$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/235f359d-e1b2-4bd7-9910-360fce79f1be.roa File: 235f359d-e1b2-4bd7-9910-360fce79f1be.roa (raw, json) Hash identifier: X6RkQddo0vUqRaNgTXv01QwYc4tTVKWktGiCKXko29Q= Subject key identifier: 4F:D9:C7:CC:A4:E8:C6:6A:9E:86:87:37:E0:7B:A8:23:22:DB:F0:EE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1063E9A04F7503DD5E2569B892D544E66BDF48F5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/235f359d-e1b2-4bd7-9910-360fce79f1be.roa Signing time: Mon 06 Mar 2023 00:00:00 +0000 ROA not before: Mon 06 Mar 2023 00:00:00 +0000 ROA not after: Mon 10 Apr 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da68:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 16 Mar 2023 12:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:63:e9:a0:4f:75:03:dd:5e:25:69:b8:92:d5:44:e6:6b:df:48:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 6 00:00:00 2023 GMT Not After : Apr 10 23:59:59 2023 GMT Subject: serialNumber=214292821efb3da7d79315ce135445bc2c1b36fbe17dc46146357740f9cc64db, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81, OU=Amazon RPKI, O=Amazon.com Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:dd:d5:f3:d2:84:4e:92:58:31:8e:b5:6d:4d: e0:59:3e:22:2b:23:40:dc:69:33:73:e8:17:f4:5c: 99:f4:2f:7c:b7:e9:5b:00:65:c6:2d:13:6c:0b:f2: 9f:a3:b5:57:b7:c2:37:ac:0c:99:04:15:84:93:c1: dd:64:18:f1:73:1d:84:19:6d:77:a9:9d:dc:81:8e: 1c:3d:5e:3b:a1:c4:f7:50:bc:e1:02:35:3f:c7:03: 1a:2e:de:3d:93:f8:38:f3:41:3c:00:cd:f2:35:db: b3:52:d2:40:c8:2e:34:fd:53:c1:1d:10:bd:06:24: 12:54:39:e3:58:89:51:ca:98:7c:99:11:7d:00:27: f1:65:5d:1d:f5:37:87:c6:de:f7:d6:66:9f:b3:d2: d2:40:41:07:77:e7:f9:cd:ce:f8:83:05:46:ac:df: 10:71:95:af:4a:37:5a:d8:4a:e6:f1:49:f6:66:a5: 25:3f:6e:8d:c3:0c:05:6f:42:ce:e7:ef:35:ae:5a: c5:44:a9:87:dd:77:5f:4e:dd:f9:19:45:8a:55:74: fc:e2:1b:c1:74:6e:2e:f7:a4:ab:6c:89:03:08:68: 50:20:5a:79:ea:d9:19:fb:d0:1a:b4:ef:0b:de:61: 02:e5:58:1d:b4:05:93:49:28:e3:49:2e:89:b3:c9: 6e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D9:C7:CC:A4:E8:C6:6A:9E:86:87:37:E0:7B:A8:23:22:DB:F0:EE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/235f359d-e1b2-4bd7-9910-360fce79f1be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da68:2000::/40 Signature Algorithm: sha256WithRSAEncryption 96:5f:83:ea:44:6e:14:21:a6:18:23:ba:44:35:d3:04:83:2f: c1:68:30:c1:37:78:1d:89:0f:1c:66:c6:12:a3:b2:88:ce:e3: 86:9c:b0:c1:5a:78:ea:89:2e:7d:ba:a0:b0:25:ab:92:36:6a: ea:62:98:f9:3c:05:a3:73:9b:8a:82:29:ce:14:41:8c:e3:f4: 