$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b3ee66e-e710-4746-94b7-486a3b79532f.roa File: 6b3ee66e-e710-4746-94b7-486a3b79532f.roa (raw, json) Hash identifier: zft7qopk5i/ZP4l/VwBgithc+zceESKnbY9LgbeQAhQ= Subject key identifier: AD:E9:DC:E0:72:8E:42:7B:3B:4B:2B:B6:F3:89:87:73:9B:45:F5:44 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 35C5EC1F68C5D4AC313B9305A1943132E023791D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b3ee66e-e710-4746-94b7-486a3b79532f.roa Signing time: Sun 26 Mar 2023 00:00:00 +0000 ROA not before: Sun 26 Mar 2023 00:00:00 +0000 ROA not after: Sun 30 Apr 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf9:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Mar 2023 12:04:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:c5:ec:1f:68:c5:d4:ac:31:3b:93:05:a1:94:31:32:e0:23:79:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 26 00:00:00 2023 GMT Not After : Apr 30 23:59:59 2023 GMT Subject: serialNumber=b7f42e5c433483f2ff9ff7e82d02e7b87695aef5551deaf84b00ea374f256c22, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81, OU=Amazon RPKI, O=Amazon.com Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0e:9b:7b:a1:46:52:ec:41:93:c6:34:ad:7b: 2a:0a:00:8d:b0:4c:b5:29:7a:8d:43:5b:a8:3b:27: 48:ee:3e:79:84:89:2a:d3:92:a9:a9:be:51:b1:46: 2a:20:ae:a1:3a:d1:5d:d8:5c:49:97:76:67:aa:bf: c9:2d:0e:f5:60:10:28:f9:9a:d4:5f:57:a4:30:e8: e1:75:b1:6a:04:cc:ca:dc:94:7c:62:33:19:e9:f8: 73:29:d1:56:5c:ed:3c:36:f3:05:f2:56:73:0d:4e: 00:d2:7d:57:3c:d1:d6:c6:32:9a:74:f9:a7:5f:95: 1e:ea:e2:ab:cd:be:f2:6b:0c:2e:58:20:d3:40:54: e7:6c:6b:7c:bf:1f:d5:61:65:66:65:36:85:38:c5: 36:d6:69:ec:c8:d9:ad:9e:97:b9:af:19:d1:76:a7: 92:24:a2:e8:3b:5b:4d:e3:47:83:a8:9b:e7:4f:c2: 5b:57:de:6a:53:ab:41:62:f5:21:d2:08:1f:dd:b7: 78:06:3b:c4:c5:6e:aa:0c:c0:7e:1d:a3:94:8c:2b: e9:15:19:8f:5f:c5:93:e4:de:75:77:e5:4d:3b:0f: fc:18:70:2f:95:ae:65:2c:f8:58:39:3b:77:2a:b8: 40:a4:32:fd:c4:85:8a:8c:71:2d:6b:79:2f:0b:9f: e0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:E9:DC:E0:72:8E:42:7B:3B:4B:2B:B6:F3:89:87:73:9B:45:F5:44 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b3ee66e-e710-4746-94b7-486a3b79532f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf9:2000::/40 Signature Algorithm: sha256WithRSAEncryption 37:df:ec:91:17:7a:0d:12:4f:25:86:13:1a:03:22:89:c2:5a: 3e:de:98:05:8b:7f:d6:20:f5:40:6a:d1:fa:30:86:2d:c4:6c: 8b:93:14:41:6d:0d:8f:1e:4b:a0:b6:10:94:32:e7:5e:ba:9a: 89:e0:cf:0b:cc:22:7b:66:13:c9:85:07:35:d0:1f:da:1e:5d: