$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/1738e1ca-e725-4f75-8dfb-04b89ee349d9.roa File: 1738e1ca-e725-4f75-8dfb-04b89ee349d9.roa (raw, json) Hash identifier: Ayx6uJ4WDDO5JpUP7V/Qjg+gz/qCDREsd/c7oH9vQH8= Subject key identifier: B3:AC:9F:07:A4:A0:5D:E0:F7:87:D3:54:59:5E:F9:0D:11:2E:3B:77 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 3BD368C0FEC1BFF19BA33A2BC47902BF90511A8D Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/1738e1ca-e725-4f75-8dfb-04b89ee349d9.roa Signing time: Mon 18 Nov 2024 00:00:00 +0000 ROA not before: Mon 18 Nov 2024 00:00:00 +0000 ROA not after: Mon 23 Dec 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2403:b300:1090::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Dec 2024 00:13:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:d3:68:c0:fe:c1:bf:f1:9b:a3:3a:2b:c4:79:02:bf:90:51:1a:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Nov 18 00:00:00 2024 GMT Not After : Dec 23 23:59:59 2024 GMT Subject: serialNumber=690615d6a7de9e8eede9e31ee28769b3a2deac9e1e335065643cf41f3c4099e8, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:90:61:51:4d:b7:86:7c:1f:2c:ef:87:21:af: 40:22:e6:51:0e:49:da:47:41:79:ae:03:d1:24:f4: 32:7d:7e:16:58:9b:28:b9:be:69:15:9a:f3:26:fd: 18:43:d0:34:72:b4:12:92:d9:1f:c4:b7:04:60:ae: 06:b3:b5:d3:dc:f5:ea:c7:c6:c4:04:76:3c:2d:f7: a3:17:28:33:78:0f:77:ff:a4:d1:1e:ad:5b:ac:12: f7:f4:f3:23:c4:7a:8d:54:36:ad:23:f7:8c:bf:15: 9c:45:87:62:ed:b9:8e:db:35:8e:41:4a:d8:e7:95: c6:ea:a9:7f:15:cd:67:74:08:3f:aa:d9:de:ad:7e: 8d:84:df:0f:ba:89:00:cf:eb:f3:7b:3f:9e:6f:c2: 22:ba:0d:89:c7:48:df:5d:e7:0c:1a:28:18:6e:31: 27:9b:fd:ce:eb:7c:af:3e:d1:30:1f:6b:92:a9:4d: be:56:20:23:2d:c1:94:f8:7d:64:9f:41:a9:3d:22: da:e5:94:c5:d0:b5:0f:df:6e:5c:1d:1f:04:65:1d: c8:64:0f:44:7e:12:2e:0c:54:a0:dd:1d:96:be:79: 88:55:32:05:42:1d:8d:e0:04:57:7d:44:26:6e:50: 6b:15:89:0a:81:db:08:c4:4b:a7:b9:32:24:7d:1c: 73:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:AC:9F:07:A4:A0:5D:E0:F7:87:D3:54:59:5E:F9:0D:11:2E:3B:77 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/1738e1ca-e725-4f75-8dfb-04b89ee349d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b300:1090::/48 Signature Algorithm: sha256WithRSAEncryption 83:98:13:b6:3a:83:a3:0c:c2:49:2f:09:bd:33:46:cb:7e:51: 52:b6:23:51:ca:6f:b8:0c:07:fc:70:6e:fe:7d:20:be:d5:6a: 21:bf:29:ed:ae:02:ec:a9:63:8e:16:94:dc:d7:f3:da:8d:96: c6:3d:f8:4f:29:8d:2b:03:1b:7e:d1:87:5c:d2:f0:3b:8d:70: 80:06:4b:d8:b6:16:f5:20:0c:75:47:95:11:6d:7a:ab:a5:4c: b3:3c:48:28:77:5a:18:c6:d1:b2:8d:f8:36:14:4e:c8:65:b6: d8:4c:ab:ff:c0:d6:5f:41:31:38:a2:20:f7:c2:88:c8:d6:08: 64:6d:0a:71:a4:ce:69:dd:03:00:a4:81:d0:39:2c:3a:c1:6d: 15:1c:46:ad:2b:6c:fe:7c:0f:74:7c:a5:d9:b4:43:97:8c:ff: b8:28:3a:af:fa:9a:e4:25:05:f7:b8:1d:44:3e:6f:d5:98:15: b3:72:ea:39:d9:14:eb:67:67:e0:c6:ac:62:27:24:db:bb:d4: 27:4d:87:17:8b:29:50:fb:60:15:6c:61:ca:0f:37:ac:cb:8d: fe:ba:a9:61:57:a9:19:c0:48:e5:72:82:ed:f2:cc:52:c8:ff: ff:69:f4:2f:ba:a0:0e:ae:a2:12:3b:82:9e:05:99:31:18:15: 80:07:99:90 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUO9NowP7Bv/GbozorxHkCv5BRGo0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI0MTExODAwMDAwMFoX DTI0MTIyMzIzNTk1OVowejFJMEcGA1UEBRNANjkwNjE1ZDZhN2RlOWU4ZWVkZTll MzFlZTI4NzY5YjNhMmRlYWM5ZTFlMzM1MDY1NjQzY2Y0MWYzYzQwOTllODEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pBhUU23hnwfLO+HIa9AIuZRDkna R0F5rgPRJPQyfX4WWJsoub5pFZrzJv0YQ9A0crQSktkfxLcEYK4Gs7XT3PXqx8bE BHY8LfejFygzeA93/6TRHq1brBL39PMjxHqNVDatI/eMvxWcRYdi7bmO2zWOQUrY 55XG6ql/Fc1ndAg/qtnerX6NhN8PuokAz+vzez+eb8Iiug2Jx0jfXecMGigYbjEn m/3O63yvPtEwH2uSqU2+ViAjLcGU+H1kn0GpPSLa5ZTF0LUP325cHR8EZR3IZA9E fhIuDFSg3R2WvnmIVTIFQh2N4ARXfUQmblBrFYkKgdsIxEunuTIkfRxz6QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLOsnwekoF3g94fTVFle+Q0RLjt3MB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvNzA4YWFmYWYtMDBiNC00ODViLTg1NGMtMGIzMmNhMzBmNTdi LzE3MzhlMWNhLWU3MjUtNGY3NS04ZGZiLTA0Yjg5ZWUzNDlkOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMy Y2EzMGY1N2IvMTJlNTkwMDEtMzVhYy00YWJmLTg1OGYtMzdiOTU1YTI0YjNmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAOzABCQMA0GCSqGSIb3DQEBCwUAA4IBAQCDmBO2OoOjDMJJLwm9 M0bLflFStiNRym+4DAf8cG7+fSC+1WohvyntrgLsqWOOFpTc1/PajZbGPfhPKY0r Axt+0Ydc0vA7jXCABkvYthb1IAx1R5URbXqrpUyzPEgod1oYxtGyjfg2FE7IZbbY TKv/wNZfQTE4oiD3wojI1ghkbQpxpM5p3QMApIHQOSw6wW0VHEatK2z+fA90fKXZ tEOXjP+4KDqv+prkJQX3uB1EPm/VmBWzcuo52RTrZ2fgxqxiJyTbu9QnTYcXiylQ +2AVbGHKDzesy43+uqlhV6kZwEjlcoLt8sxSyP//afQvuqAOrqISO4KeBZkxGBWA B5mQ -----END CERTIFICATE-----Generated at Wed Dec 11 00:55:24 2024 by rpki-client on console-ams.rpki-client.org