27:94:61:94:4b:9d:9e:f4:e1:5d:22:01:03:d9:54:97:4c:b2: 87:b0:6c:5d:75:ec:8f:e7:0d:f3:bb:77:e8:fe:5d:cc:6b:46: 90:84:f5:f2:d6:9c:f4:a2:f1:c9:9c:3f:77:e5:b2:4a:f3:02: 3e:3c:6b:f1:2c:5c:58:00:fe:a7:3d:98:22:e5:26:da:1c:cc: 9b:cb:96:32:65:cd:4c:b4:bd:8f:8a:6a:e5:92:89:02:bf:e8: 7c:0d:e0:fc:44:c3:13:7f:56:eb:f0:f3:77:81:0e:0c:f5:64: b1:8d:ec:5c:76:a7:45:1c:30:78:03:fb:5c:4f:3f:2f:79:74: 16:90:d0:2f:16:d6:df:78:5e:5a:6f:cd:d0:e8:64:60:be:d2: f4:a7:b9:88:01:2b:79:f5:b6:1c:03:13:27:fa:1a:b1:6e:e8: 17:a9:d7:97:3a:fd:a0:d0:02:7b:31:ec:ae:d0:8c:a0:db:9c: b1:cf:5f:f4 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUEGPpoE91A91eJWm4ktVE5mvfSPUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDMwNjAwMDAwMFoX DTIzMDQxMDIzNTk1OVowgaUxSTBHBgNVBAUTQDIxNDI5MjgyMWVmYjNkYTdkNzkz MTVjZTEzNTQ0NWJjMmMxYjM2ZmJlMTdkYzQ2MTQ2MzU3NzQwZjljYzY0ZGIxLTAr BgNVBAMTJGMwYmYwZmU4LTcxN2MtNGY3Mi05YjQ1LWM5YzUxOTEzMmE4MTEUMBIG A1UECxMLQW1hem9uIFJQS0kxEzARBgNVBAoTCkFtYXpvbi5jb20wggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn3dXz0oROklgxjrVtTeBZPiIrI0DcaTNz 6Bf0XJn0L3y36VsAZcYtE2wL8p+jtVe3wjesDJkEFYSTwd1kGPFzHYQZbXepndyB jhw9XjuhxPdQvOECNT/HAxou3j2T+DjzQTwAzfI127NS0kDILjT9U8EdEL0GJBJU OeNYiVHKmHyZEX0AJ/FlXR31N4fG3vfWZp+z0tJAQQd35/nNzviDBUas3xBxla9K N1rYSubxSfZmpSU/bo3DDAVvQs7n7zWuWsVEqYfdd19O3fkZRYpVdPziG8F0bi73 pKtsiQMIaFAgWnnq2Rn70Bq07wveYQLlWB20BZNJKONJLomzyW7rAgMBAAGjggJK MIICRjAdBgNVHQ4EFgQUT9nHzKToxmqehoc34HuoIyLb8O4wHwYDVR0jBBgwFoAU QHaCVSTSxm0uEENv5l6T6MG9SjcwDgYDVR0PAQH/BAQDAgeAMH4GCCsGAQUFBwEB BHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL1FIYUNWU1RTeG0w dUVFTnY1bDZUNk1HOVNqYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1MGJlYzkyNjEvMjM1 ZjM1OWQtZTFiMi00YmQ3LTk5MTAtMzYwZmNlNzlmMWJlLnJvYTCBlQYDVR0fBIGN MIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lLzA4YzJmMjY0LTIzZjktNDlmYi05ZDQzLWY4YjUwYmVj OTI2MS83YmExNzg2My1hNjEzLTQxOTctOWVkNS1iZWRhNmE4OTg2OWYuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAkBtpoIDANBgkqhkiG9w0BAQsFAAOCAQEAll+D6kRuFCGmGCO6RDXTBIMv wWgwwTd4HYkPHGbGEqOyiM7jhpywwVp46okufbqgsCWrkjZq6mKY+TwFo3ObioIp zhRBjOP0J5RhlEudnvThXSIBA9lUl0yyh7BsXXXsj+cN87t36P5dzGtGkIT18tac 9KLxyZw/d+WySvMCPjxr8SxcWAD+pz2YIuUm2hzMm8uWMmXNTLS9j4pq5ZKJAr/o fA3g/ETDE39W6/Dzd4EODPVksY3sXHanRRwweAP7XE8/L3l0FpDQLxbW33heWm/N 0OhkYL7S9Ke5iAErefW2HAMTJ/oasW7oF6nXlzr9oNACezHsrtCMoNucsc9f9A== -----END CERTIFICATE-----Generated at Wed Mar 15 11:52:17 2023 by rpki-client on console-fra.rpki-client.org