$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ce35c6d4-7339-4288-8a0e-b63877fb2df7.roa File: ce35c6d4-7339-4288-8a0e-b63877fb2df7.roa (raw, json) Hash identifier: yaR33a7NVdRUeG746TSWrQV80iAxruJrAEms/3BJK34= Subject key identifier: 9A:8E:04:B2:85:39:DE:37:EE:9E:F9:F7:EE:0E:EC:A4:B3:66:0D:70 Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Certificate serial: 4CB0E80D892C99634B0DFD825B3713727D9C0E51 Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ce35c6d4-7339-4288-8a0e-b63877fb2df7.roa Signing time: Mon 18 Nov 2024 00:00:00 +0000 ROA not before: Mon 18 Nov 2024 00:00:00 +0000 ROA not after: Mon 23 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 159.248.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 15:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:b0:e8:0d:89:2c:99:63:4b:0d:fd:82:5b:37:13:72:7d:9c:0e:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Validity Not Before: Nov 18 00:00:00 2024 GMT Not After : Dec 23 23:59:59 2024 GMT Subject: serialNumber=e23ccce2536cc0d7bddcf8dc648926906ea99f8aef470161e915b95f92e1d85f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:80:bc:b8:73:cb:d4:a6:ba:81:86:0b:58:29: f4:f4:fa:26:0c:94:e8:f1:5d:46:34:f0:3f:a8:f7: d4:5f:3e:8c:ad:a2:bc:30:82:dd:5d:17:f3:ba:d3: e9:77:13:bb:dc:df:35:1b:29:0c:c4:17:1a:94:95: 4f:93:6e:e5:22:dd:da:ba:5d:d6:12:9e:74:7a:f6: aa:80:08:76:ee:f6:6a:61:c5:aa:98:29:e3:18:c0: f1:ef:6d:30:40:46:5d:45:78:89:5f:c0:3f:23:55: c5:28:7a:38:f7:f4:12:c1:18:d8:af:ff:2f:4c:06: 65:b1:8b:ea:1e:d6:e7:c2:27:0e:dc:08:4f:72:90: ef:59:46:14:b1:f6:ce:ed:2c:2e:eb:fe:cc:4e:89: 1a:1e:3f:d1:77:3c:ad:a9:59:78:05:3d:d1:32:6d: a5:ef:13:a1:78:0a:b6:88:fa:12:35:dc:f6:19:0d: fe:98:17:5e:f4:03:e4:1f:cc:9c:67:54:00:18:a8: cd:09:d5:7f:b7:83:92:a7:64:e7:e9:e0:88:92:45: 40:7f:dc:7f:f8:0b:b0:71:14:83:5c:f0:04:1e:c7: 67:4c:a6:a6:1a:c5:73:39:c4:26:d7:54:d7:1d:08: 12:06:36:b8:26:71:35:fb:ff:98:09:03:0d:db:13: 88:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:8E:04:B2:85:39:DE:37:EE:9E:F9:F7:EE:0E:EC:A4:B3:66:0D:70 X509v3 Authority Key Identifier: keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ce35c6d4-7339-4288-8a0e-b63877fb2df7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.248.128.