$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/74b1fe31-3591-4da8-95f4-39ba57fac545.roa File: 74b1fe31-3591-4da8-95f4-39ba57fac545.roa (raw, json) Hash identifier: ot3jrWizkR7Cr7Rjlf9LQB9aR7BJDZil2Z5vrM3c6HA= Subject key identifier: DF:73:05:46:F7:F3:A1:D7:11:6A:DB:F3:68:D0:C2:B5:43:B9:10:E0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0F73C9978990BBE013B4AED9CD63C436D7127D17 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/74b1fe31-3591-4da8-95f4-39ba57fac545.roa Signing time: Mon 06 May 2024 00:00:00 +0000 ROA not before: Mon 06 May 2024 00:00:00 +0000 ROA not after: Mon 10 Jun 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf1:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 15:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:73:c9:97:89:90:bb:e0:13:b4:ae:d9:cd:63:c4:36:d7:12:7d:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 6 00:00:00 2024 GMT Not After : Jun 10 23:59:59 2024 GMT Subject: serialNumber=45bdfe04190a8561b114572bd05ced86ce67e98af160efb3e4e52e37115b4ef2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:93:c5:7d:41:ae:ac:7d:1e:23:4b:ad:c2:ab: a3:07:75:4d:30:db:45:10:26:0b:bf:ef:ce:0f:46: 10:88:1b:a6:32:64:b7:b0:30:13:8e:6f:42:88:dd: b1:36:26:e7:20:7a:11:73:f4:10:7f:e9:4d:d9:5a: 0a:5e:9d:57:b2:c2:9b:69:8c:c9:db:21:79:b8:30: 06:42:97:bd:c3:0c:a0:83:ac:22:d5:dd:3a:ec:35: 21:fa:9f:13:1f:79:d4:6b:c0:7f:40:a4:eb:72:cb: 5a:37:d1:6e:14:ba:bb:db:95:f7:ab:fe:9b:79:77: b5:1b:ae:19:db:70:8f:35:32:23:03:2f:ac:37:f5: 04:85:cb:6c:ff:fe:16:77:23:6d:8c:fe:39:2f:c0: a9:1b:72:4a:3b:97:6a:64:76:c1:2a:f7:79:66:b9: ef:7e:c9:df:60:8c:5d:04:a7:a8:30:52:28:21:4f: e6:28:7a:b3:dc:a4:b1:3a:cf:e5:25:73:cf:52:f1: 28:b8:95:db:9e:0e:35:0f:14:9a:8f:4f:62:14:b4: 4a:fb:b0:b9:84:46:f8:88:6f:53:86:bc:90:43:b6: bb:bf:2c:43:dd:6c:aa:4d:57:e5:67:68:e2:7a:e5: 14:ab:7d:82:94:38:64:ea:f5:e3:a9:fd:bb:82:05: 48:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:73:05:46:F7:F3:A1:D7:11:6A:DB:F3:68:D0:C2:B5:43:B9:10:E0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/74b1fe31-3591-4da8-95f4-39ba57fac545.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf1:1000::/40 Signature Algorithm: sha256WithRSAEncryption 63:d8:0e:e0:b5:09:6d:df:79:92:fa:39:4d:4f:38:1c:f8:9a: 61:16:d9:fa:76:6c:09:63:05:4c:d8:d1:ec:ac:29:3a:b0:e2: 94:37:b8:1b:aa:c8:89:a1:19:a5:81:75:18:6a:02:d4:70:95: 10:f0:00:39:51:47:d4:83:f8:ca:2a:be:ec:e6:98:da:66:a9: a7:a1:96:d8:4f:0b:2e:58:5d:7d:08:a5:62:af:f9:ff:e8:88: c2:36:11:2e:30:eb:b1:18:dc:07:fa:20:96:1c:c1:29:65:45: db:73:4c:c8:87:40:4d:24:6c:bf:43:ca:0a:74:cf:82:d6:8c: d7:24:13:bf:f5:42:21:bf:11:67:f1:5f:4b:74:57:05:a3:48: 76:ec:1a:0a:45:f3:1d:4a:24:0c:4a:80:ea:b0:d9:aa:f4:bb: 2e:77:33:3e:3d:83:91:0c:01:c2:a7:e6:fb:5f:b7:85:2d:4d: 60:d5:ce:7a:d4:67:4f:99:47:e6:08:e0:a7:7b:ff:c0:cc:e9: 28:c8:17:b9:28:47:f3:7e:aa:a7:6e:a9:19:c2:7e:37:52:7f: 4c:fd:db:da:89:ba:f1:9a:34:45:cb:10:bb:c4:94:e4:03:7c: dd:35:05:e9:9c:ea:9e:23:e8:54:dd:e7:31:76:29:e1:bd:9f: af:43:4c:59 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUD3PJl4mQu+ATtK7ZzWPENtcSfRcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUwNjAwMDAwMFoX DTI0MDYxMDIzNTk1OVowejFJMEcGA1UEBRNANDViZGZlMDQxOTBhODU2MWIxMTQ1 NzJiZDA1Y2VkODZjZTY3ZTk4YWYxNjBlZmIzZTRlNTJlMzcxMTViNGVmMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZPFfUGurH0eI0utwqujB3VNMNtF ECYLv+/OD0YQiBumMmS3sDATjm9CiN2xNibnIHoRc/QQf+lN2VoKXp1XssKbaYzJ 2yF5uDAGQpe9wwygg6wi1d067DUh+p8TH3nUa8B/QKTrcstaN9FuFLq725X3q/6b eXe1G64Z23CPNTIjAy+sN/UEhcts//4WdyNtjP45L8CpG3JKO5dqZHbBKvd5Zrnv fsnfYIxdBKeoMFIoIU/mKHqz3KSxOs/lJXPPUvEouJXbng41DxSaj09iFLRK+7C5 hEb4iG9ThryQQ7a7vyxD3WyqTVflZ2jieuUUq32ClDhk6vXjqf27ggVISwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFN9zBUb386HXEWrb82jQwrVDuRDgMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc0YjFmZTMxLTM1OTEtNGRhOC05NWY0LTM5YmE1N2ZhYzU0NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8RAwDQYJKoZIhvcNAQELBQADggEBAGPYDuC1CW3feZL6OU1P OBz4mmEW2fp2bAljBUzY0eysKTqw4pQ3uBuqyImhGaWBdRhqAtRwlRDwADlRR9SD +MoqvuzmmNpmqaehlthPCy5YXX0IpWKv+f/oiMI2ES4w67EY3Af6IJYcwSllRdtz TMiHQE0kbL9Dygp0z4LWjNckE7/1QiG/EWfxX0t0VwWjSHbsGgpF8x1KJAxKgOqw 2ar0uy53Mz49g5EMAcKn5vtft4UtTWDVznrUZ0+ZR+YI4Kd7/8DM6SjIF7koR/N+ qqduqRnCfjdSf0z929qJuvGaNEXLELvElOQDfN01Bemc6p4j6FTd5zF2KeG9n69D TFk= -----END CERTIFICATE-----Generated at Tue May 7 16:43:59 2024 by rpki-client on console-ams.rpki-client.org