9:e9:51: 13:6b:e9:04:d5:ac:f7:6e:6f:d7:64:06:1e:9e:58: 31:38:a6:23:2c:e8:1b:42:2d:5d:e9:7a:28:b0:eb: 2e:60:80:e3:da:d8:92:eb:b3:ab:d6:1d:48:da:ac: 2c:83:93:61:fe:25:95:06:76:5d:09:c8:49:5e:27: c1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:EB:18:4A:CC:4A:E7:F6:97:D4:FB:A8:E3:E8:EE:FD:9B:F4:A7:FD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cf35e264-b53a-4b49-a7c8-5b159b7ccfd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf1:4800::/40 Signature Algorithm: sha256WithRSAEncryption 95:54:b6:54:9d:81:79:21:9d:4f:0c:e2:9f:a2:4a:df:ef:31: 15:2b:45:59:5a:a0:54:21:2c:6d:15:a5:73:e5:76:cf:c9:e8: bc:d3:36:e9:2d:34:4f:df:8c:16:46:ae:b1:bd:74:e0:bb:82: 69:7c:8f:13:65:4e:19:b7:b8:47:da:7d:24:34:ea:54:71:7f: 93:60:4c:b6:09:9a:94:de:02:ca:e3:41:9f:ce:6e:30:ca:91: b2:59:0f:e3:d4:56:49:00:bc:b6:21:27:48:80:30:7c:87:ce: ef:d2:53:9f:99:0c:cf:db:f2:e7:d1:ad:4b:8a:5f:1d:30:ee: 20:cf:4b:21:bf:ab:df:4c:3b:f0:91:3b:cc:d1:ec:b3:06:66: 17:e5:f0:44:b8:37:40:97:23:0d:7f:b5:30:6b:3f:27:4b:54: 8f:ce:3f:c1:3b:df:1e:65:1b:1f:cf:df:cb:28:57:83:cf:2f: c7:97:86:99:c3:d0:76:50:74:a2:f3:78:52:99:25:f6:c9:54: 16:7c:20:cf:48:46:4d:0b:b8:ca:9c:7d:0f:62:c2:e1:28:ff: 2c:e5:9d:67:f5:a3:e4:62:57:e0:00:8a:0b:f6:48:a9:c0:bd: 12:ea:bd:ae:ed:9a:25:ec:64:4f:59:a4:7b:02:7a:ed:84:d6: 39:bd:7d:21 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUPDJEWvyFzBow4TiW8pmx1DM9SqIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAZGM1YzcyOTE4ZGRlYTYyYjc0YTgx MzA1MmFjYjc4M2VkNGY2MTAyM2FhYTg5ZTA5NzRmMjdhOThhMWIzYmUyMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufVi5D2fjeNkrJ/hVbmTzzFuYvMT d7ML/PjVv814wbDVgCMPV4iksJ2/cPItWivACX2NhnWlT4aRfHwkX8XKu6aZoifL Zsvgc4vGBZzamRVh2cd0/0LnTIOBRiB45z87iwIoxSfSyDPgvkImPIc2uT5iKfoO gum1tmdRUaFra0bmcn8IazKoYzMIs1VYVBVfwO1ZvlRxJEbDVdNKxoH3USmrzxuH xFI/Cvlmgdx7mm8MsepA1vpcPuz5W8iEl7756VETa+kE1az3bm/XZAYenlgxOKYj LOgbQi1d6XoosOsuYIDj2tiS67Or1h1I2qwsg5Nh/iWVBnZdCchJXifBtwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFADrGErMSuf2l9T7qOPo7v2b9Kf9MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2NmMzVlMjY0LWI1M2EtNGI0OS1hN2M4LTViMTU5YjdjY2ZkNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8UgwDQYJKoZIhvcNAQELBQADggEBAJVUtlSdgXkhnU8M4p+i St/vMRUrRVlaoFQhLG0VpXPlds/J6LzTNuktNE/fjBZGrrG9dOC7gml8jxNlThm3 uEfafSQ06lRxf5NgTLYJmpTeAsrjQZ/ObjDKkbJZD+PUVkkAvLYhJ0iAMHyHzu/S U5+ZDM/b8ufRrUuKXx0w7iDPSyG/q99MO/CRO8zR7LMGZhfl8ES4N0CXIw1/tTBr PydLVI/OP8E73x5lGx/P38soV4PPL8eXhpnD0HZQdKLzeFKZJfbJVBZ8IM9IRk0L uMqcfQ9iwuEo/yzlnWf1o+RiV+AAigv2SKnAvRLqva7tmiXsZE9ZpHsCeu2E1jm9 fSE= -----END CERTIFICATE-----Generated at Wed Feb 5 04:11:40 2025 by rpki-client