$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5bb34d23-2626-486f-a789-4ec80a9dae3c.roa File: 5bb34d23-2626-486f-a789-4ec80a9dae3c.roa (raw, json) Hash identifier: LzuL08B8OMAX0M2ljG8oz+vRXVcBEDzA+/pyFrAsjA8= Subject key identifier: 82:A8:7A:4D:1B:4A:CA:EA:60:01:B0:46:8D:38:7D:77:1E:56:01:09 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 50A238668BAC42D235EDDD6F7BFDE7D59DBC1DFB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5bb34d23-2626-486f-a789-4ec80a9dae3c.roa Signing time: Wed 24 Apr 2024 00:00:00 +0000 ROA not before: Wed 24 Apr 2024 00:00:00 +0000 ROA not after: Wed 29 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf5:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 00:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:a2:38:66:8b:ac:42:d2:35:ed:dd:6f:7b:fd:e7:d5:9d:bc:1d:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 24 00:00:00 2024 GMT Not After : May 29 23:59:59 2024 GMT Subject: serialNumber=0c5e0171fcfe97bda0b5544b80639e1378d746be946a13078b24a8c2ceaccd74, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b8:33:e5:96:b1:df:a5:0c:6e:b4:34:ea:15: 84:be:8f:1c:28:d0:40:38:88:4c:b3:d8:bc:1c:d8: 02:ff:28:1a:c9:5a:22:65:dc:5d:ec:5f:84:72:6a: 0b:41:3f:c8:c6:98:a8:a3:3b:90:c3:5e:8b:91:b4: 22:ab:1a:f9:58:9c:e9:aa:66:0d:d2:5f:2d:00:76: 16:f4:f9:3e:b3:cd:a9:67:79:4e:fe:4b:70:ee:17: ae:de:d6:98:c2:07:9e:0f:89:f0:de:10:dd:d8:cf: c1:66:d3:8e:d3:c8:e8:76:c2:c8:f6:29:e9:01:68: 12:6d:9d:40:aa:db:16:be:96:d2:7f:45:96:ab:59: 7b:4f:1a:3d:6b:2e:f3:3a:e3:ec:0a:db:11:7e:59: 3d:b8:9c:d1:e1:98:fe:e6:e5:c4:84:7a:c7:50:73: c7:78:48:19:4d:e8:26:12:20:9c:cc:20:02:f0:d2: 12:ca:b9:79:2a:ff:33:17:fb:16:c9:f0:e3:a2:86: 7c:8a:a9:75:0e:19:bc:ad:40:9f:a1:56:52:50:28: c8:27:0e:ed:b9:b4:ba:2a:71:27:13:01:c5:7c:97: 4c:34:8b:d7:97:bd:79:6c:73:9d:82:c7:1e:13:4b: 42:48:be:20:3e:0e:22:75:02:d0:c6:1a:0a:5c:ca: 2f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:A8:7A:4D:1B:4A:CA:EA:60:01:B0:46:8D:38:7D:77:1E:56:01:09 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5bb34d23-2626-486f-a789-4ec80a9dae3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf5:c800::/40 Signature Algorithm: sha256WithRSAEncryption 09:3d:ba:e9:78:08:e4:b6:de:0e:6a:52:c4:c0:25:04:ff:d7: f7:c1:1d:04:ba:21:95:49:1c:db:b9:5a:47:9b:72:58:ee:59: 3b:27:f9:45:7d:c5:87:fd:4d:18:b1:81:1a:9f:af:97:45:88: d3:9c:23:a8:aa:32:11:c3:0a:bb:a1:79:d5:fd:be:fb:df:0c: fd:24:6f:a5:5f:09:a0:4b:da:05:29:9a:a2:3a:97:65:2d:2b: 9f:10:5f:a9:7a:74:7e:4f:08:66:e8:16:f4:a0:7e:b8:81:23: e2:d0:b5:c5:1c:3d:07:62:17:fa:37:67:0c:fc:4a:a3:bb:34: e5:aa:bc:86:96:62:2b:68:66:f6:d2:81:c6:8b:8c:7b:15:cf: c7:bb:60:4e:62:7f:43:70:94:a1:72:43:05:0d:72:74:99:58: 5a:60:8c:70:d5:76:52:66:b0:da:d3:97:ba:e7:40:a9:60:83: 00:2b:44:8e:e7:2c:64:01:0b:64:02:20:78:81:ff:0b:cb:e3: d6:10:34:fb:5b:db:75:a6:6d:bd:01:d6:21:7f:09:ff:b6:ba: 55:85:30:24:43:c3:02:91:d3:83:31:81:0d:a0:c1:25:1f:52: e2:e0:43:c8:a8:b1:3e:fb:3e:e6:52:7d:6d:aa:2b:e0:c0:1a: 89:6b:04:c5 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUUKI4ZousQtI17d1ve/3n1Z28HfswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQyNDAwMDAwMFoX DTI0MDUyOTIzNTk1OVowejFJMEcGA1UEBRNAMGM1ZTAxNzFmY2ZlOTdiZGEwYjU1 NDRiODA2MzllMTM3OGQ3NDZiZTk0NmExMzA3OGIyNGE4YzJjZWFjY2Q3NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrgz5Zax36UMbrQ06hWEvo8cKNBA OIhMs9i8HNgC/ygayVoiZdxd7F+EcmoLQT/IxpioozuQw16LkbQiqxr5WJzpqmYN 0l8tAHYW9Pk+s82pZ3lO/ktw7heu3taYwgeeD4nw3hDd2M/BZtOO08jodsLI9inp AWgSbZ1AqtsWvpbSf0WWq1l7Txo9ay7zOuPsCtsRflk9uJzR4Zj+5uXEhHrHUHPH eEgZTegmEiCczCAC8NISyrl5Kv8zF/sWyfDjooZ8iql1Dhm8rUCfoVZSUCjIJw7t ubS6KnEnEwHFfJdMNIvXl715bHOdgsceE0tCSL4gPg4idQLQxhoKXMov6wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIKoek0bSsrqYAGwRo04fXceVgEJMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzViYjM0ZDIzLTI2MjYtNDg2Zi1hNzg5LTRlYzgwYTlkYWUzYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9cgwDQYJKoZIhvcNAQELBQADggEBAAk9uul4COS23g5qUsTA JQT/1/fBHQS6IZVJHNu5WkebcljuWTsn+UV9xYf9TRixgRqfr5dFiNOcI6iqMhHD CruhedX9vvvfDP0kb6VfCaBL2gUpmqI6l2UtK58QX6l6dH5PCGboFvSgfriBI+LQ tcUcPQdiF/o3Zwz8SqO7NOWqvIaWYitoZvbSgcaLjHsVz8e7YE5if0NwlKFyQwUN cnSZWFpgjHDVdlJmsNrTl7rnQKlggwArRI7nLGQBC2QCIHiB/wvL49YQNPtb23Wm bb0B1iF/Cf+2ulWFMCRDwwKR04MxgQ2gwSUfUuLgQ8iosT77PuZSfW2qK+DAGolr BMU= -----END CERTIFICATE-----Generated at Sun May 5 01:20:20 2024 by rpki-client on console-fra.rpki-client.org