$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f5d85941-1bd6-49cc-81d2-ce9438a99cdd.roa File: f5d85941-1bd6-49cc-81d2-ce9438a99cdd.roa (raw, json) Hash identifier: Eim+L/zzcVG9rNhXzGMlu3Y+fe8gG4r+IF7FGjyVknc= Subject key identifier: E0:54:5C:7B:7F:9D:EE:9F:DE:3B:71:CE:4B:5D:69:62:D2:D8:90:C3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 13048596AAB9D0C70F34F43AC82B7342D277302F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f5d85941-1bd6-49cc-81d2-ce9438a99cdd.roa Signing time: Tue 01 Oct 2024 00:00:00 +0000 ROA not before: Tue 01 Oct 2024 00:00:00 +0000 ROA not after: Tue 05 Nov 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Oct 2024 15:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:04:85:96:aa:b9:d0:c7:0f:34:f4:3a:c8:2b:73:42:d2:77:30:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 1 00:00:00 2024 GMT Not After : Nov 5 23:59:59 2024 GMT Subject: serialNumber=876c7d0bba675ec6fe8944dfc1d0335334ff5cc19dfb91f44d56e0fa73cac4a5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c0:39:b5:de:68:32:5f:3c:ea:32:fa:1c:4a: d0:d5:3c:65:9c:40:e9:97:31:da:67:ef:d9:ac:86: 29:21:67:59:a9:a5:d4:ed:5a:b7:2a:c5:0d:18:8f: 1c:37:fc:81:77:9c:5a:9a:8c:67:b6:af:05:2a:7d: cb:d7:e0:36:62:24:84:10:33:a3:0b:c8:1f:13:52: 3a:b6:41:8a:2f:28:52:42:b7:02:cf:b1:d1:83:09: f0:93:e5:a0:46:b5:94:60:11:de:c0:c3:a7:15:b1: 3a:f7:1f:28:61:4f:79:1e:6a:f1:3a:eb:7f:b7:da: 01:02:e5:72:47:98:c5:86:d2:28:b2:6e:3e:61:8a: 04:83:95:b7:2e:e3:5b:e3:eb:06:8d:e2:ee:12:34: 5e:39:87:cb:d9:4d:89:9b:2f:60:d0:84:29:f7:92: fa:d5:92:ad:7a:bf:6d:ff:6d:d9:78:61:73:66:79: b1:fd:b8:a2:fb:dd:00:71:6e:1e:ce:e3:7b:1d:cd: 46:05:86:af:a2:25:fe:61:5d:ac:ea:43:81:a7:69: e7:48:2b:70:99:b6:dd:9e:3c:10:c9:36:88:1d:f7: b3:db:ae:14:1f:98:08:37:5e:00:a3:5f:42:f8:5a: 38:d0:af:33:d7:3c:25:6e:92:e7:24:4a:31:eb:45: 14:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:54:5C:7B:7F:9D:EE:9F:DE:3B:71:CE:4B:5D:69:62:D2:D8:90:C3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f5d85941-1bd6-49cc-81d2-ce9438a99cdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:2800::/40 Signature Algorithm: sha256WithRSAEncryption 18:70:f6:43:5c:11:00:90:17:2c:5b:c8:02:98:cd:03:15:fa: dc:de:46:de:02:2c:b5:7a:36:3c:39:62:6b:ee:ca:8b:74:c2: 6d:27:98:20:6c:ee:a6:10:88:4e:55:64:03:c3:12:c6:2f:ec: be:9d:2f:88:c6:83:9b:9d:98:bb:bd:b0:58:66:01:1e:d2:ee: 56:c4:c3:83:c1:63:35:f5:15:c5:f9:cf:53:b5:54:b0:e0:68: 98:8f:7c:3d:03:6a:72:15:52:3e:9f:52:2d:09:06:e9:98:a7: 8e:54:0d:68:49:85:a5:8b:6d:32:f3:76:c1:b1:3b:f7:23:4c: 8c:07:ab:5c:7f:b2:37:45:2b:95:b1:bd:15:87:45:75:cf:fc: e7:96:dc:da:24:90:c6:15:ec:03:57:c8:07:12:30:da:50:04: 59:df:3a:a1:f6:69:2e:bb:dc:a0:45:7a:e6:ab:98:64:07:6a: 6c:bd:50:e7:db:4d:c1:bd:19:7e:05:3a:77:b0:76:1f:22:30: 54:0b:df:4a:53:d2:8b:5a:ae:67:dd:4a:fd:27:4a:93:6f:a1: a9:dc:14:7a:69:c2:90:a0:e1:6f:15:58:4d:32:ff:ce:99:9b: 1d:23:ba:20:78:27:51:2b:a5:e9:6a:a8:99:e9:e3:a3:0a:32: 57:a3:36:a6 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUEwSFlqq50McPNPQ6yCtzQtJ3MC8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MTAwMTAwMDAwMFoX DTI0MTEwNTIzNTk1OVowejFJMEcGA1UEBRNAODc2YzdkMGJiYTY3NWVjNmZlODk0 NGRmYzFkMDMzNTMzNGZmNWNjMTlkZmI5MWY0NGQ1NmUwZmE3M2NhYzRhNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8A5td5oMl886jL6HErQ1TxlnEDp lzHaZ+/ZrIYpIWdZqaXU7Vq3KsUNGI8cN/yBd5xamoxntq8FKn3L1+A2YiSEEDOj C8gfE1I6tkGKLyhSQrcCz7HRgwnwk+WgRrWUYBHewMOnFbE69x8oYU95HmrxOut/ t9oBAuVyR5jFhtIosm4+YYoEg5W3LuNb4+sGjeLuEjReOYfL2U2Jmy9g0IQp95L6 1ZKter9t/23ZeGFzZnmx/bii+90AcW4ezuN7Hc1GBYavoiX+YV2s6kOBp2nnSCtw mbbdnjwQyTaIHfez264UH5gIN14Ao19C+Fo40K8z1zwlbpLnJEox60UU9QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOBUXHt/ne6f3jtxzktdaWLS2JDDMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y1ZDg1OTQxLTFiZDYtNDljYy04MWQyLWNlOTQzOGE5OWNkZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaOCgwDQYJKoZIhvcNAQELBQADggEBABhw9kNcEQCQFyxbyAKY zQMV+tzeRt4CLLV6Njw5Ymvuyot0wm0nmCBs7qYQiE5VZAPDEsYv7L6dL4jGg5ud mLu9sFhmAR7S7lbEw4PBYzX1FcX5z1O1VLDgaJiPfD0DanIVUj6fUi0JBumYp45U DWhJhaWLbTLzdsGxO/cjTIwHq1x/sjdFK5WxvRWHRXXP/OeW3NokkMYV7ANXyAcS MNpQBFnfOqH2aS673KBFeuarmGQHamy9UOfbTcG9GX4FOnewdh8iMFQL30pT0ota rmfdSv0nSpNvoancFHppwpCg4W8VWE0y/86Zmx0juiB4J1ErpelqqJnp46MKMlej NqY= -----END CERTIFICATE-----Generated at Fri Oct 25 17:02:36 2024 by rpki-client on console-fra.rpki-client.org