$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4bbff115-a0ea-4a3f-91d6-cd7648baabb4.roa File: 4bbff115-a0ea-4a3f-91d6-cd7648baabb4.roa (raw, json) Hash identifier: mvaqhIOWblMHIgSFNSrIa9L62VRv6+bKYegXD2FEDAA= Subject key identifier: BA:B0:45:85:5D:58:A7:64:F2:07:FE:AD:9E:B3:E3:C8:57:03:AC:72 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1EAA8BD65339EA64A3123BB7AF39246D67401AFE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4bbff115-a0ea-4a3f-91d6-cd7648baabb4.roa Signing time: Sat 20 Jul 2024 00:00:00 +0000 ROA not before: Sat 20 Jul 2024 00:00:00 +0000 ROA not after: Sat 24 Aug 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jul 2024 00:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:aa:8b:d6:53:39:ea:64:a3:12:3b:b7:af:39:24:6d:67:40:1a:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 20 00:00:00 2024 GMT Not After : Aug 24 23:59:59 2024 GMT Subject: serialNumber=2a46197e5b8cc556fbc8bfd7914c86d53c4ecb44a69edc95a45fecd2a7dee387, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:13:59:32:07:7e:e2:09:4f:09:1f:f4:26:59: db:f9:e2:31:34:5b:fd:b5:56:3f:7a:ec:d1:a7:43: 71:d2:00:05:0b:3d:f9:ea:a8:9e:d9:a9:f2:6b:14: a6:78:33:cc:78:66:35:6b:df:ca:a1:e9:71:1e:8c: ff:8c:89:a0:96:09:77:f2:12:ad:81:9e:c2:41:b8: c5:bd:f5:1a:94:d0:39:b1:e1:09:72:8c:a1:50:93: 24:bc:58:f7:15:bf:2e:0e:27:87:9e:e2:22:83:ae: 5c:62:f9:42:dc:ef:4e:a9:25:e8:9e:dd:6e:c6:24: 35:db:83:96:a5:a8:fa:5f:94:a2:c9:95:88:2e:7f: 6e:b7:07:a7:b8:46:94:73:e3:26:29:41:2c:15:c8: 76:ea:ad:d8:00:e0:c1:c8:a8:96:c6:06:8f:3a:5e: 74:14:32:fb:5b:c7:8f:0c:34:d4:f0:e2:ad:6e:42: 29:6f:66:8b:b8:c9:c2:6e:c0:40:4d:92:7b:c2:65: d8:74:dc:52:75:0a:d8:6a:dd:c6:10:8b:e2:f2:d7: e5:4e:be:ff:a4:36:60:09:5d:67:94:34:c2:cd:9b: e1:82:e0:17:a0:e8:b6:0b:ad:68:3e:b0:99:92:d1: 06:24:6f:5a:47:0d:d0:31:eb:de:09:d9:84:13:25: 2f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B0:45:85:5D:58:A7:64:F2:07:FE:AD:9E:B3:E3:C8:57:03:AC:72 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4bbff115-a0ea-4a3f-91d6-cd7648baabb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:e000::/40 Signature Algorithm: sha256WithRSAEncryption 6a:6f:0f:cb:c7:e4:ff:48:29:09:cd:8d:fe:86:86:82:04:be: 87:d7:05:78:fa:ac:a2:b9:76:e6:8c:00:46:cc:95:29:da:24: 76:ab:ef:7d:d0:b1:3f:fa:16:f1:f8:6a:5e:b5:cc:18:f6:ab: b9:45:13:ca:83:09:63:cd:9b:ec:cf:bc:83:83:bb:81:4e:b4: 37:44:1e:23:4f:a5:4a:7f:1c:87:64:b1:9e:4b:54:4f:29:a6: 0c:be:f6:64:2c:99:76:f3:82:da:80:32:4f:bb:8b:6d:c4:40: 35:73:ca:d5:8e:f3:c2:4e:57:75:59:97:61:ab:24:ec:3c:78: ad:eb:21:88:d5:c3:9d:dc:c3:fe:e6:af:42:18:63:e5:99:42: 13:a2:7b:d6:4c:67:2c:44:0f:69:0b:fb:27:bf:a1:00:86:78: ed:9f:be:2d:bb:5f:eb:e9:60:63:ea:1c:ed:7e:3b:bc:7f:d9: 04:14:49:3c:19:a4:cd:c4:5c:37:3c:76:8d:1e:1a:af:c1:e7: 0e:2c:64:85:3f:ab:c8:c2:0d:4c:23:6d:91:e3:f3:60:26:77: bf:7a:1d:56:cb:3d:ed:5b:95:58:e1:e4:27:ca:9b:09:4f:3a: 93:0f:c2:ac:5c:cd:71:dd:90:26:25:2a:69:8f:8b:b1:cd:48: ca:5c:db:93 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUHqqL1lM56mSjEju3rzkkbWdAGv4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDcyMDAwMDAwMFoX DTI0MDgyNDIzNTk1OVowejFJMEcGA1UEBRNAMmE0NjE5N2U1YjhjYzU1NmZiYzhi ZmQ3OTE0Yzg2ZDUzYzRlY2I0NGE2OWVkYzk1YTQ1ZmVjZDJhN2RlZTM4NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RNZMgd+4glPCR/0Jlnb+eIxNFv9 tVY/euzRp0Nx0gAFCz356qie2anyaxSmeDPMeGY1a9/KoelxHoz/jImglgl38hKt gZ7CQbjFvfUalNA5seEJcoyhUJMkvFj3Fb8uDieHnuIig65cYvlC3O9OqSXont1u xiQ124OWpaj6X5SiyZWILn9utwenuEaUc+MmKUEsFch26q3YAODByKiWxgaPOl50 FDL7W8ePDDTU8OKtbkIpb2aLuMnCbsBATZJ7wmXYdNxSdQrYat3GEIvi8tflTr7/ pDZgCV1nlDTCzZvhguAXoOi2C61oPrCZktEGJG9aRw3QMeveCdmEEyUv8wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLqwRYVdWKdk8gf+rZ6z48hXA6xyMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRiYmZmMTE1LWEwZWEtNGEzZi05MWQ2LWNkNzY0OGJhYWJiNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9uAwDQYJKoZIhvcNAQELBQADggEBAGpvD8vH5P9IKQnNjf6G hoIEvofXBXj6rKK5duaMAEbMlSnaJHar733QsT/6FvH4al61zBj2q7lFE8qDCWPN m+zPvIODu4FOtDdEHiNPpUp/HIdksZ5LVE8ppgy+9mQsmXbzgtqAMk+7i23EQDVz ytWO88JOV3VZl2GrJOw8eK3rIYjVw53cw/7mr0IYY+WZQhOie9ZMZyxED2kL+ye/ oQCGeO2fvi27X+vpYGPqHO1+O7x/2QQUSTwZpM3EXDc8do0eGq/B5w4sZIU/q8jC DUwjbZHj82Amd796HVbLPe1blVjh5CfKmwlPOpMPwqxczXHdkCYlKmmPi7HNSMpc 25M= -----END CERTIFICATE-----Generated at Fri Jul 26 01:58:40 2024 by rpki-client on console-ams.rpki-client.org