$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e78aa194-a088-49f6-b3e3-8befb2f78817.roa File: e78aa194-a088-49f6-b3e3-8befb2f78817.roa (raw, json) Hash identifier: oYDKCTJ3ySv8izU1M+cqbagAU+ClCCbU7sggqw+jkG4= Subject key identifier: 9C:E4:D4:50:89:2E:68:A2:F2:AB:45:6C:C6:51:8D:AD:33:CD:B7:7C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6B497F0C8D983A03B113C940A3EA1F81D2F4F47A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e78aa194-a088-49f6-b3e3-8befb2f78817.roa Signing time: Wed 16 Oct 2024 00:00:00 +0000 ROA not before: Wed 16 Oct 2024 00:00:00 +0000 ROA not after: Wed 20 Nov 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da70:8800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Oct 2024 15:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:49:7f:0c:8d:98:3a:03:b1:13:c9:40:a3:ea:1f:81:d2:f4:f4:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 16 00:00:00 2024 GMT Not After : Nov 20 23:59:59 2024 GMT Subject: serialNumber=460c116a9e8bf201357479bb2d09dd6789d88b01d49b12c41406c7cc2b32dcd2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:4e:6f:5c:b9:96:d7:d1:08:31:2c:e5:b0:b9: 61:56:d2:aa:ad:39:94:bc:86:33:44:e2:de:d7:a3: 9a:69:e9:75:05:19:03:64:05:33:6e:77:ba:39:ce: db:f6:ce:4c:b3:95:e4:16:cb:9f:1d:30:0e:0e:c8: 3d:07:1d:aa:88:23:e6:02:7b:ce:1e:f1:29:b5:ee: 49:c7:d2:ff:16:89:13:5d:53:fc:46:ce:1d:c2:10: 9b:54:7e:d5:2d:e3:6f:f6:cd:df:41:6e:34:07:d2: 2d:75:d8:33:f3:40:13:43:56:f7:42:32:54:4d:4c: fc:35:bc:b9:f3:0d:91:96:63:52:ee:e2:6a:fe:63: ce:e4:88:02:8b:2e:63:ed:21:43:e3:54:96:a8:0c: c0:f3:c4:99:74:35:1f:31:8b:96:e4:c6:e2:6d:5b: dd:2b:fa:5d:63:40:e7:00:38:fc:c6:92:88:38:6e: 6c:16:b2:3c:46:80:c7:3b:a9:fb:60:88:08:11:b9: 07:b2:d2:36:82:32:93:b5:24:a5:ed:a8:59:62:75: 72:4b:e6:65:d7:9e:0b:06:4b:9b:9f:56:54:9f:3f: 7d:23:d0:e4:38:7d:4e:2e:69:3b:59:fd:a3:16:69: f6:81:10:e1:03:09:68:b6:05:a1:4e:e4:10:08:2e: b3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E4:D4:50:89:2E:68:A2:F2:AB:45:6C:C6:51:8D:AD:33:CD:B7:7C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e78aa194-a088-49f6-b3e3-8befb2f78817.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da70:8800::/40 Signature Algorithm: sha256WithRSAEncryption 3a:16:0c:a4:bd:23:bb:71:b4:6e:fa:0e:81:41:2d:8b:8e:dc: 94:bc:a2:81:7d:ce:84:05:cf:a1:20:60:64:46:c4:ed:28:9c: 80:35:0e:ca:28:67:ee:d7:a9:aa:e5:e0:bd:c2:89:f9:2e:10: 2a:49:df:f1:22:a3:46:17:3a:7b:8c:59:e5:a0:f9:f5:3f:45: 9e:f9:e9:7a:93:9b:fd:3e:f9:d7:30:8b:59:ab:c6:a4:25:74: 86:07:e8:8b:68:02:d0:8c:2d:98:b4:f2:66:ba:4b:0c:39:ac: 6a:71:a8:cc:b5:d8:93:21:97:41:d8:f3:05:26:62:db:22:f4: 95:29:32:d0:89:b2:80:bc:5d:56:a2:1d:9e:a2:14:92:ce:dc: 8a:47:03:c7:73:fc:3a:50:51:3c:ba:23:a5:90:3c:cf:1a:48: cf:b3:94:88:90:b6:75:e3:0f:32:ac:7d:42:8b:8d:5f:b2:94: a8:ce:f0:0a:be:9d:c0:81:f3:e9:68:aa:26:96:88:af:a2:a4: 96:84:78:fa:bf:44:1f:9c:84:0e:b8:9c:b7:97:e8:bb:42:f1: 60:15:a6:64:d8:81:27:62:5a:00:51:be:93:82:68:fd:ba:c0: 3e:19:a2:34:97:88:2e:47:dd:9d:99:d4:de:a5:75:e6:e2:9e: 88:d9:92:58 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUa0l/DI2YOgOxE8lAo+ofgdL09HowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTAxNjAwMDAwMFoX DTI0MTEyMDIzNTk1OVowejFJMEcGA1UEBRNANDYwYzExNmE5ZThiZjIwMTM1NzQ3 OWJiMmQwOWRkNjc4OWQ4OGIwMWQ0OWIxMmM0MTQwNmM3Y2MyYjMyZGNkMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA705vXLmW19EIMSzlsLlhVtKqrTmU vIYzROLe16Oaael1BRkDZAUzbne6Oc7b9s5Ms5XkFsufHTAODsg9Bx2qiCPmAnvO HvEpte5Jx9L/FokTXVP8Rs4dwhCbVH7VLeNv9s3fQW40B9Itddgz80ATQ1b3QjJU TUz8Nby58w2RlmNS7uJq/mPO5IgCiy5j7SFD41SWqAzA88SZdDUfMYuW5MbibVvd K/pdY0DnADj8xpKIOG5sFrI8RoDHO6n7YIgIEbkHstI2gjKTtSSl7ahZYnVyS+Zl 154LBkubn1ZUnz99I9DkOH1OLmk7Wf2jFmn2gRDhAwlotgWhTuQQCC6zhwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJzk1FCJLmii8qtFbMZRja0zzbd8MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2U3OGFhMTk0LWEwODgtNDlmNi1iM2UzLThiZWZiMmY3ODgxNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbacIgwDQYJKoZIhvcNAQELBQADggEBADoWDKS9I7txtG76DoFB LYuO3JS8ooF9zoQFz6EgYGRGxO0onIA1DsooZ+7Xqarl4L3CifkuECpJ3/Eio0YX OnuMWeWg+fU/RZ756XqTm/0++dcwi1mrxqQldIYH6ItoAtCMLZi08ma6Sww5rGpx qMy12JMhl0HY8wUmYtsi9JUpMtCJsoC8XVaiHZ6iFJLO3IpHA8dz/DpQUTy6I6WQ PM8aSM+zlIiQtnXjDzKsfUKLjV+ylKjO8Aq+ncCB8+loqiaWiK+ipJaEePq/RB+c hA64nLeX6LtC8WAVpmTYgSdiWgBRvpOCaP26wD4ZojSXiC5H3Z2Z1N6ldebinojZ klg= -----END CERTIFICATE-----Generated at Fri Oct 25 16:44:27 2024 by rpki-client on console-ams.rpki-client.org