$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fba024d1-731a-451f-a9f3-b832c7bbb07f.roa File: fba024d1-731a-451f-a9f3-b832c7bbb07f.roa (raw, json) Hash identifier: 4X5r8nP6DM3AkjwW/rmxVPt3F0GkeT/hzfLwt6BvecU= Subject key identifier: 5A:DD:84:64:B2:BF:2A:B8:7D:0B:DE:5D:D5:B9:F5:34:7D:01:1C:94 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 685B995FE5EE30E799BF48F1F0F7434DF8071D25 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fba024d1-731a-451f-a9f3-b832c7bbb07f.roa Signing time: Sat 20 Jul 2024 00:00:00 +0000 ROA not before: Sat 20 Jul 2024 00:00:00 +0000 ROA not after: Sat 24 Aug 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jul 2024 00:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:5b:99:5f:e5:ee:30:e7:99:bf:48:f1:f0:f7:43:4d:f8:07:1d:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 20 00:00:00 2024 GMT Not After : Aug 24 23:59:59 2024 GMT Subject: serialNumber=7b4ef04613242c1fc6c7833180f835428c841c03c816fcf2bf3ca8838fa7eed3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:21:f2:78:cf:cb:66:65:00:5e:fd:99:c8:ae: 8d:9d:22:8a:08:eb:de:30:80:ff:49:ee:a2:b5:c1: 66:e5:b7:10:53:a0:43:1b:fd:a3:d0:a9:4f:20:1e: 49:b2:e7:1c:b8:f9:a3:8a:f2:c3:65:a3:2f:7b:0b: d5:ce:3d:d6:4e:1d:44:9e:cd:7e:e5:87:ae:b2:1c: ef:b1:96:cf:34:2a:35:05:88:9f:bf:93:d5:0f:4c: ed:08:e6:a8:9c:4c:43:61:13:d1:a2:f6:63:04:e7: 57:d3:74:71:73:9f:90:f6:d6:11:b7:f8:44:99:a1: 1d:d7:17:49:c0:48:34:b4:5f:1b:41:76:97:0d:41: 8d:3e:90:87:9c:c3:52:ee:3c:bf:65:43:50:89:c2: 0d:98:f3:f2:12:45:b3:5a:d3:95:7e:b6:de:0a:60: 1e:7a:b4:7d:74:cf:b9:b6:81:5e:94:d7:03:95:65: c4:e9:59:be:c4:a4:49:a4:63:f9:a9:18:63:99:0a: 50:81:b0:3f:dc:b1:9a:a7:1a:62:80:b3:ca:6b:f7: ea:d0:1d:17:87:e5:c3:cc:d0:88:1f:5d:d5:13:3f: 47:10:d4:91:58:c1:21:89:60:73:d9:d2:7d:89:ef: 88:57:43:70:a5:08:5b:0c:b4:41:b4:98:f9:9a:fb: 8c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:DD:84:64:B2:BF:2A:B8:7D:0B:DE:5D:D5:B9:F5:34:7D:01:1C:94 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fba024d1-731a-451f-a9f3-b832c7bbb07f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:b000::/40 Signature Algorithm: sha256WithRSAEncryption a4:5e:6a:25:6b:2f:5d:37:9b:20:03:32:e4:70:c2:bb:41:54: 12:4a:9a:75:a8:c2:e4:26:7d:fe:ec:3a:27:21:26:37:30:b6: 55:96:1a:69:1f:10:95:d9:c8:81:b1:42:ad:7f:d2:2c:62:d4: d8:40:7d:f3:b5:13:b9:c9:2d:27:30:74:fd:3e:41:ed:ea:5f: c0:f3:ad:a4:75:9f:3f:f2:b1:de:f2:a9:87:8f:cb:f0:82:ea: b3:90:b6:4b:26:35:33:2c:35:fe:50:24:b0:a5:08:7f:37:f0: 34:fb:7b:33:72:fd:68:65:ce:4a:66:9b:44:b0:24:e4:35:2a: 50:05:fd:40:87:c9:10:cc:82:17:a8:6e:fd:cc:77:8a:55:3b: a0:56:7d:1a:94:5f:a7:0e:e1:98:1b:ae:80:0e:7d:10:6c:a3: 91:68:89:01:7c:75:c9:15:23:1a:d4:a3:b0:b8:e9:6d:fe:58: bd:3d:ce:ca:82:dc:ae:c7:93:39:ae:0b:9f:8e:23:ee:ef:85: 43:39:cb:25:37:c2:eb:e8:ad:18:98:b5:4a:64:63:0e:4d:7f: 00:81:7f:71:e9:06:17:ef:cc:5f:aa:bc:23:07:40:72:c9:a0: e9:29:ac:7f:3f:26:5c:17:36:0b:7b:70:e3:3a:f3:5d:c2:e5: 17:e3:eb:0a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUaFuZX+XuMOeZv0jx8PdDTfgHHSUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDcyMDAwMDAwMFoX DTI0MDgyNDIzNTk1OVowejFJMEcGA1UEBRNAN2I0ZWYwNDYxMzI0MmMxZmM2Yzc4 MzMxODBmODM1NDI4Yzg0MWMwM2M4MTZmY2YyYmYzY2E4ODM4ZmE3ZWVkMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiHyeM/LZmUAXv2ZyK6NnSKKCOve MID/Se6itcFm5bcQU6BDG/2j0KlPIB5JsuccuPmjivLDZaMvewvVzj3WTh1Ens1+ 5YeushzvsZbPNCo1BYifv5PVD0ztCOaonExDYRPRovZjBOdX03Rxc5+Q9tYRt/hE maEd1xdJwEg0tF8bQXaXDUGNPpCHnMNS7jy/ZUNQicINmPPyEkWzWtOVfrbeCmAe erR9dM+5toFelNcDlWXE6Vm+xKRJpGP5qRhjmQpQgbA/3LGapxpigLPKa/fq0B0X h+XDzNCIH13VEz9HENSRWMEhiWBz2dJ9ie+IV0NwpQhbDLRBtJj5mvuMNwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFrdhGSyvyq4fQveXdW59TR9ARyUMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZiYTAyNGQxLTczMWEtNDUxZi1hOWYzLWI4MzJjN2JiYjA3Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9rAwDQYJKoZIhvcNAQELBQADggEBAKReaiVrL103myADMuRw wrtBVBJKmnWowuQmff7sOichJjcwtlWWGmkfEJXZyIGxQq1/0ixi1NhAffO1E7nJ LScwdP0+Qe3qX8DzraR1nz/ysd7yqYePy/CC6rOQtksmNTMsNf5QJLClCH838DT7 ezNy/Whlzkpmm0SwJOQ1KlAF/UCHyRDMgheobv3Md4pVO6BWfRqUX6cO4ZgbroAO fRBso5FoiQF8dckVIxrUo7C46W3+WL09zsqC3K7HkzmuC5+OI+7vhUM5yyU3wuvo rRiYtUpkYw5NfwCBf3HpBhfvzF+qvCMHQHLJoOkprH8/JlwXNgt7cOM6813C5Rfj 6wo= -----END CERTIFICATE-----Generated at Fri Jul 26 02:06:17 2024 by rpki-client on console-fra.rpki-client.org