$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/84292d65-2b01-4a5c-9515-02cb05bc483c.roa File: 84292d65-2b01-4a5c-9515-02cb05bc483c.roa (raw, json) Hash identifier: ebIgOkm/oUpJVM3snGID/uM7NjrnUYS5T3ux5BBtDt4= Subject key identifier: 7D:AF:9C:B3:FD:0D:85:5E:79:5B:58:9B:88:23:AE:54:F0:15:23:9F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 64D7A702E07F9A8ED0C1B79FFA337AC92757E441 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/84292d65-2b01-4a5c-9515-02cb05bc483c.roa Signing time: Mon 27 May 2024 00:00:00 +0000 ROA not before: Mon 27 May 2024 00:00:00 +0000 ROA not after: Mon 01 Jul 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf1:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 00:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:d7:a7:02:e0:7f:9a:8e:d0:c1:b7:9f:fa:33:7a:c9:27:57:e4:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 27 00:00:00 2024 GMT Not After : Jul 1 23:59:59 2024 GMT Subject: serialNumber=13b2eff409c03de55aecdf2b2ce8bf0939e41f70cf0350c8ef832843278f2c91, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9f:92:78:94:3b:a8:60:66:89:31:81:73:c9: 17:53:5d:9c:d4:12:76:d5:0d:f2:c2:42:f9:cf:6e: c6:bb:dc:96:cc:46:bf:83:26:55:61:c8:d9:ef:6a: 6e:7f:ca:dc:4f:f2:80:f7:27:a3:17:ec:b7:93:9f: fc:c5:c0:49:0c:a5:73:08:1e:bb:f9:34:af:f3:a6: 28:91:b1:b6:32:ce:0d:a3:b8:0b:8f:57:4d:3b:12: be:d1:e4:fb:b3:7a:ea:0d:42:4e:57:62:0e:50:26: b3:e3:f1:60:84:14:ad:4a:fd:b7:33:2b:4f:b3:d5: 58:87:10:86:f8:78:24:0b:13:f5:f0:56:32:a6:f1: d4:3f:ad:ee:5b:e3:3f:b5:e8:85:b2:1f:b2:ed:36: 6c:0b:a5:68:92:27:19:b0:3f:0b:f3:2b:19:be:da: bc:9c:50:ac:f9:45:d7:59:88:66:33:dd:78:31:d7: f7:8a:90:5c:74:06:d9:91:2e:0c:5a:e8:a2:76:9d: ec:65:eb:82:2c:93:d2:ab:d7:bf:cc:b9:fe:b5:d0: b4:d0:43:54:ee:18:ce:80:e9:7e:5c:7d:63:9b:bf: f3:17:cd:e9:55:1e:42:fd:c5:61:c3:65:84:24:a4: bf:91:2b:24:f6:b8:9f:a9:4e:5b:50:16:09:15:90: 0a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:AF:9C:B3:FD:0D:85:5E:79:5B:58:9B:88:23:AE:54:F0:15:23:9F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/84292d65-2b01-4a5c-9515-02cb05bc483c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf1:8000::/40 Signature Algorithm: sha256WithRSAEncryption 69:9e:25:87:8a:40:0d:ff:50:df:95:43:2a:f0:f1:3d:c6:d4: ac:74:3a:fd:c2:96:50:63:b3:ee:09:8e:c7:53:c2:2f:a9:c3: 1f:89:90:f4:84:db:a3:59:f3:0b:94:53:24:e9:af:25:b0:e3: 8e:51:7c:52:6f:4f:cb:90:5f:0f:bc:20:b3:27:4c:68:95:68: b0:cc:69:54:7c:b2:0c:07:19:51:93:0e:69:df:78:1c:25:63: 44:6e:90:e0:b4:e2:e4:5a:47:95:84:15:8b:6b:0c:28:84:2e: 7c:dd:d3:09:02:f7:63:89:d8:df:91:41:97:4f:04:1e:44:3b: 53:82:35:09:ed:37:7a:bd:0e:33:f6:93:1c:fd:b6:74:d9:f5: 28:35:e9:eb:ab:f8:42:bc:50:40:dc:f6:24:24:06:e2:6a:77: c7:cd:a9:cd:7c:cd:57:b1:78:a6:49:26:e7:98:4a:f5:f6:31: 30:52:d4:a5:71:5d:ca:cc:b7:bb:7d:40:9c:9f:bb:80:bc:ad: 43:66:47:25:b5:8b:a5:55:db:6d:a9:ce:24:a5:96:c6:11:12: c7:b6:c6:26:20:17:4f:49:d0:57:cc:6e:b5:4d:db:37:05:b2: e2:64:a0:55:c0:6a:1a:d3:d5:d5:ce:de:7e:30:e0:50:e2:0b: d3:48:3a:7d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUZNenAuB/mo7Qwbef+jN6ySdX5EEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUyNzAwMDAwMFoX DTI0MDcwMTIzNTk1OVowejFJMEcGA1UEBRNAMTNiMmVmZjQwOWMwM2RlNTVhZWNk ZjJiMmNlOGJmMDkzOWU0MWY3MGNmMDM1MGM4ZWY4MzI4NDMyNzhmMmM5MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzp+SeJQ7qGBmiTGBc8kXU12c1BJ2 1Q3ywkL5z27Gu9yWzEa/gyZVYcjZ72puf8rcT/KA9yejF+y3k5/8xcBJDKVzCB67 +TSv86YokbG2Ms4No7gLj1dNOxK+0eT7s3rqDUJOV2IOUCaz4/FghBStSv23MytP s9VYhxCG+HgkCxP18FYypvHUP63uW+M/teiFsh+y7TZsC6VokicZsD8L8ysZvtq8 nFCs+UXXWYhmM914Mdf3ipBcdAbZkS4MWuiidp3sZeuCLJPSq9e/zLn+tdC00ENU 7hjOgOl+XH1jm7/zF83pVR5C/cVhw2WEJKS/kSsk9rifqU5bUBYJFZAKhwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFH2vnLP9DYVeeVtYm4gjrlTwFSOfMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg0MjkyZDY1LTJiMDEtNGE1Yy05NTE1LTAyY2IwNWJjNDgzYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8YAwDQYJKoZIhvcNAQELBQADggEBAGmeJYeKQA3/UN+VQyrw 8T3G1Kx0Ov3CllBjs+4JjsdTwi+pwx+JkPSE26NZ8wuUUyTpryWw445RfFJvT8uQ Xw+8ILMnTGiVaLDMaVR8sgwHGVGTDmnfeBwlY0RukOC04uRaR5WEFYtrDCiELnzd 0wkC92OJ2N+RQZdPBB5EO1OCNQntN3q9DjP2kxz9tnTZ9Sg16eur+EK8UEDc9iQk BuJqd8fNqc18zVexeKZJJueYSvX2MTBS1KVxXcrMt7t9QJyfu4C8rUNmRyW1i6VV 222pziSllsYREse2xiYgF09J0FfMbrVN2zcFsuJkoFXAahrT1dXO3n4w4FDiC9NI On0= -----END CERTIFICATE-----Generated at Sun Jun 2 01:00:42 2024 by rpki-client on console-fra.rpki-client.org