$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/80acb4e5-8848-499d-9ed6-68558859ff37.roa File: 80acb4e5-8848-499d-9ed6-68558859ff37.roa (raw, json) Hash identifier: nYQuIPVqceiQtXaQWgW0b1Ar+o9MmphQt4VOztavHlI= Subject key identifier: B7:C6:7C:55:36:27:7A:80:47:66:12:49:86:E1:3A:3B:5B:13:E1:54 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 158F0388B63893D8FC502C7051741CE460E5D2CF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/80acb4e5-8848-499d-9ed6-68558859ff37.roa Signing time: Tue 01 Oct 2024 00:00:00 +0000 ROA not before: Tue 01 Oct 2024 00:00:00 +0000 ROA not after: Tue 05 Nov 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf0:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Oct 2024 15:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:8f:03:88:b6:38:93:d8:fc:50:2c:70:51:74:1c:e4:60:e5:d2:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 1 00:00:00 2024 GMT Not After : Nov 5 23:59:59 2024 GMT Subject: serialNumber=552e143d0a53eabe3bfb1e08fbc5bd95ff4d88499dd106d218338491b119568a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6d:ea:76:24:18:bf:b1:30:e7:37:54:11:d1: ea:25:e2:17:29:a9:52:27:33:ec:9e:75:a3:cd:c1: c6:6e:4c:97:2b:f5:72:b6:11:de:a4:85:12:55:6f: 8d:47:72:eb:6b:cb:40:63:ed:5d:27:31:0a:90:3f: fa:05:6b:e1:dc:05:5b:05:03:4e:21:a8:51:f8:e0: 84:2c:3d:28:5a:de:ee:81:5f:32:e2:5a:e6:ea:a2: df:2a:c7:64:99:1e:c6:98:fd:e1:f3:b6:b7:a3:ba: e8:c6:a6:9b:af:d8:a2:12:3f:0b:cf:5e:25:de:3a: 37:f9:68:4c:3c:1b:71:a0:6b:43:df:b0:f7:0e:27: 73:1e:e5:c8:3f:0b:6b:86:04:23:23:95:63:3b:8b: 08:2d:c9:a5:81:93:10:85:0b:57:c2:0e:40:ba:76: 3d:9d:e5:3e:3f:be:4b:59:66:2e:b3:c1:bd:fe:1e: 0f:42:74:dc:88:af:ac:c0:a0:8b:65:7e:3d:03:cd: 3e:ed:a5:09:8c:81:47:fd:e4:66:e8:c4:b9:41:07: 92:5e:74:ed:bb:31:cb:3e:d5:4f:a8:9d:7f:44:ed: 5a:cf:10:e7:22:fc:c0:2b:fc:da:ac:be:9d:2d:21: d2:18:e6:47:15:83:eb:00:d0:cb:66:10:b9:42:7e: fd:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C6:7C:55:36:27:7A:80:47:66:12:49:86:E1:3A:3B:5B:13:E1:54 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/80acb4e5-8848-499d-9ed6-68558859ff37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf0:a000::/40 Signature Algorithm: sha256WithRSAEncryption 36:32:0b:ae:eb:48:ff:b9:f9:15:d4:4f:fd:bb:b3:af:5e:c6: e9:14:5a:f3:35:72:e8:ec:68:33:5f:8b:78:00:32:30:67:1e: cd:1b:e1:11:19:84:ca:a7:50:7e:84:c8:93:66:37:34:fe:13: 6a:c4:92:d3:fb:96:48:e3:57:45:ca:9d:1d:2e:19:32:27:a3: f9:23:ee:de:29:18:e0:38:bb:11:1e:97:d4:2f:c0:d1:87:24: eb:19:f1:1f:9e:92:3e:45:e1:01:49:a7:21:1c:4d:d3:41:8b: ff:27:4a:52:7a:cc:f8:f0:98:41:e2:12:35:a0:4f:8f:53:ea: d5:f6:b6:99:ae:64:f7:87:3d:7a:ce:0e:72:4b:a8:50:0a:c4: f9:20:b7:3a:a9:2d:1d:f3:26:7a:cc:88:38:be:3d:4e:c8:a0: 13:68:91:6a:9c:a1:ea:58:33:20:aa:5d:74:17:84:38:45:a3: 57:26:5c:f4:7f:96:83:25:c4:a5:5d:ff:5f:c4:4a:2d:6b:cb: 74:ed:25:b9:ea:9a:34:71:99:55:7a:2f:9e:79:51:87:fa:d9: e6:53:b3:a2:21:cd:1a:43:9b:ec:87:de:e3:bd:a1:51:06:51: 06:f8:d2:08:27:60:d4:e4:0f:bf:ee:86:68:28:e1:2b:d2:f0: 22:84:b7:53 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUFY8DiLY4k9j8UCxwUXQc5GDl0s8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTAwMTAwMDAwMFoX DTI0MTEwNTIzNTk1OVowejFJMEcGA1UEBRNANTUyZTE0M2QwYTUzZWFiZTNiZmIx ZTA4ZmJjNWJkOTVmZjRkODg0OTlkZDEwNmQyMTgzMzg0OTFiMTE5NTY4YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy23qdiQYv7Ew5zdUEdHqJeIXKalS JzPsnnWjzcHGbkyXK/VythHepIUSVW+NR3Lra8tAY+1dJzEKkD/6BWvh3AVbBQNO IahR+OCELD0oWt7ugV8y4lrm6qLfKsdkmR7GmP3h87a3o7roxqabr9iiEj8Lz14l 3jo3+WhMPBtxoGtD37D3DidzHuXIPwtrhgQjI5VjO4sILcmlgZMQhQtXwg5AunY9 neU+P75LWWYus8G9/h4PQnTciK+swKCLZX49A80+7aUJjIFH/eRm6MS5QQeSXnTt uzHLPtVPqJ1/RO1azxDnIvzAK/zarL6dLSHSGOZHFYPrANDLZhC5Qn79qQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLfGfFU2J3qAR2YSSYbhOjtbE+FUMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgwYWNiNGU1LTg4NDgtNDk5ZC05ZWQ2LTY4NTU4ODU5ZmYzNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8KAwDQYJKoZIhvcNAQELBQADggEBADYyC67rSP+5+RXUT/27 s69exukUWvM1cujsaDNfi3gAMjBnHs0b4REZhMqnUH6EyJNmNzT+E2rEktP7lkjj V0XKnR0uGTIno/kj7t4pGOA4uxEel9QvwNGHJOsZ8R+ekj5F4QFJpyEcTdNBi/8n SlJ6zPjwmEHiEjWgT49T6tX2tpmuZPeHPXrODnJLqFAKxPkgtzqpLR3zJnrMiDi+ PU7IoBNokWqcoepYMyCqXXQXhDhFo1cmXPR/loMlxKVd/1/ESi1ry3TtJbnqmjRx mVV6L555UYf62eZTs6IhzRpDm+yH3uO9oVEGUQb40ggnYNTkD7/uhmgo4SvS8CKE t1M= -----END CERTIFICATE-----Generated at Fri Oct 25 16:44:25 2024 by rpki-client on console-ams.rpki-client.org