$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/db3424c8-0ae1-4042-9a6f-62bcb44b8dd3.roa File: db3424c8-0ae1-4042-9a6f-62bcb44b8dd3.roa (raw, json) Hash identifier: +bMIsBvWvsiFMq7IdsNlIoec/arDRcdVBqLuUT0h2s4= Subject key identifier: 37:6A:55:3E:30:C9:66:CD:E2:CF:10:82:EB:5A:CB:0F:25:D0:BF:CB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 67034EDB3D5AE7FA209E25D7690485767A2BAF74 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/db3424c8-0ae1-4042-9a6f-62bcb44b8dd3.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:2080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:03:4e:db:3d:5a:e7:fa:20:9e:25:d7:69:04:85:76:7a:2b:af:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:02:7f:28:e6:bb:25:43:c3:ef:ea:3f:68:09: ee:e1:9d:b9:a6:2b:df:27:d3:4d:64:7f:b6:8c:7d: d4:a1:d3:d6:e0:8d:e6:98:81:c0:25:57:ea:f9:e4: 2d:e6:80:d6:94:9d:93:1f:ef:10:a4:52:08:9c:ad: 82:7c:8b:c1:9d:b2:f0:2a:5a:c2:cc:67:94:0a:f8: fd:88:31:18:05:c2:93:8c:ef:d3:e4:fd:53:54:39: 6e:e1:cf:bb:87:38:2c:45:cc:40:7b:cd:78:c6:2f: e9:de:78:cb:f6:37:be:d0:c9:9b:fe:b0:f7:1f:3e: e5:d3:1c:48:c8:34:74:66:ef:74:d1:4f:70:4b:14: 02:10:46:05:03:b9:59:d1:0a:73:03:04:7e:85:bc: 13:cf:ec:75:6b:7d:a5:cf:ee:dc:e3:95:e0:0f:09: 9e:8c:ec:af:73:f2:89:e2:bb:ab:f8:b9:43:ee:d4: 7c:59:ac:6a:1c:18:64:cb:1e:14:c2:d8:92:3e:ff: f2:1e:99:8b:b2:86:ff:b2:e8:a8:8d:93:90:53:f4: 3d:68:44:d0:2c:32:46:a4:cd:ee:ed:e3:4f:8e:f3: 9e:8a:55:d6:f1:ab:f2:44:05:fd:bd:4a:72:7f:5c: 2f:c2:07:0c:9b:64:ac:d3:d8:53:b9:39:86:e3:84: 35:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:6A:55:3E:30:C9:66:CD:E2:CF:10:82:EB:5A:CB:0F:25:D0:BF:CB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/db3424c8-0ae1-4042-9a6f-62bcb44b8dd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:2080::/48 Signature Algorithm: sha256WithRSAEncryption 59:9d:2b:7d:b2:21:21:d5:10:7f:6e:c3:d9:51:9b:5b:26:e8: 00:d9:74:4b:dd:30:8e:18:0c:21:63:11:3c:d1:62:b5:bd:d7: 29:0a:50:da:8e:21:0d:cd:60:e6:9f:ce:26:04:6b:95:9d:64: f6:e9:09:43:8e:c3:a9:d5:5a:b8:44:a8:49:75:95:ae:52:f3: 0f:ed:96:2a:17:b5:a0:96:28:f3:0e:51:ef:cf:a7:c7:ee:ff: 26:53:fa:26:8f:09:a8:5e:c8:50:7d:85:c7:4c:e4:cd:16:13: 01:9a:a8:59:7d:63:45:f3:42:f6:85:9a:11:bf:3a:22:b2:4b: 7b:52:e7:97:b3:44:7c:34:19:08:d1:fb:26:d9:b6:47:3c:5c: e8:23:07:11:bb:61:97:17:29:1e:6f:e7:82:23:ec:b3:65:a1: f1:43:4a:b2:c0:49:d7:3b:43:ab:17:b3:71:d4:b4:9c:8b:7a: c4:d5:82:86:b7:50:0b:dc:4c:6a:f8:7f:9d:b6:23:d0:25:25: d0:69:b6:e3:6b:ae:12:95:0c:1e:b7:19:a4:3b:15:a6:5f:58: 37:c6:a5:54:7d:f1:e5:f9:32:6c:f1:d0:2c:f9:46:49:57:cd: 0a:a7:3c:e2:06:2d:b3:ec:c4:ad:ba:41:49:d8:e0:dd:94:a5: 79:57:ce:42 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUZwNO2z1a5/ogniXXaQSFdnorr3QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNANmVhMGYyMTY1YTRjNDIyOGIzOGMw MDMzY2U2ZTA1YzQ0ZjkyZTRmOWM3YmQwNGJmNGI1MmE3N2RjYmZkODgzMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQJ/KOa7JUPD7+o/aAnu4Z25pivf J9NNZH+2jH3UodPW4I3mmIHAJVfq+eQt5oDWlJ2TH+8QpFIInK2CfIvBnbLwKlrC zGeUCvj9iDEYBcKTjO/T5P1TVDlu4c+7hzgsRcxAe814xi/p3njL9je+0Mmb/rD3 Hz7l0xxIyDR0Zu900U9wSxQCEEYFA7lZ0QpzAwR+hbwTz+x1a32lz+7c45XgDwme jOyvc/KJ4rur+LlD7tR8WaxqHBhkyx4UwtiSPv/yHpmLsob/suiojZOQU/Q9aETQ LDJGpM3u7eNPjvOeilXW8avyRAX9vUpyf1wvwgcMm2Ss09hTuTmG44Q1KQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDdqVT4wyWbN4s8Qgutayw8l0L/LMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RiMzQyNGM4LTBhZTEtNDA0Mi05YTZmLTYyYmNiNDRiOGRkMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba9CCAMA0GCSqGSIb3DQEBCwUAA4IBAQBZnSt9siEh1RB/bsPZ UZtbJugA2XRL3TCOGAwhYxE80WK1vdcpClDajiENzWDmn84mBGuVnWT26QlDjsOp 1Vq4RKhJdZWuUvMP7ZYqF7WglijzDlHvz6fH7v8mU/omjwmoXshQfYXHTOTNFhMB mqhZfWNF80L2hZoRvzoiskt7UueXs0R8NBkI0fsm2bZHPFzoIwcRu2GXFykeb+eC I+yzZaHxQ0qywEnXO0OrF7Nx1LSci3rE1YKGt1AL3Exq+H+dtiPQJSXQabbja64S lQwetxmkOxWmX1g3xqVUffHl+TJs8dAs+UZJV80KpzziBi2z7MStukFJ2ODdlKV5 V85C -----END CERTIFICATE-----Generated at Wed Feb 5 04:07:38 2025 by rpki-client