$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4ba2d501-1c38-4106-bc33-e82203eb29c5.roa File: 4ba2d501-1c38-4106-bc33-e82203eb29c5.roa (raw, json) Hash identifier: GRl8jTlwj80TVzrd266VOaX2XEb3+J8EbsiNd1CDSCQ= Subject key identifier: A3:4E:0A:8B:CD:71:47:17:D2:CA:0E:3A:32:ED:5A:47:7A:F4:C1:79 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 10EA3674FCB704EB1D6293039CA1B1960BDEB87D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4ba2d501-1c38-4106-bc33-e82203eb29c5.roa Signing time: Mon 27 May 2024 00:00:00 +0000 ROA not before: Mon 27 May 2024 00:00:00 +0000 ROA not after: Mon 01 Jul 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da60:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 00:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:ea:36:74:fc:b7:04:eb:1d:62:93:03:9c:a1:b1:96:0b:de:b8:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 27 00:00:00 2024 GMT Not After : Jul 1 23:59:59 2024 GMT Subject: serialNumber=33c76e97e417c501c53d0262dd1e7d14efbc7221874e52e75dd1ac52e28d634e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b4:54:29:84:a5:05:a0:23:94:c4:8c:7d:37: 74:55:ed:82:a8:14:44:a9:ad:1f:a4:30:9d:e7:51: cb:f9:d2:f5:37:f3:db:16:5f:61:6c:bd:0a:59:30: 0e:98:73:80:6b:39:eb:71:93:7e:cd:c5:8c:39:48: 35:62:e8:0f:71:f9:7a:b3:fe:63:90:44:43:c8:24: 30:04:fb:06:6e:ce:80:7c:01:8e:f2:04:50:da:a4: 7c:f3:af:36:bd:c3:9c:75:41:03:6a:30:55:3f:83: 89:cc:4a:d9:49:ad:f0:8e:48:14:91:a2:c2:e5:c6: e7:9a:03:c5:91:6e:d4:c9:7d:45:d4:11:a6:10:85: 6b:b4:10:f1:27:58:1c:ac:e8:9a:11:91:16:f5:00: 92:34:89:69:44:b9:2d:5f:ed:f8:99:aa:04:5e:0f: 18:5b:5f:d1:68:1a:f3:f1:57:6f:98:45:60:f8:60: 5a:75:b3:57:8d:8a:bd:4e:4a:ac:62:43:7e:a5:42: 3f:c5:58:2e:2b:a2:ba:39:8f:f5:fd:ac:06:db:0d: 74:e7:f5:64:52:d4:9f:45:bc:6c:77:04:fb:0b:9e: 29:45:74:59:60:d1:86:f7:56:47:dd:1e:cc:ca:72: 1b:fc:5f:93:37:f8:10:87:20:ed:c6:65:d1:08:0e: 87:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:4E:0A:8B:CD:71:47:17:D2:CA:0E:3A:32:ED:5A:47:7A:F4:C1:79 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4ba2d501-1c38-4106-bc33-e82203eb29c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:f000::/40 Signature Algorithm: sha256WithRSAEncryption 62:33:22:3a:77:0b:8b:c0:0d:ae:ab:37:75:b2:e0:d2:84:e7: 8e:6a:a5:9a:aa:bc:02:68:98:7b:de:33:9e:8c:40:fb:78:c4: 82:e7:0e:1c:79:a0:58:3a:3c:72:a3:ab:36:12:bc:c8:9f:3b: 95:df:3a:f2:a3:9e:06:6d:69:9f:da:4d:2b:fb:31:61:4a:d7: 28:d9:59:9a:69:ef:75:9d:ed:ce:70:4e:a1:f6:51:73:14:7e: b1:de:06:49:f9:5a:b1:17:16:d9:7a:96:c9:b1:2e:a5:ee:d6: ab:b6:74:44:6c:66:23:e6:26:da:c7:a4:d2:9a:e7:dd:8d:20: c1:39:dc:48:47:c1:e9:f6:a1:0f:b1:07:13:90:0c:43:71:54: af:75:31:15:49:fa:0a:09:46:42:6c:29:49:6b:54:58:a6:b2: a9:b4:a8:e4:b0:1e:cd:c3:9f:ad:de:25:15:90:78:4e:9d:e4: 75:29:3d:14:7e:1b:0e:2c:95:a4:9f:ab:c2:d4:b6:f9:33:a3: ed:46:13:5d:a0:53:f6:a8:fc:bc:ab:ea:c2:4c:91:24:34:a7: c5:c2:ec:80:3a:e5:b7:05:9a:de:aa:4b:8a:97:7d:c3:3c:69: 37:c9:f2:4b:19:24:65:c9:fa:49:01:ba:76:e5:ff:1d:a2:2c: c7:b3:aa:fc -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUEOo2dPy3BOsdYpMDnKGxlgveuH0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUyNzAwMDAwMFoX DTI0MDcwMTIzNTk1OVowejFJMEcGA1UEBRNAMzNjNzZlOTdlNDE3YzUwMWM1M2Qw MjYyZGQxZTdkMTRlZmJjNzIyMTg3NGU1MmU3NWRkMWFjNTJlMjhkNjM0ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbRUKYSlBaAjlMSMfTd0Ve2CqBRE qa0fpDCd51HL+dL1N/PbFl9hbL0KWTAOmHOAaznrcZN+zcWMOUg1YugPcfl6s/5j kERDyCQwBPsGbs6AfAGO8gRQ2qR88682vcOcdUEDajBVP4OJzErZSa3wjkgUkaLC 5cbnmgPFkW7UyX1F1BGmEIVrtBDxJ1gcrOiaEZEW9QCSNIlpRLktX+34maoEXg8Y W1/RaBrz8VdvmEVg+GBadbNXjYq9TkqsYkN+pUI/xVguK6K6OY/1/awG2w105/Vk UtSfRbxsdwT7C54pRXRZYNGG91ZH3R7MynIb/F+TN/gQhyDtxmXRCA6HiwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKNOCovNcUcX0soOOjLtWkd69MF5MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRiYTJkNTAxLTFjMzgtNDEwNi1iYzMzLWU4MjIwM2ViMjljNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYPAwDQYJKoZIhvcNAQELBQADggEBAGIzIjp3C4vADa6rN3Wy 4NKE545qpZqqvAJomHveM56MQPt4xILnDhx5oFg6PHKjqzYSvMifO5XfOvKjngZt aZ/aTSv7MWFK1yjZWZpp73Wd7c5wTqH2UXMUfrHeBkn5WrEXFtl6lsmxLqXu1qu2 dERsZiPmJtrHpNKa592NIME53EhHwen2oQ+xBxOQDENxVK91MRVJ+goJRkJsKUlr VFimsqm0qOSwHs3Dn63eJRWQeE6d5HUpPRR+Gw4slaSfq8LUtvkzo+1GE12gU/ao /Lyr6sJMkSQ0p8XC7IA65bcFmt6qS4qXfcM8aTfJ8ksZJGXJ+kkBunbl/x2iLMez qvw= -----END CERTIFICATE-----Generated at Sun Jun 2 01:37:00 2024 by rpki-client on console-ams.rpki-client.org