$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/0b0c2d18-2b42-4e53-9e6a-d6f7d5dc2334.roa File: 0b0c2d18-2b42-4e53-9e6a-d6f7d5dc2334.roa (raw, json) Hash identifier: ir2n5e06B9hsgcCgHEsTvCOszL19HPNfoTeB5NRX/7Q= Subject key identifier: 67:C3:61:5F:0B:94:13:A7:74:D5:05:DF:76:AB:5F:2E:B1:79:44:52 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 5CA28E74EF79CA4426A10B81AD1EE4536FFD1DA2 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/0b0c2d18-2b42-4e53-9e6a-d6f7d5dc2334.roa Signing time: Sat 16 Sep 2023 00:00:00 +0000 ROA not before: Sat 16 Sep 2023 00:00:00 +0000 ROA not after: Sat 21 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2403:b300:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 Sep 2023 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:a2:8e:74:ef:79:ca:44:26:a1:0b:81:ad:1e:e4:53:6f:fd:1d:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Sep 16 00:00:00 2023 GMT Not After : Oct 21 23:59:59 2023 GMT Subject: serialNumber=c79d8bc9fe831e1ea2d44ba20d4388a5033d6a076c9017984f8d7733e658be9d, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c6:f7:3f:b9:82:b8:04:a4:4b:19:5a:81:fe: 82:95:06:49:1e:e7:68:ab:95:76:e1:86:9e:28:1a: 2c:d4:74:63:e6:e5:fe:d1:89:52:34:fe:d8:41:cf: 1d:10:f7:78:d9:ec:d1:f7:6d:7b:0c:e0:98:bf:eb: 4b:c9:1a:67:43:ee:bf:40:b5:08:81:77:9e:80:9e: 66:52:d8:b4:fe:b8:2a:d4:40:94:86:d5:66:73:8c: df:8d:dd:dd:a9:18:21:c4:4d:48:43:a2:3a:90:5d: 02:77:28:00:73:7c:b3:09:f0:c3:cd:f8:af:d2:08: 2c:52:cc:2c:fe:e9:34:f6:84:7a:51:b4:70:97:9e: bf:0c:66:c7:28:c9:fc:23:a6:a4:d8:5d:2e:6c:1b: 94:10:ce:63:47:6a:89:83:ee:18:e6:6e:94:01:12: b5:64:b6:dc:f8:83:ad:bb:66:28:c1:6c:a3:0f:1b: 50:c5:65:14:8e:54:fb:e9:f5:f4:c6:cb:4b:32:9e: a8:a3:ca:0c:69:33:6d:fa:34:2b:95:c5:69:69:18: d2:0b:23:65:dd:a6:6f:20:a0:93:a8:30:a2:50:fa: e4:76:67:04:a6:90:e6:1f:18:48:b2:1f:86:d1:5b: 92:a1:74:9f:4b:2f:07:37:55:e9:ff:03:78:c7:b9: 89:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C3:61:5F:0B:94:13:A7:74:D5:05:DF:76:AB:5F:2E:B1:79:44:52 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/0b0c2d18-2b42-4e53-9e6a-d6f7d5dc2334.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b300:1000::/48 Signature Algorithm: sha256WithRSAEncryption 86:f0:43:aa:86:36:e2:19:01:e3:f1:25:4a:9a:7f:58:02:b3: 00:a9:ac:da:2d:17:0d:00:99:5f:3a:78:88:ed:a0:4d:99:6c: de:ee:a1:38:d7:38:a4:8f:16:92:c8:70:c8:2e:35:89:3e:dd: bf:00:33:57:7b:a4:73:f3:36:21:08:1b:3f:d3:f2:7e:73:0b: 38:ef:b8:be:5f:08:c9:aa:f4:17:36:5e:37:7f:57:f0:ab:25: c9:eb:b3:b0:05:3b:4f:e0:96:61:99:a0:46:74:80:b0:cc:80: 90:5d:07:50:2f:38:32:7e:7f:cc:94:5f:71:08:15:5f:46:7e: 30:a9:2e:c1:49:b8:ed:1d:ee:95:a3:50:95:1f:92:75:8b:d8: 76:09:d6:d9:ba:f5:4a:5c:c1:08:c8:e4:2d:58:67:a2:6e:3e: cb:7f:a9:e2:08:47:2a:95:75:49:4a:dc:b8:6d:31:de:ac:0d: a1:0d:ca:ea:bc:3a:5f:0a:99:bd:23:b7:a3:60:b0:a6:ab:38: 29:ad:9c:d8:ba:82:72:16:41:1c:2f:c6:44:e6:c8:fb:19:02: 3d:01:3d:7d:d9:c6:df:9e:5b:d6:9a:ab:84:44:16:79:ae:c4: 2e:9e:06:c0:0d:0d:83:41:15:10:5a:4f:7b:b5:11:39:79:4a: 55:97:ce:4e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUXKKOdO95ykQmoQuBrR7kU2/9HaIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTIzMDkxNjAwMDAwMFoX DTIzMTAyMTIzNTk1OVowejFJMEcGA1UEBRNAYzc5ZDhiYzlmZTgzMWUxZWEyZDQ0 YmEyMGQ0Mzg4YTUwMzNkNmEwNzZjOTAxNzk4NGY4ZDc3MzNlNjU4YmU5ZDEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcb3P7mCuASkSxlagf6ClQZJHudo q5V24YaeKBos1HRj5uX+0YlSNP7YQc8dEPd42ezR9217DOCYv+tLyRpnQ+6/QLUI gXeegJ5mUti0/rgq1ECUhtVmc4zfjd3dqRghxE1IQ6I6kF0CdygAc3yzCfDDzfiv 0ggsUsws/uk09oR6UbRwl56/DGbHKMn8I6ak2F0ubBuUEM5jR2qJg+4Y5m6UARK1 ZLbc+IOtu2YowWyjDxtQxWUUjlT76fX0xstLMp6oo8oMaTNt+jQrlcVpaRjSCyNl 3aZvIKCTqDCiUPrkdmcEppDmHxhIsh+G0VuSoXSfSy8HN1Xp/wN4x7mJSQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGfDYV8LlBOndNUF33arXy6xeURSMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvNzA4YWFmYWYtMDBiNC00ODViLTg1NGMtMGIzMmNhMzBmNTdi LzBiMGMyZDE4LTJiNDItNGU1My05ZTZhLWQ2ZjdkNWRjMjMzNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMy Y2EzMGY1N2IvMTJlNTkwMDEtMzVhYy00YWJmLTg1OGYtMzdiOTU1YTI0YjNmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAOzABAAMA0GCSqGSIb3DQEBCwUAA4IBAQCG8EOqhjbiGQHj8SVK mn9YArMAqazaLRcNAJlfOniI7aBNmWze7qE41zikjxaSyHDILjWJPt2/ADNXe6Rz 8zYhCBs/0/J+cws477i+XwjJqvQXNl43f1fwqyXJ67OwBTtP4JZhmaBGdICwzICQ XQdQLzgyfn/MlF9xCBVfRn4wqS7BSbjtHe6Vo1CVH5J1i9h2CdbZuvVKXMEIyOQt WGeibj7Lf6niCEcqlXVJSty4bTHerA2hDcrqvDpfCpm9I7ejYLCmqzgprZzYuoJy FkEcL8ZE5sj7GQI9AT192cbfnlvWmquERBZ5rsQungbADQ2DQRUQWk97tRE5eUpV l85O -----END CERTIFICATE-----Generated at Sat Sep 16 00:30:27 2023 by rpki-client on console-ams.rpki-client.org