$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5bb34d23-2626-486f-a789-4ec80a9dae3c.roa File: 5bb34d23-2626-486f-a789-4ec80a9dae3c.roa (raw, json) Hash identifier: R4whC+As63yIiLUihtmJiLjITjHAT7TXH9I62QG310M= Subject key identifier: B2:59:57:D7:5A:13:5A:0D:B7:A0:37:EF:9F:BA:61:F4:D4:83:2E:52 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 448CA2F10014371A37FA151EAF253617E3672291 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5bb34d23-2626-486f-a789-4ec80a9dae3c.roa Signing time: Mon 20 May 2024 00:00:00 +0000 ROA not before: Mon 20 May 2024 00:00:00 +0000 ROA not after: Mon 24 Jun 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf5:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 00:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:8c:a2:f1:00:14:37:1a:37:fa:15:1e:af:25:36:17:e3:67:22:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 20 00:00:00 2024 GMT Not After : Jun 24 23:59:59 2024 GMT Subject: serialNumber=7e048960d41e65179d84f51200c7d70e6b7ebb201f0e0e03c4bacba2effdad75, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4e:ae:06:8d:73:93:4a:80:21:b0:e3:5f:47: a4:c4:28:19:bb:0d:fa:c6:b6:1b:14:5f:6a:31:2f: 80:58:5f:64:72:ab:c7:fa:a9:7c:4a:68:d5:b9:c4: e9:a3:87:9a:ee:9d:45:1e:af:0f:e7:b4:93:18:e4: da:5e:5e:95:62:27:fb:6f:e8:85:0f:68:c4:26:bb: 93:15:39:8e:4e:c1:c5:97:73:e8:a0:eb:27:e0:07: 60:3b:9f:49:f2:a3:ab:aa:a3:87:0d:60:cf:d6:25: d8:01:98:7f:b7:99:cd:8a:5b:c7:17:63:d4:6c:e9: de:3b:ad:27:4d:c1:3c:94:c7:cf:48:7c:f4:22:73: ae:3c:db:a8:2b:20:74:5a:0e:f1:e9:18:a4:c1:45: 42:10:f4:e2:fe:0a:20:69:70:46:4a:f5:f4:16:ca: 6a:41:7a:89:3e:3a:50:ad:a5:5b:be:3a:0c:8d:60: a8:d0:a4:ba:6f:94:fa:4b:e1:89:4a:1d:66:1b:16: e0:e8:e3:44:68:f8:67:e3:a2:22:0d:87:a5:fd:3d: 0b:45:c0:99:44:15:6c:ae:f1:e3:4e:2f:43:bc:e4: 6e:40:21:73:b6:76:71:90:19:a1:2b:c7:3f:43:2a: b0:ad:08:14:b2:08:bc:c2:01:77:76:bd:b3:87:21: 85:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:59:57:D7:5A:13:5A:0D:B7:A0:37:EF:9F:BA:61:F4:D4:83:2E:52 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5bb34d23-2626-486f-a789-4ec80a9dae3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf5:c800::/40 Signature Algorithm: sha256WithRSAEncryption aa:37:08:74:82:60:cb:4a:8e:30:ab:8b:30:bd:b6:83:2e:89: a8:6e:21:b6:29:0a:d0:71:61:f7:82:cf:7f:0e:c6:e4:ce:5c: cc:bd:8a:10:94:be:83:9b:99:46:60:8b:3a:7b:17:12:75:01: a7:cd:d1:be:9b:e0:fa:66:34:5a:d3:f4:c1:da:c6:64:f3:a3: bd:5d:7a:bf:b4:92:37:9d:2e:df:99:4d:47:42:06:9a:ab:f1: c1:fc:25:2a:22:18:84:d5:88:e6:82:40:fb:6b:a9:4e:98:29: ec:c3:d9:97:3f:86:05:f2:d3:a1:07:78:d5:09:cb:e9:23:7a: 44:43:09:df:c9:84:cd:d0:c5:46:c0:1b:9c:10:7d:c7:9e:29: cd:36:2d:2b:fc:44:ba:aa:3c:ef:d9:ca:ff:c0:e2:a8:54:da: 06:4d:87:d5:13:b6:89:54:62:c0:66:0a:2f:6f:ec:db:26:85: f6:52:03:d0:f3:78:d5:c8:ea:cd:cc:f5:7b:85:a4:4d:79:57: f7:51:09:ca:50:30:c9:2e:e3:21:c6:53:bb:92:1a:a8:71:76: bd:83:55:81:98:f3:5c:f8:91:5b:69:15:c8:b8:77:e0:d4:fa: 7a:94:c2:87:59:33:59:c5:28:a9:b6:ab:14:e0:53:b5:f3:16: 59:9b:5f:65 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIURIyi8QAUNxo3+hUeryU2F+NnIpEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUyMDAwMDAwMFoX DTI0MDYyNDIzNTk1OVowejFJMEcGA1UEBRNAN2UwNDg5NjBkNDFlNjUxNzlkODRm NTEyMDBjN2Q3MGU2YjdlYmIyMDFmMGUwZTAzYzRiYWNiYTJlZmZkYWQ3NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5E6uBo1zk0qAIbDjX0ekxCgZuw36 xrYbFF9qMS+AWF9kcqvH+ql8SmjVucTpo4ea7p1FHq8P57STGOTaXl6VYif7b+iF D2jEJruTFTmOTsHFl3PooOsn4AdgO59J8qOrqqOHDWDP1iXYAZh/t5nNilvHF2PU bOneO60nTcE8lMfPSHz0InOuPNuoKyB0Wg7x6RikwUVCEPTi/gogaXBGSvX0Fspq QXqJPjpQraVbvjoMjWCo0KS6b5T6S+GJSh1mGxbg6ONEaPhn46IiDYel/T0LRcCZ RBVsrvHjTi9DvORuQCFztnZxkBmhK8c/QyqwrQgUsgi8wgF3dr2zhyGFBwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLJZV9daE1oNt6A375+6YfTUgy5SMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzViYjM0ZDIzLTI2MjYtNDg2Zi1hNzg5LTRlYzgwYTlkYWUzYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9cgwDQYJKoZIhvcNAQELBQADggEBAKo3CHSCYMtKjjCrizC9 toMuiahuIbYpCtBxYfeCz38OxuTOXMy9ihCUvoObmUZgizp7FxJ1AafN0b6b4Ppm NFrT9MHaxmTzo71der+0kjedLt+ZTUdCBpqr8cH8JSoiGITViOaCQPtrqU6YKezD 2Zc/hgXy06EHeNUJy+kjekRDCd/JhM3QxUbAG5wQfceeKc02LSv8RLqqPO/Zyv/A 4qhU2gZNh9UTtolUYsBmCi9v7NsmhfZSA9DzeNXI6s3M9XuFpE15V/dRCcpQMMku 4yHGU7uSGqhxdr2DVYGY81z4kVtpFci4d+DU+nqUwodZM1nFKKm2qxTgU7XzFlmb X2U= -----END CERTIFICATE-----Generated at Sun Jun 2 01:00:42 2024 by rpki-client on console-fra.rpki-client.org