$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/88c7716d-81dd-4500-bbd3-955e3087913e.roa File: 88c7716d-81dd-4500-bbd3-955e3087913e.roa (raw, json) Hash identifier: fUg1QJ9TIF2LkiXb2FBM9GPV8ysMs1jCJqpb3hNgDzg= Subject key identifier: 1A:42:7C:E8:9F:F0:F8:B7:C8:90:EC:1F:81:4C:9D:86:10:0D:33:58 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 36F49BA6121E4330D46C2A481BA2F1807E5EFBCC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/88c7716d-81dd-4500-bbd3-955e3087913e.roa Signing time: Wed 20 Nov 2024 00:00:00 +0000 ROA not before: Wed 20 Nov 2024 00:00:00 +0000 ROA not after: Wed 25 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da70:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 00:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:f4:9b:a6:12:1e:43:30:d4:6c:2a:48:1b:a2:f1:80:7e:5e:fb:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 20 00:00:00 2024 GMT Not After : Dec 25 23:59:59 2024 GMT Subject: serialNumber=6c32df5516ee423991e9a263204f01ab366cd88b761d1be242e30f6aaaefcb23, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:97:13:32:08:12:21:6f:0e:23:8b:04:02:50: 2a:6b:93:f2:34:64:b1:1d:ad:f9:4a:67:82:18:c9: 2c:d3:68:fb:e3:93:83:85:05:e0:24:50:f0:90:f4: 89:ce:b1:02:3c:f0:71:16:6a:70:d4:3f:73:9f:3e: 1a:8b:b3:9e:fd:5e:87:81:bb:7e:13:7c:a4:b5:df: 82:80:a0:cf:3a:55:ae:09:9c:8f:21:d5:75:b3:ee: d2:18:90:76:5f:27:32:42:c2:91:25:74:12:05:21: 34:6d:06:66:ae:83:67:e5:1c:1d:0c:42:90:b9:16: 5a:72:b8:81:db:b4:3f:20:b1:b1:18:51:c8:5e:9d: 19:e6:05:dc:9f:5f:9f:b2:08:8b:ea:12:46:b4:70: d0:8f:25:9e:b2:5c:c8:57:5a:3d:d5:e9:8e:21:ac: 0a:7f:91:1c:0d:b0:a0:1b:c0:40:5a:3c:eb:7c:73: db:28:7e:44:e6:74:e4:4c:07:9e:67:be:83:98:54: e5:44:9f:d4:8f:b4:ef:d8:91:02:09:c7:7d:fe:be: 4e:17:8c:55:01:e4:43:2b:d7:ae:55:fd:8a:65:5f: c9:c8:38:de:4c:fe:26:32:a4:db:35:6c:85:95:5b: 09:ee:a2:32:11:cb:8a:f8:45:c4:57:ba:54:be:f5: d5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:42:7C:E8:9F:F0:F8:B7:C8:90:EC:1F:81:4C:9D:86:10:0D:33:58 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/88c7716d-81dd-4500-bbd3-955e3087913e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da70:f000::/40 Signature Algorithm: sha256WithRSAEncryption 60:11:10:54:b5:ef:91:b4:18:10:1a:1e:7f:a9:3a:8c:04:2b: df:2e:10:15:0f:d4:30:c4:73:3b:ef:91:10:6f:07:84:13:ca: e8:83:2f:ac:6c:cb:c5:e5:9e:77:ee:a8:e3:c7:a8:1b:63:cb: 12:bb:5c:de:ce:c1:8d:b3:c9:08:06:14:e2:79:aa:34:cb:ed: 31:7c:d0:2b:26:42:01:a0:6f:9f:e7:20:7d:1c:61:91:f7:1a: c7:e9:97:87:62:55:11:a3:7c:13:ae:87:5b:e6:d7:5a:14:db: d0:83:85:2a:61:92:8f:71:a0:96:57:c3:8c:47:f5:a4:ef:fe: 86:04:b9:4d:af:c2:cb:03:0e:15:7b:d8:c8:a4:15:a8:14:da: d4:9b:2f:e2:21:db:ac:d8:4e:b0:f2:7e:1b:45:80:8c:e6:85: a3:1e:27:3f:7a:0b:88:89:fc:e1:ea:8f:61:1f:33:65:9c:c0: ec:a3:a3:0b:50:86:80:66:c3:58:24:01:78:ff:7c:72:a8:19: 05:2c:a1:b2:0f:03:31:e9:bb:5f:4e:74:94:c8:b2:ca:d8:54: 31:72:51:aa:dc:1c:9f:18:6d:3b:99:38:46:25:01:3f:18:b6: 3d:c2:0d:d6:66:d2:20:77:6c:df:dc:59:e6:96:2a:4e:dc:2d: 24:39:48:ca -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUNvSbphIeQzDUbCpIG6LxgH5e+8wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTEyMDAwMDAwMFoX DTI0MTIyNTIzNTk1OVowejFJMEcGA1UEBRNANmMzMmRmNTUxNmVlNDIzOTkxZTlh MjYzMjA0ZjAxYWIzNjZjZDg4Yjc2MWQxYmUyNDJlMzBmNmFhYWVmY2IyMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJcTMggSIW8OI4sEAlAqa5PyNGSx Ha35SmeCGMks02j745ODhQXgJFDwkPSJzrECPPBxFmpw1D9znz4ai7Oe/V6Hgbt+ E3yktd+CgKDPOlWuCZyPIdV1s+7SGJB2XycyQsKRJXQSBSE0bQZmroNn5RwdDEKQ uRZacriB27Q/ILGxGFHIXp0Z5gXcn1+fsgiL6hJGtHDQjyWeslzIV1o91emOIawK f5EcDbCgG8BAWjzrfHPbKH5E5nTkTAeeZ76DmFTlRJ/Uj7Tv2JECCcd9/r5OF4xV AeRDK9euVf2KZV/JyDjeTP4mMqTbNWyFlVsJ7qIyEcuK+EXEV7pUvvXVnQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBpCfOif8Pi3yJDsH4FMnYYQDTNYMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg4Yzc3MTZkLTgxZGQtNDUwMC1iYmQzLTk1NWUzMDg3OTEzZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbacPAwDQYJKoZIhvcNAQELBQADggEBAGAREFS175G0GBAaHn+p OowEK98uEBUP1DDEczvvkRBvB4QTyuiDL6xsy8XlnnfuqOPHqBtjyxK7XN7OwY2z yQgGFOJ5qjTL7TF80CsmQgGgb5/nIH0cYZH3Gsfpl4diVRGjfBOuh1vm11oU29CD hSphko9xoJZXw4xH9aTv/oYEuU2vwssDDhV72MikFagU2tSbL+Ih26zYTrDyfhtF gIzmhaMeJz96C4iJ/OHqj2EfM2WcwOyjowtQhoBmw1gkAXj/fHKoGQUsobIPAzHp u19OdJTIssrYVDFyUarcHJ8YbTuZOEYlAT8Ytj3CDdZm0iB3bN/cWeaWKk7cLSQ5 SMo= -----END CERTIFICATE-----Generated at Mon Nov 25 01:01:14 2024 by rpki-client on console-ams.rpki-client.org