$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e254c20c-280f-4b33-9c75-b893777c0329.roa File: e254c20c-280f-4b33-9c75-b893777c0329.roa (raw, json) Hash identifier: HAckVI4nYhBc0LJ0A3W/kz/B4Q+R4ARSPkYcMOx9paY= Subject key identifier: D1:68:F2:D8:DC:A0:28:52:B5:F3:1C:67:9F:8C:4D:86:40:FE:36:B4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4CB9B80C8591A23376B2B6117B99448DDBF9CB4E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e254c20c-280f-4b33-9c75-b893777c0329.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:20c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:b9:b8:0c:85:91:a2:33:76:b2:b6:11:7b:99:44:8d:db:f9:cb:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4a:a6:95:8b:12:d0:82:0e:54:1e:47:c7:e2: 61:69:af:91:36:c6:9e:c4:07:7f:d5:9a:90:d7:74: 51:8b:52:b6:59:7f:23:f9:6d:96:1f:c3:0e:3e:c3: 3d:dc:80:68:3a:0f:fa:24:a3:f3:4e:54:31:e6:e7: 5d:8b:d8:07:95:7b:0b:63:92:cf:a7:d6:6a:a8:94: 65:68:6c:9e:dc:6c:9c:88:b7:e0:52:89:92:6c:46: 45:e7:9f:d6:e2:a9:b0:ea:5b:5c:97:3a:b3:97:90: e4:d0:19:c2:03:7b:60:9d:30:a7:c7:82:c5:e1:e0: 9b:ac:27:01:42:b2:47:3c:6f:db:5e:f8:e6:db:a7: 60:84:a6:33:5f:4c:b4:da:fa:c9:ca:4a:79:1a:e6: bb:6b:7c:ac:7c:d9:c6:37:78:8c:ae:11:96:ac:08: 44:72:13:fb:2b:23:f0:32:35:a6:7f:39:a8:48:57: 40:0e:cd:2f:e4:0c:3b:1a:f9:23:76:63:88:9b:d3: 15:39:8f:ef:74:e7:14:c8:16:87:2c:d6:e4:3b:30: 40:6e:f6:6e:7f:0e:c8:62:79:d5:da:82:36:80:66: 17:06:67:f5:94:ed:ac:ff:c9:af:93:1d:7a:a7:ca: 27:46:50:0f:71:7b:4d:5e:8c:ad:b4:bb:41:e9:3a: 5d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:68:F2:D8:DC:A0:28:52:B5:F3:1C:67:9F:8C:4D:86:40:FE:36:B4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e254c20c-280f-4b33-9c75-b893777c0329.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:20c0::/46 Signature Algorithm: sha256WithRSAEncryption 91:d9:eb:f5:8e:a3:f9:69:b4:a6:5e:ef:e2:f5:35:d0:8c:48: 31:f5:d2:96:c0:9d:3e:67:c4:87:fa:f5:e4:9f:12:cc:77:a9: 9c:94:d2:47:58:4d:37:e6:a4:41:97:d4:aa:c1:e2:a8:fe:49: c6:c7:1f:58:c5:f2:9e:d7:53:00:8d:f3:2c:f2:db:08:02:5a: 54:c4:a6:c9:1c:79:0a:5d:4c:fd:ab:63:ab:31:9a:f0:10:29: b6:7e:a4:3f:20:87:d4:4d:0c:62:57:61:70:6d:3d:ca:22:bc: 0c:93:3d:9d:b2:61:68:d8:44:75:10:55:40:55:50:76:45:fa: c7:b1:15:aa:2a:67:f4:7b:1f:59:1b:8d:e7:62:3a:f7:e5:d7: 74:82:73:1e:6d:97:ce:9c:16:57:ff:7b:b7:49:37:ba:a1:83: 68:db:ac:b4:ab:2e:49:dd:77:ea:97:ac:8d:a8:cf:67:8f:a5: df:e3:9a:55:c9:1a:cd:94:ec:07:4c:d7:ec:04:c6:ee:a5:f8: 72:2e:c7:01:b4:ad:d8:d7:0c:6e:7d:25:db:a8:d0:66:85:e3: a0:f7:3e:32:f3:e1:36:b3:e0:e6:6f:0e:ae:e1:7a:d7:d2:73: d9:aa:89:e3:0f:72:89:86:86:ae:fd:c4:e1:ef:b2:c8:fe:e3: 37:3e:98:81 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUTLm4DIWRojN2srYRe5lEjdv5y04wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAN2FjZTI0ZjYzMzk0NjIyYmUwZTM2 NWQwODAxZThhMmIxMDg2YjEwZjZhN2U0ZDU1N2ViMGZiMjczNWZkYjRkODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkqmlYsS0IIOVB5Hx+Jhaa+RNsae xAd/1ZqQ13RRi1K2WX8j+W2WH8MOPsM93IBoOg/6JKPzTlQx5uddi9gHlXsLY5LP p9ZqqJRlaGye3GyciLfgUomSbEZF55/W4qmw6ltclzqzl5Dk0BnCA3tgnTCnx4LF 4eCbrCcBQrJHPG/bXvjm26dghKYzX0y02vrJykp5Gua7a3ysfNnGN3iMrhGWrAhE chP7KyPwMjWmfzmoSFdADs0v5Aw7GvkjdmOIm9MVOY/vdOcUyBaHLNbkOzBAbvZu fw7IYnnV2oI2gGYXBmf1lO2s/8mvkx16p8onRlAPcXtNXoyttLtB6TpdVQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNFo8tjcoChStfMcZ5+MTYZA/ja0MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UyNTRjMjBjLTI4MGYtNGIzMy05Yzc1LWI4OTM3NzdjMDMyOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaSDAMA0GCSqGSIb3DQEBCwUAA4IBAQCR2ev1jqP5abSmXu/i 9TXQjEgx9dKWwJ0+Z8SH+vXknxLMd6mclNJHWE035qRBl9SqweKo/knGxx9YxfKe 11MAjfMs8tsIAlpUxKbJHHkKXUz9q2OrMZrwECm2fqQ/IIfUTQxiV2FwbT3KIrwM kz2dsmFo2ER1EFVAVVB2RfrHsRWqKmf0ex9ZG43nYjr35dd0gnMebZfOnBZX/3u3 STe6oYNo26y0qy5J3Xfql6yNqM9nj6Xf45pVyRrNlOwHTNfsBMbupfhyLscBtK3Y 1wxufSXbqNBmheOg9z4y8+E2s+Dmbw6u4XrX0nPZqonjD3KJhoau/cTh77LI/uM3 PpiB -----END CERTIFICATE-----Generated at Wed Feb 5 04:06:19 2025 by rpki-client