$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/3407e5b6-a83d-4668-898f-fdbb23092502.roa File: 3407e5b6-a83d-4668-898f-fdbb23092502.roa (raw, json) Hash identifier: uGvGWB/NDer7RACLQsqN3UHXze0EQ+DUUq7K+qsZacY= Subject key identifier: 95:0B:97:38:AA:40:66:BF:BA:81:44:89:6E:6D:5A:6C:22:40:58:86 Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 6A28418BF73E084E6B7A155A1BFA1EA8D45A6D89 Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/3407e5b6-a83d-4668-898f-fdbb23092502.roa Signing time: Fri 25 Apr 2025 00:00:08 +0000 ROA not before: Fri 25 Apr 2025 00:00:08 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2400:6700::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:28:41:8b:f7:3e:08:4e:6b:7a:15:5a:1b:fa:1e:a8:d4:5a:6d:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Apr 25 00:00:08 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=818a10461c12d42df04eae1aa8160d3d5393049cb4bf2e4edd401e5207e6ea98, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2a:6d:64:b7:54:f1:16:73:3a:26:6c:f1:7a: 31:f8:20:03:48:b6:ae:dd:1d:40:e7:9f:24:50:7b: 6b:ff:1b:cc:00:8e:b1:c1:98:6a:3a:db:43:34:7a: 5f:5d:d9:e4:9e:73:c9:4e:df:ac:43:29:29:a9:36: 85:83:e1:92:92:43:28:30:4a:ac:51:e9:0a:34:d2: e6:1e:3e:8a:1b:da:7b:29:8e:d7:da:e2:7d:2d:5e: a2:63:b0:1d:b5:e1:db:2d:a5:07:49:55:a9:33:bf: 7f:26:df:3e:80:3d:e5:b2:e8:19:69:70:46:b5:7c: 6d:e8:45:3a:65:2b:40:4c:31:16:5d:e6:56:b3:02: 37:9c:48:39:0f:1b:69:cd:9f:d3:8b:9d:8a:31:61: 6f:27:5b:97:ec:d6:ed:87:b2:ac:d8:c6:99:95:80: 95:8b:70:d4:ca:ac:27:2e:95:e2:e9:98:9a:30:60: 28:49:b7:c5:03:8f:2d:e5:17:39:7b:4e:7f:0a:cb: 6b:a0:87:cb:79:c2:3a:fd:56:16:09:70:b6:9e:af: 87:d9:f6:bf:01:f6:a9:e0:6e:a1:6d:25:8d:5d:7f: 5f:2a:5d:91:f8:f2:27:b5:34:d3:fe:16:ce:9d:cb: 8b:5e:22:5d:4b:60:be:d3:13:b1:46:c0:50:f1:b6: db:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:0B:97:38:AA:40:66:BF:BA:81:44:89:6E:6D:5A:6C:22:40:58:86 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/3407e5b6-a83d-4668-898f-fdbb23092502.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:6700::/32 Signature Algorithm: sha256WithRSAEncryption 50:f9:29:b4:37:54:91:3a:a4:82:85:1d:9e:65:f3:a9:14:9a: 75:31:26:0a:0a:50:64:57:24:41:67:df:81:fc:b3:c5:16:e6: 89:d5:91:c6:48:74:fd:df:f5:4f:e6:0d:c1:9b:43:95:6b:7d: df:72:43:3c:2b:3b:b2:7f:74:71:02:e1:66:3f:b3:20:3f:28: 91:ec:e3:ba:44:2f:f5:21:f3:a5:f3:d5:f9:ca:4d:24:68:2e: 5d:27:7a:47:8b:fb:9a:b5:37:19:8c:00:ac:fd:aa:cf:7c:d8: 12:34:94:88:61:ef:db:2b:4e:36:55:fa:83:a4:01:bc:2c:48: 78:ac:9c:b1:a8:7e:b7:f5:5a:03:e4:b0:51:21:e3:d3:6c:91: 67:7a:ac:2e:16:68:91:b7:37:c1:d1:d9:17:1a:5a:53:64:1a: 3d:5e:68:d1:2c:76:13:b7:59:71:18:12:74:47:ee:5b:71:e0: ea:8a:0d:ce:06:0e:d8:38:9f:bd:d5:34:4d:09:f9:43:af:44: e2:ca:c1:96:e7:38:f6:22:5a:bf:21:5a:b8:9e:e7:d6:c9:f1: 2a:2d:3c:15:0f:c6:37:88:0c:df:98:aa:be:5c:2d:32:74:39: 83:c2:54:df:3b:c4:c2:c3:66:0b:c4:1a:b2:7a:77:29:b9:0b: a2:15:7b:00 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUaihBi/c+CE5rehVaG/oeqNRabYkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI1MDQyNTAwMDAwOFoX DTI1MDUzMDIzNTk1OVowejFJMEcGA1UEBRNAODE4YTEwNDYxYzEyZDQyZGYwNGVh ZTFhYTgxNjBkM2Q1MzkzMDQ5Y2I0YmYyZTRlZGQ0MDFlNTIwN2U2ZWE5ODEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCptZLdU8RZzOiZs8Xox+CADSLau 3R1A558kUHtr/xvMAI6xwZhqOttDNHpfXdnknnPJTt+sQykpqTaFg+GSkkMoMEqs UekKNNLmHj6KG9p7KY7X2uJ9LV6iY7AdteHbLaUHSVWpM79/Jt8+gD3lsugZaXBG tXxt6EU6ZStATDEWXeZWswI3nEg5DxtpzZ/Ti52KMWFvJ1uX7Nbth7Ks2MaZlYCV i3DUyqwnLpXi6ZiaMGAoSbfFA48t5Rc5e05/CstroIfLecI6/VYWCXC2nq+H2fa/ Afap4G6hbSWNXX9fKl2R+PIntTTT/hbOncuLXiJdS2C+0xOxRsBQ8bbbrQIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFJULlziqQGa/uoFEiW5tWmwiQFiGMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 LzM0MDdlNWI2LWE4M2QtNDY2OC04OThmLWZkYmIyMzA5MjUwMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJABnADANBgkqhkiG9w0BAQsFAAOCAQEAUPkptDdUkTqkgoUdnmXz qRSadTEmCgpQZFckQWffgfyzxRbmidWRxkh0/d/1T+YNwZtDlWt933JDPCs7sn90 cQLhZj+zID8okezjukQv9SHzpfPV+cpNJGguXSd6R4v7mrU3GYwArP2qz3zYEjSU iGHv2ytONlX6g6QBvCxIeKycsah+t/VaA+SwUSHj02yRZ3qsLhZokbc3wdHZFxpa U2QaPV5o0Sx2E7dZcRgSdEfuW3Hg6ooNzgYO2DifvdU0TQn5Q69E4srBluc49iJa vyFauJ7n1snxKi08FQ/GN4gM35iqvlwtMnQ5g8JU3zvEwsNmC8Qasnp3KbkLohV7 AA== -----END CERTIFICATE-----Generated at Sat Apr 26 14:48:06 2025 by rpki-client