$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc3a69bc-0d8b-4438-9290-7f41f5935e42.roa File: dc3a69bc-0d8b-4438-9290-7f41f5935e42.roa (raw, json) Hash identifier: brlzgayDwGbLhx3YNorfMU9UyL06eQl3z3dM37A2UbM= Subject key identifier: E7:8D:92:59:47:82:73:DC:74:AC:2D:1B:BC:70:02:96:4A:04:57:3E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6A1FB4EC122CBBC8CB22E030299DEDFDD2F8E312 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc3a69bc-0d8b-4438-9290-7f41f5935e42.roa Signing time: Tue 25 Mar 2025 16:11:22 +0000 ROA not before: Tue 25 Mar 2025 16:11:22 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf8:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 00:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:1f:b4:ec:12:2c:bb:c8:cb:22:e0:30:29:9d:ed:fd:d2:f8:e3:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Mar 25 16:11:22 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:20:3d:06:a0:39:98:65:a6:fa:23:e5:e9:a0: f9:2b:b7:c9:60:b5:ab:33:71:1e:f4:0e:85:52:f1: a7:26:9f:37:5a:ee:98:77:ae:6e:f7:17:80:72:49: 58:46:b0:9e:60:6d:68:fc:8e:90:96:da:22:bd:54: 94:f6:ee:3f:09:a9:cb:88:77:ad:fd:68:62:1a:8f: 14:d2:19:87:ee:40:30:03:a2:0a:bb:65:fa:2e:48: 10:c1:1f:9e:42:96:f7:1a:be:13:3f:55:38:87:d6: b7:30:f9:fe:2d:83:4d:af:e0:38:ca:ca:6f:32:1e: 82:6d:7d:de:57:7d:e0:f7:bf:31:29:d3:93:2c:70: 80:a8:36:93:9f:e4:2a:94:97:e5:9a:71:1a:89:09: 6e:bf:5c:35:96:f7:57:4f:60:b3:6b:98:b4:51:0a: 8a:89:db:8f:06:e6:6f:a1:cc:89:65:fe:34:7b:05: 84:fc:c2:83:4e:38:da:15:75:48:01:92:dd:bf:71: 4f:06:99:18:dc:68:f5:4b:93:95:9c:f4:f1:6f:0e: cc:01:8c:b3:2d:3c:e2:46:2c:09:41:88:17:cf:16: 95:ad:02:24:2f:91:66:e4:76:57:af:de:9e:a7:85: 57:86:9c:05:1a:54:32:e0:32:cc:15:1a:16:19:3c: 23:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:8D:92:59:47:82:73:DC:74:AC:2D:1B:BC:70:02:96:4A:04:57:3E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc3a69bc-0d8b-4438-9290-7f41f5935e42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf8:b000::/40 Signature Algorithm: sha256WithRSAEncryption 42:d6:5a:af:82:63:b9:1b:39:dd:58:29:36:eb:9d:65:64:43: 2b:41:05:27:0e:2e:70:bf:22:a1:34:b2:ec:2e:25:30:d2:4c: 51:97:8f:3c:e0:fa:4a:2f:6c:72:d6:26:57:fa:21:1b:91:71: 2e:c9:70:7b:40:96:d7:14:eb:c1:ce:a1:82:a2:31:4f:58:a7: 21:16:38:eb:da:ee:09:d6:2a:c8:86:3f:b0:9e:f5:a0:bc:8a: 60:5b:c4:53:2a:11:63:41:a7:d6:7c:06:c2:12:31:14:da:59: 80:8d:87:04:eb:11:4c:ab:e5:0f:ca:6a:22:f8:76:ca:4a:68: 51:c7:53:53:76:d4:44:85:2b:aa:34:ef:8c:73:73:ca:30:06: 85:84:54:07:e1:ff:1e:4a:70:8c:84:9d:26:b2:8e:77:9a:a5: ae:54:62:13:15:81:fc:5f:c3:32:61:f0:3d:6e:5b:78:6f:5f: 9d:ac:36:88:7f:79:bf:f8:7f:7a:98:d7:19:b0:29:25:09:79: 22:6e:86:6b:1d:d9:4a:b8:e9:d1:c5:34:67:5d:60:27:19:31: 4e:13:5f:62:86:82:21:b4:65:23:13:fa:00:2e:8c:09:bb:77: e8:ee:1e:53:de:ce:82:f2:32:de:d1:ed:31:ff:c9:56:48:25: cc:e3:19:58 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUah+07BIsu8jLIuAwKZ3t/dL44xIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE2MTEyMloX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAMGQxY2IzMWYxMGFiYjEwYzg2ZDVm NWFkMTA4ZTM5YzQyZTg0MmYxNDMyODdmNDkwNzFmODg1Y2MzNmJhMzU4NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSA9BqA5mGWm+iPl6aD5K7fJYLWr M3Ee9A6FUvGnJp83Wu6Yd65u9xeAcklYRrCeYG1o/I6QltoivVSU9u4/CanLiHet /WhiGo8U0hmH7kAwA6IKu2X6LkgQwR+eQpb3Gr4TP1U4h9a3MPn+LYNNr+A4yspv Mh6CbX3eV33g978xKdOTLHCAqDaTn+QqlJflmnEaiQluv1w1lvdXT2Cza5i0UQqK iduPBuZvocyJZf40ewWE/MKDTjjaFXVIAZLdv3FPBpkY3Gj1S5OVnPTxbw7MAYyz LTziRiwJQYgXzxaVrQIkL5Fm5HZXr96ep4VXhpwFGlQy4DLMFRoWGTwjqwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOeNkllHgnPcdKwtG7xwApZKBFc+MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RjM2E2OWJjLTBkOGItNDQzOC05MjkwLTdmNDFmNTkzNWU0Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+LAwDQYJKoZIhvcNAQELBQADggEBAELWWq+CY7kbOd1YKTbr nWVkQytBBScOLnC/IqE0suwuJTDSTFGXjzzg+kovbHLWJlf6IRuRcS7JcHtAltcU 68HOoYKiMU9YpyEWOOva7gnWKsiGP7Ce9aC8imBbxFMqEWNBp9Z8BsISMRTaWYCN hwTrEUyr5Q/KaiL4dspKaFHHU1N21ESFK6o074xzc8owBoWEVAfh/x5KcIyEnSay jneapa5UYhMVgfxfwzJh8D1uW3hvX52sNoh/eb/4f3qY1xmwKSUJeSJuhmsd2Uq4 6dHFNGddYCcZMU4TX2KGgiG0ZSMT+gAujAm7d+juHlPezoLyMt7R7TH/yVZIJczj GVg= -----END CERTIFICATE-----Generated at Sat Apr 5 10:58:22 2025 by rpki-client