$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a95e708-eff7-413c-8bc0-bb04e34b532f.roa File: 3a95e708-eff7-413c-8bc0-bb04e34b532f.roa (raw, json) Hash identifier: VusKxL0DD4v9koNVXAbfLwi+RKNjZRapnkCFZ5xB7e0= Subject key identifier: FC:E7:4E:66:C4:3D:26:CB:CC:C9:9D:A3:53:EE:A7:9C:24:C8:52:24 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7F9326603E264E83EC339CF18EBAB9123AA7A3B1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a95e708-eff7-413c-8bc0-bb04e34b532f.roa Signing time: Fri 25 Oct 2024 00:00:00 +0000 ROA not before: Fri 25 Oct 2024 00:00:00 +0000 ROA not after: Fri 29 Nov 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Oct 2024 15:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:93:26:60:3e:26:4e:83:ec:33:9c:f1:8e:ba:b9:12:3a:a7:a3:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 25 00:00:00 2024 GMT Not After : Nov 29 23:59:59 2024 GMT Subject: serialNumber=a15b1732f3e63fd77f297734e167c70c6461551e2fb374f99febe43e280bcb5f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:06:25:0d:0c:4f:c8:8f:0b:9f:f4:56:05:2f: 0b:87:84:0c:01:a6:e1:01:2b:2c:cd:ff:b8:f8:47: 98:e8:da:d1:ac:f6:f3:2c:01:19:a6:c6:e9:23:9a: fb:e0:e2:54:4e:f0:ca:75:af:6d:8b:b8:5f:94:3a: 79:bb:f2:76:8b:38:b8:e2:50:c4:03:78:c6:8a:2e: c5:8b:3c:d1:58:0b:44:d5:05:df:42:7c:d4:91:b9: 9b:c9:89:ba:f3:45:83:71:ab:29:f1:00:7b:a5:cb: ce:00:fb:62:3d:91:3a:a3:e9:7c:af:5b:bc:19:a6: f1:15:44:71:fd:70:ba:c8:a6:24:7b:68:c7:30:13: 64:ac:30:76:07:1c:76:8a:fd:13:4b:e8:68:9f:43: f3:8e:99:19:3c:30:5b:57:fd:61:fa:b4:14:07:9f: e3:a5:d1:83:17:ce:6b:f2:39:57:a9:19:f0:5c:8d: 5d:90:1a:d4:5b:4a:17:c7:90:91:6d:da:80:00:2d: f7:56:b5:0e:13:cb:b6:bb:59:98:24:d4:69:63:61: 59:c2:5c:13:8b:13:39:fc:09:ff:d7:52:60:72:45: 6c:37:40:d6:92:f9:a7:cb:1f:22:35:90:a3:d4:ad: 20:bf:6b:4f:09:bc:52:fc:a8:b7:78:8c:2b:0d:4c: 01:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E7:4E:66:C4:3D:26:CB:CC:C9:9D:A3:53:EE:A7:9C:24:C8:52:24 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a95e708-eff7-413c-8bc0-bb04e34b532f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:9000::/40 Signature Algorithm: sha256WithRSAEncryption 5c:09:5b:29:5b:e6:26:af:d2:2c:8a:40:b5:c9:a4:93:2d:bf: 2c:9b:59:91:24:1c:7b:ba:96:0d:72:d8:90:de:9b:f2:ce:da: b4:e5:e6:ba:de:f2:7d:c8:44:06:24:b6:14:da:46:3d:31:30: e6:ae:95:f3:c3:ea:39:c4:c0:5d:a5:1d:98:95:6e:df:9b:bb: 7d:42:d9:6c:4d:f5:8e:bc:48:5a:65:87:c6:93:85:bf:8c:2b: 9c:1d:e3:08:c8:50:52:d5:de:b9:f4:35:d9:67:90:56:74:a3: 85:85:f1:2d:fd:45:69:ad:67:5d:10:b6:6d:cd:46:3e:98:0f: 36:98:fd:bf:3a:ed:93:1c:b8:97:9c:a9:ed:3a:8e:8f:67:20: 7f:86:b1:a8:4c:83:0e:ec:36:15:56:a7:c9:9a:0d:eb:2f:58: 47:e9:84:1d:ba:da:f7:ab:9c:e4:be:28:d6:fa:d8:fd:ff:e6: 67:88:6a:a2:5f:9d:c8:a5:46:cc:9c:5b:4d:13:17:f5:a4:e4: 8b:9e:a3:fe:4a:10:b4:22:dd:ad:b7:e6:06:a8:d1:5e:c5:15: d6:77:7a:69:1a:96:c9:a4:49:cb:97:a2:fa:25:1f:77:db:16: 1f:f0:9e:2e:33:3b:27:3e:f5:e4:24:72:4b:c9:17:66:3d:22: 91:fe:25:9b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUf5MmYD4mToPsM5zxjrq5Ejqno7EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTAyNTAwMDAwMFoX DTI0MTEyOTIzNTk1OVowejFJMEcGA1UEBRNAYTE1YjE3MzJmM2U2M2ZkNzdmMjk3 NzM0ZTE2N2M3MGM2NDYxNTUxZTJmYjM3NGY5OWZlYmU0M2UyODBiY2I1ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAYlDQxPyI8Ln/RWBS8Lh4QMAabh ASsszf+4+EeY6NrRrPbzLAEZpsbpI5r74OJUTvDKda9ti7hflDp5u/J2izi44lDE A3jGii7FizzRWAtE1QXfQnzUkbmbyYm680WDcasp8QB7pcvOAPtiPZE6o+l8r1u8 GabxFURx/XC6yKYke2jHMBNkrDB2Bxx2iv0TS+hon0PzjpkZPDBbV/1h+rQUB5/j pdGDF85r8jlXqRnwXI1dkBrUW0oXx5CRbdqAAC33VrUOE8u2u1mYJNRpY2FZwlwT ixM5/An/11JgckVsN0DWkvmnyx8iNZCj1K0gv2tPCbxS/Ki3eIwrDUwBBQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPznTmbEPSbLzMmdo1Pup5wkyFIkMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNhOTVlNzA4LWVmZjctNDEzYy04YmMwLWJiMDRlMzRiNTMyZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+5AwDQYJKoZIhvcNAQELBQADggEBAFwJWylb5iav0iyKQLXJ pJMtvyybWZEkHHu6lg1y2JDem/LO2rTl5rre8n3IRAYkthTaRj0xMOaulfPD6jnE wF2lHZiVbt+bu31C2WxN9Y68SFplh8aThb+MK5wd4wjIUFLV3rn0NdlnkFZ0o4WF 8S39RWmtZ10Qtm3NRj6YDzaY/b867ZMcuJecqe06jo9nIH+GsahMgw7sNhVWp8ma DesvWEfphB262vernOS+KNb62P3/5meIaqJfncilRsycW00TF/Wk5Iueo/5KELQi 3a235gao0V7FFdZ3emkalsmkScuXovolH3fbFh/wni4zOyc+9eQkckvJF2Y9IpH+ JZs= -----END CERTIFICATE-----Generated at Fri Oct 25 17:02:32 2024 by rpki-client on console-fra.rpki-client.org