$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6dfd525c-732c-46fe-be7e-04eec94adec0.roa File: 6dfd525c-732c-46fe-be7e-04eec94adec0.roa (raw, json) Hash identifier: 2KJV7riLaZTurcijKMCncE/fPWq1rSSItTPD3Qk5wIg= Subject key identifier: 07:06:D1:7F:CD:9A:6C:A5:29:D2:E2:5B:36:1A:D6:3F:46:63:5D:4C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1D20CAB5A30FF4BC7821EACA28E2B009749DA0FE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6dfd525c-732c-46fe-be7e-04eec94adec0.roa Signing time: Tue 02 Jul 2024 00:00:00 +0000 ROA not before: Tue 02 Jul 2024 00:00:00 +0000 ROA not after: Tue 06 Aug 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da60:8800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jul 2024 00:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:20:ca:b5:a3:0f:f4:bc:78:21:ea:ca:28:e2:b0:09:74:9d:a0:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 2 00:00:00 2024 GMT Not After : Aug 6 23:59:59 2024 GMT Subject: serialNumber=9225f26391fabba6b52b2615d26eee2ac04cd444298a9d98983b3d5760a2ac45, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d3:81:76:45:d0:b6:cc:0e:6c:75:6f:e3:0a: ab:6c:18:e7:59:ab:54:4d:97:22:c1:da:13:b8:25: 77:7b:5f:f2:a6:d7:a1:5b:6e:4d:76:3c:6f:ed:0f: 82:bb:3a:4e:7e:ba:4b:b8:a4:df:11:12:fe:f6:95: c0:f8:37:07:50:ac:ae:61:b8:ef:31:d4:6d:5e:c2: 78:e1:69:96:68:24:f8:24:ca:ea:22:b7:31:91:29: 65:1d:f2:35:75:c6:85:a5:cf:3b:d1:20:d9:b9:3d: 2e:44:2e:67:9d:ba:fd:33:e1:e5:99:6c:73:3d:b3: 1a:0d:57:15:24:30:b4:73:96:e5:e8:88:15:6b:44: 03:23:1f:f0:9f:79:b5:df:fd:4d:b9:7b:e5:83:6c: 6e:ba:fd:67:8f:4a:22:26:6f:50:93:18:46:39:fd: a0:ed:c8:d3:39:f2:52:a4:94:0b:6e:f5:77:16:b0: b5:84:96:ef:f2:10:ab:99:f5:3e:e0:2a:1f:30:8d: f9:cf:f5:64:69:59:38:b7:0a:a5:c1:0b:84:d2:22: ef:76:74:fa:22:53:22:9b:02:9d:02:a8:22:ef:9f: cd:76:99:76:9a:a7:e6:50:87:98:de:93:7b:f5:e0: 9c:f6:4c:92:7e:ee:dc:d8:60:ab:b8:1b:a3:87:ed: f9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:06:D1:7F:CD:9A:6C:A5:29:D2:E2:5B:36:1A:D6:3F:46:63:5D:4C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6dfd525c-732c-46fe-be7e-04eec94adec0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:8800::/40 Signature Algorithm: sha256WithRSAEncryption 43:dc:29:f6:b8:e1:f0:c4:69:93:8a:b4:c2:a1:e0:ff:3b:2a: 8a:e8:b0:e2:f6:5c:19:21:1e:20:a8:69:64:59:08:31:33:09: b1:00:6c:99:8f:59:49:2b:d5:3d:98:86:a7:c0:4f:a9:7d:d5: 35:59:75:b6:27:6b:d1:09:d3:b5:79:5f:72:33:64:d0:d6:e7: b6:65:c3:46:f4:24:35:dc:21:12:b0:3e:e3:b1:bf:3d:c6:05: 97:1b:c5:05:54:52:ec:c5:7a:d4:55:dc:eb:e4:85:0f:43:71: d5:12:8d:6c:de:29:9d:2b:2e:a9:9f:9f:64:92:b1:aa:40:96: c6:82:d1:dc:b1:b5:60:d7:e3:dc:d7:c0:ea:55:21:81:36:fd: 97:19:7f:46:be:bc:89:55:cc:d7:01:2d:a8:63:45:bf:ac:ec: fe:45:6f:c2:dc:80:92:78:97:aa:f3:5e:8f:8a:ed:68:5b:75: 65:be:1b:86:16:7b:e8:8a:f3:22:fa:d6:b2:22:a0:b8:cb:4c: 1c:0d:f8:72:99:ae:b1:13:b3:72:88:0f:20:11:8a:c2:22:37: 76:37:cd:db:2a:1c:a5:f0:b9:ec:03:f8:a5:ba:89:5e:d9:94: 9d:b4:e6:06:95:42:f3:d1:dc:42:ea:09:eb:ed:98:fa:94:26: e0:c4:f3:f3 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUHSDKtaMP9Lx4IerKKOKwCXSdoP4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDcwMjAwMDAwMFoX DTI0MDgwNjIzNTk1OVowejFJMEcGA1UEBRNAOTIyNWYyNjM5MWZhYmJhNmI1MmIy NjE1ZDI2ZWVlMmFjMDRjZDQ0NDI5OGE5ZDk4OTgzYjNkNTc2MGEyYWM0NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtOBdkXQtswObHVv4wqrbBjnWatU TZciwdoTuCV3e1/yptehW25Ndjxv7Q+CuzpOfrpLuKTfERL+9pXA+DcHUKyuYbjv MdRtXsJ44WmWaCT4JMrqIrcxkSllHfI1dcaFpc870SDZuT0uRC5nnbr9M+HlmWxz PbMaDVcVJDC0c5bl6IgVa0QDIx/wn3m13/1NuXvlg2xuuv1nj0oiJm9QkxhGOf2g 7cjTOfJSpJQLbvV3FrC1hJbv8hCrmfU+4CofMI35z/VkaVk4twqlwQuE0iLvdnT6 IlMimwKdAqgi75/Ndpl2mqfmUIeY3pN79eCc9kySfu7c2GCruBujh+35lQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAcG0X/NmmylKdLiWzYa1j9GY11MMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzZkZmQ1MjVjLTczMmMtNDZmZS1iZTdlLTA0ZWVjOTRhZGVjMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYIgwDQYJKoZIhvcNAQELBQADggEBAEPcKfa44fDEaZOKtMKh 4P87KorosOL2XBkhHiCoaWRZCDEzCbEAbJmPWUkr1T2YhqfAT6l91TVZdbYna9EJ 07V5X3IzZNDW57Zlw0b0JDXcIRKwPuOxvz3GBZcbxQVUUuzFetRV3OvkhQ9DcdUS jWzeKZ0rLqmfn2SSsapAlsaC0dyxtWDX49zXwOpVIYE2/ZcZf0a+vIlVzNcBLahj Rb+s7P5Fb8LcgJJ4l6rzXo+K7WhbdWW+G4YWe+iK8yL61rIioLjLTBwN+HKZrrET s3KIDyARisIiN3Y3zdsqHKXwuewD+KW6iV7ZlJ205gaVQvPR3ELqCevtmPqUJuDE 8/M= -----END CERTIFICATE-----Generated at Fri Jul 26 01:58:40 2024 by rpki-client on console-ams.rpki-client.org