$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/719ab7af-df28-4130-a9de-5188082f1820.roa File: 719ab7af-df28-4130-a9de-5188082f1820.roa (raw, json) Hash identifier: neiyl9QGa0VCDCF8xHUR3L3iGrBpp2VbC7V+nYIZ2m4= Subject key identifier: 5E:AC:95:A8:96:93:2E:D3:3A:85:6A:54:4E:BE:1D:22:B1:0A:37:3A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 089AC7E2510C94550978A313FACFBFF8909BCD66 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/719ab7af-df28-4130-a9de-5188082f1820.roa Signing time: Mon 27 May 2024 00:00:00 +0000 ROA not before: Mon 27 May 2024 00:00:00 +0000 ROA not after: Mon 01 Jul 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 00:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:9a:c7:e2:51:0c:94:55:09:78:a3:13:fa:cf:bf:f8:90:9b:cd:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 27 00:00:00 2024 GMT Not After : Jul 1 23:59:59 2024 GMT Subject: serialNumber=6fddd720c2689268c49d57c1ca0f4148ca86f06199afb59c93e4902550531079, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:44:c7:e4:66:9e:a8:10:08:94:6c:ec:6d:5a: af:d5:f4:76:da:81:4d:9d:e0:cc:cf:36:02:af:c3: e2:3c:0e:e8:ad:73:2d:f3:4a:7f:c5:2a:ba:7d:97: 44:89:67:85:2a:a6:ff:e1:94:fb:0d:be:54:a9:43: 3d:46:63:ee:b3:c4:4b:7c:84:a0:2c:95:b2:b6:22: 44:0d:e1:86:e0:63:a8:7d:3b:4d:35:9c:e2:f6:53: b8:60:41:75:0b:0a:50:4e:53:78:37:7d:7e:11:ca: f9:40:18:5c:c2:07:1b:59:fe:d1:bb:6c:4e:a5:1e: a7:92:30:5c:22:9f:63:2f:74:e7:21:3d:55:ad:18: d4:56:80:2e:f0:02:26:c3:c7:c4:27:0d:98:d2:2e: 2c:d1:99:99:44:74:98:f8:8a:79:a8:8e:b8:97:fc: 53:65:f4:1f:b4:b8:5b:c3:89:0b:ba:f3:38:f5:c1: 46:73:ba:15:12:7b:5b:19:b0:83:f0:f8:5e:5c:a6: f7:df:03:b3:d6:d8:c2:82:ca:ec:24:4d:0f:bd:07: 49:c5:42:5c:5c:5c:9d:88:a5:e6:25:72:8c:03:1e: 8b:04:78:a0:71:93:05:98:5b:45:97:8f:1a:c2:5e: 44:3a:7f:9d:81:5d:4f:21:4f:1d:cb:34:e7:a2:ee: c9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:AC:95:A8:96:93:2E:D3:3A:85:6A:54:4E:BE:1D:22:B1:0A:37:3A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/719ab7af-df28-4130-a9de-5188082f1820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:1000::/40 Signature Algorithm: sha256WithRSAEncryption 13:21:c8:84:0e:26:4f:58:15:52:42:71:a5:ed:71:1f:b8:9d: 7e:0f:40:37:22:09:b1:9f:35:73:3c:b1:95:0d:67:c9:39:e4: 1d:b3:3f:05:f2:a0:fa:4a:1c:44:40:f5:30:3a:1e:da:86:ae: 04:31:81:28:a4:32:db:89:a8:93:a8:be:16:e4:53:c3:39:91: ee:4f:d5:dd:8c:35:d7:99:f6:f9:ca:82:82:9d:ed:7c:91:9d: 7b:19:ed:9f:85:4f:c7:0b:72:e1:95:21:93:b6:27:93:96:97: 36:5a:71:95:85:ba:25:74:6f:8c:16:de:df:da:83:de:26:10: 97:2a:3c:68:73:b4:12:bd:8c:33:7c:83:20:fa:8e:8a:ce:27: ad:88:73:55:12:f6:8d:6f:d3:58:fe:8d:aa:d9:d0:e7:a5:41: db:f6:aa:07:e7:f4:5d:03:56:3e:13:25:f0:04:fa:9d:57:d2: f8:57:e2:6f:c6:ff:43:60:64:af:03:65:67:2a:cf:a0:db:f6: 91:a9:68:c6:61:c2:39:28:ca:88:bd:e4:c0:29:53:7e:82:c3: dd:09:29:39:80:99:ad:99:e3:e1:f5:1d:58:60:a5:9b:65:86: ab:fc:59:a1:2f:48:c8:c6:ad:ef:60:fc:2c:5a:7b:7b:a4:f0: 46:a8:46:e3 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUCJrH4lEMlFUJeKMT+s+/+JCbzWYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUyNzAwMDAwMFoX DTI0MDcwMTIzNTk1OVowejFJMEcGA1UEBRNANmZkZGQ3MjBjMjY4OTI2OGM0OWQ1 N2MxY2EwZjQxNDhjYTg2ZjA2MTk5YWZiNTljOTNlNDkwMjU1MDUzMTA3OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUTH5GaeqBAIlGzsbVqv1fR22oFN neDMzzYCr8PiPA7orXMt80p/xSq6fZdEiWeFKqb/4ZT7Db5UqUM9RmPus8RLfISg LJWytiJEDeGG4GOofTtNNZzi9lO4YEF1CwpQTlN4N31+Ecr5QBhcwgcbWf7Ru2xO pR6nkjBcIp9jL3TnIT1VrRjUVoAu8AImw8fEJw2Y0i4s0ZmZRHSY+Ip5qI64l/xT ZfQftLhbw4kLuvM49cFGc7oVEntbGbCD8PheXKb33wOz1tjCgsrsJE0PvQdJxUJc XFydiKXmJXKMAx6LBHigcZMFmFtFl48awl5EOn+dgV1PIU8dyzTnou7JFQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFF6slaiWky7TOoVqVE6+HSKxCjc6MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzcxOWFiN2FmLWRmMjgtNDEzMC1hOWRlLTUxODgwODJmMTgyMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaRAwDQYJKoZIhvcNAQELBQADggEBABMhyIQOJk9YFVJCcaXt cR+4nX4PQDciCbGfNXM8sZUNZ8k55B2zPwXyoPpKHERA9TA6HtqGrgQxgSikMtuJ qJOovhbkU8M5ke5P1d2MNdeZ9vnKgoKd7XyRnXsZ7Z+FT8cLcuGVIZO2J5OWlzZa cZWFuiV0b4wW3t/ag94mEJcqPGhztBK9jDN8gyD6jorOJ62Ic1US9o1v01j+jarZ 0OelQdv2qgfn9F0DVj4TJfAE+p1X0vhX4m/G/0NgZK8DZWcqz6Db9pGpaMZhwjko yoi95MApU36Cw90JKTmAma2Z4+H1HVhgpZtlhqv8WaEvSMjGre9g/Cxae3uk8Eao RuM= -----END CERTIFICATE-----Generated at Sun Jun 2 01:37:01 2024 by rpki-client on console-ams.rpki-client.org