$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/519f0e88-fa90-4b61-957d-57fe1cc2f6c1.roa File: 519f0e88-fa90-4b61-957d-57fe1cc2f6c1.roa (raw, json) Hash identifier: AU7z47U6HcB+z7GWe6EdxkDrEncqDCqbkLwbIASnUJU= Subject key identifier: 84:7E:3A:41:61:0B:36:86:D1:6E:A1:00:0A:9E:C8:AE:DC:C6:5D:6E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0BDF2BA8C7FE715EF4EE900A846D4F1B4B09BFE2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/519f0e88-fa90-4b61-957d-57fe1cc2f6c1.roa Signing time: Mon 27 May 2024 00:00:00 +0000 ROA not before: Mon 27 May 2024 00:00:00 +0000 ROA not after: Mon 01 Jul 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daa0:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 00:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:df:2b:a8:c7:fe:71:5e:f4:ee:90:0a:84:6d:4f:1b:4b:09:bf:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 27 00:00:00 2024 GMT Not After : Jul 1 23:59:59 2024 GMT Subject: serialNumber=a1841e5b46c13edfd926aec0bb6465bbbcab430e80d4c91c949950bcbd97983a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:85:34:ff:0d:61:9c:17:54:50:f4:47:65:c3: 50:1d:80:8c:2d:23:9e:88:61:1d:26:35:34:bb:3f: e1:d4:85:b9:52:e3:db:15:a7:0c:0b:eb:bb:79:ec: ca:24:4a:86:37:49:7e:ed:06:26:73:20:d4:a1:4e: a6:cc:e8:30:56:27:7c:c2:84:bf:e5:8a:9c:4d:72: 9e:a4:73:4f:01:75:e6:52:e5:d3:f1:61:a7:d4:c2: d3:5a:dd:2b:a9:2d:7a:e0:d6:c5:32:d4:d9:c1:b3: ff:a3:e5:9b:13:98:e9:e5:90:d5:3c:35:2a:59:f0: de:23:d4:2a:f9:46:db:aa:93:3a:e4:30:af:c3:1b: f9:84:7f:86:12:cb:26:1b:54:b0:63:d1:e3:ac:22: 3b:6a:49:9e:e7:e0:28:6f:d4:78:78:04:3f:ed:5f: e7:ba:d5:11:d0:5d:ed:1c:6d:ca:f2:2a:b3:ce:65: ca:c4:66:b1:db:67:84:fe:29:48:58:19:34:f8:d7: 7b:5a:e1:36:a3:0a:f5:80:2a:59:78:12:e5:cf:92: 42:42:1c:be:ce:12:76:e5:83:41:6f:3b:01:1c:78: ad:0d:9a:d8:b3:b3:a4:33:ba:47:10:5d:5d:db:90: c0:57:0f:74:14:8f:84:c8:a6:95:e8:b0:40:50:d5: 63:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:7E:3A:41:61:0B:36:86:D1:6E:A1:00:0A:9E:C8:AE:DC:C6:5D:6E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/519f0e88-fa90-4b61-957d-57fe1cc2f6c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daa0:e000::/40 Signature Algorithm: sha256WithRSAEncryption 2d:7f:ba:d8:a5:d3:78:e4:49:ee:a1:ee:11:d0:9d:fa:14:95: 54:87:09:b7:7c:40:42:23:d5:b1:a8:d0:64:e1:d2:3b:2a:73: b0:47:7f:a7:ab:14:46:49:6f:58:70:74:0e:d8:e1:8b:71:6f: 8b:bb:2e:49:3d:b5:d0:ec:df:2c:1e:e1:b4:db:44:cd:5d:3e: e2:ce:6c:aa:0f:83:7d:31:e9:8c:fb:98:47:50:17:87:bd:ca: 44:e9:9c:a6:10:33:52:7e:72:c9:43:f9:cd:c0:c3:f2:89:83: 34:fa:9a:7f:fd:82:8f:cd:54:47:a0:19:b5:fb:a3:7f:5a:63: 89:1b:0b:a1:78:bf:c5:0b:c5:24:f0:9e:96:ab:ba:94:71:93: 7f:35:d2:1e:c8:6a:96:31:6a:9e:6e:76:93:a7:aa:77:00:8a: 20:2b:0f:27:44:a1:51:9d:40:1d:bf:d5:71:bf:fa:d9:6f:3e: 37:ad:f2:2f:a4:20:1e:86:0a:fc:c9:53:20:b5:86:a9:0d:c9: 7c:97:de:72:db:4e:4e:54:8b:68:fa:2c:fa:1b:94:32:d3:d7: d4:b9:70:a8:fa:dc:08:78:59:cb:12:78:d7:27:34:37:c6:b3: 96:e0:5f:62:a3:52:c2:ef:61:0f:f4:1e:3b:33:f1:6d:9f:98: e3:93:4d:01 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUC98rqMf+cV707pAKhG1PG0sJv+IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUyNzAwMDAwMFoX DTI0MDcwMTIzNTk1OVowejFJMEcGA1UEBRNAYTE4NDFlNWI0NmMxM2VkZmQ5MjZh ZWMwYmI2NDY1YmJiY2FiNDMwZTgwZDRjOTFjOTQ5OTUwYmNiZDk3OTgzYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4U0/w1hnBdUUPRHZcNQHYCMLSOe iGEdJjU0uz/h1IW5UuPbFacMC+u7eezKJEqGN0l+7QYmcyDUoU6mzOgwVid8woS/ 5YqcTXKepHNPAXXmUuXT8WGn1MLTWt0rqS164NbFMtTZwbP/o+WbE5jp5ZDVPDUq WfDeI9Qq+UbbqpM65DCvwxv5hH+GEssmG1SwY9HjrCI7akme5+Aob9R4eAQ/7V/n utUR0F3tHG3K8iqzzmXKxGax22eE/ilIWBk0+Nd7WuE2owr1gCpZeBLlz5JCQhy+ zhJ25YNBbzsBHHitDZrYs7OkM7pHEF1d25DAVw90FI+EyKaV6LBAUNVjUwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIR+OkFhCzaG0W6hAAqeyK7cxl1uMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUxOWYwZTg4LWZhOTAtNGI2MS05NTdkLTU3ZmUxY2MyZjZjMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaoOAwDQYJKoZIhvcNAQELBQADggEBAC1/util03jkSe6h7hHQ nfoUlVSHCbd8QEIj1bGo0GTh0jsqc7BHf6erFEZJb1hwdA7Y4Ytxb4u7Lkk9tdDs 3ywe4bTbRM1dPuLObKoPg30x6Yz7mEdQF4e9ykTpnKYQM1J+cslD+c3Aw/KJgzT6 mn/9go/NVEegGbX7o39aY4kbC6F4v8ULxSTwnparupRxk3810h7IapYxap5udpOn qncAiiArDydEoVGdQB2/1XG/+tlvPjet8i+kIB6GCvzJUyC1hqkNyXyX3nLbTk5U i2j6LPoblDLT19S5cKj63Ah4WcsSeNcnNDfGs5bgX2KjUsLvYQ/0Hjsz8W2fmOOT TQE= -----END CERTIFICATE-----Generated at Sun Jun 2 01:37:00 2024 by rpki-client on console-ams.rpki-client.org