$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b7bec8b-6d6a-4f05-8261-e06d9f3d2db4.roa File: 4b7bec8b-6d6a-4f05-8261-e06d9f3d2db4.roa (raw, json) Hash identifier: cicVVznX8WDfxEsipza4T4kovxB8J/J7myYjZj51VGs= Subject key identifier: AE:F2:88:00:39:2B:18:10:2D:67:7D:6D:F4:5C:6F:36:5C:6B:2C:20 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 37673CEE61DCE15A15A1F28CAB8B6822FE1E91DC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b7bec8b-6d6a-4f05-8261-e06d9f3d2db4.roa Signing time: Fri 04 Oct 2024 00:00:00 +0000 ROA not before: Fri 04 Oct 2024 00:00:00 +0000 ROA not after: Fri 08 Nov 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafa:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Oct 2024 15:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:67:3c:ee:61:dc:e1:5a:15:a1:f2:8c:ab:8b:68:22:fe:1e:91:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 4 00:00:00 2024 GMT Not After : Nov 8 23:59:59 2024 GMT Subject: serialNumber=1744754679fa1b4ebc0b2565a5b0950b230275c7e7579b77e23e93e3be2d911b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8c:c1:3b:0f:ad:0a:7b:12:02:43:90:f2:aa: 86:f1:9e:67:41:47:c3:95:1f:67:ff:ec:30:63:0b: 90:b0:ac:5c:5f:80:fa:a4:76:e7:b8:af:23:35:e8: 6c:d2:a2:6b:67:dd:61:1e:fa:2b:be:fa:de:c6:d4: d3:82:80:31:db:72:de:f7:0d:1d:d9:92:31:bf:46: 7b:17:58:35:76:c2:1a:c8:63:26:9c:bd:b9:af:9e: 71:da:b7:65:c1:83:8f:89:72:2a:dc:72:3a:8a:b4: 53:7f:fe:1f:93:70:12:eb:f7:65:a7:7d:36:fd:f4: ba:90:db:f9:25:0a:3e:65:f6:64:27:56:1a:ca:05: cd:5c:20:21:79:17:18:24:69:80:b4:38:b8:6e:41: f1:8a:78:32:cd:c3:84:c5:8f:5f:41:7f:74:c4:be: 1b:a2:83:b1:a1:ea:58:78:01:3f:d6:76:88:db:03: 26:19:65:98:43:16:e0:02:60:19:76:fa:f9:f3:f6: 4b:3b:ad:29:21:74:30:a2:05:b0:5a:9a:ed:bf:93: 13:1f:bf:bc:b1:82:9b:50:f5:f4:24:8a:9c:1a:1d: e2:50:9a:dc:bd:47:a1:db:18:8c:21:0a:f3:04:74: 47:b9:b0:0b:a8:a9:56:c4:93:00:70:0b:3a:dc:36: 9d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F2:88:00:39:2B:18:10:2D:67:7D:6D:F4:5C:6F:36:5C:6B:2C:20 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b7bec8b-6d6a-4f05-8261-e06d9f3d2db4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafa:e000::/40 Signature Algorithm: sha256WithRSAEncryption 87:d6:a5:2f:b4:c9:fb:41:c9:b3:ff:23:09:f6:20:d4:f8:32: 46:df:45:e6:81:f1:35:e1:e8:8a:00:63:97:96:03:6b:1e:65: 4b:51:20:5b:04:df:69:b9:34:aa:fa:f3:0e:87:b2:90:f2:21: af:81:12:66:e5:dd:27:de:2c:65:c9:85:1b:2f:d1:d7:3e:fe: 27:58:80:b7:de:68:6c:84:f6:5d:d1:2b:60:ec:26:c8:05:01: c9:80:cb:cc:e2:87:c7:67:f9:01:84:90:5c:5e:0b:4e:f3:47: e0:df:67:29:39:3e:13:4b:c1:f9:3b:bb:23:6a:1f:47:00:d3: bc:b2:28:a0:bd:12:df:16:4d:12:22:f5:4d:8d:f0:14:a0:dc: 20:1e:bf:a5:84:ee:19:8c:95:05:3b:53:ec:a7:98:44:f0:22: 33:3e:fb:dc:d9:e4:e8:6d:71:65:b6:bd:e0:06:56:76:8d:bc: 7b:ce:a3:48:1b:e6:10:28:9d:0a:36:49:0e:d1:10:0f:be:cc: 06:97:46:64:6f:93:33:c5:4c:7d:56:52:a8:9c:a0:aa:69:36: 7f:6e:f4:f8:26:b3:94:43:2d:83:5c:90:9f:77:b8:41:22:de: 2e:57:3f:f4:34:d6:f7:9a:5e:a5:b3:8e:ce:07:95:99:e0:f9: 56:fe:8b:c5 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUN2c87mHc4VoVofKMq4toIv4ekdwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTAwNDAwMDAwMFoX DTI0MTEwODIzNTk1OVowejFJMEcGA1UEBRNAMTc0NDc1NDY3OWZhMWI0ZWJjMGIy NTY1YTViMDk1MGIyMzAyNzVjN2U3NTc5Yjc3ZTIzZTkzZTNiZTJkOTExYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxozBOw+tCnsSAkOQ8qqG8Z5nQUfD lR9n/+wwYwuQsKxcX4D6pHbnuK8jNehs0qJrZ91hHvorvvrextTTgoAx23Le9w0d 2ZIxv0Z7F1g1dsIayGMmnL25r55x2rdlwYOPiXIq3HI6irRTf/4fk3AS6/dlp302 /fS6kNv5JQo+ZfZkJ1YaygXNXCAheRcYJGmAtDi4bkHxingyzcOExY9fQX90xL4b ooOxoepYeAE/1naI2wMmGWWYQxbgAmAZdvr58/ZLO60pIXQwogWwWprtv5MTH7+8 sYKbUPX0JIqcGh3iUJrcvUeh2xiMIQrzBHRHubALqKlWxJMAcAs63Dad+QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFK7yiAA5KxgQLWd9bfRcbzZcaywgMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRiN2JlYzhiLTZkNmEtNGYwNS04MjYxLWUwNmQ5ZjNkMmRiNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+uAwDQYJKoZIhvcNAQELBQADggEBAIfWpS+0yftBybP/Iwn2 INT4MkbfReaB8TXh6IoAY5eWA2seZUtRIFsE32m5NKr68w6HspDyIa+BEmbl3Sfe LGXJhRsv0dc+/idYgLfeaGyE9l3RK2DsJsgFAcmAy8zih8dn+QGEkFxeC07zR+Df Zyk5PhNLwfk7uyNqH0cA07yyKKC9Et8WTRIi9U2N8BSg3CAev6WE7hmMlQU7U+yn mETwIjM++9zZ5OhtcWW2veAGVnaNvHvOo0gb5hAonQo2SQ7REA++zAaXRmRvkzPF TH1WUqicoKppNn9u9Pgms5RDLYNckJ93uEEi3i5XP/Q01veaXqWzjs4HlZng+Vb+ i8U= -----END CERTIFICATE-----Generated at Fri Oct 25 16:44:24 2024 by rpki-client on console-ams.rpki-client.org