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:7b:b8:c9:f5:7b:8c:55:8b:a4:68:d4:28:3c:fb:36:ba:ed: 8f:73:68:84:f8:92:42:7a:17:01:e1:08:6e:81:49:2b:29:76: fc:94:ed:18:79:96:bb:fa:91:1c:27:7a:07:12:78:48:96:bc: e1:21:2e:f6:ae:26:57:39:fb:f0:db:6e:d7:aa:ba:54:27:bb: c9:7a:3a:8d:33:63:1f:97:03:74:f2:88:c2:0f:74:93:fb:28: 6c:19:c8:aa:0e:ad:16:14:ea:49:18:32:19:3c:f0:d7:71:d2: 30:e7:39:5a:4f:fe:8d:a4:9f:a3:21:79:78:95:19:83:88:bf: c1:a7:74:7a:91:76:cc:36:52:5f:b2:b9:14:33:c4:97:6f:4a: 62:14:22:0a:fb:ea:91:a7:a0:18:e1:f9:d1:1b:20:5a:2b:68: c3:c3:88:6b:99:5b:ec:b1:ed:40:e6:41:cc:83:4c:37:a4:ad: 1e:c7:0f:52:7a:dd:64:71:25:5e:40:4e:25:ba:bb:4c:0a:45: 81:6f:5c:78:c7:3b:38:40:44:6e:c5:23:70:f6:41:31:d4:e4: 79:33:dd:a5:3a:a4:f8:b7:d1:60:e1:2a:95:57:1c:fc:c0:74: 64:84:e2:eb:e3:2f:2a:24:49:e5:ff:a4:7c:47:ff:fc:68:b0: 9e:56:73:bd -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUTLDoDYksmWNLDf2CWzcTcn2cDlEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg1M0RDMjIxMjVG QTM0RjM5ODZDQkYxMjQyMkUzNEY5QjlDNjYxQkU3MB4XDTI0MTExODAwMDAwMFoX DTI0MTIyMzIzNTk1OVowejFJMEcGA1UEBRNAZTIzY2NjZTI1MzZjYzBkN2JkZGNm OGRjNjQ4OTI2OTA2ZWE5OWY4YWVmNDcwMTYxZTkxNWI5NWY5MmUxZDg1ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IC8uHPL1Ka6gYYLWCn09PomDJTo 8V1GNPA/qPfUXz6MraK8MILdXRfzutPpdxO73N81GykMxBcalJVPk27lIt3aul3W Ep50evaqgAh27vZqYcWqmCnjGMDx720wQEZdRXiJX8A/I1XFKHo49/QSwRjYr/8v TAZlsYvqHtbnwicO3AhPcpDvWUYUsfbO7Swu6/7MTokaHj/RdzytqVl4BT3RMm2l 7xOheAq2iPoSNdz2GQ3+mBde9APkH8ycZ1QAGKjNCdV/t4OSp2Tn6eCIkkVAf9x/ +AuwcRSDXPAEHsdnTKamGsVzOcQm11TXHQgSBja4JnE1+/+YCQMN2xOIiwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFJqOBLKFOd437p759+4O7KSzZg1wMB8GA1UdIwQY MBaAFFPcIhJfo085hsvxJCLjT5ucZhvnMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9VOXdpRWwt alR6bUd5X0VrSXVOUG01eG1HLWMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2NlMzVjNmQ0LTczMzktNDI4OC04YTBlLWI2Mzg3N2ZiMmRmNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvYTViMDFiZGQtY2RlYi00Y2ZjLThjOTMtN2U3MGM1ZTA5MzA2LmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCn/iAMA0GCSqGSIb3DQEBCwUAA4IBAQBue7jJ9XuMVYukaNQoPPs2 uu2Pc2iE+JJCehcB4QhugUkrKXb8lO0YeZa7+pEcJ3oHEnhIlrzhIS72riZXOfvw 227XqrpUJ7vJejqNM2MflwN08ojCD3ST+yhsGciqDq0WFOpJGDIZPPDXcdIw5zla T/6NpJ+jIXl4lRmDiL/Bp3R6kXbMNlJfsrkUM8SXb0piFCIK++qRp6AY4fnRGyBa K2jDw4hrmVvsse1A5kHMg0w3pK0exw9Set1kcSVeQE4lurtMCkWBb1x4xzs4QERu xSNw9kEx1OR5M92lOqT4t9Fg4SqVVxz8wHRkhOLr4y8qJEnl/6R8R//8aLCeVnO9 -----END CERTIFICATE-----Generated at Fri Nov 22 02:07:37 2024 by rpki-client on console-fra.rpki-client.org