$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c6637a68-db4c-46ed-bb42-09323c6ad680.roa File: c6637a68-db4c-46ed-bb42-09323c6ad680.roa (raw, json) Hash identifier: xPr6X1lj1LP3iDMnWMMlJx1HL54btKobcGsCyVRVWpU= Subject key identifier: F1:04:B2:D3:24:04:18:A0:D3:32:C7:4E:3F:8B:EF:8C:88:83:0E:0F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 104CD4CAB1B653920F44103A3248B706ABABEEFF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c6637a68-db4c-46ed-bb42-09323c6ad680.roa Signing time: Mon 18 Sep 2023 00:00:00 +0000 ROA not before: Mon 18 Sep 2023 00:00:00 +0000 ROA not after: Mon 23 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf8:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Sep 2023 03:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:4c:d4:ca:b1:b6:53:92:0f:44:10:3a:32:48:b7:06:ab:ab:ee:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 18 00:00:00 2023 GMT Not After : Oct 23 23:59:59 2023 GMT Subject: serialNumber=28686430ba2286571c331ecd9a65117158f389b2695d20c9c45f961c52b088c8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:8a:5a:c7:6f:3a:e4:5a:ca:8e:c4:e5:bb:39: a2:3c:6a:e8:0e:fc:00:21:49:e6:08:88:da:82:a9: 8c:88:84:ff:69:16:60:10:53:40:e0:f6:ba:88:5e: 8e:2d:cd:43:92:b5:88:a1:14:a8:b3:7d:34:fc:a1: d8:e4:d4:fc:b9:04:c1:96:e1:34:75:f0:3b:0a:e7: 93:7b:d3:85:eb:da:e9:32:a9:75:2b:f2:64:a5:1d: 98:12:86:02:80:c4:ff:4c:49:4b:b1:61:37:04:ce: ec:80:7b:b9:f0:2c:89:99:56:71:6e:86:2d:7b:0a: 15:ee:24:b6:35:26:f6:45:f5:18:c9:26:1b:7e:67: 9f:f0:42:82:f2:b3:c9:a0:c9:7d:6b:d1:61:ec:f2: aa:96:6b:07:ed:b3:87:a0:6e:22:c3:f2:0d:0b:14: 43:f6:1c:e4:7f:06:70:42:76:cb:10:c4:70:c9:1b: b7:02:c8:31:d4:a3:47:fd:82:86:0e:4d:f1:41:a3: d3:c1:70:ee:e3:cb:27:93:e4:74:9a:c2:c4:33:10: 43:79:f6:c1:f1:b1:97:e8:86:67:61:02:63:da:75: 6d:ed:e6:5e:6c:e0:53:e9:85:c4:72:1d:8c:e2:38: 7b:f5:30:ee:ae:c5:15:1c:9a:67:3f:56:ad:66:24: 3e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:04:B2:D3:24:04:18:A0:D3:32:C7:4E:3F:8B:EF:8C:88:83:0E:0F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c6637a68-db4c-46ed-bb42-09323c6ad680.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf8:c000::/40 Signature Algorithm: sha256WithRSAEncryption 28:43:03:9d:67:a8:b7:11:ee:8e:8d:38:b6:ce:07:4f:36:09: df:5c:a7:89:39:f3:7c:6c:20:3b:74:bd:0f:e1:26:e8:cb:26: 5f:58:a1:ba:ee:9a:29:9a:84:06:cc:a9:89:35:a3:bb:1d:0a: da:df:8e:81:8a:fc:a2:92:16:17:f6:66:4b:d1:3e:5c:99:75: 86:dc:eb:64:59:17:a8:8d:bd:68:d4:15:ea:16:91:cd:92:73: 16:e1:33:d2:36:63:0e:96:af:d8:ae:4e:97:1c:42:2a:20:d7: 61:cd:96:ac:60:b6:91:f3:b2:96:7f:40:06:dd:18:f6:28:ce: 1d:4c:53:ab:4a:10:bb:7d:5a:0e:67:7a:ce:c5:9a:58:e1:65: d9:ac:ca:d2:6e:65:bc:79:4b:a1:9c:73:46:5a:3d:76:3d:2e: f0:62:6c:9b:89:cb:2f:26:8a:d8:65:2c:92:05:04:73:06:2b: ef:6b:7a:dd:69:63:2e:fd:3f:a9:50:e1:31:09:62:65:94:d5: e7:3b:ba:a8:7e:f5:19:7e:e6:66:ac:51:b4:4d:66:b0:d2:2c: 01:a3:74:30:06:c6:ae:bb:09:47:a6:0b:84:f2:3a:69:25:8b: 8b:83:fa:f6:c8:f0:46:60:79:ab:c1:df:ba:5f:c4:52:36:2e: cb:dd:12:9a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUEEzUyrG2U5IPRBA6Mki3Bqur7v8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTIzMDkxODAwMDAwMFoX DTIzMTAyMzIzNTk1OVowejFJMEcGA1UEBRNAMjg2ODY0MzBiYTIyODY1NzFjMzMx ZWNkOWE2NTExNzE1OGYzODliMjY5NWQyMGM5YzQ1Zjk2MWM1MmIwODhjODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Ypax2865FrKjsTluzmiPGroDvwA IUnmCIjagqmMiIT/aRZgEFNA4Pa6iF6OLc1DkrWIoRSos300/KHY5NT8uQTBluE0 dfA7CueTe9OF69rpMql1K/JkpR2YEoYCgMT/TElLsWE3BM7sgHu58CyJmVZxboYt ewoV7iS2NSb2RfUYySYbfmef8EKC8rPJoMl9a9Fh7PKqlmsH7bOHoG4iw/INCxRD 9hzkfwZwQnbLEMRwyRu3Asgx1KNH/YKGDk3xQaPTwXDu48snk+R0msLEMxBDefbB 8bGX6IZnYQJj2nVt7eZebOBT6YXEch2M4jh79TDursUVHJpnP1atZiQ+PQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPEEstMkBBig0zLHTj+L74yIgw4PMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M2NjM3YTY4LWRiNGMtNDZlZC1iYjQyLTA5MzIzYzZhZDY4MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+MAwDQYJKoZIhvcNAQELBQADggEBAChDA51nqLcR7o6NOLbO B082Cd9cp4k583xsIDt0vQ/hJujLJl9YobrumimahAbMqYk1o7sdCtrfjoGK/KKS Fhf2ZkvRPlyZdYbc62RZF6iNvWjUFeoWkc2ScxbhM9I2Yw6Wr9iuTpccQiog12HN lqxgtpHzspZ/QAbdGPYozh1MU6tKELt9Wg5nes7FmljhZdmsytJuZbx5S6Gcc0Za PXY9LvBibJuJyy8mithlLJIFBHMGK+9ret1pYy79P6lQ4TEJYmWU1ec7uqh+9Rl+ 5masUbRNZrDSLAGjdDAGxq67CUemC4TyOmkli4uD+vbI8EZgeavB37pfxFI2Lsvd Epo= -----END CERTIFICATE-----Generated at Mon Sep 18 15:24:46 2023 by rpki-client on console-fra.rpki-client.org