$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c228d201-b8d7-484e-a91a-dc627f0c8bf9.roa File: c228d201-b8d7-484e-a91a-dc627f0c8bf9.roa (raw, json) Hash identifier: 98hj+WY0wksRyokcOHKAeM3UinuVjSq0GAPWoejWdkc= Subject key identifier: D7:F7:C8:B9:5D:2E:46:46:17:BA:B4:27:81:E4:ED:D0:C2:11:A3:C7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 04C1598400780B840814C5996B7600FC107F3F39 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c228d201-b8d7-484e-a91a-dc627f0c8bf9.roa Signing time: Tue 02 Jul 2024 00:00:00 +0000 ROA not before: Tue 02 Jul 2024 00:00:00 +0000 ROA not after: Tue 06 Aug 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf0:8800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jul 2024 00:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:c1:59:84:00:78:0b:84:08:14:c5:99:6b:76:00:fc:10:7f:3f:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 2 00:00:00 2024 GMT Not After : Aug 6 23:59:59 2024 GMT Subject: serialNumber=d2842444fd78c88eaa1a4d478d35ea61f766dbbc08d9bc19efca55a8309d3aa0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e1:87:76:7f:1e:d5:80:a2:bb:e9:c5:27:c5: 56:aa:90:75:28:12:52:52:5b:14:f5:87:68:85:ef: 4b:9b:7e:7a:fa:52:78:40:7f:8f:1c:fb:0b:54:03: d9:82:49:b9:8d:93:95:33:ba:0e:50:93:1e:b8:98: e5:57:0f:fa:e5:6a:ff:5b:bd:e4:2e:98:14:34:25: df:d5:78:17:72:36:52:00:0a:0f:00:98:ab:04:d7: 44:7c:d0:f9:a3:77:72:e0:dd:64:77:f8:b3:bd:ee: 92:52:e2:43:ab:0a:14:9d:27:f1:34:80:4d:60:61: 46:0f:85:ad:98:99:82:b1:06:91:9c:f5:5f:3f:06: b4:5d:70:2f:55:58:73:9f:0e:23:da:5a:6d:98:09: ec:5a:4c:53:fb:a2:8c:eb:2a:b8:36:c0:7a:ba:43: d1:dd:8d:1f:a4:d2:16:f5:80:67:82:dd:fa:94:f7: f2:f5:41:a9:28:61:97:95:8b:ab:6d:31:40:99:8f: ae:a7:9d:97:c3:6f:c8:e3:82:68:6d:ef:bc:3a:66: 4d:0c:ff:eb:5f:5a:19:4a:37:d7:87:9b:7f:aa:bc: ec:60:26:48:8e:7c:b3:63:24:2e:69:c1:e6:b4:19: 3a:bf:ed:fb:4d:33:91:b2:2a:4f:81:2a:84:1f:b8: ab:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F7:C8:B9:5D:2E:46:46:17:BA:B4:27:81:E4:ED:D0:C2:11:A3:C7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c228d201-b8d7-484e-a91a-dc627f0c8bf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf0:8800::/40 Signature Algorithm: sha256WithRSAEncryption a2:00:b0:e8:be:eb:48:2f:94:83:9f:85:05:d6:d3:a2:f4:e8: 79:7a:2c:34:0d:f3:57:50:d6:2c:6d:05:be:58:c3:7d:ba:19: c5:27:70:28:51:99:eb:4e:a9:9e:d5:91:62:3b:dd:ab:6f:1c: e1:70:b7:d0:0b:a8:4a:3c:5d:2c:7b:82:b7:5c:c9:48:36:15: 27:2e:e6:d6:80:f8:cf:97:6a:b6:ef:93:37:ee:e4:a6:22:07: a1:f8:94:86:68:20:2f:6f:d8:9f:b0:29:5f:36:ac:ab:40:01: 0a:1b:8d:3e:90:fd:be:46:4e:7a:11:36:00:a0:fc:c1:1f:17: ad:03:eb:cf:53:14:45:04:6b:2c:ab:6c:8e:7b:8c:76:64:9a: 5b:3d:f2:92:26:05:29:f7:35:a0:db:06:28:eb:77:30:bc:2c: ac:84:2e:a2:ac:7c:1f:ea:47:72:a5:73:b7:bf:2f:2d:be:0d: 57:e8:55:c0:32:f9:aa:4a:38:9d:7a:27:74:5b:53:e1:4f:9c: 4e:93:77:7c:91:97:48:49:0c:9b:d1:fa:17:c7:da:5b:f9:ad: 48:57:10:d7:af:84:7c:58:37:b7:e3:3d:26:24:dc:23:40:6a: 0a:31:de:f8:ad:9f:b4:64:bc:05:76:e9:80:c5:5f:bc:40:90: 63:36:5e:d1 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBMFZhAB4C4QIFMWZa3YA/BB/PzkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDcwMjAwMDAwMFoX DTI0MDgwNjIzNTk1OVowejFJMEcGA1UEBRNAZDI4NDI0NDRmZDc4Yzg4ZWFhMWE0 ZDQ3OGQzNWVhNjFmNzY2ZGJiYzA4ZDliYzE5ZWZjYTU1YTgzMDlkM2FhMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uGHdn8e1YCiu+nFJ8VWqpB1KBJS UlsU9Ydohe9Lm356+lJ4QH+PHPsLVAPZgkm5jZOVM7oOUJMeuJjlVw/65Wr/W73k LpgUNCXf1XgXcjZSAAoPAJirBNdEfND5o3dy4N1kd/izve6SUuJDqwoUnSfxNIBN YGFGD4WtmJmCsQaRnPVfPwa0XXAvVVhznw4j2lptmAnsWkxT+6KM6yq4NsB6ukPR 3Y0fpNIW9YBngt36lPfy9UGpKGGXlYurbTFAmY+up52Xw2/I44Jobe+8OmZNDP/r X1oZSjfXh5t/qrzsYCZIjnyzYyQuacHmtBk6v+37TTORsipPgSqEH7ir6wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNf3yLldLkZGF7q0J4Hk7dDCEaPHMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2MyMjhkMjAxLWI4ZDctNDg0ZS1hOTFhLWRjNjI3ZjBjOGJmOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8IgwDQYJKoZIhvcNAQELBQADggEBAKIAsOi+60gvlIOfhQXW 06L06Hl6LDQN81dQ1ixtBb5Yw326GcUncChRmetOqZ7VkWI73atvHOFwt9ALqEo8 XSx7grdcyUg2FScu5taA+M+Xarbvkzfu5KYiB6H4lIZoIC9v2J+wKV82rKtAAQob jT6Q/b5GTnoRNgCg/MEfF60D689TFEUEayyrbI57jHZkmls98pImBSn3NaDbBijr dzC8LKyELqKsfB/qR3Klc7e/Ly2+DVfoVcAy+apKOJ16J3RbU+FPnE6Td3yRl0hJ DJvR+hfH2lv5rUhXENevhHxYN7fjPSYk3CNAagox3vitn7RkvAV26YDFX7xAkGM2 XtE= -----END CERTIFICATE-----Generated at Fri Jul 26 02:06:16 2024 by rpki-client on console-fra.rpki-client.org