$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa File: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (raw, json) Hash identifier: EEVkOaEXmz5Tf159IxMdOl9eDIg+DdMd8jYJw0A1zdA= Subject key identifier: D2:F5:BB:FB:0D:34:3E:6D:EC:00:39:F2:54:52:35:2E:37:94:4C:D0 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 20013DC6FC5140C81CAA5DA978C2A56D66C59F79 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa Signing time: Fri 25 Apr 2025 00:00:11 +0000 ROA not before: Fri 25 Apr 2025 00:00:11 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2403:b300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 00:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:01:3d:c6:fc:51:40:c8:1c:aa:5d:a9:78:c2:a5:6d:66:c5:9f:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Apr 25 00:00:11 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=dcf122ca1e339991cf7f52b7ae66af21612c94ac2d86763b9a99dd0407441f50, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5b:62:a8:0c:6a:be:00:bf:20:77:c8:9f:47: 21:10:3d:aa:45:4b:0d:76:d5:c6:a7:39:a6:56:2e: 3e:d5:19:34:8f:b6:8c:58:ad:2b:37:99:84:fc:57: 18:92:6f:6e:c7:dd:91:5c:f5:90:f3:86:59:24:90: 23:7a:32:e2:24:f2:e1:59:0f:e0:4a:78:d6:ac:4e: 1d:2d:fc:0d:54:91:67:c9:07:94:4d:2b:83:7d:e8: b0:99:c3:35:7b:0b:c6:96:02:b0:ef:06:71:e0:62: 67:5a:d1:a7:38:44:8f:59:ae:55:ba:d8:34:ca:6b: 48:04:5a:6b:c8:db:19:88:be:cd:ac:da:1f:73:a9: 46:ac:29:50:d2:ef:2f:a6:92:1d:68:bc:66:ea:b9: 0d:bc:ea:11:f6:59:bf:20:04:d5:dd:17:ab:f3:8f: 4e:29:73:a1:d4:35:37:06:3f:ad:32:42:47:53:96: 2a:bc:cd:b0:41:c8:55:7e:f3:ce:f2:fb:13:5a:25: 2a:59:46:80:ab:15:02:fd:95:ba:c8:13:5c:53:6a: 2b:a0:eb:da:f4:a6:d5:f1:d7:11:e5:93:98:88:f7: 16:56:47:a9:58:1f:fd:e8:7f:f9:0a:30:53:80:c1: f7:55:1a:6c:9a:c6:f2:a4:6b:0c:b6:8b:48:10:18: 4e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F5:BB:FB:0D:34:3E:6D:EC:00:39:F2:54:52:35:2E:37:94:4C:D0 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b300::/48 Signature Algorithm: sha256WithRSAEncryption 07:8e:91:fb:16:ce:5b:78:da:d4:49:bb:03:a8:55:4c:a6:0b: b2:c6:f6:16:16:fc:a5:ac:e1:1e:b7:84:87:19:bc:84:9a:9b: 05:31:ef:6e:a3:98:74:a7:aa:6f:4d:c6:8d:b8:d5:54:ee:8e: 2c:63:44:52:dd:84:0b:7f:32:44:f6:0d:e5:95:47:db:e1:5b: 4b:46:62:4e:d7:ce:08:0c:a7:52:81:0b:24:3b:ed:ee:db:24: cd:92:ac:6e:e8:d7:37:10:37:57:b4:06:59:3e:22:c9:af:88: 7e:49:c0:8c:76:00:67:2b:ff:20:fd:50:72:84:66:c3:aa:8b: a9:ca:66:43:be:66:16:44:89:32:c8:73:84:1d:2a:21:4c:9e: 58:90:ae:9e:82:7c:34:63:cd:f0:06:9c:ca:d1:78:70:a8:80: 76:d1:39:0b:01:a2:d5:01:3f:ab:39:f6:e7:ab:79:0f:c5:3b: c4:bd:6f:9f:3c:f2:4a:7b:3e:90:2f:d4:22:56:6d:7a:5e:ca: 46:28:60:be:fd:94:13:fb:af:52:df:ed:ec:27:2d:14:1a:f6: 0c:5d:fa:ef:b6:f1:8f:33:9d:d2:93:1d:34:18:af:c1:b8:8b: 81:35:ab:12:80:a8:8b:cc:1d:ce:a7:be:a4:8b:9d:22:27:fb: d7:33:a7:4e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUIAE9xvxRQMgcql2peMKlbWbFn3kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI1MDQyNTAwMDAxMVoX DTI1MDUzMDIzNTk1OVowejFJMEcGA1UEBRNAZGNmMTIyY2ExZTMzOTk5MWNmN2Y1 MmI3YWU2NmFmMjE2MTJjOTRhYzJkODY3NjNiOWE5OWRkMDQwNzQ0MWY1MDEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFtiqAxqvgC/IHfIn0chED2qRUsN dtXGpzmmVi4+1Rk0j7aMWK0rN5mE/FcYkm9ux92RXPWQ84ZZJJAjejLiJPLhWQ/g SnjWrE4dLfwNVJFnyQeUTSuDfeiwmcM1ewvGlgKw7wZx4GJnWtGnOESPWa5Vutg0 ymtIBFpryNsZiL7NrNofc6lGrClQ0u8vppIdaLxm6rkNvOoR9lm/IATV3Rer849O KXOh1DU3Bj+tMkJHU5YqvM2wQchVfvPO8vsTWiUqWUaAqxUC/ZW6yBNcU2oroOva 9KbV8dcR5ZOYiPcWVkepWB/96H/5CjBTgMH3VRpsmsbypGsMtotIEBhOTwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNL1u/sNND5t7AA58lRSNS43lEzQMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvNzA4YWFmYWYtMDBiNC00ODViLTg1NGMtMGIzMmNhMzBmNTdi LzM4MWZjNmU2LTVkNDktNDFiYy1iNTg0LWQ5NDM3YzY4ZTNjZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMy Y2EzMGY1N2IvMTJlNTkwMDEtMzVhYy00YWJmLTg1OGYtMzdiOTU1YTI0YjNmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAOzAAAAMA0GCSqGSIb3DQEBCwUAA4IBAQAHjpH7Fs5beNrUSbsD qFVMpguyxvYWFvylrOEet4SHGbyEmpsFMe9uo5h0p6pvTcaNuNVU7o4sY0RS3YQL fzJE9g3llUfb4VtLRmJO184IDKdSgQskO+3u2yTNkqxu6Nc3EDdXtAZZPiLJr4h+ ScCMdgBnK/8g/VByhGbDqoupymZDvmYWRIkyyHOEHSohTJ5YkK6egnw0Y83wBpzK 0XhwqIB20TkLAaLVAT+rOfbnq3kPxTvEvW+fPPJKez6QL9QiVm16XspGKGC+/ZQT +69S3+3sJy0UGvYMXfrvtvGPM53Skx00GK/BuIuBNasSgKiLzB3Op76ki50iJ/vX M6dO -----END CERTIFICATE-----Generated at Mon May 5 10:24:32 2025 by rpki-client