$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6e3bbb66-0246-4c16-ac30-46380740bfd9.roa File: 6e3bbb66-0246-4c16-ac30-46380740bfd9.roa (raw, json) Hash identifier: mzZsk8j94dVQHJbBizsm31nEESOC492zceoqovu3lII= Subject key identifier: CF:9A:16:57:A0:FE:71:2E:41:B2:E8:58:41:5B:53:F5:98:90:CD:FD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1DE9E9851F52C18DE98F19F59E1D3D57D0DB36F2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6e3bbb66-0246-4c16-ac30-46380740bfd9.roa Signing time: Sat 06 Apr 2024 00:00:00 +0000 ROA not before: Sat 06 Apr 2024 00:00:00 +0000 ROA not after: Sat 11 May 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf0:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Apr 2024 00:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:e9:e9:85:1f:52:c1:8d:e9:8f:19:f5:9e:1d:3d:57:d0:db:36:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 6 00:00:00 2024 GMT Not After : May 11 23:59:59 2024 GMT Subject: serialNumber=e570d84b099d668acd9191673cb50f5a7ae4f51eb24079445f2108bc99b11478, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:00:13:46:3e:c5:1a:f4:ba:5c:c7:ab:a3:17: dd:78:b6:d8:34:dd:52:b2:1b:cb:12:ae:c5:56:9b: 91:b7:db:73:24:c2:56:56:20:c8:cd:62:9a:d0:bf: be:37:8d:29:22:3f:e6:cd:7b:b7:5d:9b:b6:cd:6d: 20:09:06:a5:61:17:87:3f:62:1d:e0:15:d3:0d:71: 68:c7:c6:0e:7b:4c:f6:0f:aa:c0:4a:64:c4:4f:e3: 51:44:84:e5:99:8b:41:a8:57:13:2b:bd:c9:34:c3: e7:f6:8f:05:6f:94:ea:55:33:ff:49:ea:c8:9c:f3: 29:95:3b:22:55:bb:0a:7f:da:02:d6:0e:b0:a5:6d: f6:a4:00:43:88:ed:2c:ab:cd:d7:c2:97:2d:ef:ab: 33:0d:f5:62:12:49:13:30:ee:a8:e3:c7:d0:f7:1a: c9:7e:b8:ad:9b:23:40:b4:94:25:d6:c5:bc:7e:73: 26:19:d1:a2:29:0e:7e:c6:cc:87:f5:18:cf:e3:43: d0:04:df:aa:df:fa:1a:71:31:dd:b9:50:35:17:59: 46:8c:7e:25:74:76:eb:e8:05:bc:b4:a0:18:22:bf: 1d:e5:7b:ad:df:a6:6b:a5:ff:4c:62:16:cc:26:c8: 3b:d0:9c:d2:e4:98:4a:0b:40:b2:50:5a:81:b6:89: 62:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9A:16:57:A0:FE:71:2E:41:B2:E8:58:41:5B:53:F5:98:90:CD:FD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6e3bbb66-0246-4c16-ac30-46380740bfd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf0:7000::/40 Signature Algorithm: sha256WithRSAEncryption 63:50:b6:58:81:0e:73:5b:a3:39:bf:7e:6f:9e:d3:9a:05:1f: 57:3d:82:68:d8:7b:7e:6f:c8:8a:a3:da:80:88:9a:cc:5b:8f: 59:59:f5:05:52:7c:25:3b:cc:22:28:52:4a:24:9e:47:9e:07: 60:ed:04:50:9b:7a:c0:23:35:a0:69:69:5f:65:04:92:97:ce: 55:24:54:b7:5b:6a:51:ac:5b:4e:6a:0d:0c:d8:8b:af:a4:f0: 6c:d5:63:f6:ed:1a:c3:c1:97:01:91:a2:15:1e:cf:89:f2:05: 88:43:6b:09:0c:e8:98:16:6f:f1:0a:2c:cb:94:85:23:0d:83: a1:49:da:f3:85:af:da:16:ab:50:06:f0:0f:ea:63:84:b8:fe: ee:8e:b7:59:17:fa:0b:ed:b9:ed:ff:ff:1d:a9:be:cd:bd:d7: 60:b1:45:68:91:31:fa:fa:77:af:80:cb:6f:e7:86:89:46:9f: 41:e6:8e:e6:2b:5c:dc:78:88:fc:ad:22:d1:6a:d8:78:d3:6c: 69:05:7a:4e:4d:7f:66:fd:c9:c3:44:b6:d5:ec:cb:a5:e9:20: 8d:da:69:d4:dc:0c:8a:ca:f4:3f:e2:c8:5d:e6:0f:17:c9:2f: b7:a9:91:8c:42:09:17:fa:5c:e4:a1:24:dc:fb:c9:d2:76:7d: d3:6a:0e:d4 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUHenphR9SwY3pjxn1nh09V9DbNvIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDQwNjAwMDAwMFoX DTI0MDUxMTIzNTk1OVowejFJMEcGA1UEBRNAZTU3MGQ4NGIwOTlkNjY4YWNkOTE5 MTY3M2NiNTBmNWE3YWU0ZjUxZWIyNDA3OTQ0NWYyMTA4YmM5OWIxMTQ3ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwATRj7FGvS6XMeroxfdeLbYNN1S shvLEq7FVpuRt9tzJMJWViDIzWKa0L++N40pIj/mzXu3XZu2zW0gCQalYReHP2Id 4BXTDXFox8YOe0z2D6rASmTET+NRRITlmYtBqFcTK73JNMPn9o8Fb5TqVTP/SerI nPMplTsiVbsKf9oC1g6wpW32pABDiO0sq83Xwpct76szDfViEkkTMO6o48fQ9xrJ fritmyNAtJQl1sW8fnMmGdGiKQ5+xsyH9RjP40PQBN+q3/oacTHduVA1F1lGjH4l dHbr6AW8tKAYIr8d5Xut36Zrpf9MYhbMJsg70JzS5JhKC0CyUFqBtoliqwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFM+aFleg/nEuQbLoWEFbU/WYkM39MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzZlM2JiYjY2LTAyNDYtNGMxNi1hYzMwLTQ2MzgwNzQwYmZkOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8HAwDQYJKoZIhvcNAQELBQADggEBAGNQtliBDnNbozm/fm+e 05oFH1c9gmjYe35vyIqj2oCImsxbj1lZ9QVSfCU7zCIoUkoknkeeB2DtBFCbesAj NaBpaV9lBJKXzlUkVLdbalGsW05qDQzYi6+k8GzVY/btGsPBlwGRohUez4nyBYhD awkM6JgWb/EKLMuUhSMNg6FJ2vOFr9oWq1AG8A/qY4S4/u6Ot1kX+gvtue3//x2p vs2912CxRWiRMfr6d6+Ay2/nholGn0HmjuYrXNx4iPytItFq2HjTbGkFek5Nf2b9 ycNEttXsy6XpII3aadTcDIrK9D/iyF3mDxfJL7epkYxCCRf6XOShJNz7ydJ2fdNq DtQ= -----END CERTIFICATE-----Generated at Thu Apr 25 00:30:39 2024 by rpki-client on console-fra.rpki-client.org