$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f7285230-74c4-4939-a7c9-5b74a754b988.roa File: f7285230-74c4-4939-a7c9-5b74a754b988.roa (raw, json) Hash identifier: hD1eYrcfs0kyvTFqxpVblkELyCZzspDV0Wq6U3zF4bk= Subject key identifier: E2:34:E8:79:62:6C:CB:BD:6A:B9:E4:D7:46:84:58:4E:CF:26:14:04 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1AD6F3D886F44306872181B78A829D78C09A1DE5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f7285230-74c4-4939-a7c9-5b74a754b988.roa Signing time: Mon 27 May 2024 00:00:00 +0000 ROA not before: Mon 27 May 2024 00:00:00 +0000 ROA not after: Mon 01 Jul 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 00:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:d6:f3:d8:86:f4:43:06:87:21:81:b7:8a:82:9d:78:c0:9a:1d:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 27 00:00:00 2024 GMT Not After : Jul 1 23:59:59 2024 GMT Subject: serialNumber=719f8b73538f7dc637b114af95fac04f3f7feec46cdae90c5207a8257b5cb78c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5b:e1:ac:11:e5:f7:ed:74:bd:da:19:68:23: 1a:70:42:be:3c:6b:89:58:43:d3:ac:ac:33:6d:d1: 45:a2:30:d2:b2:05:9e:b0:d0:4e:59:57:01:32:e8: 61:35:47:71:4f:99:ee:0d:19:2f:07:bf:ec:cf:bb: 03:4a:d9:b5:0e:f6:1d:52:8c:93:c9:fe:2f:f3:1a: cb:d2:c3:10:92:35:0a:4e:23:b8:41:78:ac:c6:eb: 19:da:c4:25:d5:0e:af:7d:ec:ae:84:84:e5:66:b6: 81:19:21:41:1c:e9:51:05:52:d9:b1:67:ea:f8:45: 4c:d3:4e:b4:0b:4b:33:da:1b:86:65:8f:e2:64:01: 81:b2:58:5f:97:41:dd:9b:e2:39:17:a4:43:dd:49: 88:b1:2e:e9:28:13:dd:c3:f9:e5:48:c3:c2:73:14: cc:99:39:7a:ff:09:3e:d2:f6:49:10:2e:f8:be:5f: 74:e7:d0:a3:d5:6d:25:32:68:54:a3:a6:6c:19:48: 8d:f4:ab:6e:c1:0d:37:2e:8d:e2:c0:e7:27:35:e3: 37:2f:fe:d1:c5:8a:5d:11:39:2d:3b:de:c8:70:8b: 96:71:f7:cb:72:99:bd:bf:92:8c:cc:c6:92:7b:13: a3:32:9f:ac:b0:95:a8:e5:4c:ce:85:4e:f1:11:28: c9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:34:E8:79:62:6C:CB:BD:6A:B9:E4:D7:46:84:58:4E:CF:26:14:04 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f7285230-74c4-4939-a7c9-5b74a754b988.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:1000::/40 Signature Algorithm: sha256WithRSAEncryption 82:06:56:ba:fb:28:8b:f1:02:8d:f2:3c:6f:fd:56:44:5b:6a: 58:dc:de:fa:24:ac:95:54:96:5d:29:1b:e9:00:a2:46:76:82: a5:9d:2a:92:d0:fb:7e:04:9f:18:ee:24:ac:ee:18:23:ad:17: 69:fc:3c:df:1f:da:78:ca:7e:ff:40:d0:f4:7d:a3:92:4a:0c: 65:4f:f2:fd:91:90:c7:6f:60:6c:7e:76:8a:4a:dc:24:c5:05: 9b:ab:03:d7:69:e0:96:1f:63:d1:41:f8:44:0c:c2:fd:1b:f7: 5a:59:b4:56:ce:16:c0:81:83:80:90:97:fe:4f:99:dd:8f:2b: f1:0f:55:9a:23:86:c4:a2:08:40:53:6d:44:17:37:8a:e0:ef: 72:fd:e2:bc:ba:bc:b3:5d:53:4f:db:fe:39:fd:75:12:da:03: d5:32:bb:b5:71:bd:5e:0d:f2:bf:80:37:23:2e:c4:a2:ca:ec: f7:7d:d4:24:4d:88:9d:68:6c:2f:14:60:af:be:3e:21:80:15: a4:f3:1d:6c:8d:b0:5e:94:51:62:43:70:4e:3e:67:a6:f8:49: 7c:5c:89:24:1d:01:d9:72:9c:b1:2d:e5:bf:36:c3:b5:a7:18: 3f:ff:69:f0:a5:55:c6:b1:d3:99:a8:a0:74:77:e0:64:42:e9: 7c:24:d5:93 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUGtbz2Ib0QwaHIYG3ioKdeMCaHeUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUyNzAwMDAwMFoX DTI0MDcwMTIzNTk1OVowejFJMEcGA1UEBRNANzE5ZjhiNzM1MzhmN2RjNjM3YjEx NGFmOTVmYWMwNGYzZjdmZWVjNDZjZGFlOTBjNTIwN2E4MjU3YjVjYjc4YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslvhrBHl9+10vdoZaCMacEK+PGuJ WEPTrKwzbdFFojDSsgWesNBOWVcBMuhhNUdxT5nuDRkvB7/sz7sDStm1DvYdUoyT yf4v8xrL0sMQkjUKTiO4QXisxusZ2sQl1Q6vfeyuhITlZraBGSFBHOlRBVLZsWfq +EVM0060C0sz2huGZY/iZAGBslhfl0Hdm+I5F6RD3UmIsS7pKBPdw/nlSMPCcxTM mTl6/wk+0vZJEC74vl9059Cj1W0lMmhUo6ZsGUiN9KtuwQ03Lo3iwOcnNeM3L/7R xYpdETktO97IcIuWcffLcpm9v5KMzMaSexOjMp+ssJWo5UzOhU7xESjJ8QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOI06HlibMu9arnk10aEWE7PJhQEMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y3Mjg1MjMwLTc0YzQtNDkzOS1hN2M5LTViNzRhNzU0Yjk4OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/xAwDQYJKoZIhvcNAQELBQADggEBAIIGVrr7KIvxAo3yPG/9 VkRbaljc3vokrJVUll0pG+kAokZ2gqWdKpLQ+34EnxjuJKzuGCOtF2n8PN8f2njK fv9A0PR9o5JKDGVP8v2RkMdvYGx+dopK3CTFBZurA9dp4JYfY9FB+EQMwv0b91pZ tFbOFsCBg4CQl/5Pmd2PK/EPVZojhsSiCEBTbUQXN4rg73L94ry6vLNdU0/b/jn9 dRLaA9Uyu7VxvV4N8r+ANyMuxKLK7Pd91CRNiJ1obC8UYK++PiGAFaTzHWyNsF6U UWJDcE4+Z6b4SXxciSQdAdlynLEt5b82w7WnGD//afClVcax05mooHR34GRC6Xwk 1ZM= -----END CERTIFICATE-----Generated at Sun Jun 2 01:37:02 2024 by rpki-client on console-ams.rpki-client.org