$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b85f489e-343d-41f3-bec5-5d34db511649.roa File: b85f489e-343d-41f3-bec5-5d34db511649.roa (raw, json) Hash identifier: rpJTFvnrbPBaznC2qrWkt7zIRD3qENFyqhZ1ZPTAMxg= Subject key identifier: F7:A6:DC:B2:8A:43:BE:79:05:78:40:65:AF:15:4F:01:0B:B3:A8:DC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4AD8090B67736194A3662B966839B13628EFAD57 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b85f489e-343d-41f3-bec5-5d34db511649.roa Signing time: Mon 18 Sep 2023 00:00:00 +0000 ROA not before: Mon 18 Sep 2023 00:00:00 +0000 ROA not after: Mon 23 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf0:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Sep 2023 03:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:d8:09:0b:67:73:61:94:a3:66:2b:96:68:39:b1:36:28:ef:ad:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 18 00:00:00 2023 GMT Not After : Oct 23 23:59:59 2023 GMT Subject: serialNumber=d93ad73055ea6905446597dd34b5fdb365b835cfea23ff3b5df8e9aef5b203ff, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:cf:01:32:4f:9a:11:67:2e:a6:1f:04:06:0d: bc:30:bc:f1:38:ab:65:37:23:05:54:c8:ec:8a:bf: 5d:71:3f:0b:4b:2b:3a:f2:87:85:db:92:58:69:b9: 69:79:96:f3:38:09:c4:d3:89:24:8f:9a:c0:7d:d4: 54:f0:2f:5e:20:58:8d:a6:e4:d7:c4:0c:c8:8c:05: 52:60:1b:9d:11:56:e2:9b:7b:2d:ac:af:78:ec:1f: 8d:b1:1a:6f:6d:b3:3f:a9:d5:08:f7:2e:a3:12:8d: 06:cc:0b:22:af:49:e2:b9:f9:ce:4d:10:57:a1:04: 63:15:dc:64:c9:09:b7:b1:0f:57:d2:57:bc:bb:b4: 34:06:ab:19:04:91:0c:14:52:e9:f5:ae:a6:28:e8: 4b:31:eb:51:cd:2f:87:df:d5:34:8e:4b:e3:7a:47: 6d:bc:bd:4b:38:38:5b:9b:36:a9:e9:a6:b6:8d:32: 93:6f:b1:22:84:8f:f8:0e:24:45:a9:e2:c3:5b:67: ed:bb:9d:c4:e5:27:99:a2:69:d1:5d:ac:d9:93:5d: e1:ba:5a:d6:f4:d6:7f:cf:b1:68:74:dc:86:85:02: a7:23:57:7c:3a:14:a3:85:0c:2e:d4:35:8c:76:09: 61:91:05:46:c7:6b:9c:51:3f:60:44:0b:98:0c:43: 8b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:A6:DC:B2:8A:43:BE:79:05:78:40:65:AF:15:4F:01:0B:B3:A8:DC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b85f489e-343d-41f3-bec5-5d34db511649.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf0:2000::/40 Signature Algorithm: sha256WithRSAEncryption 1f:b8:f3:6f:7d:a3:d3:ed:03:37:d6:a0:d3:fa:27:be:34:49: 12:dd:fc:71:2a:9b:05:55:c8:31:11:6d:d6:17:4c:04:9e:fc: 90:28:f1:d2:8f:7a:d3:34:91:74:26:8e:fe:2a:e4:37:38:35: f2:d3:4b:62:9f:3f:8c:a5:3a:a1:7b:db:1d:a9:73:60:97:0e: f5:1b:f6:7a:36:25:44:5d:54:bb:21:83:73:91:f8:92:de:f3: 0a:8c:47:b6:51:bb:ac:f8:fe:2a:1d:7f:23:87:74:f6:cf:49: 98:66:70:87:4f:f0:34:d0:46:b1:28:88:40:00:58:05:34:08: 48:c0:cd:90:79:6e:99:a7:83:35:8f:01:6b:db:3f:1e:3e:13: a7:0f:6f:69:7d:72:84:9d:97:26:9a:29:75:49:8a:cd:ab:06: 82:7d:42:4e:40:84:9d:54:ff:6c:65:77:c4:53:b3:59:dd:50: c1:20:36:7b:d4:c4:1d:e3:de:b8:9b:dd:9a:46:b6:e9:65:f7: 09:70:2a:fe:6a:31:fb:a4:30:0d:e2:09:08:63:ea:08:35:74: e3:fe:e8:e5:70:5b:cd:07:6a:59:3c:49:5e:de:de:c0:a9:31: 4c:b5:8e:38:26:d5:ec:27:ec:a6:e2:f9:f7:61:fe:36:8f:78: 1f:72:43:a1 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUStgJC2dzYZSjZiuWaDmxNijvrVcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkxODAwMDAwMFoX DTIzMTAyMzIzNTk1OVowejFJMEcGA1UEBRNAZDkzYWQ3MzA1NWVhNjkwNTQ0NjU5 N2RkMzRiNWZkYjM2NWI4MzVjZmVhMjNmZjNiNWRmOGU5YWVmNWIyMDNmZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4c8BMk+aEWcuph8EBg28MLzxOKtl NyMFVMjsir9dcT8LSys68oeF25JYablpeZbzOAnE04kkj5rAfdRU8C9eIFiNpuTX xAzIjAVSYBudEVbim3strK947B+NsRpvbbM/qdUI9y6jEo0GzAsir0niufnOTRBX oQRjFdxkyQm3sQ9X0le8u7Q0BqsZBJEMFFLp9a6mKOhLMetRzS+H39U0jkvjekdt vL1LODhbmzap6aa2jTKTb7EihI/4DiRFqeLDW2ftu53E5SeZomnRXazZk13hulrW 9NZ/z7FodNyGhQKnI1d8OhSjhQwu1DWMdglhkQVGx2ucUT9gRAuYDEOL8wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPem3LKKQ755BXhAZa8VTwELs6jcMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I4NWY0ODllLTM0M2QtNDFmMy1iZWM1LTVkMzRkYjUxMTY0OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8CAwDQYJKoZIhvcNAQELBQADggEBAB+48299o9PtAzfWoNP6 J740SRLd/HEqmwVVyDERbdYXTASe/JAo8dKPetM0kXQmjv4q5Dc4NfLTS2KfP4yl OqF72x2pc2CXDvUb9no2JURdVLshg3OR+JLe8wqMR7ZRu6z4/iodfyOHdPbPSZhm cIdP8DTQRrEoiEAAWAU0CEjAzZB5bpmngzWPAWvbPx4+E6cPb2l9coSdlyaaKXVJ is2rBoJ9Qk5AhJ1U/2xld8RTs1ndUMEgNnvUxB3j3rib3ZpGtull9wlwKv5qMfuk MA3iCQhj6gg1dOP+6OVwW80Halk8SV7e3sCpMUy1jjgm1ewn7Kbi+fdh/jaPeB9y Q6E= -----END CERTIFICATE-----Generated at Mon Sep 18 15:40:40 2023 by rpki-client on console-ams.rpki-client.org