$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6111e375-8b37-46b7-8884-66a6b6c6fa47.roa File: 6111e375-8b37-46b7-8884-66a6b6c6fa47.roa (raw, json) Hash identifier: IAWgtdtzyRUl4J1U4sW3RHfwp28lP8gMx3gXgcehlBE= Subject key identifier: F1:5E:07:E4:F8:0A:2A:12:F7:A3:B6:7B:85:F8:4F:C7:4B:31:78:E7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 45DC024C69FF19FC3A15A2CDAC9FAB61E451F0BD Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6111e375-8b37-46b7-8884-66a6b6c6fa47.roa Signing time: Mon 27 May 2024 00:00:00 +0000 ROA not before: Mon 27 May 2024 00:00:00 +0000 ROA not after: Mon 01 Jul 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf0:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 00:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:dc:02:4c:69:ff:19:fc:3a:15:a2:cd:ac:9f:ab:61:e4:51:f0:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 27 00:00:00 2024 GMT Not After : Jul 1 23:59:59 2024 GMT Subject: serialNumber=2e065d539ba0d17ad85c5f37e2974c169d95df94e1345c44bb27ad5d2ea4482a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7e:17:f8:5c:c2:62:5b:57:29:13:3a:ef:74: bd:d1:50:43:ea:13:09:8c:5b:bc:98:c4:bb:8a:11: 00:1e:65:14:00:9d:10:b9:05:48:12:ee:59:78:6e: 2b:43:22:8c:eb:d8:6c:ed:11:ad:ab:86:1a:79:e3: ef:74:79:26:fe:96:b4:df:83:14:97:db:34:16:75: a2:4a:fa:76:45:58:d7:87:b2:8f:21:8f:cb:70:63: 20:40:92:e1:ee:83:c1:fc:e4:5d:5f:48:cf:16:c2: 30:65:ce:55:ab:58:5e:19:ff:36:26:ea:60:9f:43: 2d:65:1a:12:39:69:d3:0e:fd:1f:53:ab:fe:b6:0a: 6e:f3:b9:d5:83:d4:cd:61:f8:94:01:a8:0b:03:ee: d8:20:01:06:28:f9:dc:9d:8e:db:14:c5:71:96:96: 13:4d:09:20:3a:09:40:a8:bd:c8:98:3d:11:27:ef: 73:56:38:62:4c:d3:33:ed:51:06:87:6f:be:85:81: 27:70:74:0f:1a:2f:44:9a:ab:e1:ee:dd:3c:bb:79: 30:7c:bc:20:35:e2:d0:cd:b8:31:99:20:dd:84:48: a2:54:ba:dc:2f:93:6a:92:77:6a:c1:96:8f:0c:39: 80:7e:e0:57:e0:3b:de:25:8c:fd:3f:40:1c:d8:b5: a0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:5E:07:E4:F8:0A:2A:12:F7:A3:B6:7B:85:F8:4F:C7:4B:31:78:E7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6111e375-8b37-46b7-8884-66a6b6c6fa47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf0:4800::/40 Signature Algorithm: sha256WithRSAEncryption 63:df:85:c4:08:72:2b:66:d7:34:82:82:65:71:64:0c:f9:02: 3e:64:a1:88:5d:02:87:73:c9:83:24:5f:e2:7e:69:42:d3:e7: 36:65:e2:e5:5d:1b:8e:57:d3:87:84:18:7a:3f:1f:b4:03:fe: 65:de:b5:40:c6:23:96:a2:5f:60:59:a8:23:b9:1e:2b:50:c8: 10:33:28:2b:40:28:06:fc:06:ee:3d:a8:68:43:38:da:f6:a6: 90:52:21:f0:0f:17:7d:03:10:f3:13:4d:06:25:49:78:d8:d0: 51:6a:4d:bd:2a:e8:46:f5:5e:48:f7:7f:73:5e:f3:86:2d:58: 23:43:e8:b4:62:1f:29:0d:d1:06:d1:28:26:e6:81:73:15:c9: 98:31:a6:c8:1e:b4:80:8d:6c:34:8f:60:af:1a:4a:d7:43:0b: bd:a5:ff:52:bb:0f:65:b7:7b:c9:25:47:ba:fb:05:99:b3:48: a8:77:72:74:67:eb:c6:3f:66:04:ba:a1:4b:aa:fb:b4:5d:c1: 11:c6:08:b5:45:fb:af:b9:43:27:3a:f2:03:a5:92:ac:72:d8: 45:ad:ef:a2:63:78:55:68:eb:aa:16:1f:86:9e:d7:89:57:f8: d0:24:70:13:ce:04:f8:87:73:b3:b0:bb:e2:fe:19:6a:d0:b4: 96:c5:12:1c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIURdwCTGn/Gfw6FaLNrJ+rYeRR8L0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUyNzAwMDAwMFoX DTI0MDcwMTIzNTk1OVowejFJMEcGA1UEBRNAMmUwNjVkNTM5YmEwZDE3YWQ4NWM1 ZjM3ZTI5NzRjMTY5ZDk1ZGY5NGUxMzQ1YzQ0YmIyN2FkNWQyZWE0NDgyYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv34X+FzCYltXKRM673S90VBD6hMJ jFu8mMS7ihEAHmUUAJ0QuQVIEu5ZeG4rQyKM69hs7RGtq4YaeePvdHkm/pa034MU l9s0FnWiSvp2RVjXh7KPIY/LcGMgQJLh7oPB/ORdX0jPFsIwZc5Vq1heGf82Jupg n0MtZRoSOWnTDv0fU6v+tgpu87nVg9TNYfiUAagLA+7YIAEGKPncnY7bFMVxlpYT TQkgOglAqL3ImD0RJ+9zVjhiTNMz7VEGh2++hYEncHQPGi9Emqvh7t08u3kwfLwg NeLQzbgxmSDdhEiiVLrcL5NqkndqwZaPDDmAfuBX4DveJYz9P0Ac2LWgAQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPFeB+T4CioS96O2e4X4T8dLMXjnMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYxMTFlMzc1LThiMzctNDZiNy04ODg0LTY2YTZiNmM2ZmE0Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8EgwDQYJKoZIhvcNAQELBQADggEBAGPfhcQIcitm1zSCgmVx ZAz5Aj5koYhdAodzyYMkX+J+aULT5zZl4uVdG45X04eEGHo/H7QD/mXetUDGI5ai X2BZqCO5HitQyBAzKCtAKAb8Bu49qGhDONr2ppBSIfAPF30DEPMTTQYlSXjY0FFq Tb0q6Eb1Xkj3f3Ne84YtWCND6LRiHykN0QbRKCbmgXMVyZgxpsgetICNbDSPYK8a StdDC72l/1K7D2W3e8klR7r7BZmzSKh3cnRn68Y/ZgS6oUuq+7RdwRHGCLVF+6+5 Qyc68gOlkqxy2EWt76JjeFVo66oWH4ae14lX+NAkcBPOBPiHc7Owu+L+GWrQtJbF Ehw= -----END CERTIFICATE-----Generated at Sun Jun 2 01:37:00 2024 by rpki-client on console-ams.rpki-client.org