$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3e4420de-ff86-4c47-a15d-ae9ee811974e.roa File: 3e4420de-ff86-4c47-a15d-ae9ee811974e.roa (raw, json) Hash identifier: SSklI6pwwTt09iDDcPgvOeQ0DNKoNGXHAiuhj72IJdI= Subject key identifier: 7C:88:25:AE:AC:32:BC:EB:2D:93:71:7A:90:74:15:34:23:86:F1:1F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3C564D1818806DB51AAEE770F6D66EF84D63A176 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3e4420de-ff86-4c47-a15d-ae9ee811974e.roa Signing time: Tue 01 Oct 2024 00:00:00 +0000 ROA not before: Tue 01 Oct 2024 00:00:00 +0000 ROA not after: Tue 05 Nov 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Oct 2024 15:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:56:4d:18:18:80:6d:b5:1a:ae:e7:70:f6:d6:6e:f8:4d:63:a1:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 1 00:00:00 2024 GMT Not After : Nov 5 23:59:59 2024 GMT Subject: serialNumber=bfe3a8d19b04877e9b6e8bb3315e12b31ca8f9f46cee48823b16862feb797dfa, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c2:fc:df:28:05:f6:17:a0:17:dd:7b:79:70: 54:07:3d:a1:48:c8:f6:2f:34:b1:e6:f6:9f:55:77: 0d:a2:5b:dd:5f:4b:61:f2:df:d1:d1:af:c6:07:3d: f2:15:35:85:fd:4a:1f:94:e1:aa:e6:53:aa:d8:6a: 57:13:b7:20:ce:ab:5b:89:f1:cd:bb:0f:9d:88:5f: b8:ee:4d:c6:24:f1:d1:95:4f:dc:4b:42:00:16:3d: 23:a4:01:6e:14:ca:13:b7:ca:17:9f:0a:66:91:59: 71:81:ef:32:db:00:7d:72:56:b4:c5:ba:7f:7d:ab: 98:a3:0c:a6:c3:1e:5f:8f:05:db:a4:64:83:d6:3f: fc:57:ec:43:7d:da:a7:ba:a6:b1:5e:99:ea:9f:e1: 8f:d9:8c:cb:f1:6c:96:53:eb:93:88:36:58:76:2c: 54:e4:5f:69:b5:56:b2:21:f8:ad:78:9c:f7:c1:67: e4:6d:1b:97:0a:4b:a3:c3:41:e9:df:65:ac:1d:75: f3:6b:84:d3:1a:f6:28:d5:b1:df:e4:38:a3:e5:63: 6a:9f:0c:94:2e:9d:f0:b4:d3:b6:6e:54:49:f2:d0: fc:71:d1:be:28:53:09:86:6d:84:9b:9c:33:60:d3: e4:2a:dc:58:67:da:80:1b:d5:a8:3a:32:98:22:a4: 40:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:88:25:AE:AC:32:BC:EB:2D:93:71:7A:90:74:15:34:23:86:F1:1F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3e4420de-ff86-4c47-a15d-ae9ee811974e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:e000::/40 Signature Algorithm: sha256WithRSAEncryption c9:72:f7:29:09:37:17:ba:62:ca:87:e8:d5:9f:a3:7b:c5:fa: 58:83:a0:b0:c5:7f:71:15:eb:6b:9f:be:03:0d:e8:ef:51:16: 07:65:29:a8:85:cd:39:9d:89:a2:4f:e3:bd:27:d2:9a:f5:24: 90:2b:ba:a7:b5:38:20:c4:af:ad:33:42:1a:c2:59:72:c5:1c: d4:3c:7e:98:76:88:76:41:66:94:ff:62:32:76:42:64:c0:63: 9a:2a:64:33:7e:7d:ac:e7:af:c4:a0:39:8a:a7:af:c9:d1:d5: 9a:26:7d:37:a1:64:1c:5e:90:bd:52:33:2a:aa:78:10:c3:54: d0:56:d7:84:2e:41:2b:93:fe:4c:0e:ff:89:dc:ed:13:43:3c: 4b:26:c0:d5:ba:03:4a:ce:5e:d2:99:ce:2a:18:a7:f3:af:b2: 1c:f1:32:66:32:53:e1:d3:98:a9:87:d2:e9:ed:20:c7:8e:8a: 4a:82:9a:03:83:70:c7:d8:d4:b9:9d:e5:91:fd:90:18:9a:dc: 2b:a3:20:e0:0c:f1:f4:11:cb:98:d9:30:de:cf:8b:02:cf:07: 02:67:26:2f:f1:f6:f5:47:49:7f:d5:79:c8:10:19:5f:55:0d: 05:e9:fe:85:54:59:86:3e:4a:46:98:12:43:8d:0e:21:e8:d8: ff:37:35:4a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUPFZNGBiAbbUarudw9tZu+E1joXYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTAwMTAwMDAwMFoX DTI0MTEwNTIzNTk1OVowejFJMEcGA1UEBRNAYmZlM2E4ZDE5YjA0ODc3ZTliNmU4 YmIzMzE1ZTEyYjMxY2E4ZjlmNDZjZWU0ODgyM2IxNjg2MmZlYjc5N2RmYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcL83ygF9hegF917eXBUBz2hSMj2 LzSx5vafVXcNolvdX0th8t/R0a/GBz3yFTWF/UoflOGq5lOq2GpXE7cgzqtbifHN uw+diF+47k3GJPHRlU/cS0IAFj0jpAFuFMoTt8oXnwpmkVlxge8y2wB9cla0xbp/ fauYowymwx5fjwXbpGSD1j/8V+xDfdqnuqaxXpnqn+GP2YzL8WyWU+uTiDZYdixU 5F9ptVayIfiteJz3wWfkbRuXCkujw0Hp32WsHXXza4TTGvYo1bHf5Dij5WNqnwyU Lp3wtNO2blRJ8tD8cdG+KFMJhm2Em5wzYNPkKtxYZ9qAG9WoOjKYIqRAXwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHyIJa6sMrzrLZNxepB0FTQjhvEfMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNlNDQyMGRlLWZmODYtNGM0Ny1hMTVkLWFlOWVlODExOTc0ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9+AwDQYJKoZIhvcNAQELBQADggEBAMly9ykJNxe6YsqH6NWf o3vF+liDoLDFf3EV62ufvgMN6O9RFgdlKaiFzTmdiaJP470n0pr1JJAruqe1OCDE r60zQhrCWXLFHNQ8fph2iHZBZpT/YjJ2QmTAY5oqZDN+faznr8SgOYqnr8nR1Zom fTehZBxekL1SMyqqeBDDVNBW14QuQSuT/kwO/4nc7RNDPEsmwNW6A0rOXtKZzioY p/OvshzxMmYyU+HTmKmH0untIMeOikqCmgODcMfY1Lmd5ZH9kBia3CujIOAM8fQR y5jZMN7PiwLPBwJnJi/x9vVHSX/VecgQGV9VDQXp/oVUWYY+SkaYEkONDiHo2P83 NUo= -----END CERTIFICATE-----Generated at Fri Oct 25 17:02:32 2024 by rpki-client on console-fra.rpki-client.org