$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1846b071-a17b-49fd-a4e6-836e72a5acfc.roa File: 1846b071-a17b-49fd-a4e6-836e72a5acfc.roa (raw, json) Hash identifier: Fa+8pn9D8+kHAiZqRPoo9z+A1UEPEzsFxO+ISlVO4Q8= Subject key identifier: E5:57:A7:66:49:8D:5C:B7:9E:FD:9C:79:5C:4F:F1:13:5D:EA:1C:51 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5877B07D31054253B8DF1F9E89665172B8329593 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1846b071-a17b-49fd-a4e6-836e72a5acfc.roa Signing time: Mon 27 May 2024 00:00:00 +0000 ROA not before: Mon 27 May 2024 00:00:00 +0000 ROA not after: Mon 01 Jul 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 00:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:77:b0:7d:31:05:42:53:b8:df:1f:9e:89:66:51:72:b8:32:95:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 27 00:00:00 2024 GMT Not After : Jul 1 23:59:59 2024 GMT Subject: serialNumber=d313a0dfc66fe29aa91ebbb606ec20094fb2c7d5783dca45b0aa01bdb32355cc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:71:b5:af:d5:f1:ef:60:6d:2c:48:8f:d8:c9: 3e:f8:6e:6d:09:7c:d4:11:99:bf:07:42:50:ee:97: 3e:72:47:cb:bb:79:89:bd:e0:ae:10:d1:10:15:71: 2c:be:94:c8:99:62:30:51:44:3f:56:19:24:84:2e: 8e:64:6c:79:f8:89:38:07:d0:35:62:7c:03:87:19: c3:3e:f5:f4:24:be:0e:d9:4d:1d:04:4d:e8:b6:ab: e0:b0:76:63:07:5a:89:0e:40:41:ba:aa:de:33:16: 52:e0:f7:bd:7c:0c:ed:3e:4c:14:65:49:63:78:ce: 04:cb:ff:99:63:b9:58:64:8a:2f:97:e6:49:62:85: 06:cb:e1:9b:e7:6d:86:53:5f:c7:da:cc:ac:ac:e8: 89:15:73:f4:46:cf:b6:6c:13:7e:ac:b8:c2:6c:f7: f1:19:84:c9:5a:03:66:59:d5:d2:ab:f9:21:80:bf: 06:25:ba:2c:91:7b:98:64:88:55:c1:fc:4e:e5:e8: 53:b1:46:e2:47:16:52:83:e6:ba:6e:cc:c0:09:86: af:13:03:1a:55:ae:ab:86:5c:fa:05:07:c8:3b:08: 14:41:12:6c:e8:ba:42:ed:f5:2d:19:a0:ec:b4:a5: ff:a9:63:3f:65:0b:84:e8:23:6b:a9:f0:97:7a:ba: 1f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:57:A7:66:49:8D:5C:B7:9E:FD:9C:79:5C:4F:F1:13:5D:EA:1C:51 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1846b071-a17b-49fd-a4e6-836e72a5acfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:4000::/40 Signature Algorithm: sha256WithRSAEncryption ab:ce:53:87:99:a1:51:68:e6:bf:3c:e1:5b:96:02:04:90:f9: 62:30:b6:4a:e5:f7:9c:d0:e3:46:46:ba:be:98:0e:5d:54:69: 67:c2:79:0c:d7:61:a5:2d:1a:2c:ce:30:cd:d2:1a:ac:98:d1: 24:a1:82:77:6b:0c:8f:95:95:80:56:e0:01:97:e2:e4:49:0b: 28:28:0f:76:b6:55:c5:59:05:50:02:94:fb:8e:e4:9b:fa:c7: b2:02:fc:40:00:9a:1a:b9:c9:20:61:72:15:86:64:b0:45:b3: 9e:0d:58:b8:e6:33:0b:39:cc:31:13:77:95:2d:d0:59:50:8d: 82:8a:82:03:b8:0d:75:21:ca:b6:e7:fd:ea:79:c8:88:63:0c: 04:b3:c8:1f:8e:06:46:67:95:0f:90:1a:3e:28:12:52:0d:92: 06:77:df:2f:8d:8a:30:58:de:fd:53:a3:ce:0c:f1:8f:1f:cf: d9:b5:d0:e7:94:e8:c9:ea:b9:a1:03:d3:a3:54:98:33:00:18: 99:eb:d6:0f:36:c6:4b:f6:a9:e1:24:1e:88:8b:3e:6f:b4:0e: c7:6b:0d:0d:e6:ee:47:62:7e:82:af:dd:89:9b:b2:0d:46:4e: ab:d4:3b:46:c8:90:d0:f0:6f:a7:55:03:fb:ad:3a:f4:03:ae: 34:e8:cd:e7 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUWHewfTEFQlO43x+eiWZRcrgylZMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUyNzAwMDAwMFoX DTI0MDcwMTIzNTk1OVowejFJMEcGA1UEBRNAZDMxM2EwZGZjNjZmZTI5YWE5MWVi YmI2MDZlYzIwMDk0ZmIyYzdkNTc4M2RjYTQ1YjBhYTAxYmRiMzIzNTVjYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHG1r9Xx72BtLEiP2Mk++G5tCXzU EZm/B0JQ7pc+ckfLu3mJveCuENEQFXEsvpTImWIwUUQ/VhkkhC6OZGx5+Ik4B9A1 YnwDhxnDPvX0JL4O2U0dBE3otqvgsHZjB1qJDkBBuqreMxZS4Pe9fAztPkwUZUlj eM4Ey/+ZY7lYZIovl+ZJYoUGy+Gb522GU1/H2sysrOiJFXP0Rs+2bBN+rLjCbPfx GYTJWgNmWdXSq/khgL8GJboskXuYZIhVwfxO5ehTsUbiRxZSg+a6bszACYavEwMa Va6rhlz6BQfIOwgUQRJs6LpC7fUtGaDstKX/qWM/ZQuE6CNrqfCXerofbwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOVXp2ZJjVy3nv2ceVxP8RNd6hxRMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE4NDZiMDcxLWExN2ItNDlmZC1hNGU2LTgzNmU3MmE1YWNmYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9EAwDQYJKoZIhvcNAQELBQADggEBAKvOU4eZoVFo5r884VuW AgSQ+WIwtkrl95zQ40ZGur6YDl1UaWfCeQzXYaUtGizOMM3SGqyY0SShgndrDI+V lYBW4AGX4uRJCygoD3a2VcVZBVAClPuO5Jv6x7IC/EAAmhq5ySBhchWGZLBFs54N WLjmMws5zDETd5Ut0FlQjYKKggO4DXUhyrbn/ep5yIhjDASzyB+OBkZnlQ+QGj4o ElINkgZ33y+NijBY3v1To84M8Y8fz9m10OeU6MnquaED06NUmDMAGJnr1g82xkv2 qeEkHoiLPm+0DsdrDQ3m7kdifoKv3Ymbsg1GTqvUO0bIkNDwb6dVA/utOvQDrjTo zec= -----END CERTIFICATE-----Generated at Sun Jun 2 01:36:59 2024 by rpki-client on console-ams.rpki-client.org