$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e3ded5c4-f2d6-4dc4-b01c-590927072e2e.roa File: e3ded5c4-f2d6-4dc4-b01c-590927072e2e.roa (raw, json) Hash identifier: PDcifa4sRTczCiSw03c+x0Oi11LGjq1EqgX/4heTWuk= Subject key identifier: DF:65:42:26:9D:5D:DB:D9:51:A6:ED:3C:FB:AD:D8:A7:6D:62:31:44 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 46B062BA9AE935D28422ED5918A11F0EF3E61FD0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e3ded5c4-f2d6-4dc4-b01c-590927072e2e.roa Signing time: Sat 01 Feb 2025 00:00:00 +0000 ROA not before: Sat 01 Feb 2025 00:00:00 +0000 ROA not after: Sat 08 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:80c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:b0:62:ba:9a:e9:35:d2:84:22:ed:59:18:a1:1f:0e:f3:e6:1f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 1 00:00:00 2025 GMT Not After : Mar 8 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:12:9e:84:74:85:11:f2:d9:c3:31:52:1f:0f: cd:3f:e6:65:38:83:e8:de:a8:61:38:d9:cc:d4:4f: f8:8c:dd:42:f2:38:19:47:93:0a:ba:99:5c:57:b1: ae:c1:30:4b:29:d2:7b:9a:a0:88:cd:c4:1f:96:7d: 67:3d:79:b8:4a:e0:c2:92:99:8b:fa:0a:02:48:9c: 80:34:d9:8b:a7:17:66:6d:64:2f:0d:15:15:db:12: fc:1f:c2:03:55:55:cd:95:ef:61:31:db:c9:a1:ce: e1:df:65:af:d2:47:cf:97:29:f5:84:65:1f:f9:36: 0c:e4:2f:35:13:29:3e:b5:89:9e:7b:07:d2:4f:e5: 2c:94:72:2e:e7:37:12:ef:df:9c:58:ed:10:2b:93: d3:94:01:b7:d4:38:39:80:9b:c6:de:5c:71:43:b5: 7f:7d:03:c8:01:76:ca:80:bb:51:da:3e:1e:51:06: ce:2b:db:e0:fd:1d:0e:c9:45:3e:d5:92:0b:b7:9d: 72:a9:ee:49:45:e6:c1:38:18:43:c2:a7:59:81:09: 98:79:d9:ec:42:bd:77:7b:5b:5d:fd:0b:d2:10:c7: 25:b5:6d:60:62:49:16:b8:9f:07:7a:3b:4c:80:f7: 3d:da:d7:82:61:ae:21:27:e1:ff:31:af:48:05:bc: d7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:65:42:26:9D:5D:DB:D9:51:A6:ED:3C:FB:AD:D8:A7:6D:62:31:44 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e3ded5c4-f2d6-4dc4-b01c-590927072e2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:80c0::/48 Signature Algorithm: sha256WithRSAEncryption 3d:0b:79:59:85:5c:a0:a0:f9:dd:00:87:b2:7e:a9:8d:55:20: bf:4f:3b:31:78:02:87:f8:80:a9:1d:96:a5:f9:70:5f:55:39: 38:f6:51:26:6e:db:f2:cb:c1:eb:1e:b4:47:84:a2:ea:06:af: 6c:c3:5f:87:a3:28:1b:10:8d:2c:cb:f4:76:f7:50:55:c1:c1: 1a:6d:fe:31:45:96:61:dc:c8:7a:ce:78:e1:06:e2:5f:05:5f: 7f:0f:e9:4d:67:bb:cd:db:ba:62:84:f1:5c:de:46:2f:91:a2: 99:72:8f:f5:0c:01:6d:e1:de:f5:1e:17:73:d0:fb:88:7f:75: d2:6b:e4:9c:eb:50:5d:56:a8:6f:a1:37:83:59:86:79:60:5f: e6:c5:2b:7a:15:54:fc:71:ef:34:be:d5:8b:bd:5e:19:b3:8a: 6e:40:9d:e0:b4:89:05:ee:b3:41:50:de:59:c5:32:b0:57:da: d6:77:53:85:16:ad:fe:82:af:c9:5d:75:67:7b:53:7b:58:d5: cd:23:bb:b3:26:c2:38:cf:a2:5e:ee:51:8b:ce:52:91:77:1c: 37:53:64:31:9b:c2:1f:c0:94:28:fe:94:30:66:3f:60:c7:08: 52:19:ea:80:ab:2a:20:cf:ad:6a:6f:d5:6c:cf:fb:e5:43:ca: bb:e3:3b:26 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIURrBiuprpNdKEIu1ZGKEfDvPmH9AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMTAwMDAwMFoX DTI1MDMwODIzNTk1OVowejFJMEcGA1UEBRNAZTY4YmUyMDNhNTNkNWJmMzkxNDRm NzQyZWU3MmE4NTc2YTZlMTA2MDIzOTFmZTFiMTA1ZDVmY2E3ODFhM2JlYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BKehHSFEfLZwzFSHw/NP+ZlOIPo 3qhhONnM1E/4jN1C8jgZR5MKuplcV7GuwTBLKdJ7mqCIzcQfln1nPXm4SuDCkpmL +goCSJyANNmLpxdmbWQvDRUV2xL8H8IDVVXNle9hMdvJoc7h32Wv0kfPlyn1hGUf +TYM5C81Eyk+tYmeewfST+UslHIu5zcS79+cWO0QK5PTlAG31Dg5gJvG3lxxQ7V/ fQPIAXbKgLtR2j4eUQbOK9vg/R0OyUU+1ZILt51yqe5JRebBOBhDwqdZgQmYedns Qr13e1td/QvSEMcltW1gYkkWuJ8HejtMgPc92teCYa4hJ+H/Ma9IBbzXsQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFN9lQiadXdvZUabtPPut2KdtYjFEMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UzZGVkNWM0LWYyZDYtNGRjNC1iMDFjLTU5MDkyNzA3MmUyZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYYDAMA0GCSqGSIb3DQEBCwUAA4IBAQA9C3lZhVygoPndAIey fqmNVSC/TzsxeAKH+ICpHZal+XBfVTk49lEmbtvyy8HrHrRHhKLqBq9sw1+Hoygb EI0sy/R291BVwcEabf4xRZZh3Mh6znjhBuJfBV9/D+lNZ7vN27pihPFc3kYvkaKZ co/1DAFt4d71Hhdz0PuIf3XSa+Sc61BdVqhvoTeDWYZ5YF/mxSt6FVT8ce80vtWL vV4Zs4puQJ3gtIkF7rNBUN5ZxTKwV9rWd1OFFq3+gq/JXXVne1N7WNXNI7uzJsI4 z6Je7lGLzlKRdxw3U2Qxm8IfwJQo/pQwZj9gxwhSGeqAqyogz61qb9Vsz/vlQ8q7 4zsm -----END CERTIFICATE-----Generated at Wed Feb 5 03:49:17 2025 by rpki-client