$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/33cd86c2-840e-4af2-8465-28f983d0d4cc.roa File: 33cd86c2-840e-4af2-8465-28f983d0d4cc.roa (raw, json) Hash identifier: +O5kdEYnMVnWcOYfQ9SPMJY8ElCUCyuTC3oQqrIC9q4= Subject key identifier: 26:89:AD:65:2E:52:F4:C1:ED:5F:31:B3:98:A6:44:79:E8:17:DB:65 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4D406A8EEDA082B329B340535D50C647EA2FC97F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/33cd86c2-840e-4af2-8465-28f983d0d4cc.roa Signing time: Sat 16 Mar 2024 00:00:00 +0000 ROA not before: Sat 16 Mar 2024 00:00:00 +0000 ROA not after: Sat 20 Apr 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da60:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Mar 2024 12:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:40:6a:8e:ed:a0:82:b3:29:b3:40:53:5d:50:c6:47:ea:2f:c9:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 16 00:00:00 2024 GMT Not After : Apr 20 23:59:59 2024 GMT Subject: serialNumber=8745c711abc3382469f1420f6aaa6a645097790ac18bb4b3a610bf7adeb08d13, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:18:1e:a7:e4:a8:ec:92:98:e0:f0:1c:59:a3: 15:5e:7a:7f:8b:77:c0:2a:08:9c:24:6b:06:58:2b: 83:a9:24:07:d1:e4:b5:eb:7c:15:41:ce:8f:e1:46: 2c:64:6e:e6:93:6c:44:6c:71:f2:23:2e:fa:0a:b0: 76:21:b2:1b:a6:a5:d2:35:aa:1a:ed:c1:d1:b3:0f: 18:73:cd:fa:3f:4a:bc:67:ea:6d:fb:c1:97:ce:7a: e5:a3:80:2e:3c:89:c2:c6:b3:de:97:84:f4:21:d7: 2e:19:7c:f6:46:15:0b:e8:a0:b8:5f:43:98:b4:d7: 54:26:77:d7:e9:26:ec:a8:be:9d:b6:20:9c:fc:cd: d0:75:c4:d6:8b:34:9b:30:0e:37:1c:e3:81:81:aa: 5d:32:dd:b8:15:9b:cd:4e:43:52:ce:43:38:d9:4d: 69:00:a4:c3:e1:ff:ce:d9:8e:2d:e8:fc:01:65:ed: 8d:f8:ce:55:77:3d:4f:eb:2c:d0:82:1a:8f:77:16: d9:a2:ac:f2:ab:25:c5:81:da:16:9e:e6:08:b9:24: fb:ba:d1:86:5a:ee:e0:e5:25:ff:b9:a4:bd:33:87: 9b:f5:da:d1:cb:14:45:f4:d3:26:1c:3e:be:53:6e: c7:4b:78:ca:53:d8:a9:3f:42:63:08:48:c5:b2:c6: 23:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:89:AD:65:2E:52:F4:C1:ED:5F:31:B3:98:A6:44:79:E8:17:DB:65 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/33cd86c2-840e-4af2-8465-28f983d0d4cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:4000::/40 Signature Algorithm: sha256WithRSAEncryption 72:b6:99:75:69:58:46:a9:1a:8b:14:a8:a3:45:90:22:88:8f: 89:1b:d4:f2:88:7e:e0:ff:f1:b8:75:e2:c3:23:4e:a3:98:97: 70:a3:8d:7e:9e:3f:0e:3b:07:39:d7:73:cc:22:54:89:51:ef: 9d:5f:49:ec:21:3d:dd:c1:66:64:9e:b4:cb:5b:05:3b:cd:2b: 88:2e:72:0a:08:51:a6:c7:10:63:87:98:3c:6c:32:60:e8:d7: ed:fa:5e:80:1b:35:e3:58:20:54:9a:75:85:f8:9d:c5:de:8f: 05:e1:46:38:71:f7:97:16:47:23:72:d7:7c:89:17:7a:08:18: 4d:be:1c:04:a1:b6:21:04:07:94:fa:90:65:b8:8f:66:ad:86: a7:1d:f8:5f:82:a9:99:ae:14:ab:d4:c5:c2:e8:3c:36:82:fc: 36:6d:c8:47:04:bf:13:47:52:b9:4f:e9:09:af:5e:6b:17:f4: c2:d0:75:fe:cb:0d:dd:9b:f7:91:71:44:ff:08:71:88:c1:ee: 8b:ed:4c:3d:a5:48:81:b2:30:09:62:29:30:46:ff:da:ea:13: c6:f0:98:60:71:7b:4b:e9:f5:60:f4:e0:85:59:e6:b1:ce:10: 9c:f3:be:02:63:25:5a:75:0f:bc:20:92:1d:6d:79:fc:ad:0b: 89:cb:5c:3a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUTUBqju2ggrMps0BTXVDGR+ovyX8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDMxNjAwMDAwMFoX DTI0MDQyMDIzNTk1OVowejFJMEcGA1UEBRNAODc0NWM3MTFhYmMzMzgyNDY5ZjE0 MjBmNmFhYTZhNjQ1MDk3NzkwYWMxOGJiNGIzYTYxMGJmN2FkZWIwOGQxMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxgep+So7JKY4PAcWaMVXnp/i3fA KgicJGsGWCuDqSQH0eS163wVQc6P4UYsZG7mk2xEbHHyIy76CrB2IbIbpqXSNaoa 7cHRsw8Yc836P0q8Z+pt+8GXznrlo4AuPInCxrPel4T0IdcuGXz2RhUL6KC4X0OY tNdUJnfX6SbsqL6dtiCc/M3QdcTWizSbMA43HOOBgapdMt24FZvNTkNSzkM42U1p AKTD4f/O2Y4t6PwBZe2N+M5Vdz1P6yzQghqPdxbZoqzyqyXFgdoWnuYIuST7utGG Wu7g5SX/uaS9M4eb9drRyxRF9NMmHD6+U27HS3jKU9ipP0JjCEjFssYjOwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCaJrWUuUvTB7V8xs5imRHnoF9tlMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzMzY2Q4NmMyLTg0MGUtNGFmMi04NDY1LTI4Zjk4M2QwZDRjYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYEAwDQYJKoZIhvcNAQELBQADggEBAHK2mXVpWEapGosUqKNF kCKIj4kb1PKIfuD/8bh14sMjTqOYl3CjjX6ePw47BznXc8wiVIlR751fSewhPd3B ZmSetMtbBTvNK4gucgoIUabHEGOHmDxsMmDo1+36XoAbNeNYIFSadYX4ncXejwXh Rjhx95cWRyNy13yJF3oIGE2+HAShtiEEB5T6kGW4j2athqcd+F+CqZmuFKvUxcLo PDaC/DZtyEcEvxNHUrlP6QmvXmsX9MLQdf7LDd2b95FxRP8IcYjB7ovtTD2lSIGy MAliKTBG/9rqE8bwmGBxe0vp9WD04IVZ5rHOEJzzvgJjJVp1D7wgkh1tefytC4nL XDo= -----END CERTIFICATE-----Generated at Thu Mar 28 02:05:04 2024 by rpki-client on console-ams.rpki-client.org