$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/67271318-4a3b-4256-a685-4530831f03f1.roa File: 67271318-4a3b-4256-a685-4530831f03f1.roa (raw, json) Hash identifier: TTHn9RTA8FqP5OM1fd6r3DWtvT+QaQE+ehXt5RI8LIg= Subject key identifier: E5:AA:9C:54:6C:A8:BD:E2:A3:8D:EC:1F:65:92:5E:48:39:15:75:6D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 436A9C935B0E2EF0840D78009E299044A2BEC9F4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/67271318-4a3b-4256-a685-4530831f03f1.roa Signing time: Sat 18 May 2024 00:00:00 +0000 ROA not before: Sat 18 May 2024 00:00:00 +0000 ROA not after: Sat 22 Jun 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 00:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:6a:9c:93:5b:0e:2e:f0:84:0d:78:00:9e:29:90:44:a2:be:c9:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 18 00:00:00 2024 GMT Not After : Jun 22 23:59:59 2024 GMT Subject: serialNumber=4a897b95c6981ecd80922a8e140b194972dd64cbb7e83c09b1e40059b2e68aa6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5c:b4:c4:37:f1:d9:9b:e6:5c:50:a8:89:05: c9:de:a7:80:72:19:25:ac:97:59:8c:2a:ab:ed:c7: 19:18:b1:20:94:13:71:46:1e:e2:ce:61:67:c4:2d: dc:79:a8:f5:38:54:5a:f3:bd:48:7e:75:3f:51:17: 2c:7e:22:70:35:75:62:10:60:45:b8:b9:9b:e0:56: 62:8d:e3:51:f4:2c:6d:5f:80:43:4c:ba:03:44:b4: 26:9c:10:8b:f5:18:b3:24:95:98:aa:45:ec:df:ed: 6d:08:26:76:85:50:75:75:1e:0c:f2:e4:0e:9b:16: 13:c7:f0:2f:3b:05:cc:d4:7d:24:f6:ae:8d:c6:73: bb:0e:c1:9b:db:10:9c:c4:a6:dc:d5:34:00:1b:fa: 6e:7a:1f:d1:e6:22:d0:36:c9:41:34:d6:46:85:53: 91:fa:7a:d2:0e:be:4d:b9:f3:74:10:7c:46:5b:dc: b3:be:85:da:d2:c4:3e:ec:62:74:9b:95:bd:bc:e5: 5d:61:a8:b7:a6:c2:c7:7e:d8:ec:db:e7:75:f1:2f: 74:17:e0:b2:14:66:47:b7:d3:ea:27:97:3a:df:1c: 27:11:d3:7a:91:33:96:31:77:c1:f5:14:04:a1:e7: ef:3c:a2:fb:a2:d4:df:fe:a6:65:83:8d:a6:a8:bc: 71:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:AA:9C:54:6C:A8:BD:E2:A3:8D:EC:1F:65:92:5E:48:39:15:75:6D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/67271318-4a3b-4256-a685-4530831f03f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:c800::/40 Signature Algorithm: sha256WithRSAEncryption 13:70:c1:bb:b4:e8:01:82:65:47:76:0d:ee:8c:7a:db:8c:23: 83:7a:0a:35:d4:bd:8a:0a:c0:c4:74:99:f9:61:5a:ee:ae:e3: dd:0a:c6:f9:8a:f4:1c:1b:e7:97:2f:c6:7e:bb:57:11:c7:f6: 3e:31:cf:2f:b7:09:66:27:2b:ad:d2:0c:53:3c:da:3f:76:4c: 93:b9:cc:85:cd:5c:89:12:fa:c0:c3:4d:8a:e1:41:14:8b:2d: 7d:b8:6a:28:71:8f:8c:dc:9c:d2:24:6b:1f:ba:c6:8c:07:a3: 41:0a:63:14:27:9b:af:bf:97:97:a4:61:67:67:66:30:a8:37: 56:33:3c:e6:61:19:ee:8b:bd:04:d1:f0:9b:60:31:81:9e:07: d9:cc:68:a5:1b:35:f6:07:0d:ca:2f:ae:8b:cc:13:c9:6b:90: 2e:ee:4f:79:bb:47:76:f7:92:90:92:88:40:3c:e0:4f:0a:3c: 96:34:a4:72:d7:c5:e4:78:b6:30:76:d0:00:a5:1c:c1:09:d8: 16:20:a8:4d:37:00:84:a6:31:63:b7:4d:79:6d:4a:25:e5:aa: a1:ef:4f:7e:1d:ac:5f:9c:02:eb:b3:9f:20:67:d1:ee:0c:25: 3a:cf:20:a2:52:2c:33:71:cb:07:99:57:16:68:ce:9b:33:ec: 8b:89:fa:9c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQ2qck1sOLvCEDXgAnimQRKK+yfQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUxODAwMDAwMFoX DTI0MDYyMjIzNTk1OVowejFJMEcGA1UEBRNANGE4OTdiOTVjNjk4MWVjZDgwOTIy YThlMTQwYjE5NDk3MmRkNjRjYmI3ZTgzYzA5YjFlNDAwNTliMmU2OGFhNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFy0xDfx2ZvmXFCoiQXJ3qeAchkl rJdZjCqr7ccZGLEglBNxRh7izmFnxC3ceaj1OFRa871IfnU/URcsfiJwNXViEGBF uLmb4FZijeNR9CxtX4BDTLoDRLQmnBCL9RizJJWYqkXs3+1tCCZ2hVB1dR4M8uQO mxYTx/AvOwXM1H0k9q6NxnO7DsGb2xCcxKbc1TQAG/pueh/R5iLQNslBNNZGhVOR +nrSDr5NufN0EHxGW9yzvoXa0sQ+7GJ0m5W9vOVdYai3psLHftjs2+d18S90F+Cy FGZHt9PqJ5c63xwnEdN6kTOWMXfB9RQEoefvPKL7otTf/qZlg42mqLxxfQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOWqnFRsqL3io43sH2WSXkg5FXVtMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY3MjcxMzE4LTRhM2ItNDI1Ni1hNjg1LTQ1MzA4MzFmMDNmMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+8gwDQYJKoZIhvcNAQELBQADggEBABNwwbu06AGCZUd2De6M etuMI4N6CjXUvYoKwMR0mflhWu6u490KxvmK9Bwb55cvxn67VxHH9j4xzy+3CWYn K63SDFM82j92TJO5zIXNXIkS+sDDTYrhQRSLLX24aihxj4zcnNIkax+6xowHo0EK YxQnm6+/l5ekYWdnZjCoN1YzPOZhGe6LvQTR8JtgMYGeB9nMaKUbNfYHDcovrovM E8lrkC7uT3m7R3b3kpCSiEA84E8KPJY0pHLXxeR4tjB20AClHMEJ2BYgqE03AISm MWO3TXltSiXlqqHvT34drF+cAuuznyBn0e4MJTrPIKJSLDNxyweZVxZozpsz7IuJ +pw= -----END CERTIFICATE-----Generated at Sun Jun 2 01:37:01 2024 by rpki-client on console-ams.rpki-client.org