$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/445d78ad-29c7-49fd-ad71-7cd16140cfce.roa File: 445d78ad-29c7-49fd-ad71-7cd16140cfce.roa (raw, json) Hash identifier: ThRlBhXqWDarRsNGQ4t2toY7sLqm8jl9uF7WbAAr5To= Subject key identifier: F5:99:A5:43:3E:C6:B7:56:85:DF:09:7C:B4:D7:5D:F0:2D:9F:90:5E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6E0E9D72F67A88174BF90357B95EB66A93DA2D0E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/445d78ad-29c7-49fd-ad71-7cd16140cfce.roa Signing time: Mon 28 Apr 2025 15:00:15 +0000 ROA not before: Mon 28 Apr 2025 15:00:15 +0000 ROA not after: Mon 02 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daef:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 00:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:0e:9d:72:f6:7a:88:17:4b:f9:03:57:b9:5e:b6:6a:93:da:2d:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 28 15:00:15 2025 GMT Not After : Jun 2 23:59:59 2025 GMT Subject: serialNumber=e2dc06b488a2563b876d9c0eea7cde18bcdc53f769d8528a83c14e8739807db4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4e:7a:80:eb:4e:21:6e:46:1e:a3:e0:31:46: e1:2b:e6:33:10:0b:5d:27:0d:f0:1a:a8:70:be:a0: 48:96:9a:19:fa:b9:60:3a:ce:c7:32:e9:bd:a1:66: 00:df:16:f5:20:c0:b1:e4:2c:b1:af:9a:e5:66:62: 4b:76:59:3f:8d:87:d4:df:90:54:ce:01:4b:bb:15: b2:bd:0b:3e:77:1d:91:94:e3:98:75:a9:7f:02:ff: db:a4:04:7e:76:e7:31:fb:df:67:fe:8d:f8:d7:8f: 97:16:60:a0:66:ac:08:0e:11:c4:e4:cb:6b:cf:5d: 14:b9:52:3f:d3:5d:2d:71:61:f0:d1:7f:cd:b4:3a: 17:df:cc:07:b5:73:10:c2:c8:62:9e:48:24:6d:87: 51:df:48:c9:90:5e:ff:6e:15:cf:12:d3:23:7c:3d: a2:e5:1d:75:53:e2:b6:e1:4e:1c:78:c1:71:c6:cc: b3:ec:da:ab:7a:1c:ff:02:9c:3b:d2:3f:67:f2:38: 1c:eb:09:99:d2:66:e4:ef:40:6d:3e:85:6b:bd:72: 71:9a:9e:0a:a1:b8:a6:ca:67:ac:57:46:6d:03:b9: ad:e8:88:5b:d2:06:0f:fb:55:77:ce:04:f4:26:28: 84:6f:2c:6a:a4:b2:72:d4:b7:3a:6a:08:59:a3:c3: 08:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:99:A5:43:3E:C6:B7:56:85:DF:09:7C:B4:D7:5D:F0:2D:9F:90:5E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/445d78ad-29c7-49fd-ad71-7cd16140cfce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:6000::/40 Signature Algorithm: sha256WithRSAEncryption a7:cc:5a:cf:5b:30:36:c2:3d:d3:71:5c:75:89:dd:d0:38:3f: d1:42:17:b4:05:19:2b:a7:86:a4:f8:50:42:d8:02:8d:a7:37: 86:d0:71:98:b7:37:86:72:64:eb:15:70:bc:01:cd:78:90:0a: d0:21:ed:77:37:b0:6d:d7:2f:95:89:67:c1:42:1b:e1:5e:b4: 0e:98:1d:68:10:94:8f:36:28:0c:ac:8f:02:0b:b5:f6:fa:51: cd:26:72:35:04:dd:39:b1:48:be:93:d2:21:d8:a2:c5:3c:ce: be:07:3d:ea:fa:05:15:b3:78:27:6b:0d:66:1e:da:83:9e:d7: 27:0e:e3:40:f5:56:d4:46:ec:ba:a0:d0:a7:a5:c9:f1:e6:5a: 36:42:6d:4f:5f:32:9f:bc:94:02:79:1e:ea:a9:95:b0:b9:b2: 45:cc:fa:d6:15:dc:30:13:11:7d:f8:ef:5a:2e:4b:9d:44:43: da:3e:a7:d6:e2:4f:f8:96:db:ea:fc:31:37:48:45:25:f4:09: f8:a7:e8:54:7a:2a:de:32:ba:ba:f0:86:57:36:02:40:f1:7b: fa:a3:c1:9f:85:f0:ac:32:a8:f1:bc:16:2f:87:ba:87:f0:80: 97:be:39:ff:67:b2:d6:5a:a2:9a:0f:a3:d7:e5:b5:91:ed:31: 83:30:e5:6a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUbg6dcvZ6iBdL+QNXuV62apPaLQ4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyODE1MDAxNVoX DTI1MDYwMjIzNTk1OVowejFJMEcGA1UEBRNAZTJkYzA2YjQ4OGEyNTYzYjg3NmQ5 YzBlZWE3Y2RlMThiY2RjNTNmNzY5ZDg1MjhhODNjMTRlODczOTgwN2RiNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvE56gOtOIW5GHqPgMUbhK+YzEAtd Jw3wGqhwvqBIlpoZ+rlgOs7HMum9oWYA3xb1IMCx5Cyxr5rlZmJLdlk/jYfU35BU zgFLuxWyvQs+dx2RlOOYdal/Av/bpAR+ducx+99n/o3414+XFmCgZqwIDhHE5Mtr z10UuVI/010tcWHw0X/NtDoX38wHtXMQwshinkgkbYdR30jJkF7/bhXPEtMjfD2i 5R11U+K24U4ceMFxxsyz7Nqrehz/Apw70j9n8jgc6wmZ0mbk70BtPoVrvXJxmp4K obimymesV0ZtA7mt6Ihb0gYP+1V3zgT0JiiEbyxqpLJy1Lc6aghZo8MIJQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPWZpUM+xrdWhd8JfLTXXfAtn5BeMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ0NWQ3OGFkLTI5YzctNDlmZC1hZDcxLTdjZDE2MTQwY2ZjZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba72AwDQYJKoZIhvcNAQELBQADggEBAKfMWs9bMDbCPdNxXHWJ 3dA4P9FCF7QFGSunhqT4UELYAo2nN4bQcZi3N4ZyZOsVcLwBzXiQCtAh7Xc3sG3X L5WJZ8FCG+FetA6YHWgQlI82KAysjwILtfb6Uc0mcjUE3TmxSL6T0iHYosU8zr4H Per6BRWzeCdrDWYe2oOe1ycO40D1VtRG7Lqg0KelyfHmWjZCbU9fMp+8lAJ5Huqp lbC5skXM+tYV3DATEX3471ouS51EQ9o+p9biT/iW2+r8MTdIRSX0Cfin6FR6Kt4y urrwhlc2AkDxe/qjwZ+F8KwyqPG8Fi+HuofwgJe+Of9nstZaopoPo9fltZHtMYMw 5Wo= -----END CERTIFICATE-----Generated at Mon May 5 12:47:13 2025 by rpki-client