$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1186c93f-0bd5-4480-aec0-f19df528c312.roa File: 1186c93f-0bd5-4480-aec0-f19df528c312.roa (raw, json) Hash identifier: bWqi5oYAYhYzyn3ufQOG62jcjPkGG5kil1yOxXLtnpc= Subject key identifier: CB:14:73:88:B3:8C:46:A5:EE:36:9B:FB:05:F9:24:74:A9:4D:42:7E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 41CCE67DDC9EEE2CA17EC5332AE8DF17789FC4F4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1186c93f-0bd5-4480-aec0-f19df528c312.roa Signing time: Mon 20 Mar 2023 00:00:00 +0000 ROA not before: Mon 20 Mar 2023 00:00:00 +0000 ROA not after: Mon 24 Apr 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da23::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Mar 2023 12:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:cc:e6:7d:dc:9e:ee:2c:a1:7e:c5:33:2a:e8:df:17:78:9f:c4:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 20 00:00:00 2023 GMT Not After : Apr 24 23:59:59 2023 GMT Subject: serialNumber=125fc5fdaaf86312266f11b5eac4b65592336ebdf36b8deb2f4bf361ba6d789f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81, OU=Amazon RPKI, O=Amazon.com Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a4:29:4a:3c:49:ec:67:ec:c2:9f:81:9e:f0: b1:45:0c:64:68:7c:f0:57:31:76:5a:34:6a:15:35: 8c:d4:84:af:82:99:74:f4:18:c5:e2:80:79:42:05: 00:ae:3d:a1:16:e6:a3:05:b5:b8:cc:c1:11:bc:2a: c0:c3:a5:c2:48:20:7f:03:4f:77:7b:b5:26:55:ab: 49:9e:50:20:6b:e8:6f:56:d3:6a:3d:14:d9:d8:58: 84:5e:3a:2c:7f:20:d2:7f:57:f1:dc:07:2f:99:86: 54:9f:ab:f5:70:a3:b5:52:49:47:27:5d:49:52:72: f2:5c:4a:5c:9b:c9:0a:0d:3a:86:86:5a:22:b8:ab: e2:c3:a1:39:e0:65:1a:0f:36:6b:0f:21:3b:f7:ba: d9:d6:63:27:d1:de:ff:8e:c4:76:8f:c9:e6:bb:e1: 6b:ca:cb:f8:ae:77:c7:a0:59:c5:0e:42:6d:a7:24: dc:23:dc:76:48:32:e0:34:31:d1:a2:0e:34:f2:51: 9a:04:da:e6:52:62:09:4e:61:7c:6f:74:2e:c1:a9: c2:ce:8b:c3:e3:e6:e7:0b:c4:ab:51:e6:55:14:e2: 06:21:45:90:7d:fc:98:1e:82:e0:9c:d5:c1:bb:10: 53:bd:72:8e:de:93:8b:d8:91:fd:92:83:62:25:6f: 34:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:14:73:88:B3:8C:46:A5:EE:36:9B:FB:05:F9:24:74:A9:4D:42:7E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1186c93f-0bd5-4480-aec0-f19df528c312.