$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/edb40068-fd10-40a0-8d8f-84f481389d4b.roa File: edb40068-fd10-40a0-8d8f-84f481389d4b.roa (raw, json) Hash identifier: fw+AJEHLaPMZCc1I0092t3r9+bM/LiGGikPCIRvAhLQ= Subject key identifier: 6D:B2:0E:2C:FF:F5:56:D0:DF:1A:EE:85:7C:33:52:79:78:35:DE:F7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1784560D4D6E33D053E6320D18BFB6EA60738A3E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/edb40068-fd10-40a0-8d8f-84f481389d4b.roa Signing time: Tue 25 Mar 2025 16:11:00 +0000 ROA not before: Tue 25 Mar 2025 16:11:00 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab9:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 00:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:84:56:0d:4d:6e:33:d0:53:e6:32:0d:18:bf:b6:ea:60:73:8a:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Mar 25 16:11:00 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5f:fc:28:b8:e6:a7:fc:cc:2b:01:ee:e6:6f: 01:f5:d8:5b:35:37:31:1c:0c:c1:46:48:50:99:1a: 47:d8:77:61:a7:86:e2:5a:a4:8a:8c:20:ca:d4:1d: 64:d3:33:e6:b4:15:ce:e5:a7:f4:ac:63:b3:8d:6a: 41:d6:e4:3a:24:1c:48:46:38:79:7a:73:b0:a3:34: 41:38:78:c0:2b:4b:57:57:0d:69:25:a7:59:22:e0: 14:0d:ef:e1:50:a0:e1:b5:64:af:c7:48:ff:3c:6a: 81:19:2a:d1:b7:9f:04:69:83:51:00:14:38:82:c0: 7b:dc:55:e7:4e:eb:4f:03:5c:09:0f:c8:0c:66:79: 67:0d:81:cb:8e:39:39:a3:71:74:5d:4e:4f:63:61: b0:ea:01:1b:7f:95:60:d0:6d:75:ed:ec:7a:f0:08: d4:13:6f:32:f6:9e:33:7b:b3:19:21:a9:01:d6:98: 3f:05:e8:44:00:6a:d3:e6:e2:b6:fb:f7:d2:97:b3: 06:14:7f:c0:69:46:f1:24:55:0e:46:cb:1b:1e:ca: 1b:fe:88:36:26:db:dc:92:3b:a1:9f:51:2b:68:d9: 41:6b:8e:ab:60:73:21:b6:5c:a0:46:35:99:32:50: 1a:08:12:45:cd:a2:a5:3c:4d:9d:8c:e0:70:45:8d: c1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B2:0E:2C:FF:F5:56:D0:DF:1A:EE:85:7C:33:52:79:78:35:DE:F7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/edb40068-fd10-40a0-8d8f-84f481389d4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:8000::/40 Signature Algorithm: sha256WithRSAEncryption c3:de:df:1a:fb:97:f0:ff:aa:1a:46:10:ad:cf:71:09:d8:f6: aa:f3:b2:fa:e3:c6:8e:c5:ba:59:a4:02:cf:f1:ae:8e:84:fe: 44:ea:2f:8a:3c:c2:41:52:b7:10:cb:1b:4b:d5:e4:8c:dd:8b: df:bc:ab:e6:30:6d:41:a1:88:d9:e4:05:0b:f5:2c:24:df:54: 7a:01:09:89:d4:6f:4d:82:40:c0:30:dc:54:45:9f:b7:76:80: b1:a4:ff:07:85:63:3d:16:8d:14:42:b2:6a:c8:6e:2a:cb:9e: 8a:d1:60:06:2d:82:76:b7:f8:eb:dd:45:d0:a6:da:1e:85:c3: 00:89:e3:bf:bc:7b:16:6b:85:d6:61:c5:5c:fe:ef:2c:c1:1c: 44:27:bf:38:a1:81:b0:0f:0a:ef:d7:52:3a:c9:91:fc:54:7b: 44:7c:0b:96:fc:95:0e:da:4b:a5:b1:30:57:54:c7:f8:9c:09: 67:79:93:fd:87:f2:a8:02:b3:f4:4a:43:17:83:c8:89:06:fb: e6:ce:cc:de:8c:0c:12:10:24:8e:ab:84:04:09:b4:ad:a4:2f: 2d:e0:32:36:cf:85:e6:21:df:6f:b1:c8:31:6a:f8:e3:d1:12: 61:7c:5a:4e:26:10:e7:71:be:4b:11:d2:a6:93:b8:bc:31:f4: 2d:a3:f3:f1 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUF4RWDU1uM9BT5jINGL+26mBzij4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE2MTEwMFoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAOTI2ZGE1MTc1Y2YzODdiNTg5Njgw OTg5YjBiZjE2NWRiYTYwNTg5M2MyMjNiMjk4M2NmMTRjOGJkYmEzM2FjYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl/8KLjmp/zMKwHu5m8B9dhbNTcx HAzBRkhQmRpH2Hdhp4biWqSKjCDK1B1k0zPmtBXO5af0rGOzjWpB1uQ6JBxIRjh5 enOwozRBOHjAK0tXVw1pJadZIuAUDe/hUKDhtWSvx0j/PGqBGSrRt58EaYNRABQ4 gsB73FXnTutPA1wJD8gMZnlnDYHLjjk5o3F0XU5PY2Gw6gEbf5Vg0G117ex68AjU E28y9p4ze7MZIakB1pg/BehEAGrT5uK2+/fSl7MGFH/AaUbxJFUORssbHsob/og2 Jtvckjuhn1EraNlBa46rYHMhtlygRjWZMlAaCBJFzaKlPE2djOBwRY3BfwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFG2yDiz/9VbQ3xruhXwzUnl4Nd73MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2VkYjQwMDY4LWZkMTAtNDBhMC04ZDhmLTg0ZjQ4MTM4OWQ0Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauYAwDQYJKoZIhvcNAQELBQADggEBAMPe3xr7l/D/qhpGEK3P cQnY9qrzsvrjxo7FulmkAs/xro6E/kTqL4o8wkFStxDLG0vV5Izdi9+8q+YwbUGh iNnkBQv1LCTfVHoBCYnUb02CQMAw3FRFn7d2gLGk/weFYz0WjRRCsmrIbirLnorR YAYtgna3+OvdRdCm2h6FwwCJ47+8exZrhdZhxVz+7yzBHEQnvzihgbAPCu/XUjrJ kfxUe0R8C5b8lQ7aS6WxMFdUx/icCWd5k/2H8qgCs/RKQxeDyIkG++bOzN6MDBIQ JI6rhAQJtK2kLy3gMjbPheYh32+xyDFq+OPREmF8Wk4mEOdxvksR0qaTuLwx9C2j 8/E= -----END CERTIFICATE-----Generated at Sat Apr 5 11:00:03 2025 by rpki-client