$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e6407dc4-19e1-4c8f-84db-a0c2389641d8.roa File: e6407dc4-19e1-4c8f-84db-a0c2389641d8.roa (raw, json) Hash identifier: KKEDLM3jn+rAiHw9FeXG3uIlPUfjhtNE1pfWSQJs2lA= Subject key identifier: 67:96:F4:69:76:A0:E6:1C:43:44:3A:D8:3C:9F:D0:2B:9F:BC:C4:BF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6E9D2A063AA2FF233877ADB036F150EDCC4C6D50 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e6407dc4-19e1-4c8f-84db-a0c2389641d8.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:6040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:9d:2a:06:3a:a2:ff:23:38:77:ad:b0:36:f1:50:ed:cc:4c:6d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:26:16:4f:90:e1:78:ef:6e:fa:12:88:8c:a4: 38:1f:c4:0a:60:1a:50:30:38:71:32:26:b4:f2:32: cf:24:00:33:9c:02:5b:81:59:2d:de:1e:bd:5e:4f: 47:7e:4a:55:50:2d:78:77:5f:f0:ec:4a:b3:c4:19: aa:6e:35:a8:c9:de:65:f7:49:60:19:a4:a4:df:2e: e7:94:4c:cd:7f:5c:73:e9:62:5f:50:96:ba:95:2e: ea:f8:13:08:8a:7b:78:67:89:d8:8c:0c:d2:a1:c6: 96:07:99:69:f2:ec:0d:08:7b:1e:00:f4:a2:41:22: 5a:7a:85:2d:26:5c:e4:99:30:30:fe:6d:42:12:04: e6:20:66:07:aa:1d:2c:3e:54:f9:a1:aa:4a:ab:dc: e7:01:24:e8:8f:c2:e1:e0:b6:be:e7:15:ee:bf:30: 20:e7:4a:11:58:19:a1:88:0f:53:ef:34:6f:6b:6b: 79:30:01:a7:7a:c3:52:15:63:ac:c3:7d:e3:28:6c: cd:c4:83:17:75:c7:00:44:bf:1a:0d:65:83:f2:6c: b7:f4:a9:5b:21:05:b9:22:da:20:38:4d:de:7c:f2: 8c:1a:4b:7d:22:fb:72:69:57:85:49:10:dc:fb:43: fa:bd:36:a0:71:6c:0c:70:34:6b:10:07:2c:a4:46: 11:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:96:F4:69:76:A0:E6:1C:43:44:3A:D8:3C:9F:D0:2B:9F:BC:C4:BF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e6407dc4-19e1-4c8f-84db-a0c2389641d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:6040::/48 Signature Algorithm: sha256WithRSAEncryption 57:dd:d0:d9:d8:76:10:3b:e2:b9:87:12:e3:2d:5f:3f:00:74: 2d:85:0f:5f:95:87:16:66:58:98:77:82:53:8f:d8:0e:35:ea: fa:06:42:0e:f8:cb:b2:fa:9e:ec:a8:e3:24:3d:e5:f6:1e:28: 3c:e0:57:75:2b:3b:db:5f:58:77:cd:79:45:04:ea:6d:62:c7: bb:38:f8:09:65:05:43:55:62:cf:c9:84:32:d1:2e:b5:5c:a4: 42:b5:ab:7c:47:b6:23:08:c5:cf:2d:2f:68:62:a1:5b:b1:22: 98:37:93:b1:5b:23:d5:6c:2c:f4:87:66:5c:6d:08:0a:25:96: f2:be:9a:69:ae:e2:3a:d1:85:89:24:25:7a:be:da:ea:4a:08: 38:d8:6e:86:eb:ef:29:ad:36:b2:fa:4e:23:03:4c:ed:ec:e3: cf:21:96:79:fc:38:4c:c3:88:84:de:ad:06:4b:13:ef:05:84: 36:68:80:3c:2d:33:d3:09:ad:6a:e1:50:b0:83:69:ec:5a:3d: 77:30:ab:5f:66:14:eb:14:bf:04:bd:41:b5:d1:c7:5f:89:9f: bc:22:ce:15:d7:96:de:7c:fa:d7:3b:0d:85:51:6f:4c:29:60: 18:c1:fa:47:ee:88:45:ac:21:ed:85:4c:e6:9b:22:e7:02:a4: a7:fa:eb:09 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUbp0qBjqi/yM4d62wNvFQ7cxMbVAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNANGIzODE1NzAzZDUzNzVjMjZiZTFm ZDQ2OWU4NmQ5ZDk1NWE5Y2VjYTE4MjJiZmVlZGU3MDA0MTAzMjkzNDRjZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCYWT5DheO9u+hKIjKQ4H8QKYBpQ MDhxMia08jLPJAAznAJbgVkt3h69Xk9HfkpVUC14d1/w7EqzxBmqbjWoyd5l90lg GaSk3y7nlEzNf1xz6WJfUJa6lS7q+BMIint4Z4nYjAzSocaWB5lp8uwNCHseAPSi QSJaeoUtJlzkmTAw/m1CEgTmIGYHqh0sPlT5oapKq9znASToj8Lh4La+5xXuvzAg 50oRWBmhiA9T7zRva2t5MAGnesNSFWOsw33jKGzNxIMXdccARL8aDWWD8my39Klb IQW5ItogOE3efPKMGkt9IvtyaVeFSRDc+0P6vTagcWwMcDRrEAcspEYR1QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGeW9Gl2oOYcQ0Q62Dyf0CufvMS/MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2U2NDA3ZGM0LTE5ZTEtNGM4Zi04NGRiLWEwYzIzODk2NDFkOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYWBAMA0GCSqGSIb3DQEBCwUAA4IBAQBX3dDZ2HYQO+K5hxLj LV8/AHQthQ9flYcWZliYd4JTj9gONer6BkIO+Muy+p7sqOMkPeX2Hig84Fd1Kzvb X1h3zXlFBOptYse7OPgJZQVDVWLPyYQy0S61XKRCtat8R7YjCMXPLS9oYqFbsSKY N5OxWyPVbCz0h2ZcbQgKJZbyvpppruI60YWJJCV6vtrqSgg42G6G6+8prTay+k4j A0zt7OPPIZZ5/DhMw4iE3q0GSxPvBYQ2aIA8LTPTCa1q4VCwg2nsWj13MKtfZhTr FL8EvUG10cdfiZ+8Is4V15befPrXOw2FUW9MKWAYwfpH7ohFrCHthUzmmyLnAqSn +usJ -----END CERTIFICATE-----Generated at Wed Feb 5 04:10:27 2025 by rpki-client