$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/60e53e5a-ad89-4a5d-961c-e386188decb0.roa File: 60e53e5a-ad89-4a5d-961c-e386188decb0.roa (raw, json) Hash identifier: Uo1NByWMiPirQjP7iy7N9YV8yS7xvt+2JKcM1NKegTk= Subject key identifier: C3:3F:EF:98:45:6D:1D:F8:01:9F:6D:2E:04:38:E7:08:70:73:26:45 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1BA71558A665D21E3780F8FE4F3E2F1630EA5836 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/60e53e5a-ad89-4a5d-961c-e386188decb0.roa Signing time: Mon 27 May 2024 00:00:00 +0000 ROA not before: Mon 27 May 2024 00:00:00 +0000 ROA not after: Mon 01 Jul 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf9:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 00:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:a7:15:58:a6:65:d2:1e:37:80:f8:fe:4f:3e:2f:16:30:ea:58:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 27 00:00:00 2024 GMT Not After : Jul 1 23:59:59 2024 GMT Subject: serialNumber=a64c09e49de3e969924c84f7e7c000ac97d69c3c7ae37228eb02393dbf65a44e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0f:8c:13:7e:37:bb:be:4a:9f:60:0b:2c:50: 53:2a:f7:f0:fc:ae:4c:39:b9:11:83:42:a1:a1:1c: 4e:75:f8:1c:06:65:0b:5b:f0:18:25:74:79:8f:ad: f6:62:ee:11:81:ae:57:2b:72:f2:6b:aa:9b:ae:98: 50:92:cd:9d:ec:13:67:bd:43:1a:13:0b:63:e6:92: 2c:2a:40:16:85:c5:90:92:33:24:09:9e:b7:59:c6: 60:88:fe:a3:65:a6:4e:bc:7b:46:de:dc:07:53:d2: 2c:15:4b:b5:a0:bc:67:fb:a9:a4:72:98:01:11:8e: 9d:d5:37:e2:b0:64:37:41:f0:cd:e2:4e:60:1d:23: 75:7d:f2:06:ea:e4:4e:a6:71:40:41:38:96:e6:c1: 7b:5a:be:3d:5b:99:23:9a:8e:16:66:38:34:bd:ba: 65:b3:cf:23:ad:8d:bf:d7:29:ab:2a:a8:95:63:19: 95:e0:9f:37:88:cb:05:24:17:6e:d9:45:27:34:76: 40:90:b8:64:dd:42:51:24:4d:fd:5c:c3:db:46:d3: 51:63:54:12:74:af:2a:16:6a:a7:22:61:de:cc:a6: d6:33:f7:46:f1:84:8a:0a:79:58:a8:8b:c7:8a:17: b0:64:f1:fa:b5:80:f1:37:5b:90:4f:f9:e2:92:6b: 34:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:3F:EF:98:45:6D:1D:F8:01:9F:6D:2E:04:38:E7:08:70:73:26:45 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/60e53e5a-ad89-4a5d-961c-e386188decb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf9:6000::/40 Signature Algorithm: sha256WithRSAEncryption 61:02:a5:d7:7d:71:62:4a:d6:e8:40:9d:19:d1:bf:85:db:ad: 77:3e:ac:1f:bf:18:59:f4:3f:b7:60:7c:aa:28:58:25:19:21: 4a:e7:8c:59:40:0d:d4:7f:2c:76:6d:f7:10:70:76:8a:bf:85: 8c:79:7e:e7:b6:0d:0c:62:de:9d:98:e3:97:c5:ee:75:5a:71: 2f:6c:ed:2c:97:e3:ae:d5:4d:bb:da:43:99:e8:34:4a:f5:4f: ff:fa:f1:0c:f3:a0:93:5b:a6:17:50:21:0d:b0:54:5f:52:47: ff:42:66:7c:63:39:a3:59:a3:53:6d:8d:03:be:8d:8c:d7:a8: c9:7c:3e:9f:19:a2:37:ff:61:3c:e8:bb:3f:23:95:e5:76:7a: e6:6e:22:1f:96:2e:2e:cf:1f:b2:53:08:43:33:4d:cd:6d:df: 84:92:b3:2a:45:38:38:05:0e:4d:4c:2d:6a:e3:98:0b:51:34: 74:26:ec:14:d0:02:8e:30:7c:4b:be:37:d9:df:ef:b1:e6:58: f7:5e:93:79:15:d5:80:01:1a:41:54:0d:59:a8:15:63:3e:10: 51:c4:1c:1b:ff:be:d8:47:e8:b7:14:91:83:58:f3:ca:50:51: 48:b3:f4:ae:12:94:27:e1:2a:20:56:06:02:c6:b2:ac:b4:b4: 37:9d:fe:76 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUG6cVWKZl0h43gPj+Tz4vFjDqWDYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUyNzAwMDAwMFoX DTI0MDcwMTIzNTk1OVowejFJMEcGA1UEBRNAYTY0YzA5ZTQ5ZGUzZTk2OTkyNGM4 NGY3ZTdjMDAwYWM5N2Q2OWMzYzdhZTM3MjI4ZWIwMjM5M2RiZjY1YTQ0ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg+ME343u75Kn2ALLFBTKvfw/K5M ObkRg0KhoRxOdfgcBmULW/AYJXR5j632Yu4Rga5XK3Lya6qbrphQks2d7BNnvUMa Ewtj5pIsKkAWhcWQkjMkCZ63WcZgiP6jZaZOvHtG3twHU9IsFUu1oLxn+6mkcpgB EY6d1TfisGQ3QfDN4k5gHSN1ffIG6uROpnFAQTiW5sF7Wr49W5kjmo4WZjg0vbpl s88jrY2/1ymrKqiVYxmV4J83iMsFJBdu2UUnNHZAkLhk3UJRJE39XMPbRtNRY1QS dK8qFmqnImHezKbWM/dG8YSKCnlYqIvHihewZPH6tYDxN1uQT/nikms0VQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMM/75hFbR34AZ9tLgQ45whwcyZFMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYwZTUzZTVhLWFkODktNGE1ZC05NjFjLWUzODYxODhkZWNiMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+WAwDQYJKoZIhvcNAQELBQADggEBAGECpdd9cWJK1uhAnRnR v4XbrXc+rB+/GFn0P7dgfKooWCUZIUrnjFlADdR/LHZt9xBwdoq/hYx5fue2DQxi 3p2Y45fF7nVacS9s7SyX467VTbvaQ5noNEr1T//68QzzoJNbphdQIQ2wVF9SR/9C ZnxjOaNZo1NtjQO+jYzXqMl8Pp8Zojf/YTzouz8jleV2euZuIh+WLi7PH7JTCEMz Tc1t34SSsypFODgFDk1MLWrjmAtRNHQm7BTQAo4wfEu+N9nf77HmWPdek3kV1YAB GkFUDVmoFWM+EFHEHBv/vthH6LcUkYNY88pQUUiz9K4SlCfhKiBWBgLGsqy0tDed /nY= -----END CERTIFICATE-----Generated at Sun Jun 2 01:37:00 2024 by rpki-client on console-ams.rpki-client.org