$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/65f60eb5-aea2-48c7-83e9-3e1305e6dbea.roa File: 65f60eb5-aea2-48c7-83e9-3e1305e6dbea.roa (raw, json) Hash identifier: +h/S3CLEgGfPcd7oMO7Kjb7eTNugGWAVQl5o+o9qLRY= Subject key identifier: 2D:B1:F8:13:A9:7F:12:3F:6C:E5:53:F1:9A:24:04:D5:C6:3D:51:87 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 52AD4A8BFA8F5232F743B22F43C6CD4CC06AC34E Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/65f60eb5-aea2-48c7-83e9-3e1305e6dbea.roa Signing time: Mon 27 May 2024 00:00:00 +0000 ROA not before: Mon 27 May 2024 00:00:00 +0000 ROA not after: Mon 01 Jul 2024 23:59:59 +0000 asID: 16509 IP address blocks: 240f:8018::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 00:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:ad:4a:8b:fa:8f:52:32:f7:43:b2:2f:43:c6:cd:4c:c0:6a:c3:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: May 27 00:00:00 2024 GMT Not After : Jul 1 23:59:59 2024 GMT Subject: serialNumber=9085ccd473fcb2a72991250f5a8c410bce6beb816eb0140cb4a4ca96409bec27, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:39:cd:57:de:48:e8:fc:92:36:c9:b9:17:6a: 34:16:2a:fb:d8:2c:49:db:a5:fe:c6:3b:73:db:3a: c7:f2:b2:86:41:b8:e0:9c:6c:9d:58:69:5c:0a:6a: 8a:40:3b:d2:88:4c:0c:fe:05:e5:df:a9:1c:13:9e: 01:c9:62:24:85:4c:aa:58:7c:dd:62:fc:3a:ff:2e: 04:12:bd:c0:e3:48:f8:46:b2:9b:16:5d:94:72:aa: 48:c7:d2:c1:70:3c:d7:73:2c:d0:c6:e8:a2:6a:aa: 14:d8:59:28:19:f2:13:3d:6c:3f:71:1e:a4:8d:b3: 17:90:38:e0:ef:d7:de:b0:b6:b6:cd:83:f4:fc:77: dd:21:5f:36:98:76:44:ef:f9:a4:6c:0a:02:ee:7f: 92:5d:e5:9e:68:db:19:b5:4c:f0:60:1f:d0:b7:28: 36:36:e4:a9:9c:5f:18:7a:fb:7f:2a:00:b0:67:74: 59:15:b4:3e:43:33:a2:66:80:31:18:68:29:03:74: a3:b7:f9:c9:d3:02:71:d2:ec:29:b2:05:f9:2e:2b: fa:2b:a5:32:22:dd:09:49:ef:91:df:31:b3:b2:a9: aa:49:35:d9:d5:b6:fb:82:bc:43:44:7c:08:06:aa: 41:1e:d9:ce:b0:7e:b5:72:20:e5:cb:37:45:b7:d2: 69:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B1:F8:13:A9:7F:12:3F:6C:E5:53:F1:9A:24:04:D5:C6:3D:51:87 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/65f60eb5-aea2-48c7-83e9-3e1305e6dbea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:8018::/36 Signature Algorithm: sha256WithRSAEncryption 77:93:f4:99:81:5f:51:ee:a9:82:36:8c:be:4e:8f:2c:03:cd: 4f:ef:de:15:09:49:4f:f0:76:58:42:5c:d2:86:fc:1e:f8:ce: 62:f7:a7:86:00:52:30:61:72:27:16:c3:7b:bf:85:f3:15:1a: ef:1a:1b:19:35:2a:95:22:5c:76:b9:63:3d:c9:bb:5b:db:f0: 9f:40:40:6a:e7:7b:dd:c1:85:4c:03:88:e1:94:51:df:8a:b9: ea:dc:04:4c:4e:60:14:71:b5:4b:73:8a:fd:a1:1c:07:45:e4: f8:2f:74:ea:42:e3:5f:b4:70:b9:9f:5c:a0:6c:91:29:50:63: 65:d2:c1:a7:3e:25:8e:ef:14:5c:4f:a2:79:e4:c7:5b:84:f9: 1e:8b:9e:96:34:c4:ce:e8:fb:3e:34:5a:79:86:32:85:42:c3: dc:28:cd:ca:ec:86:f6:5d:9d:1f:05:65:8e:8b:95:3b:16:31: 8c:1c:14:bb:ee:9a:e6:85:54:36:19:eb:c6:5d:aa:38:dc:f1: 47:ed:b2:22:ab:c7:a4:68:3e:65:24:19:95:47:69:76:16:bb: bd:60:69:2d:1d:6f:40:30:40:1e:aa:e8:3f:6e:fb:69:a1:c5: c9:bc:59:7c:a2:96:f4:cd:5f:13:5b:b1:69:02:0b:9d:43:c6: 44:25:b1:db -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUUq1Ki/qPUjL3Q7IvQ8bNTMBqw04wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI0MDUyNzAwMDAwMFoX DTI0MDcwMTIzNTk1OVowejFJMEcGA1UEBRNAOTA4NWNjZDQ3M2ZjYjJhNzI5OTEy NTBmNWE4YzQxMGJjZTZiZWI4MTZlYjAxNDBjYjRhNGNhOTY0MDliZWMyNzEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjnNV95I6PySNsm5F2o0Fir72CxJ 26X+xjtz2zrH8rKGQbjgnGydWGlcCmqKQDvSiEwM/gXl36kcE54ByWIkhUyqWHzd Yvw6/y4EEr3A40j4RrKbFl2UcqpIx9LBcDzXcyzQxuiiaqoU2FkoGfITPWw/cR6k jbMXkDjg79fesLa2zYP0/HfdIV82mHZE7/mkbAoC7n+SXeWeaNsZtUzwYB/Qtyg2 NuSpnF8Yevt/KgCwZ3RZFbQ+QzOiZoAxGGgpA3Sjt/nJ0wJx0uwpsgX5Liv6K6Uy It0JSe+R3zGzsqmqSTXZ1bb7grxDRHwIBqpBHtnOsH61ciDlyzdFt9JpmQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFC2x+BOpfxI/bOVT8ZokBNXGPVGHMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzY1ZjYwZWI1LWFlYTItNDhjNy04M2U5LTNlMTMwNWU2ZGJlYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJA+AGAAwDQYJKoZIhvcNAQELBQADggEBAHeT9JmBX1HuqYI2jL5O jywDzU/v3hUJSU/wdlhCXNKG/B74zmL3p4YAUjBhcicWw3u/hfMVGu8aGxk1KpUi XHa5Yz3Ju1vb8J9AQGrne93BhUwDiOGUUd+KuercBExOYBRxtUtziv2hHAdF5Pgv dOpC41+0cLmfXKBskSlQY2XSwac+JY7vFFxPonnkx1uE+R6LnpY0xM7o+z40WnmG MoVCw9wozcrshvZdnR8FZY6LlTsWMYwcFLvumuaFVDYZ68Zdqjjc8UftsiKrx6Ro PmUkGZVHaXYWu71gaS0db0AwQB6q6D9u+2mhxcm8WXyilvTNXxNbsWkCC51DxkQl sds= -----END CERTIFICATE-----Generated at Sun Jun 2 01:00:49 2024 by rpki-client on console-fra.rpki-client.org