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da23::/36 Signature Algorithm: sha256WithRSAEncryption 28:8a:65:7c:00:80:e5:7f:11:f7:2c:02:61:15:fe:65:b1:33: 59:13:e9:a9:fb:1d:e8:c3:06:f7:25:3e:b4:50:d2:ef:ea:03: 84:5c:af:17:70:e1:0b:57:60:cd:be:00:45:97:02:75:d7:5b: c2:e2:ae:55:39:e4:a6:8b:eb:3c:54:85:81:cb:17:6d:ba:95: d1:13:db:06:b0:25:36:3d:4e:a1:1a:8e:8a:f3:bf:17:40:ec: 86:87:1f:54:7c:5c:98:e5:9d:6d:ae:49:1f:44:54:54:ae:45: d1:6f:0d:bb:56:c2:47:18:be:26:92:ed:1c:cf:58:68:fa:97: 41:6e:41:e5:d8:4b:67:b9:93:32:d9:1a:5c:de:fc:71:ac:de: ce:d6:62:2e:d5:e2:94:d4:4d:5c:36:c8:ea:50:7b:b0:bb:77: 9e:60:89:99:da:ae:7d:47:52:d1:f8:f0:cd:ad:8b:c6:ce:0a: 6f:b3:f0:fa:ac:03:63:be:75:d3:20:0e:5a:2f:eb:3f:cc:6b: ea:fd:47:12:fc:e2:c8:76:74:e2:8b:9e:fb:8c:ae:ed:34:b1: ce:f0:4f:9b:56:9a:64:69:56:df:b6:fd:08:77:21:a0:68:30: 9d:f7:12:d4:fc:90:10:2b:69:4c:22:f5:8f:31:ca:32:fa:15: c3:43:71:1e -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUQczmfdye7iyhfsUzKujfF3ifxPQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDMyMDAwMDAwMFoX DTIzMDQyNDIzNTk1OVowgaUxSTBHBgNVBAUTQDEyNWZjNWZkYWFmODYzMTIyNjZm MTFiNWVhYzRiNjU1OTIzMzZlYmRmMzZiOGRlYjJmNGJmMzYxYmE2ZDc4OWYxLTAr BgNVBAMTJGMwYmYwZmU4LTcxN2MtNGY3Mi05YjQ1LWM5YzUxOTEzMmE4MTEUMBIG A1UECxMLQW1hem9uIFJQS0kxEzARBgNVBAoTCkFtYXpvbi5jb20wggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrpClKPEnsZ+zCn4Ge8LFFDGRofPBXMXZa NGoVNYzUhK+CmXT0GMXigHlCBQCuPaEW5qMFtbjMwRG8KsDDpcJIIH8DT3d7tSZV q0meUCBr6G9W02o9FNnYWIReOix/INJ/V/HcBy+ZhlSfq/Vwo7VSSUcnXUlScvJc SlybyQoNOoaGWiK4q+LDoTngZRoPNmsPITv3utnWYyfR3v+OxHaPyea74WvKy/iu d8egWcUOQm2nJNwj3HZIMuA0MdGiDjTyUZoE2uZSYglOYXxvdC7BqcLOi8Pj5ucL xKtR5lUU4gYhRZB9/JgeguCc1cG7EFO9co7ek4vYkf2Sg2IlbzQHAgMBAAGjggJK MIICRjAdBgNVHQ4EFgQUyxRziLOMRqXuNpv7BfkkdKlNQn4wHwYDVR0jBBgwFoAU QHaCVSTSxm0uEENv5l6T6MG9SjcwDgYDVR0PAQH/BAQDAgeAMH4GCCsGAQUFBwEB BHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL1FIYUNWU1RTeG0w dUVFTnY1bDZUNk1HOVNqYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1MGJlYzkyNjEvMTE4 NmM5M2YtMGJkNS00NDgwLWFlYzAtZjE5ZGY1MjhjMzEyLnJvYTCBlQYDVR0fBIGN MIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lLzA4YzJmMjY0LTIzZjktNDlmYi05ZDQzLWY4YjUwYmVj OTI2MS83YmExNzg2My1hNjEzLTQxOTctOWVkNS1iZWRhNmE4OTg2OWYuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQkBtojADANBgkqhkiG9w0BAQsFAAOCAQEAKIplfACA5X8R9ywCYRX+ZbEz WRPpqfsd6MMG9yU+tFDS7+oDhFyvF3DhC1dgzb4ARZcCdddbwuKuVTnkpovrPFSF gcsXbbqV0RPbBrAlNj1OoRqOivO/F0DshocfVHxcmOWdba5JH0RUVK5F0W8Nu1bC Rxi+JpLtHM9YaPqXQW5B5dhLZ7mTMtkaXN78cazeztZiLtXilNRNXDbI6lB7sLt3 nmCJmdqufUdS0fjwza2Lxs4Kb7Pw+qwDY7510yAOWi/rP8xr6v1HEvziyHZ04oue +4yu7TSxzvBPm1aaZGlW37b9CHchoGgwnfcS1PyQECtpTCL1jzHKMvoVw0NxHg== -----END CERTIFICATE-----Generated at Mon Mar 20 00:26:27 2023 by rpki-client on console-fra.rpki-client.org