$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/26c0d750-3b77-46aa-a2cc-95174572fcb2.roa File: 26c0d750-3b77-46aa-a2cc-95174572fcb2.roa (raw, json) Hash identifier: 6ozIck98KYK1zwY+c7A0LywJ3+ORf93DrqW4CthjbOU= Subject key identifier: 58:9F:A4:8A:FB:D5:F9:9F:C6:93:18:19:E3:BA:47:48:23:7A:9F:75 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2BFEBB42FEC4DCCEC097802FC8FB4C160197B4B9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/26c0d750-3b77-46aa-a2cc-95174572fcb2.roa Signing time: Mon 18 Sep 2023 00:00:00 +0000 ROA not before: Mon 18 Sep 2023 00:00:00 +0000 ROA not after: Mon 23 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Sep 2023 03:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:fe:bb:42:fe:c4:dc:ce:c0:97:80:2f:c8:fb:4c:16:01:97:b4:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 18 00:00:00 2023 GMT Not After : Oct 23 23:59:59 2023 GMT Subject: serialNumber=c0db1ada5ca14152987e9ecd3eee43071c3149a43ac557ed8ce62eded5748da8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:10:5f:0d:3d:12:1d:80:c9:d2:13:aa:d2:b6: 37:f6:2c:26:53:bb:a8:c3:4d:87:ff:bb:d2:8e:6d: fa:fd:65:e9:f1:5e:16:68:c8:f6:bc:04:19:b3:13: b8:be:8e:6d:1a:ff:da:fb:31:8c:66:9f:b5:41:b5: 9f:ee:63:9a:a7:ef:7d:e2:e2:08:ef:55:38:72:bb: 52:e2:82:fb:1b:ac:0e:57:ae:6c:eb:90:6e:ac:3b: b4:21:30:4f:68:7d:e1:7a:09:39:2f:64:db:07:9f: 2c:2c:af:c6:9c:c6:b6:96:72:af:4f:d3:d1:59:b8: 72:10:d2:c2:e9:0e:98:bf:58:fe:80:76:c0:48:e4: 83:2e:ed:cc:61:7c:8a:da:ab:26:25:44:13:3b:67: 1a:2d:7e:de:2f:2c:ea:3b:fc:55:a8:5f:da:6c:b6: 92:63:29:68:b3:df:fd:b2:77:e2:63:d1:e9:a4:05: bf:6d:3d:25:dd:22:c5:31:37:c7:88:a0:7e:6e:80: f4:64:6e:4f:0e:26:18:ce:c5:f4:4e:30:34:94:e0: ce:3e:50:6a:bd:05:89:e2:43:c7:ad:ff:6d:5d:9d: 4c:74:e9:d9:15:71:b9:ab:ce:45:dd:05:91:fe:b3: b3:c9:5f:7f:50:6f:1b:9d:71:63:e7:67:b7:b9:b4: eb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9F:A4:8A:FB:D5:F9:9F:C6:93:18:19:E3:BA:47:48:23:7A:9F:75 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/26c0d750-3b77-46aa-a2cc-95174572fcb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:6000::/40 Signature Algorithm: sha256WithRSAEncryption 5d:06:75:53:b0:aa:b7:84:6c:ef:a6:51:d8:62:10:cd:84:c4: 8c:0d:20:61:98:07:d9:69:fd:a8:b8:6c:80:30:ec:f7:33:ca: 82:5e:f2:09:2c:88:7a:e2:ac:5f:07:1f:c9:14:15:7a:5e:ff: 57:f6:5d:b4:71:70:54:ca:98:b0:70:68:e0:47:65:70:40:08: 2f:c4:0c:2f:fe:d2:43:e0:af:88:b7:e6:eb:ef:4a:8a:71:17: de:27:0f:e4:13:32:99:70:82:a1:d3:c8:01:4e:e1:b7:ad:99: cc:5b:49:35:27:7a:e9:51:68:0b:49:56:e8:2e:82:29:0f:06: 57:f0:cc:e8:72:15:22:1a:a2:39:6d:9b:f7:c9:20:b4:61:05: 7e:63:e5:b8:f3:1a:6b:0f:58:c0:da:bb:2e:3c:28:20:16:1d: 38:55:22:5f:8e:2f:69:2b:3b:ac:63:86:4b:86:07:d9:fc:26: 29:b0:bc:06:da:5b:77:35:0b:1b:63:fd:7e:1e:0a:51:e8:d6: 5e:f8:15:bc:c4:8c:ee:ad:bd:47:18:93:9a:19:75:64:af:0c: 9b:d8:d1:31:dd:82:36:4b:ca:08:8b:d0:01:6a:da:28:7f:da: 20:b6:20:4a:f4:b2:61:77:35:40:46:de:bc:6d:43:55:ff:d4: 38:a3:aa:ef -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUK/67Qv7E3M7Al4AvyPtMFgGXtLkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkxODAwMDAwMFoX DTIzMTAyMzIzNTk1OVowejFJMEcGA1UEBRNAYzBkYjFhZGE1Y2ExNDE1Mjk4N2U5 ZWNkM2VlZTQzMDcxYzMxNDlhNDNhYzU1N2VkOGNlNjJlZGVkNTc0OGRhODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hBfDT0SHYDJ0hOq0rY39iwmU7uo w02H/7vSjm36/WXp8V4WaMj2vAQZsxO4vo5tGv/a+zGMZp+1QbWf7mOap+994uII 71U4crtS4oL7G6wOV65s65BurDu0ITBPaH3hegk5L2TbB58sLK/GnMa2lnKvT9PR WbhyENLC6Q6Yv1j+gHbASOSDLu3MYXyK2qsmJUQTO2caLX7eLyzqO/xVqF/abLaS Yylos9/9snfiY9HppAW/bT0l3SLFMTfHiKB+boD0ZG5PDiYYzsX0TjA0lODOPlBq vQWJ4kPHrf9tXZ1MdOnZFXG5q85F3QWR/rOzyV9/UG8bnXFj52e3ubTr8wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFifpIr71fmfxpMYGeO6R0gjep91MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI2YzBkNzUwLTNiNzctNDZhYS1hMmNjLTk1MTc0NTcyZmNiMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaAGAwDQYJKoZIhvcNAQELBQADggEBAF0GdVOwqreEbO+mUdhi EM2ExIwNIGGYB9lp/ai4bIAw7PczyoJe8gksiHrirF8HH8kUFXpe/1f2XbRxcFTK mLBwaOBHZXBACC/EDC/+0kPgr4i35uvvSopxF94nD+QTMplwgqHTyAFO4betmcxb STUneulRaAtJVugugikPBlfwzOhyFSIaojltm/fJILRhBX5j5bjzGmsPWMDauy48 KCAWHThVIl+OL2krO6xjhkuGB9n8JimwvAbaW3c1Cxtj/X4eClHo1l74FbzEjO6t vUcYk5oZdWSvDJvY0THdgjZLygiL0AFq2ih/2iC2IEr0smF3NUBG3rxtQ1X/1Dij qu8= -----END CERTIFICATE-----Generated at Mon Sep 18 15:40:39 2023 by rpki-client on console-ams.rpki-client.org