$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f695f86c-1862-4357-8961-1e5b809c4811.roa File: f695f86c-1862-4357-8961-1e5b809c4811.roa (raw, json) Hash identifier: j3wu1iPN/tOuvLcu1WMgLBysxQQiAeR+uQ78B3JI5EI= Subject key identifier: 34:22:CD:A2:61:D7:57:9B:82:6B:CF:B9:59:DC:79:DD:14:94:20:E0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3803AAC24FFA8C8FC13381CAA81DBE26E6AB1ED8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f695f86c-1862-4357-8961-1e5b809c4811.roa Signing time: Mon 03 Feb 2025 00:00:00 +0000 ROA not before: Mon 03 Feb 2025 00:00:00 +0000 ROA not after: Mon 10 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:a000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Feb 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:03:aa:c2:4f:fa:8c:8f:c1:33:81:ca:a8:1d:be:26:e6:ab:1e:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Feb 3 00:00:00 2025 GMT Not After : Mar 10 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3f:ef:31:ed:c3:04:a9:a4:cd:50:76:58:be: 65:10:a9:46:05:83:9d:63:dd:90:8d:c1:5c:96:5e: 81:00:91:c6:ca:e1:2f:82:e4:08:48:9b:06:37:53: 9f:40:ee:0e:c3:9b:b6:88:47:cf:e9:58:14:85:7d: fb:58:9a:0e:5f:63:a9:75:18:ef:06:76:3d:a7:8f: 96:88:9a:1e:06:9c:44:0c:5a:56:11:54:45:46:4d: 5b:f2:5e:62:f8:78:fb:29:92:b3:96:63:b2:cd:65: 91:dd:58:72:9e:07:92:18:50:50:44:2b:e7:cd:7d: bf:61:2a:73:6a:f3:4b:ce:ff:4f:ea:21:8d:ec:fd: 1c:35:0a:95:e7:fd:07:e1:82:70:3e:27:7d:09:70: c5:ec:6c:54:a3:19:df:f5:02:2b:a8:3e:f9:b8:5e: cf:76:29:85:b2:1a:12:fa:da:f6:09:cb:f0:6f:f8: 4c:41:b9:4b:b6:9e:e0:80:a1:3d:10:e0:7b:68:70: 64:31:24:cb:f7:08:76:db:8a:a5:d9:cf:b4:86:ce: 73:a7:4a:07:cc:45:66:ce:16:f6:e6:ba:89:15:77: 24:5c:50:25:dc:48:f0:2d:fb:d7:08:2f:37:61:60: e7:7d:f5:39:af:14:49:ac:ef:a6:f4:ba:14:24:7b: 12:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:22:CD:A2:61:D7:57:9B:82:6B:CF:B9:59:DC:79:DD:14:94:20:E0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f695f86c-1862-4357-8961-1e5b809c4811.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:a000::/40 Signature Algorithm: sha256WithRSAEncryption 5d:ce:1e:97:5b:71:0c:5b:8a:0f:47:0b:d4:94:b7:87:bc:b7: 40:59:07:84:39:e5:90:99:26:9d:0b:44:72:6b:af:b9:69:8d: 81:c1:05:a1:85:2d:01:50:5c:f4:59:4c:8d:7e:15:45:33:47: db:7d:1d:ca:14:22:6e:76:15:8f:17:96:75:89:90:40:16:77: 19:98:9a:88:3a:e6:04:40:25:18:9a:4a:c1:56:89:2e:84:1f: eb:22:80:32:d5:ad:33:04:48:94:6c:7d:21:86:62:9b:95:c2: 34:fd:9b:06:dc:85:54:c9:04:5e:d1:ec:b2:55:cd:56:d7:aa: ba:1a:39:25:b6:38:64:cd:2b:86:5d:88:5d:d2:4f:5e:44:e3: b9:16:cf:fd:76:1c:0b:84:b0:50:b4:74:95:0d:1e:0c:03:34: 96:74:66:c3:87:01:31:da:be:a2:2d:e0:70:6e:09:bf:f2:d0: d0:f5:21:14:0b:26:ea:e7:80:9c:00:0c:f8:d1:4d:1b:e3:62: 81:d2:11:62:78:7b:09:eb:f4:1a:bb:a8:bf:36:d5:25:2c:9b: 92:24:72:5c:ca:7a:0a:2b:e6:65:bc:70:58:b7:48:5c:cd:a5: 43:31:df:0f:9a:52:5c:93:30:ee:a0:da:e7:0c:4c:21:44:31: 55:11:42:74 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUOAOqwk/6jI/BM4HKqB2+JuarHtgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDIwMzAwMDAwMFoX DTI1MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAYWY3YjAxZmU5MGQ3MzE4YzI3MzUx MjY4MjFhYTZjMGFmMTgwMjMxNjllMjI2NWE2MzMzNzgzYWU3NGFlYWFhYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyD/vMe3DBKmkzVB2WL5lEKlGBYOd Y92QjcFcll6BAJHGyuEvguQISJsGN1OfQO4Ow5u2iEfP6VgUhX37WJoOX2OpdRjv BnY9p4+WiJoeBpxEDFpWEVRFRk1b8l5i+Hj7KZKzlmOyzWWR3VhyngeSGFBQRCvn zX2/YSpzavNLzv9P6iGN7P0cNQqV5/0H4YJwPid9CXDF7GxUoxnf9QIrqD75uF7P dimFshoS+tr2Ccvwb/hMQblLtp7ggKE9EOB7aHBkMSTL9wh224ql2c+0hs5zp0oH zEVmzhb25rqJFXckXFAl3EjwLfvXCC83YWDnffU5rxRJrO+m9LoUJHsSVwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDQizaJh11ebgmvPuVnced0UlCDgMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y2OTVmODZjLTE4NjItNDM1Ny04OTYxLTFlNWI4MDljNDgxMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaAKAwDQYJKoZIhvcNAQELBQADggEBAF3OHpdbcQxbig9HC9SU t4e8t0BZB4Q55ZCZJp0LRHJrr7lpjYHBBaGFLQFQXPRZTI1+FUUzR9t9HcoUIm52 FY8XlnWJkEAWdxmYmog65gRAJRiaSsFWiS6EH+sigDLVrTMESJRsfSGGYpuVwjT9 mwbchVTJBF7R7LJVzVbXqroaOSW2OGTNK4ZdiF3ST15E47kWz/12HAuEsFC0dJUN HgwDNJZ0ZsOHATHavqIt4HBuCb/y0ND1IRQLJurngJwADPjRTRvjYoHSEWJ4ewnr 9Bq7qL821SUsm5IkclzKegor5mW8cFi3SFzNpUMx3w+aUlyTMO6g2ucMTCFEMVUR QnQ= -----END CERTIFICATE-----Generated at Wed Feb 5 03:59:46 2025 by rpki-client