$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc74e646-f238-4ce9-a399-9ad2f67be94f.roa File: dc74e646-f238-4ce9-a399-9ad2f67be94f.roa (raw, json) Hash identifier: InWfBUhswSjV/FtzGbDn5QxuUJj6U/oFZy54K1/zFGw= Subject key identifier: 93:03:27:2E:3B:77:BA:31:3C:50:C1:F7:B2:F2:CD:24:2C:11:8D:DA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 06F9AEDBED05F26BF590428E0E0ED726A65BBF60 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc74e646-f238-4ce9-a399-9ad2f67be94f.roa Signing time: Fri 25 Oct 2024 00:00:00 +0000 ROA not before: Fri 25 Oct 2024 00:00:00 +0000 ROA not after: Fri 29 Nov 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafe:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Oct 2024 15:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:f9:ae:db:ed:05:f2:6b:f5:90:42:8e:0e:0e:d7:26:a6:5b:bf:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 25 00:00:00 2024 GMT Not After : Nov 29 23:59:59 2024 GMT Subject: serialNumber=2aec609609421a78c8bb4992d793008ecec3fd70c6988bebad26e5ed55b9bd87, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c3:d3:69:90:ba:aa:ff:49:bf:e0:d9:73:8f: 61:9d:a5:a4:48:ab:56:95:14:8f:b6:88:9e:7f:2c: d9:ae:67:e4:ab:44:f4:18:fc:9b:76:31:3c:23:fb: 43:2c:bf:64:bc:0d:83:40:7e:a1:40:16:6b:0f:86: 0d:1e:df:e1:42:47:91:0c:03:04:46:b9:b6:b2:78: 45:09:ea:00:1a:b2:eb:12:17:4c:09:17:df:8b:ed: 4c:c6:56:e6:28:e4:96:97:07:1c:c3:d4:28:bc:7d: 18:23:67:64:b0:81:fd:00:b2:0e:f1:17:15:3b:9c: eb:4d:fb:bd:91:1b:6e:a5:18:ce:d1:39:c3:fc:ef: a4:33:1b:2b:c5:cd:ef:79:f1:8f:e3:40:36:f9:46: ac:03:10:57:12:cf:a3:6e:21:fa:69:fb:49:2e:fe: 0a:8f:c0:b9:ef:e8:87:33:09:36:09:e1:45:ff:d6: 35:8e:be:fd:36:71:03:7e:1c:f5:99:e7:8a:48:70: 4e:2d:25:88:43:92:79:d5:2a:c8:d1:61:1a:ad:f9: 2a:8f:24:65:d7:de:37:81:1b:4e:4d:af:40:5d:2c: b6:f8:73:e6:c0:3b:ea:94:53:b0:f2:d4:06:b3:94: 2a:b3:e1:be:63:05:fa:75:55:06:b4:fe:bc:1d:6c: 86:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:03:27:2E:3B:77:BA:31:3C:50:C1:F7:B2:F2:CD:24:2C:11:8D:DA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc74e646-f238-4ce9-a399-9ad2f67be94f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafe:1000::/40 Signature Algorithm: sha256WithRSAEncryption 72:29:d6:31:2c:cb:78:09:2c:c5:b7:f9:d0:cf:29:e9:b3:d6: 51:24:c4:fc:c1:84:c9:ae:5d:ce:28:d7:64:67:02:44:92:40: 1b:99:d3:42:f3:c0:af:ae:95:1f:1a:b8:a7:39:27:1e:78:27: fb:04:4a:95:b4:9e:44:e3:ff:df:1d:0e:ef:49:88:95:29:e6: 2a:ed:c3:47:85:b1:62:a8:8a:a2:dc:07:ae:ed:5e:f5:75:bc: f5:03:0f:30:fd:ba:96:54:5f:48:36:99:b1:a9:a4:d6:65:86: 78:34:d8:45:22:78:4e:85:4d:cc:8c:f2:5c:c9:28:1a:86:31: df:12:bf:70:51:22:34:50:05:f7:9a:8f:28:22:ee:f1:d8:fa: 3f:6e:15:6d:dd:4b:74:22:7a:63:24:0f:2e:46:22:40:d1:73: 13:37:6f:f1:35:bb:e7:81:b3:f7:32:ea:a1:32:13:55:55:45: 42:9c:87:79:e9:0e:11:42:a9:2a:e3:a0:6a:00:f7:6a:70:00: 12:95:a6:d9:be:64:d6:a4:d2:26:53:f1:82:9d:56:ac:26:8a: e1:37:5d:0e:f3:81:ed:e1:16:87:55:7e:13:1d:11:a9:5d:6c: a2:7f:07:54:7d:34:3d:b3:b2:ab:67:ed:66:f3:4d:de:4c:80: de:56:63:dc -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBvmu2+0F8mv1kEKODg7XJqZbv2AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTAyNTAwMDAwMFoX DTI0MTEyOTIzNTk1OVowejFJMEcGA1UEBRNAMmFlYzYwOTYwOTQyMWE3OGM4YmI0 OTkyZDc5MzAwOGVjZWMzZmQ3MGM2OTg4YmViYWQyNmU1ZWQ1NWI5YmQ4NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cPTaZC6qv9Jv+DZc49hnaWkSKtW lRSPtoiefyzZrmfkq0T0GPybdjE8I/tDLL9kvA2DQH6hQBZrD4YNHt/hQkeRDAME Rrm2snhFCeoAGrLrEhdMCRffi+1MxlbmKOSWlwccw9QovH0YI2dksIH9ALIO8RcV O5zrTfu9kRtupRjO0TnD/O+kMxsrxc3vefGP40A2+UasAxBXEs+jbiH6aftJLv4K j8C57+iHMwk2CeFF/9Y1jr79NnEDfhz1meeKSHBOLSWIQ5J51SrI0WEarfkqjyRl 1943gRtOTa9AXSy2+HPmwDvqlFOw8tQGs5Qqs+G+YwX6dVUGtP68HWyGowIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJMDJy47d7oxPFDB97LyzSQsEY3aMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RjNzRlNjQ2LWYyMzgtNGNlOS1hMzk5LTlhZDJmNjdiZTk0Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/hAwDQYJKoZIhvcNAQELBQADggEBAHIp1jEsy3gJLMW3+dDP Kemz1lEkxPzBhMmuXc4o12RnAkSSQBuZ00LzwK+ulR8auKc5Jx54J/sESpW0nkTj /98dDu9JiJUp5irtw0eFsWKoiqLcB67tXvV1vPUDDzD9upZUX0g2mbGppNZlhng0 2EUieE6FTcyM8lzJKBqGMd8Sv3BRIjRQBfeajygi7vHY+j9uFW3dS3QiemMkDy5G IkDRcxM3b/E1u+eBs/cy6qEyE1VVRUKch3npDhFCqSrjoGoA92pwABKVptm+ZNak 0iZT8YKdVqwmiuE3XQ7zge3hFodVfhMdEaldbKJ/B1R9ND2zsqtn7WbzTd5MgN5W Y9w= -----END CERTIFICATE-----Generated at Fri Oct 25 16:44:27 2024 by rpki-client on console-ams.rpki-client.org