a6:2f:06:5a:b3:de:18:22:5c:64:b6:89:22:87:ee:87:21:d9: d6:1a:ee:a2:fe:c3:29:1d:6f:76:4e:45:ba:59:43:18:06:bb: 0d:bc:c3:28:f4:ed:3b:f2:61:25:b0:aa:ae:c6:25:68:49:73: df:55:42:4d:ca:af:1e:e5:19:de:e3:e7:bb:f7:50:42:7d:e4: 6a:ce:81:50:d5:4c:a5:91:55:45:ee:97:b8:86:df:ce:10:9d: 81:64:4d:45:62:df:5e:ed:b0:99:59:c9:11:da:cf:9c:02:81: 18:00:90:6e:d6:a6:27:26:29:60:7c:9f:4b:e4:66:07:90:a8: b9:80:68:e5:21:a0:9e:8a:1a:9f:fe:37:e6:1f:93:75:33:f4: 33:14:ab:01:88:0b:3c:d5:0e:b1:a0:d8:a4:92:70:f6:6b:d1: 4e:9e:de:43:ac:4a:1d:18:b6:6f:9b:81:1c:e3:48:b0:77:a3: cf:38:e6:52 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUNcXsH2jF1KwxO5MFoZQxMuAjeR0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDMyNjAwMDAwMFoX DTIzMDQzMDIzNTk1OVowgaUxSTBHBgNVBAUTQGI3ZjQyZTVjNDMzNDgzZjJmZjlm ZjdlODJkMDJlN2I4NzY5NWFlZjU1NTFkZWFmODRiMDBlYTM3NGYyNTZjMjIxLTAr BgNVBAMTJGMwYmYwZmU4LTcxN2MtNGY3Mi05YjQ1LWM5YzUxOTEzMmE4MTEUMBIG A1UECxMLQW1hem9uIFJQS0kxEzARBgNVBAoTCkFtYXpvbi5jb20wggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeDpt7oUZS7EGTxjSteyoKAI2wTLUpeo1D W6g7J0juPnmEiSrTkqmpvlGxRiogrqE60V3YXEmXdmeqv8ktDvVgECj5mtRfV6Qw 6OF1sWoEzMrclHxiMxnp+HMp0VZc7Tw28wXyVnMNTgDSfVc80dbGMpp0+adflR7q 4qvNvvJrDC5YINNAVOdsa3y/H9VhZWZlNoU4xTbWaezI2a2el7mvGdF2p5Ikoug7 W03jR4Oom+dPwltX3mpTq0Fi9SHSCB/dt3gGO8TFbqoMwH4do5SMK+kVGY9fxZPk 3nV35U07D/wYcC+VrmUs+Fg5O3cquECkMv3EhYqMcS1reS8Ln+DNAgMBAAGjggJK MIICRjAdBgNVHQ4EFgQUrenc4HKOQns7Syu284mHc5tF9UQwHwYDVR0jBBgwFoAU QHaCVSTSxm0uEENv5l6T6MG9SjcwDgYDVR0PAQH/BAQDAgeAMH4GCCsGAQUFBwEB BHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL1FIYUNWU1RTeG0w dUVFTnY1bDZUNk1HOVNqYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1MGJlYzkyNjEvNmIz ZWU2NmUtZTcxMC00NzQ2LTk0YjctNDg2YTNiNzk1MzJmLnJvYTCBlQYDVR0fBIGN MIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lLzA4YzJmMjY0LTIzZjktNDlmYi05ZDQzLWY4YjUwYmVj OTI2MS83YmExNzg2My1hNjEzLTQxOTctOWVkNS1iZWRhNmE4OTg2OWYuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAkBtr5IDANBgkqhkiG9w0BAQsFAAOCAQEAN9/skRd6DRJPJYYTGgMiicJa Pt6YBYt/1iD1QGrR+jCGLcRsi5MUQW0Njx5LoLYQlDLnXrqaieDPC8wie2YTyYUH NdAf2h5dpi8GWrPeGCJcZLaJIofuhyHZ1hruov7DKR1vdk5FullDGAa7DbzDKPTt O/JhJbCqrsYlaElz31VCTcqvHuUZ3uPnu/dQQn3kas6BUNVMpZFVRe6XuIbfzhCd gWRNRWLfXu2wmVnJEdrPnAKBGACQbtamJyYpYHyfS+RmB5CouYBo5SGgnooan/43 5h+TdTP0MxSrAYgLPNUOsaDYpJJw9mvRTp7eQ6xKHRi2b5uBHONIsHejzzjmUg== -----END CERTIFICATE-----Generated at Sun Mar 26 00:25:44 2023 by rpki-client on console-fra.rpki-client.org