$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2ee82c06-e2f9-43c9-9082-75e723e53362.roa File: 2ee82c06-e2f9-43c9-9082-75e723e53362.roa (raw, json) Hash identifier: pU8eKXfrWZ1yy4o7KhD8P2crkatJ093y970+0WUSHU4= Subject key identifier: 57:75:71:29:7F:D7:C7:EF:83:D5:99:51:76:6D:DF:C6:D4:FD:42:B0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1672078C68F7145DB1D20DDDCE08B8FF201A156D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2ee82c06-e2f9-43c9-9082-75e723e53362.roa Signing time: Wed 17 Apr 2024 00:00:00 +0000 ROA not before: Wed 17 Apr 2024 00:00:00 +0000 ROA not after: Wed 22 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:8800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 15:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:72:07:8c:68:f7:14:5d:b1:d2:0d:dd:ce:08:b8:ff:20:1a:15:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 17 00:00:00 2024 GMT Not After : May 22 23:59:59 2024 GMT Subject: serialNumber=3aaf8ce61faad8df44208261a8c0cb27bb3e29cb350fcd83b55d9cabe7273886, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6f:ee:7d:80:65:66:19:e8:1a:cc:79:f3:dd: 0d:b5:be:2f:a1:3a:4f:c6:c3:88:a8:24:1a:7e:09: d5:c6:0d:8f:09:24:6f:41:72:81:50:f3:b5:ee:2a: 3a:e7:54:c5:b2:50:01:24:e1:83:3e:95:d8:c3:59: c1:c9:ce:63:36:df:dd:64:55:4f:9e:78:df:69:22: 9a:d1:b8:8c:ee:c5:7e:81:38:c1:4c:7c:4e:60:9a: 5b:e6:b6:90:f9:a0:e5:ec:92:b9:0e:7b:c8:59:5a: 66:4b:08:77:88:d5:b9:42:76:79:5a:60:2d:60:a2: 92:32:56:75:60:cf:06:6c:69:8b:c8:62:13:9f:eb: be:70:16:e9:c2:c9:95:08:de:70:ff:2a:1b:c1:cf: 96:bb:25:f5:43:0b:31:3f:c0:fb:78:28:a3:97:f9: 0b:14:ba:8d:f2:ae:68:cd:32:ce:a8:8a:67:78:e1: 13:a6:ad:8d:59:50:13:bf:6f:e8:e2:3f:fb:08:a6: 1d:db:3f:ba:5b:c9:58:a3:61:47:fb:5d:f8:b4:ac: e9:5d:85:d5:eb:80:24:3b:45:ee:8f:e2:fc:6b:00: 44:f2:09:18:cb:b2:2f:0f:de:b5:10:9c:c9:21:1f: 5b:a2:23:99:05:ac:65:9e:f1:ff:2c:52:3b:3f:c2: ea:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:75:71:29:7F:D7:C7:EF:83:D5:99:51:76:6D:DF:C6:D4:FD:42:B0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2ee82c06-e2f9-43c9-9082-75e723e53362.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:8800::/40 Signature Algorithm: sha256WithRSAEncryption 60:0f:b9:cd:db:66:1b:82:ae:20:1e:7b:3e:91:11:df:dc:c3: 43:07:2c:c5:c2:bf:1f:f9:8c:63:cc:02:05:62:2a:af:cb:c6: 7a:83:c6:70:e9:58:92:99:5d:6d:4d:27:33:f8:21:c0:23:d5: df:70:5c:47:52:d0:c1:73:db:a7:90:f7:f4:27:6d:d6:92:c0: ff:7a:39:58:0a:e0:4f:9d:b8:db:35:21:79:66:a8:78:55:a7: 53:b8:50:ad:ee:7f:de:8c:95:ae:23:4a:d9:1b:01:87:1f:1b: 1c:ee:a8:b1:35:73:33:59:f3:63:00:bb:d2:c6:52:c2:89:69: b1:fa:fb:8c:93:54:17:97:b1:4a:58:a7:77:1a:00:e5:0a:45: ea:0e:d5:33:a7:6a:9a:fe:81:bd:b5:f8:48:2c:ba:fa:1e:88: f3:5d:9f:b9:fe:df:9f:ac:dd:b7:ef:13:13:2b:36:58:7a:29: e3:91:33:7b:c8:ea:5e:0e:f7:dc:81:4c:f8:70:63:ab:5b:9d: cd:08:19:a9:0a:41:e7:b7:51:95:c8:4c:b5:14:19:b2:5a:44: f6:56:5a:52:55:d0:71:b9:ec:9b:58:6d:be:c5:db:00:e1:d2: 02:c1:d3:bc:9e:56:1e:1d:3e:fc:11:75:5d:f0:23:e6:11:4c: de:75:78:b2 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUFnIHjGj3FF2x0g3dzgi4/yAaFW0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQxNzAwMDAwMFoX DTI0MDUyMjIzNTk1OVowejFJMEcGA1UEBRNAM2FhZjhjZTYxZmFhZDhkZjQ0MjA4 MjYxYThjMGNiMjdiYjNlMjljYjM1MGZjZDgzYjU1ZDljYWJlNzI3Mzg4NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzG/ufYBlZhnoGsx5890Ntb4voTpP xsOIqCQafgnVxg2PCSRvQXKBUPO17io651TFslABJOGDPpXYw1nByc5jNt/dZFVP nnjfaSKa0biM7sV+gTjBTHxOYJpb5raQ+aDl7JK5DnvIWVpmSwh3iNW5QnZ5WmAt YKKSMlZ1YM8GbGmLyGITn+u+cBbpwsmVCN5w/yobwc+WuyX1QwsxP8D7eCijl/kL FLqN8q5ozTLOqIpneOETpq2NWVATv2/o4j/7CKYd2z+6W8lYo2FH+134tKzpXYXV 64AkO0Xuj+L8awBE8gkYy7IvD961EJzJIR9boiOZBaxlnvH/LFI7P8Lq0QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFd1cSl/18fvg9WZUXZt38bU/UKwMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJlZTgyYzA2LWUyZjktNDNjOS05MDgyLTc1ZTcyM2U1MzM2Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYYgwDQYJKoZIhvcNAQELBQADggEBAGAPuc3bZhuCriAeez6R Ed/cw0MHLMXCvx/5jGPMAgViKq/LxnqDxnDpWJKZXW1NJzP4IcAj1d9wXEdS0MFz 26eQ9/QnbdaSwP96OVgK4E+duNs1IXlmqHhVp1O4UK3uf96Mla4jStkbAYcfGxzu qLE1czNZ82MAu9LGUsKJabH6+4yTVBeXsUpYp3caAOUKReoO1TOnapr+gb21+Egs uvoeiPNdn7n+35+s3bfvExMrNlh6KeORM3vI6l4O99yBTPhwY6tbnc0IGakKQee3 UZXITLUUGbJaRPZWWlJV0HG57JtYbb7F2wDh0gLB07yeVh4dPvwRdV3wI+YRTN51 eLI= -----END CERTIFICATE-----Generated at Thu May 2 08:50:47 2024 by rpki-client on console-fra.rpki-client.org