$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9aef2d7c-13ad-45c1-b5b7-aa535dfbf17e.roa File: 9aef2d7c-13ad-45c1-b5b7-aa535dfbf17e.roa (raw, json) Hash identifier: O4tjcuKv3Hm/5w2A/ICVyWcpv0GPyzMSVVwjFdKBl10= Subject key identifier: F2:60:C9:43:E5:67:69:9D:C8:79:94:4B:DD:84:62:30:A4:5C:95:00 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3110A0D929C389CA21E87646E1115787F566F8ED Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9aef2d7c-13ad-45c1-b5b7-aa535dfbf17e.roa Signing time: Tue 16 Jul 2024 00:00:00 +0000 ROA not before: Tue 16 Jul 2024 00:00:00 +0000 ROA not after: Tue 20 Aug 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab9:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jul 2024 00:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:10:a0:d9:29:c3:89:ca:21:e8:76:46:e1:11:57:87:f5:66:f8:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 16 00:00:00 2024 GMT Not After : Aug 20 23:59:59 2024 GMT Subject: serialNumber=210df61b5f314bb210a4e1f4c150367f6b916017e4d1052e4f564e0d15e94ecf, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:33:f9:c5:97:57:c1:74:34:ae:db:db:ba:ee: 11:2a:e1:b0:36:07:5f:f1:ac:c8:fd:a0:2c:cd:39: 0f:5c:36:36:ce:70:1c:f3:82:2f:51:35:bb:60:61: c3:ca:9d:73:c0:43:44:82:6e:5a:be:9f:24:4e:bf: 39:f0:84:a4:15:6a:a0:62:8c:65:1d:85:78:9d:f6: 6d:21:25:ec:8f:2b:7e:b3:d4:aa:a2:94:9e:0d:b0: f6:f8:74:16:c6:52:db:3e:fc:87:3f:cb:6c:db:29: ca:c3:fc:88:8a:0a:0e:9e:f5:4c:a1:b6:44:45:08: 8b:09:d6:2e:f1:72:85:b5:ea:21:bf:e0:60:e1:e0: 63:f4:da:71:81:21:69:77:92:af:4c:f3:82:44:01: 70:0e:80:e9:70:e6:ae:60:4e:b8:dc:b7:8a:96:91: f3:78:8a:0e:53:fa:db:1b:50:49:91:2f:ba:ba:f3: 8a:a5:a9:13:5d:76:6e:04:88:6a:9e:0c:64:24:6f: cb:bd:73:d5:ea:10:e5:c4:3d:ba:bd:fd:60:86:0b: fe:be:00:6d:9e:a9:2b:13:d3:19:88:61:94:11:90: 0f:c3:b1:0f:fc:8c:05:42:61:d1:f6:77:ee:e6:d3: 1d:dd:d2:2f:dd:67:fa:90:bf:cc:d0:28:2a:54:fa: 51:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:60:C9:43:E5:67:69:9D:C8:79:94:4B:DD:84:62:30:A4:5C:95:00 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9aef2d7c-13ad-45c1-b5b7-aa535dfbf17e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:b000::/40 Signature Algorithm: sha256WithRSAEncryption 26:6c:71:fc:c5:32:45:d8:f4:74:73:15:f7:7f:55:54:0f:db: ad:9e:2f:8c:4c:32:34:64:d6:b6:07:15:f4:11:76:f8:31:7a: 4a:a8:23:91:20:f4:6a:b7:93:45:5c:fe:7d:52:e5:aa:63:01: 5d:f2:74:c5:21:f8:b3:c5:d5:42:fd:95:a3:95:e1:04:56:8d: fd:26:07:fa:ad:9a:b1:94:c6:26:f4:71:ee:ec:d0:bc:41:1c: 94:83:ce:c0:cb:02:93:2c:81:d8:1d:b4:3d:de:fd:75:aa:62: d8:39:4f:45:c2:58:af:54:33:d1:f8:cc:da:31:2e:77:18:1c: d7:b7:5e:a5:5f:17:31:4e:b1:04:ff:9d:5e:05:e4:b3:b1:ed: 78:46:4c:d3:d3:a6:6c:03:a5:2d:74:62:87:a7:49:89:98:46: b2:cc:a5:de:f0:0a:1d:04:e7:16:b3:9a:19:8b:fb:68:e3:e8: 1b:d3:3b:95:f0:41:96:f2:c8:ce:dd:53:8f:32:53:10:10:54: af:b1:28:c7:1e:bb:f8:27:67:45:00:92:7a:c9:89:58:52:78: 7f:50:c8:c9:09:b1:5d:92:ce:89:b3:a5:76:51:eb:53:af:40: 22:53:fb:2f:7b:59:51:1a:da:f3:77:75:b3:6f:d7:bf:83:9e: 8c:c1:85:7d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUMRCg2SnDicoh6HZG4RFXh/Vm+O0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDcxNjAwMDAwMFoX DTI0MDgyMDIzNTk1OVowejFJMEcGA1UEBRNAMjEwZGY2MWI1ZjMxNGJiMjEwYTRl MWY0YzE1MDM2N2Y2YjkxNjAxN2U0ZDEwNTJlNGY1NjRlMGQxNWU5NGVjZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzP5xZdXwXQ0rtvbuu4RKuGwNgdf 8azI/aAszTkPXDY2znAc84IvUTW7YGHDyp1zwENEgm5avp8kTr858ISkFWqgYoxl HYV4nfZtISXsjyt+s9SqopSeDbD2+HQWxlLbPvyHP8ts2ynKw/yIigoOnvVMobZE RQiLCdYu8XKFteohv+Bg4eBj9NpxgSFpd5KvTPOCRAFwDoDpcOauYE643LeKlpHz eIoOU/rbG1BJkS+6uvOKpakTXXZuBIhqngxkJG/LvXPV6hDlxD26vf1ghgv+vgBt nqkrE9MZiGGUEZAPw7EP/IwFQmHR9nfu5tMd3dIv3Wf6kL/M0CgqVPpRbwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPJgyUPlZ2mdyHmUS92EYjCkXJUAMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlhZWYyZDdjLTEzYWQtNDVjMS1iNWI3LWFhNTM1ZGZiZjE3ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaubAwDQYJKoZIhvcNAQELBQADggEBACZscfzFMkXY9HRzFfd/ VVQP262eL4xMMjRk1rYHFfQRdvgxekqoI5Eg9Gq3k0Vc/n1S5apjAV3ydMUh+LPF 1UL9laOV4QRWjf0mB/qtmrGUxib0ce7s0LxBHJSDzsDLApMsgdgdtD3e/XWqYtg5 T0XCWK9UM9H4zNoxLncYHNe3XqVfFzFOsQT/nV4F5LOx7XhGTNPTpmwDpS10Yoen SYmYRrLMpd7wCh0E5xazmhmL+2jj6BvTO5XwQZbyyM7dU48yUxAQVK+xKMceu/gn Z0UAknrJiVhSeH9QyMkJsV2SzomzpXZR61OvQCJT+y97WVEa2vN3dbNv17+DnozB hX0= -----END CERTIFICATE-----Generated at Fri Jul 26 02:06:16 2024 by rpki-client on console-fra.rpki-client.org