$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3cf33701-1ea5-43c6-b291-763d0e06817e.roa File: 3cf33701-1ea5-43c6-b291-763d0e06817e.roa (raw, json) Hash identifier: 3hkYvinbkP3KgveWOFenMThcSE2P4+675dwfegdLAGg= Subject key identifier: DC:4A:68:1A:BC:21:94:84:2C:99:9F:96:8D:57:63:62:83:AF:8C:E9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 42B96B594B57DF49A1A575517258F47A04E844F2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3cf33701-1ea5-43c6-b291-763d0e06817e.roa Signing time: Mon 21 Apr 2025 16:40:19 +0000 ROA not before: Mon 21 Apr 2025 16:40:19 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1c:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:b9:6b:59:4b:57:df:49:a1:a5:75:51:72:58:f4:7a:04:e8:44:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 16:40:19 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=e45e9fcecbde7b169e46c35a49ad6afce8494cf7108b4ba4d23393331e5e9f57, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:f0:03:f0:9b:4b:98:f6:e2:91:6b:60:db:e8: ef:cb:5b:3c:95:4e:71:cf:ba:53:ea:2b:56:10:ac: fb:12:82:16:1e:fd:b6:b0:41:95:8a:c2:db:ca:ce: 68:5f:4e:91:aa:b7:8d:69:dc:3e:59:87:54:39:1c: 4c:df:e1:d9:87:c2:30:8f:a1:bf:58:95:ef:fe:9d: 90:d5:b5:73:41:8c:a8:b6:dd:4e:a4:63:d1:e8:cc: 0d:0d:da:5c:20:b0:98:04:90:88:6a:93:dc:d9:cb: 22:0d:c4:67:7a:a4:a0:7b:82:0a:55:f3:bf:51:a3: a3:45:26:f1:b9:0f:81:d1:52:54:51:50:67:0d:46: dd:96:7d:20:d1:c1:4e:05:41:26:dc:51:67:7c:8e: 6d:66:fe:b7:cd:65:1d:dc:e9:bf:db:9e:7c:2b:b9: 5c:e9:ec:9b:76:0e:c1:50:ca:53:bd:15:a6:d9:cc: 98:44:cf:ae:0b:52:61:40:25:64:bd:9e:e8:c3:16: 5b:d6:6f:10:fc:b8:2b:d9:cb:1b:c4:a1:51:79:2b: 13:00:bb:ac:52:35:59:07:3a:45:2f:c8:8a:10:1f: 91:a5:24:86:4d:39:90:45:93:85:11:9b:be:f6:ca: e7:16:87:dd:d5:74:ec:88:5e:9f:0e:03:7a:48:b4: ac:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4A:68:1A:BC:21:94:84:2C:99:9F:96:8D:57:63:62:83:AF:8C:E9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3cf33701-1ea5-43c6-b291-763d0e06817e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1c:400::/38 Signature Algorithm: sha256WithRSAEncryption be:f3:d4:c6:39:64:a3:bd:b1:09:22:bf:b0:b7:c2:41:5a:59: 83:27:88:a7:7c:51:ec:e6:fb:b5:d0:90:ce:c7:3a:e4:f7:b5: e7:21:36:66:25:c5:f4:4d:df:eb:eb:67:3e:36:44:e7:af:2c: 19:72:87:51:f4:a0:3e:6e:82:dd:36:37:0c:09:4d:b8:bd:c4: 3d:71:a2:3e:04:3c:fc:74:ed:35:1b:ef:95:bb:61:be:94:d3: 4a:47:02:ea:7c:ed:19:3f:e5:c3:93:94:45:a5:fd:ce:b4:cb: 05:37:cb:2d:86:8d:61:87:ed:5b:0e:df:85:5d:da:78:d3:f5: 4b:ed:30:a5:7d:db:62:5c:50:59:96:a7:cf:c5:7b:07:5b:40: 70:57:69:45:88:0a:44:6f:d1:0a:2d:93:33:1e:49:fc:6f:c6: e3:ee:8a:74:93:14:4a:c5:ae:cd:9a:08:f2:3f:c6:58:17:9f: ed:4a:76:e6:a9:5c:51:5d:9a:b9:6f:2f:9b:6a:47:dd:53:6e: 1d:5a:57:d5:ce:2a:65:cb:77:f7:68:dd:9c:3b:f7:cd:87:b1: 70:cb:ba:0c:4c:36:13:6f:83:a6:5a:b2:9c:6b:b6:ff:20:9d: 35:93:0d:f9:b5:95:c6:99:eb:94:50:a6:b4:c7:a0:00:ef:cb: b5:3b:45:0c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQrlrWUtX30mhpXVRclj0egToRPIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE2NDAxOVoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAZTQ1ZTlmY2VjYmRlN2IxNjllNDZj MzVhNDlhZDZhZmNlODQ5NGNmNzEwOGI0YmE0ZDIzMzkzMzMxZTVlOWY1NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8fAD8JtLmPbikWtg2+jvy1s8lU5x z7pT6itWEKz7EoIWHv22sEGVisLbys5oX06RqreNadw+WYdUORxM3+HZh8Iwj6G/ WJXv/p2Q1bVzQYyott1OpGPR6MwNDdpcILCYBJCIapPc2csiDcRneqSge4IKVfO/ UaOjRSbxuQ+B0VJUUVBnDUbdln0g0cFOBUEm3FFnfI5tZv63zWUd3Om/2558K7lc 6eybdg7BUMpTvRWm2cyYRM+uC1JhQCVkvZ7owxZb1m8Q/Lgr2csbxKFReSsTALus UjVZBzpFL8iKEB+RpSSGTTmQRZOFEZu+9srnFofd1XTsiF6fDgN6SLSsiQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNxKaBq8IZSELJmflo1XY2KDr4zpMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNjZjMzNzAxLTFlYTUtNDNjNi1iMjkxLTc2M2QwZTA2ODE3ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaHAQwDQYJKoZIhvcNAQELBQADggEBAL7z1MY5ZKO9sQkiv7C3 wkFaWYMniKd8Uezm+7XQkM7HOuT3techNmYlxfRN3+vrZz42ROevLBlyh1H0oD5u gt02NwwJTbi9xD1xoj4EPPx07TUb75W7Yb6U00pHAup87Rk/5cOTlEWl/c60ywU3 yy2GjWGH7VsO34Vd2njT9UvtMKV922JcUFmWp8/FewdbQHBXaUWICkRv0QotkzMe SfxvxuPuinSTFErFrs2aCPI/xlgXn+1KduapXFFdmrlvL5tqR91Tbh1aV9XOKmXL d/do3Zw7982HsXDLugxMNhNvg6Zaspxrtv8gnTWTDfm1lcaZ65RQprTHoADvy7U7 RQw= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:43 2025 by rpki-client on console.sobornost.net