$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/26c0d750-3b77-46aa-a2cc-95174572fcb2.roa File: 26c0d750-3b77-46aa-a2cc-95174572fcb2.roa (raw, json) Hash identifier: O3K9POIsW+xIsK5Ng5eYsSHu50ZE5b4TiWndfl/G7Tw= Subject key identifier: DF:B7:2A:32:FD:E3:2C:0F:6D:1E:12:D9:13:B8:98:FD:51:FB:01:A4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 57B2E590C27DEB69A5A07A4697F64AE674359104 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/26c0d750-3b77-46aa-a2cc-95174572fcb2.roa Signing time: Wed 01 May 2024 00:00:00 +0000 ROA not before: Wed 01 May 2024 00:00:00 +0000 ROA not after: Wed 05 Jun 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 15:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:b2:e5:90:c2:7d:eb:69:a5:a0:7a:46:97:f6:4a:e6:74:35:91:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 1 00:00:00 2024 GMT Not After : Jun 5 23:59:59 2024 GMT Subject: serialNumber=c6046e7d618b5cd8523ef2b6a7f15d4e8bfacbf4586d06cca298d7236f8c0bf3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c8:fa:21:34:30:a1:35:a2:84:af:36:96:21: 85:ef:e2:d3:c2:c3:9b:ac:da:16:a3:65:79:69:b2: 19:0f:7d:1d:41:c0:2a:ed:27:69:6c:0b:71:90:ef: 6d:bf:e6:0f:ab:88:13:92:81:71:a6:7f:23:a0:79: 8d:e9:c0:8b:d3:ce:ba:2e:82:05:8e:0e:90:ae:fc: 23:06:94:e5:df:2a:ab:8b:55:ea:04:34:96:e2:74: df:f3:43:f8:59:7f:cc:27:27:02:d5:c7:af:56:5d: 20:15:12:63:3a:1c:89:39:4b:d3:1b:73:b4:26:b8: 95:22:aa:ba:53:b5:2f:5a:68:a8:c0:79:9f:ee:10: bb:e1:d4:ef:46:89:c2:26:cf:c9:34:f7:35:a9:f2: 30:1e:24:82:f9:ea:7d:96:f8:e8:f2:34:fe:20:cc: 0c:d2:99:26:a7:69:66:27:0a:a3:a9:00:62:c3:b7: b7:7d:cb:e8:79:b5:ce:af:22:e5:5a:4d:6d:0e:37: eb:71:0f:77:c2:ca:81:5d:d1:8d:55:99:04:fa:19: 47:19:ce:1e:c1:14:18:9c:ed:e4:e0:a5:da:62:48: dd:6c:1a:84:35:5c:52:27:c3:d6:10:1b:50:d9:1b: 6e:96:b0:c7:91:ca:1b:78:f1:78:8e:05:93:f5:22: 9a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B7:2A:32:FD:E3:2C:0F:6D:1E:12:D9:13:B8:98:FD:51:FB:01:A4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/26c0d750-3b77-46aa-a2cc-95174572fcb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:6000::/40 Signature Algorithm: sha256WithRSAEncryption 20:e9:30:a1:fa:e1:0b:06:dc:04:3d:5a:4d:ef:a4:cf:b1:91: 2c:4b:23:5e:06:ef:53:b2:c4:07:48:cc:dc:92:ae:5c:3f:5d: ff:e8:66:c3:88:44:b1:4b:63:0b:ca:df:48:4c:e2:4e:60:e9: 65:4a:51:42:d1:1e:cf:2c:ec:c2:26:e4:08:8c:a5:51:9c:5e: e7:01:14:cf:63:0c:80:71:4f:fc:5d:09:ef:47:59:b1:a2:70: 79:4d:55:60:05:5c:7a:5c:9c:39:47:d4:fd:6a:32:ea:0e:f8: c1:a8:88:4d:5b:aa:e8:a4:ee:5d:fc:fe:15:05:a2:d0:6a:d4: c4:ae:30:a2:4b:aa:77:f0:71:f8:8d:b4:54:21:c6:83:54:8f: 55:49:19:da:e5:30:61:c9:e0:0f:56:79:8a:c0:f2:cd:f4:6e: 5e:4b:d1:0b:de:f7:e0:3a:dc:f9:62:4c:b0:69:2f:ed:58:a1: 5f:e3:6a:25:4b:66:10:8a:fb:2b:e7:df:81:57:ea:d2:be:48: 80:1e:b1:8f:2e:79:e0:e5:6a:1a:68:44:52:a7:ea:5e:88:4d: 22:d0:23:6f:05:a8:9c:15:a1:c9:ac:d0:70:d8:7a:32:ba:e6: 16:e7:83:97:b5:33:96:af:2f:51:50:39:70:16:c6:79:ba:a0: ae:60:7b:19 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUV7LlkMJ962mloHpGl/ZK5nQ1kQQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUwMTAwMDAwMFoX DTI0MDYwNTIzNTk1OVowejFJMEcGA1UEBRNAYzYwNDZlN2Q2MThiNWNkODUyM2Vm MmI2YTdmMTVkNGU4YmZhY2JmNDU4NmQwNmNjYTI5OGQ3MjM2ZjhjMGJmMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcj6ITQwoTWihK82liGF7+LTwsOb rNoWo2V5abIZD30dQcAq7SdpbAtxkO9tv+YPq4gTkoFxpn8joHmN6cCL0866LoIF jg6QrvwjBpTl3yqri1XqBDSW4nTf80P4WX/MJycC1cevVl0gFRJjOhyJOUvTG3O0 JriVIqq6U7UvWmiowHmf7hC74dTvRonCJs/JNPc1qfIwHiSC+ep9lvjo8jT+IMwM 0pkmp2lmJwqjqQBiw7e3fcvoebXOryLlWk1tDjfrcQ93wsqBXdGNVZkE+hlHGc4e wRQYnO3k4KXaYkjdbBqENVxSJ8PWEBtQ2RtulrDHkcobePF4jgWT9SKakQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFN+3KjL94ywPbR4S2RO4mP1R+wGkMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI2YzBkNzUwLTNiNzctNDZhYS1hMmNjLTk1MTc0NTcyZmNiMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaAGAwDQYJKoZIhvcNAQELBQADggEBACDpMKH64QsG3AQ9Wk3v pM+xkSxLI14G71OyxAdIzNySrlw/Xf/oZsOIRLFLYwvK30hM4k5g6WVKUULRHs8s 7MIm5AiMpVGcXucBFM9jDIBxT/xdCe9HWbGicHlNVWAFXHpcnDlH1P1qMuoO+MGo iE1bquik7l38/hUFotBq1MSuMKJLqnfwcfiNtFQhxoNUj1VJGdrlMGHJ4A9WeYrA 8s30bl5L0Qve9+A63PliTLBpL+1YoV/jaiVLZhCK+yvn34FX6tK+SIAesY8ueeDl ahpoRFKn6l6ITSLQI28FqJwVocms0HDYejK65hbng5e1M5avL1FQOXAWxnm6oK5g exk= -----END CERTIFICATE-----Generated at Tue May 7 16:43:58 2024 by rpki-client on console-ams.rpki-client.org