$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5c3824f8-42e9-4418-8966-1b2766cf39bd.roa File: 5c3824f8-42e9-4418-8966-1b2766cf39bd.roa (raw, json) Hash identifier: 7Xa1bJpZVibHFenx2y/D8VLSgoEgvvqKH6+WpiwPJpM= Subject key identifier: 1D:D8:C7:6A:4F:97:82:5B:FE:41:EE:89:BA:59:60:AF:99:47:0F:86 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2FACD12688704DF61530DBC16D548CC29AC22B11 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5c3824f8-42e9-4418-8966-1b2766cf39bd.roa Signing time: Mon 18 Sep 2023 00:00:00 +0000 ROA not before: Mon 18 Sep 2023 00:00:00 +0000 ROA not after: Mon 23 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf1:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Sep 2023 03:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:ac:d1:26:88:70:4d:f6:15:30:db:c1:6d:54:8c:c2:9a:c2:2b:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 18 00:00:00 2023 GMT Not After : Oct 23 23:59:59 2023 GMT Subject: serialNumber=15808d7d54aaa0f67ebd169912125e6224b7803f6e2dcfadaa3f61266b5b1799, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ea:3c:9c:34:a3:3a:d9:62:8b:39:0e:aa:31: 5b:8e:75:a4:3a:74:a5:6c:79:c0:e8:4e:8f:33:4d: 37:f8:f1:c8:07:01:f2:12:37:17:2f:fb:9f:96:f0: ea:ab:7f:f0:b4:ae:86:7a:bd:63:4f:fb:a4:4a:3d: 2f:95:53:79:53:a6:e8:d3:2e:8d:3e:c3:e2:10:9f: 4d:33:e9:ed:cc:d3:09:4f:bb:1e:62:74:ba:ae:a7: d8:d4:c5:10:99:09:01:11:c3:92:65:d0:00:12:6b: 99:14:00:e5:64:77:54:d2:91:94:5e:b0:a1:19:f6: 06:7a:05:3f:52:a4:a5:44:b4:87:c6:6a:7b:41:29: 7f:c9:fe:12:47:4e:3a:c5:fc:f6:41:4b:21:f4:ab: eb:81:f9:e6:3e:21:03:4f:a2:c2:a9:45:b3:82:d2: c8:28:22:5b:4b:e5:29:5a:08:1f:fa:91:44:54:5c: f3:2e:41:2b:ee:ea:ad:f1:fc:54:7d:16:53:72:78: 05:65:5f:7c:17:a3:38:85:2d:fc:e9:39:71:a1:07: 13:b6:8a:c0:0b:e9:f4:ed:2e:39:1e:e7:73:03:9b: 8f:d6:db:d5:8e:18:bf:c5:78:c5:53:41:c5:09:39: 72:29:a9:95:15:15:3e:ee:d4:db:fb:d0:b3:eb:ef: db:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D8:C7:6A:4F:97:82:5B:FE:41:EE:89:BA:59:60:AF:99:47:0F:86 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5c3824f8-42e9-4418-8966-1b2766cf39bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf1:7000::/40 Signature Algorithm: sha256WithRSAEncryption 8f:d4:45:d4:06:1e:86:fa:7f:90:a8:4f:86:c2:f0:56:ef:3a: 15:f5:d3:d1:6e:eb:64:fb:78:dd:8e:e3:f6:41:a8:6e:71:de: fd:b5:b0:97:a0:e9:ae:1d:2c:34:6d:31:10:a8:88:8d:42:1f: 0c:37:ca:71:95:52:b0:dd:ec:8f:78:c1:ac:f6:5a:7c:c6:69: 4c:fe:83:0d:2b:35:94:1c:d6:87:ca:b0:db:52:6c:66:24:a7: b0:f0:d9:ee:80:af:aa:df:e1:61:82:b9:bb:80:9e:44:b1:2c: a4:37:0b:dd:9b:e9:5f:0a:7a:d4:63:e0:bf:4c:c5:e2:9c:b4: 9f:45:05:9b:85:df:4b:88:ff:b4:89:ee:47:e4:3b:75:d7:53: 6b:b0:4d:59:65:27:93:55:19:12:36:97:46:25:90:90:16:98: d2:14:60:eb:c2:b8:5c:25:a7:1d:44:bc:5d:8e:9b:bb:ea:a7: 65:e4:67:ff:23:cd:83:b7:3d:98:dc:1b:b0:a4:2a:63:7b:72: 2d:04:1b:e7:96:7e:0e:58:33:71:b8:f9:cb:67:84:5a:8d:41: dc:df:f5:8b:92:8b:dd:08:55:36:c9:24:ce:57:d5:4f:3e:c1: ea:8d:6d:d9:8e:c4:b2:64:c4:29:ff:49:5f:f5:01:60:55:e4: 8e:36:1b:16 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUL6zRJohwTfYVMNvBbVSMwprCKxEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkxODAwMDAwMFoX DTIzMTAyMzIzNTk1OVowejFJMEcGA1UEBRNAMTU4MDhkN2Q1NGFhYTBmNjdlYmQx Njk5MTIxMjVlNjIyNGI3ODAzZjZlMmRjZmFkYWEzZjYxMjY2YjViMTc5OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuo8nDSjOtliizkOqjFbjnWkOnSl bHnA6E6PM003+PHIBwHyEjcXL/uflvDqq3/wtK6Ger1jT/ukSj0vlVN5U6bo0y6N PsPiEJ9NM+ntzNMJT7seYnS6rqfY1MUQmQkBEcOSZdAAEmuZFADlZHdU0pGUXrCh GfYGegU/UqSlRLSHxmp7QSl/yf4SR046xfz2QUsh9KvrgfnmPiEDT6LCqUWzgtLI KCJbS+UpWggf+pFEVFzzLkEr7uqt8fxUfRZTcngFZV98F6M4hS386TlxoQcTtorA C+n07S45HudzA5uP1tvVjhi/xXjFU0HFCTlyKamVFRU+7tTb+9Cz6+/bXQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFB3Yx2pPl4Jb/kHuibpZYK+ZRw+GMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVjMzgyNGY4LTQyZTktNDQxOC04OTY2LTFiMjc2NmNmMzliZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8XAwDQYJKoZIhvcNAQELBQADggEBAI/URdQGHob6f5CoT4bC 8FbvOhX109Fu62T7eN2O4/ZBqG5x3v21sJeg6a4dLDRtMRCoiI1CHww3ynGVUrDd 7I94waz2WnzGaUz+gw0rNZQc1ofKsNtSbGYkp7Dw2e6Ar6rf4WGCubuAnkSxLKQ3 C92b6V8KetRj4L9MxeKctJ9FBZuF30uI/7SJ7kfkO3XXU2uwTVllJ5NVGRI2l0Yl kJAWmNIUYOvCuFwlpx1EvF2Om7vqp2XkZ/8jzYO3PZjcG7CkKmN7ci0EG+eWfg5Y M3G4+ctnhFqNQdzf9YuSi90IVTbJJM5X1U8+weqNbdmOxLJkxCn/SV/1AWBV5I42 GxY= -----END CERTIFICATE-----Generated at Mon Sep 18 15:40:39 2023 by rpki-client on console-ams.rpki-client.org