$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2bdabc97-6399-477a-86ce-84cce7a29944.roa File: 2bdabc97-6399-477a-86ce-84cce7a29944.roa (raw, json) Hash identifier: lS2PsCMVwqUs3jKO95lW1E2zQosIJAHXmNf/Q+jNqx0= Subject key identifier: 13:B9:92:D9:12:E9:3B:D1:D8:FE:65:82:8A:9E:04:A6:BF:2B:E0:CB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0E49A62AE07312BD0059048E8F78DAB2E99EC84C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2bdabc97-6399-477a-86ce-84cce7a29944.roa Signing time: Sat 19 Apr 2025 00:21:19 +0000 ROA not before: Sat 19 Apr 2025 00:21:19 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:60c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:49:a6:2a:e0:73:12:bd:00:59:04:8e:8f:78:da:b2:e9:9e:c8:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:21:19 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=1f5506255172167f62bfaa79a45776368987048837a2402ca0d3407670d301a0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e1:cc:35:61:1d:64:ed:b4:65:1a:bc:2e:5b: 0c:60:7e:4b:d3:1a:f7:4a:f7:7a:de:3f:c2:9c:d4: fb:cb:07:c4:15:cd:e4:b0:33:78:6c:5b:1a:1b:c9: 49:28:85:fa:88:bc:ef:af:75:1e:fa:ea:92:ef:2b: c2:cd:0d:42:59:5d:9f:b1:d8:14:df:b2:73:7e:76: 25:35:52:f7:1e:79:23:6e:cc:be:4d:98:36:69:b7: 92:d7:b9:f5:8e:82:6a:ed:6b:af:06:48:66:de:3c: 36:d9:a2:20:69:cb:31:0f:22:ab:8d:6a:24:1e:09: e1:ef:9d:8f:aa:6e:7c:ce:59:91:3c:c9:78:b2:51: 0f:66:bd:dd:6d:4d:e3:e4:58:09:b2:8e:8f:64:70: 9b:22:3f:bb:02:81:c6:68:e1:f4:75:91:7b:aa:9a: 50:66:b5:33:47:4b:50:b0:d5:60:72:e7:4c:4a:0f: da:fa:a4:da:b9:38:71:ac:cb:78:8c:87:32:93:92: d0:cf:cf:75:6e:3e:67:ab:ab:ca:a2:ab:f7:fe:7f: cd:99:a8:90:ae:cc:a8:ad:f5:17:7c:94:53:e2:3d: de:8b:3e:ae:9a:f8:b3:fb:26:42:80:14:5d:f4:f0: a6:84:7d:2f:17:e7:34:3e:d5:63:44:55:ce:9c:1a: 83:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B9:92:D9:12:E9:3B:D1:D8:FE:65:82:8A:9E:04:A6:BF:2B:E0:CB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2bdabc97-6399-477a-86ce-84cce7a29944.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:60c0::/48 Signature Algorithm: sha256WithRSAEncryption 99:97:19:0f:b0:f6:85:f9:4d:5a:b6:ba:c0:86:91:24:35:60: f3:ac:22:d6:38:b7:f4:24:2b:b3:80:47:ec:16:23:e8:26:45: 36:3f:09:55:58:7f:79:7b:d4:2f:c0:35:50:2a:34:d9:c8:10: 28:86:17:2b:5d:30:37:18:c6:62:f3:98:17:81:f6:70:47:1d: f7:7a:99:11:d5:c2:56:c0:2f:f2:86:63:82:14:8e:a1:d3:0e: 1d:37:49:07:77:6d:84:5b:1e:76:8f:b3:e0:e3:e4:ff:dd:21: 6e:71:cd:01:fa:a9:19:02:5c:87:2f:c3:e3:30:a2:4c:38:07: 4b:59:0c:c9:25:2f:e7:55:73:f6:12:b6:26:74:5b:f2:fa:1f: 58:f6:12:44:b3:50:84:1c:f3:10:b2:8b:91:75:b7:87:22:23: 4a:19:4b:9b:50:89:0b:b8:81:cc:3a:67:a2:a9:d2:71:b7:c9: 3b:a3:31:91:7c:3f:74:d0:61:ee:48:98:ca:64:6d:ac:00:18: 96:bc:87:da:c8:61:2f:fb:f2:c0:02:78:b5:00:ca:43:1e:aa: ba:92:ff:22:c8:0d:18:c8:01:22:0d:bc:5f:97:1f:7f:fc:6e: 9d:00:92:c3:5a:c6:df:6b:6e:ce:12:9d:32:3d:a2:fe:33:cf: 6d:21:26:7f -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUDkmmKuBzEr0AWQSOj3jasumeyEwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxOTAwMjExOVoX DTI1MDUyNDIzNTk1OVowejFJMEcGA1UEBRNAMWY1NTA2MjU1MTcyMTY3ZjYyYmZh YTc5YTQ1Nzc2MzY4OTg3MDQ4ODM3YTI0MDJjYTBkMzQwNzY3MGQzMDFhMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eHMNWEdZO20ZRq8LlsMYH5L0xr3 Svd63j/CnNT7ywfEFc3ksDN4bFsaG8lJKIX6iLzvr3Ue+uqS7yvCzQ1CWV2fsdgU 37JzfnYlNVL3Hnkjbsy+TZg2abeS17n1joJq7WuvBkhm3jw22aIgacsxDyKrjWok Hgnh752Pqm58zlmRPMl4slEPZr3dbU3j5FgJso6PZHCbIj+7AoHGaOH0dZF7qppQ ZrUzR0tQsNVgcudMSg/a+qTauThxrMt4jIcyk5LQz891bj5nq6vKoqv3/n/NmaiQ rsyorfUXfJRT4j3eiz6umviz+yZCgBRd9PCmhH0vF+c0PtVjRFXOnBqDhwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBO5ktkS6TvR2P5lgoqeBKa/K+DLMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJiZGFiYzk3LTYzOTktNDc3YS04NmNlLTg0Y2NlN2EyOTk0NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/2DAMA0GCSqGSIb3DQEBCwUAA4IBAQCZlxkPsPaF+U1atrrA hpEkNWDzrCLWOLf0JCuzgEfsFiPoJkU2PwlVWH95e9QvwDVQKjTZyBAohhcrXTA3 GMZi85gXgfZwRx33epkR1cJWwC/yhmOCFI6h0w4dN0kHd22EWx52j7Pg4+T/3SFu cc0B+qkZAlyHL8PjMKJMOAdLWQzJJS/nVXP2ErYmdFvy+h9Y9hJEs1CEHPMQsouR dbeHIiNKGUubUIkLuIHMOmeiqdJxt8k7ozGRfD900GHuSJjKZG2sABiWvIfayGEv +/LAAni1AMpDHqq6kv8iyA0YyAEiDbxflx9//G6dAJLDWsbfa27OEp0yPaL+M89t ISZ/ -----END CERTIFICATE-----Generated at Sat Apr 26 07:38:29 2025 by rpki-client