$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3138f034-62ea-42a6-afd1-3976e52776de.roa File: 3138f034-62ea-42a6-afd1-3976e52776de.roa (raw, json) Hash identifier: QT6rz9iFIr4wb1sIIJBb0nB558exLzOE2BOuTvUBL/4= Subject key identifier: 2E:F9:4C:C0:D7:4D:E3:DA:E2:36:65:58:C6:6A:DC:40:85:C8:A3:95 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 799EE8A5F675ACD565E5EF40400182701345FECC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3138f034-62ea-42a6-afd1-3976e52776de.roa Signing time: Tue 01 Oct 2024 00:00:00 +0000 ROA not before: Tue 01 Oct 2024 00:00:00 +0000 ROA not after: Tue 05 Nov 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da36:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Oct 2024 15:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:9e:e8:a5:f6:75:ac:d5:65:e5:ef:40:40:01:82:70:13:45:fe:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 1 00:00:00 2024 GMT Not After : Nov 5 23:59:59 2024 GMT Subject: serialNumber=33214bc473f68634ba53d063a28ce0c31952cd841c5fb65fcb29d8d2da686aff, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:60:9a:de:99:c1:14:ec:e6:f2:cb:44:81:39: 6b:e7:ef:45:f1:e5:f4:59:a2:5c:2d:21:dd:24:85: bd:63:85:e4:42:37:45:77:e1:37:b2:2b:e6:49:47: 24:1a:34:25:a9:a0:db:cc:3a:5b:b9:0c:0a:d5:24: c3:5f:46:ad:cc:e8:49:cd:5a:28:14:64:a0:e6:34: ea:1f:fc:97:4c:53:69:fa:9e:e6:76:30:8b:c9:db: 61:20:41:90:1f:f4:cd:ce:76:e5:df:80:d4:d7:96: c4:aa:9a:3b:0f:d6:62:ca:91:14:fb:a8:99:3f:1d: 57:32:17:64:a4:ab:63:d8:13:c0:7f:25:53:19:d8: 03:8c:6e:e6:25:26:83:5c:5a:dc:e2:e0:3d:fd:60: f3:e3:56:a0:02:fa:9c:66:f6:7a:a9:e9:ff:50:75: e3:68:fc:e9:a2:e2:58:06:56:e1:4e:0d:22:14:d7: c8:f0:c9:85:9f:69:be:de:39:0e:25:e7:05:13:04: 3b:9b:20:36:ff:a1:5d:23:aa:6f:5b:65:06:75:46: ff:1f:3d:ae:08:dd:77:42:8a:df:f3:fc:4e:33:8d: 36:eb:77:ff:b7:af:24:79:77:4b:44:b2:cb:c7:d7: 73:69:6f:c4:71:8c:80:aa:69:1e:59:5f:3a:d8:d6: 19:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F9:4C:C0:D7:4D:E3:DA:E2:36:65:58:C6:6A:DC:40:85:C8:A3:95 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3138f034-62ea-42a6-afd1-3976e52776de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da36:f000::/40 Signature Algorithm: sha256WithRSAEncryption 84:f0:ae:78:d5:5c:d0:2e:ea:ff:a0:c3:a8:a4:6f:3d:48:ec: 0e:ae:f6:18:1d:ba:e8:4a:ff:f1:f2:05:65:38:b4:77:45:1f: 7c:d5:5d:1d:29:53:d2:dc:f3:0c:91:da:d6:68:f3:f7:59:1a: 2e:1b:70:36:35:14:f4:4e:1c:4c:0d:30:c1:a5:08:a3:50:14: 60:9e:1e:10:66:c2:5f:0c:d8:de:59:fe:94:32:d5:d5:e4:d3: 08:67:60:09:c2:48:f4:c9:25:f1:24:c0:81:7d:b9:7a:fb:04: cd:1f:5d:fa:f4:7b:bd:17:26:f1:da:08:67:95:c0:63:d2:83: 31:89:37:44:bb:70:02:b8:38:21:07:9d:5b:a4:8c:11:be:7e: be:ec:53:a5:2a:db:84:49:4a:71:9c:cc:8c:a5:b1:02:67:77: 88:25:2b:81:ac:7b:7a:43:19:2e:36:95:d9:55:e7:4c:80:92: 3c:62:82:cb:a5:6b:d4:b8:d3:98:ba:7c:4e:3a:65:fc:a4:25: 4a:30:d4:79:ad:4a:3b:a3:3a:da:83:27:18:60:9c:4c:e9:ff: 93:82:b3:5d:72:09:0a:f2:65:98:2e:aa:08:be:cd:4d:e5:84: d9:d5:84:41:8a:34:eb:ac:ac:cf:93:c3:8e:a5:6a:fd:09:5d: a1:4d:9c:c3 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUeZ7opfZ1rNVl5e9AQAGCcBNF/swwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTAwMTAwMDAwMFoX DTI0MTEwNTIzNTk1OVowejFJMEcGA1UEBRNAMzMyMTRiYzQ3M2Y2ODYzNGJhNTNk MDYzYTI4Y2UwYzMxOTUyY2Q4NDFjNWZiNjVmY2IyOWQ4ZDJkYTY4NmFmZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGCa3pnBFOzm8stEgTlr5+9F8eX0 WaJcLSHdJIW9Y4XkQjdFd+E3sivmSUckGjQlqaDbzDpbuQwK1STDX0atzOhJzVoo FGSg5jTqH/yXTFNp+p7mdjCLydthIEGQH/TNznbl34DU15bEqpo7D9ZiypEU+6iZ Px1XMhdkpKtj2BPAfyVTGdgDjG7mJSaDXFrc4uA9/WDz41agAvqcZvZ6qen/UHXj aPzpouJYBlbhTg0iFNfI8MmFn2m+3jkOJecFEwQ7myA2/6FdI6pvW2UGdUb/Hz2u CN13Qorf8/xOM40263f/t68keXdLRLLLx9dzaW/EcYyAqmkeWV862NYZ3wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFC75TMDXTePa4jZlWMZq3ECFyKOVMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzMxMzhmMDM0LTYyZWEtNDJhNi1hZmQxLTM5NzZlNTI3NzZkZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaNvAwDQYJKoZIhvcNAQELBQADggEBAITwrnjVXNAu6v+gw6ik bz1I7A6u9hgduuhK//HyBWU4tHdFH3zVXR0pU9Lc8wyR2tZo8/dZGi4bcDY1FPRO HEwNMMGlCKNQFGCeHhBmwl8M2N5Z/pQy1dXk0whnYAnCSPTJJfEkwIF9uXr7BM0f Xfr0e70XJvHaCGeVwGPSgzGJN0S7cAK4OCEHnVukjBG+fr7sU6Uq24RJSnGczIyl sQJnd4glK4Gse3pDGS42ldlV50yAkjxigsula9S405i6fE46ZfykJUow1HmtSjuj OtqDJxhgnEzp/5OCs11yCQryZZguqgi+zU3lhNnVhEGKNOusrM+Tw46lav0JXaFN nMM= -----END CERTIFICATE-----Generated at Fri Oct 25 16:44:23 2024 by rpki-client on console-ams.rpki-client.org