$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c27b2338-5ab9-4430-8cc1-8132801f76eb.roa File: c27b2338-5ab9-4430-8cc1-8132801f76eb.roa (raw, json) Hash identifier: QImG1X/oXLTT9XKd5Sv07E9GW4LuyCWswaE+y6SYSu8= Subject key identifier: D6:56:88:FB:19:8F:47:9B:63:42:61:1D:18:7A:DB:65:98:88:36:21 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7F0FD3D94C5143AAB25695559D4B3D5DF7AC2B56 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c27b2338-5ab9-4430-8cc1-8132801f76eb.roa Signing time: Mon 20 May 2024 00:00:00 +0000 ROA not before: Mon 20 May 2024 00:00:00 +0000 ROA not after: Mon 24 Jun 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da2c::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 00:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:0f:d3:d9:4c:51:43:aa:b2:56:95:55:9d:4b:3d:5d:f7:ac:2b:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 20 00:00:00 2024 GMT Not After : Jun 24 23:59:59 2024 GMT Subject: serialNumber=84fd5504c15c1a8f52ea05d15cba78ff8ab3e1e9daca7ed1e0b95127fada4f48, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:89:21:75:27:39:24:19:e7:f6:76:2d:f3:4b: 8a:c2:a6:68:eb:6e:18:53:58:2a:7f:c4:ac:75:05: cc:29:e6:a1:df:b1:04:bd:1a:96:7e:1e:fe:06:66: 91:21:47:54:4d:d1:ca:02:18:ef:ac:42:25:d5:e4: 41:8c:70:a6:e8:df:2c:1f:37:7f:87:99:e3:3c:5b: f6:fb:d5:e5:b5:d7:c3:2d:2c:23:b7:62:0e:74:9f: 2e:9b:e5:f9:c9:74:07:37:b6:98:43:a9:df:5e:af: 5b:04:93:9a:0a:4a:93:38:77:cf:a9:a6:de:92:19: 76:6a:ce:b5:c6:04:33:03:e4:a4:b0:2d:87:70:5d: 16:4f:74:66:6a:f9:18:3c:ab:df:25:3f:a0:c5:de: be:40:76:b0:4d:af:52:19:2b:b3:49:1f:70:d4:0c: f3:8c:04:a6:5c:10:4d:e6:ff:40:61:de:3c:e8:3b: 0d:42:33:ea:1c:e8:3e:18:7d:fe:37:1a:5f:1a:1e: 4d:ad:bd:56:26:7e:f8:84:5f:9d:70:8c:46:3e:01: 98:74:e9:7b:93:af:95:4f:f3:dc:d5:ac:52:05:d3: bb:93:ac:12:cf:53:f5:2e:2b:1d:9a:53:3b:0a:28: 9b:d6:f5:14:dd:9e:67:c0:e8:63:74:b7:a3:63:be: b5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:56:88:FB:19:8F:47:9B:63:42:61:1D:18:7A:DB:65:98:88:36:21 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c27b2338-5ab9-4430-8cc1-8132801f76eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da2c::/36 Signature Algorithm: sha256WithRSAEncryption 0f:2d:ad:2c:b9:11:5d:a2:00:cc:4a:24:1a:1c:36:32:44:14: 70:77:bd:b9:5c:19:95:3a:60:cc:3b:75:be:eb:d2:33:c3:03: de:b5:56:e7:fe:62:06:32:e0:2f:2f:dd:f3:41:8a:4f:10:59: 38:98:0f:65:c7:ce:5c:c5:f8:d1:99:50:0e:fe:1b:c8:82:5d: fc:e2:4e:d1:af:7a:f6:58:b3:39:24:55:22:6e:03:10:a7:7f: 4c:8c:24:0a:25:f1:aa:b4:43:45:3e:a3:e7:83:fc:e7:da:1d: 7d:89:5f:0a:0f:1c:1f:49:ec:c2:41:ed:4b:0c:b4:6a:03:54: 27:a8:68:9e:ee:e9:c0:e3:45:3e:7f:0a:7c:fa:49:97:b8:0c: 72:d6:e3:58:ed:bc:9c:5e:81:78:81:0f:33:8d:cb:da:c9:51: 32:6d:fb:10:49:eb:fa:97:b2:67:16:79:9d:a0:75:65:40:44: 8c:fa:d6:e4:cc:2e:7b:cc:f7:d0:37:7c:7c:39:77:94:3e:be: c9:28:3d:a5:92:72:0c:e2:68:87:95:03:93:e3:4a:62:b1:d2: 8a:04:d0:dc:df:85:af:91:c6:0f:32:68:33:c8:cd:89:b8:3c: c0:f9:6d:a6:cf:5e:16:d8:61:30:43:87:51:9e:4f:cc:8a:63: f9:26:7c:6d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUfw/T2UxRQ6qyVpVVnUs9XfesK1YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUyMDAwMDAwMFoX DTI0MDYyNDIzNTk1OVowejFJMEcGA1UEBRNAODRmZDU1MDRjMTVjMWE4ZjUyZWEw NWQxNWNiYTc4ZmY4YWIzZTFlOWRhY2E3ZWQxZTBiOTUxMjdmYWRhNGY0ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwokhdSc5JBnn9nYt80uKwqZo624Y U1gqf8SsdQXMKeah37EEvRqWfh7+BmaRIUdUTdHKAhjvrEIl1eRBjHCm6N8sHzd/ h5njPFv2+9XltdfDLSwjt2IOdJ8um+X5yXQHN7aYQ6nfXq9bBJOaCkqTOHfPqabe khl2as61xgQzA+SksC2HcF0WT3RmavkYPKvfJT+gxd6+QHawTa9SGSuzSR9w1Azz jASmXBBN5v9AYd486DsNQjPqHOg+GH3+NxpfGh5Nrb1WJn74hF+dcIxGPgGYdOl7 k6+VT/Pc1axSBdO7k6wSz1P1LisdmlM7Ciib1vUU3Z5nwOhjdLejY761OwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNZWiPsZj0ebY0JhHRh622WYiDYhMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2MyN2IyMzM4LTVhYjktNDQzMC04Y2MxLTgxMzI4MDFmNzZlYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaLAAwDQYJKoZIhvcNAQELBQADggEBAA8trSy5EV2iAMxKJBoc NjJEFHB3vblcGZU6YMw7db7r0jPDA961Vuf+YgYy4C8v3fNBik8QWTiYD2XHzlzF +NGZUA7+G8iCXfziTtGvevZYszkkVSJuAxCnf0yMJAol8aq0Q0U+o+eD/OfaHX2J XwoPHB9J7MJB7UsMtGoDVCeoaJ7u6cDjRT5/Cnz6SZe4DHLW41jtvJxegXiBDzON y9rJUTJt+xBJ6/qXsmcWeZ2gdWVARIz61uTMLnvM99A3fHw5d5Q+vskoPaWScgzi aIeVA5PjSmKx0ooE0Nzfha+Rxg8yaDPIzYm4PMD5babPXhbYYTBDh1GeT8yKY/km fG0= -----END CERTIFICATE-----Generated at Sun Jun 2 01:37:02 2024 by rpki-client on console-ams.rpki-client.org