$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c37936c7-9b4b-4b9b-89e1-5a000065f43f.roa File: c37936c7-9b4b-4b9b-89e1-5a000065f43f.roa (raw, json) Hash identifier: dXwSjR/oIveqZw+LUBJenvTuMGUMKFdojd5+Gaaz/Uk= Subject key identifier: BA:9A:67:EC:D4:A0:E8:5E:90:E7:56:69:9A:CF:8C:10:AB:85:3B:C1 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 52BF8F9C10C527B4AAB07112A7935B6A1C763211 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c37936c7-9b4b-4b9b-89e1-5a000065f43f.roa Signing time: Fri 25 Oct 2024 00:00:00 +0000 ROA not before: Fri 25 Oct 2024 00:00:00 +0000 ROA not after: Fri 29 Nov 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da36:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Oct 2024 15:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:bf:8f:9c:10:c5:27:b4:aa:b0:71:12:a7:93:5b:6a:1c:76:32:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 25 00:00:00 2024 GMT Not After : Nov 29 23:59:59 2024 GMT Subject: serialNumber=5a5f114fca7fa95d92672ad62e9493a920eb66588fd261d84884cd6ba409783b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:83:fb:2f:e0:cb:09:ef:5d:ce:e9:4e:05:fb: 36:42:3e:83:84:48:4b:89:2d:fb:dc:48:84:cc:69: fe:9d:6c:98:bd:33:bc:cf:c7:56:b7:2b:08:58:b7: bd:ba:01:e9:33:19:05:85:8c:91:cd:2b:d9:df:c3: 59:05:eb:9c:3b:53:42:28:7b:5d:ee:25:a8:e0:af: ad:a4:c5:43:e9:57:00:38:02:b6:56:35:35:b9:75: 03:53:28:53:31:61:33:6a:b5:72:4e:1f:ce:0e:26: 01:1d:4b:48:30:ff:ce:6d:7b:6b:34:79:0c:73:cf: 23:6b:b5:0f:df:bd:44:64:e2:90:3a:b6:2c:28:04: d1:f8:15:0a:0a:e0:58:92:be:93:7d:a9:07:08:b6: b8:77:8f:3c:0d:a3:40:46:73:f0:46:f2:6b:24:05: e2:0f:2b:13:cc:c4:0a:f1:69:5f:73:ba:1b:ff:a0: 61:d8:36:81:47:9c:9b:b5:d4:90:f4:74:9e:c2:81: f2:d7:7a:16:58:41:10:e8:66:81:0e:fa:c1:dc:50: 74:d7:19:8b:ce:c8:ae:9e:98:e2:73:89:b2:9a:15: f8:10:39:47:34:22:0c:cf:9c:fb:8c:66:f4:7f:9c: 3a:a0:55:ce:99:19:48:51:46:83:1f:2a:dc:fc:d0: 1b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:9A:67:EC:D4:A0:E8:5E:90:E7:56:69:9A:CF:8C:10:AB:85:3B:C1 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c37936c7-9b4b-4b9b-89e1-5a000065f43f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da36:800::/40 Signature Algorithm: sha256WithRSAEncryption 2f:23:29:36:86:f8:83:be:fa:5f:ba:0c:00:4e:0e:79:99:a2: 09:8d:fc:61:65:a2:8e:be:a3:b1:b5:ba:9b:c3:c0:8e:9e:cd: 16:c9:b2:4e:12:66:9a:53:08:a6:a6:36:e3:66:e1:03:d7:0b: 2b:74:4c:ff:16:28:19:6c:53:71:bf:98:af:11:07:c4:b3:95: 7b:74:fb:74:b5:25:b6:0d:07:ff:89:5c:12:03:10:cf:6a:ba: 73:05:e9:0b:f5:fa:30:3c:9e:9d:24:19:84:ca:eb:ac:77:f1: df:e9:e3:f1:d1:c6:6c:96:3a:e2:26:74:48:dc:f3:57:5c:c5: 2e:fa:90:24:ab:d6:b4:0c:23:6f:aa:1a:02:b1:99:2c:75:68: fb:d9:33:e6:cd:44:96:89:96:48:15:17:75:88:70:64:e9:9a: ae:b7:f7:bd:5c:db:11:d1:17:84:cd:8b:ae:6f:b4:7d:b1:5d: 9c:54:0a:18:4e:96:c6:65:4f:b7:0e:24:41:09:7e:28:51:04: f3:0e:65:f8:28:73:93:0f:e9:a8:ac:c9:5d:5b:5f:68:9b:a7: 6d:46:67:b7:07:53:41:37:f9:86:07:a8:fe:9a:3b:91:38:7f: e5:4e:7d:48:2b:c3:76:cc:75:a1:0c:17:6c:05:fe:ea:8e:f5: 26:f4:ec:7c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUUr+PnBDFJ7SqsHESp5Nbahx2MhEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTAyNTAwMDAwMFoX DTI0MTEyOTIzNTk1OVowejFJMEcGA1UEBRNANWE1ZjExNGZjYTdmYTk1ZDkyNjcy YWQ2MmU5NDkzYTkyMGViNjY1ODhmZDI2MWQ4NDg4NGNkNmJhNDA5NzgzYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4P7L+DLCe9dzulOBfs2Qj6DhEhL iS373EiEzGn+nWyYvTO8z8dWtysIWLe9ugHpMxkFhYyRzSvZ38NZBeucO1NCKHtd 7iWo4K+tpMVD6VcAOAK2VjU1uXUDUyhTMWEzarVyTh/ODiYBHUtIMP/ObXtrNHkM c88ja7UP371EZOKQOrYsKATR+BUKCuBYkr6TfakHCLa4d488DaNARnPwRvJrJAXi DysTzMQK8Wlfc7ob/6Bh2DaBR5ybtdSQ9HSewoHy13oWWEEQ6GaBDvrB3FB01xmL zsiunpjic4mymhX4EDlHNCIMz5z7jGb0f5w6oFXOmRlIUUaDHyrc/NAb+QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLqaZ+zUoOhekOdWaZrPjBCrhTvBMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2MzNzkzNmM3LTliNGItNGI5Yi04OWUxLTVhMDAwMDY1ZjQzZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaNggwDQYJKoZIhvcNAQELBQADggEBAC8jKTaG+IO++l+6DABO DnmZogmN/GFloo6+o7G1upvDwI6ezRbJsk4SZppTCKamNuNm4QPXCyt0TP8WKBls U3G/mK8RB8SzlXt0+3S1JbYNB/+JXBIDEM9qunMF6Qv1+jA8np0kGYTK66x38d/p 4/HRxmyWOuImdEjc81dcxS76kCSr1rQMI2+qGgKxmSx1aPvZM+bNRJaJlkgVF3WI cGTpmq63971c2xHRF4TNi65vtH2xXZxUChhOlsZlT7cOJEEJfihRBPMOZfgoc5MP 6aisyV1bX2ibp21GZ7cHU0E3+YYHqP6aO5E4f+VOfUgrw3bMdaEMF2wF/uqO9Sb0 7Hw= -----END CERTIFICATE-----Generated at Fri Oct 25 16:44:26 2024 by rpki-client on console-ams.rpki-client.org