$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/2d2af952-35e6-43e7-b07a-74956b69b4a0.roa File: 2d2af952-35e6-43e7-b07a-74956b69b4a0.roa (raw, json) Hash identifier: LTXN4i1XmnuEaNWK+YxdvFJwmXDPJDCxyn1Wj+53wZw= Subject key identifier: 4D:6E:A2:6D:3E:33:05:98:5E:3D:B7:11:5D:ED:83:12:78:74:2E:26 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 0505FA744C800738DEDA6EF91AB48C5DFBD7EA81 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/2d2af952-35e6-43e7-b07a-74956b69b4a0.roa Signing time: Mon 18 Nov 2024 00:00:00 +0000 ROA not before: Mon 18 Nov 2024 00:00:00 +0000 ROA not after: Mon 23 Dec 2024 23:59:59 +0000 asID: 8987 IP address blocks: 2403:b300::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 15:11:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:05:fa:74:4c:80:07:38:de:da:6e:f9:1a:b4:8c:5d:fb:d7:ea:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Nov 18 00:00:00 2024 GMT Not After : Dec 23 23:59:59 2024 GMT Subject: serialNumber=8f5c627dd46d336927f1d5428bf3ba4921944d3e1b00799930b505716738a648, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:db:1b:13:61:8d:93:5e:d8:76:59:21:5a:8b: 4b:82:a2:f1:ed:ab:ff:5e:21:aa:db:d8:e7:c1:9f: f6:03:9a:f9:b5:22:8f:4e:95:51:b0:28:7c:2c:04: 7e:f7:21:99:a0:5d:89:95:9a:da:3e:0c:6d:24:94: f2:f0:58:b5:ee:1f:cd:95:ea:08:07:80:75:42:1f: 07:b4:33:34:e7:b9:f5:75:cb:a3:e5:de:ea:92:d7: 84:46:c0:cc:39:cf:41:cd:fb:22:67:ca:b0:d8:57: 38:91:be:92:bb:1f:fe:16:3e:de:7c:16:bc:8e:c5: 6f:b4:10:97:63:9f:a6:ed:f0:14:ac:89:27:9e:3c: 24:90:61:42:92:b4:d1:0e:6e:a2:c3:ff:ab:02:58: 42:09:53:be:8f:12:34:fc:5f:a6:3c:f8:3a:a2:df: da:4e:1f:6d:c9:2f:4e:26:d4:05:bc:f6:e7:16:c8: fb:e8:38:10:5b:60:4d:4f:5a:12:f1:8f:6f:5f:c7: ce:f1:62:4d:81:85:34:40:e3:f0:40:45:88:d8:94: 59:6d:ff:6d:6f:e8:e8:8e:49:7c:28:f9:78:d5:57: 5e:df:f0:c4:e6:c5:b0:1d:4a:77:b7:1c:55:b5:6d: d6:fc:12:7d:dd:be:cf:6e:0b:42:dc:5b:af:b5:20: f8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:6E:A2:6D:3E:33:05:98:5E:3D:B7:11:5D:ED:83:12:78:74:2E:26 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/2d2af952-35e6-43e7-b07a-74956b69b4a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b300::/32 Signature Algorithm: sha256WithRSAEncryption 46:99:e7:b4:3a:2d:b2:64:39:51:bf:eb:ec:66:b4:1f:04:b0: 6e:c5:24:18:aa:60:84:88:7b:f6:a9:d0:43:b2:45:11:77:c7: 19:49:09:8f:36:72:6e:17:99:ea:99:c9:92:ea:d8:30:4d:77: cc:85:3d:25:8a:a9:df:96:1c:a4:c3:7c:dc:51:aa:bd:61:95: e2:ec:b8:b9:03:33:13:83:ad:0e:b9:b2:9b:73:60:01:f1:e3: a5:0b:5e:88:d4:2b:3e:55:ac:1f:05:d6:b5:db:71:ff:c5:c0: 18:47:0c:45:be:59:a9:39:bf:66:16:ba:60:b2:d6:27:89:fd: 90:e0:86:a8:46:eb:a4:79:ad:bb:b9:91:c1:f1:ac:4c:cb:0e: 98:f7:c8:fd:89:40:d3:e6:15:05:9c:61:2c:76:73:4a:44:f4: 4c:e4:99:d0:97:db:f4:a0:96:ba:fd:3b:25:87:68:1f:7f:b5: 08:a2:47:4d:f8:22:32:d0:39:e4:fa:3f:00:9c:42:f4:3d:0b: 51:25:8d:e8:2f:5c:b9:9c:9c:21:1f:cb:da:a1:b7:4c:30:60: 0e:19:17:17:f5:9f:56:e6:0e:15:0d:1b:59:75:f5:ec:c0:a5: 26:08:a6:a4:47:4b:77:53:3f:ff:1e:53:c1:8a:b3:c1:fd:60: 1c:9b:d7:2e -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUBQX6dEyABzje2m75GrSMXfvX6oEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI0MTExODAwMDAwMFoX DTI0MTIyMzIzNTk1OVowejFJMEcGA1UEBRNAOGY1YzYyN2RkNDZkMzM2OTI3ZjFk NTQyOGJmM2JhNDkyMTk0NGQzZTFiMDA3OTk5MzBiNTA1NzE2NzM4YTY0ODEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtsbE2GNk17YdlkhWotLgqLx7av/ XiGq29jnwZ/2A5r5tSKPTpVRsCh8LAR+9yGZoF2JlZraPgxtJJTy8Fi17h/NleoI B4B1Qh8HtDM057n1dcuj5d7qkteERsDMOc9BzfsiZ8qw2Fc4kb6Sux/+Fj7efBa8 jsVvtBCXY5+m7fAUrIknnjwkkGFCkrTRDm6iw/+rAlhCCVO+jxI0/F+mPPg6ot/a Th9tyS9OJtQFvPbnFsj76DgQW2BNT1oS8Y9vX8fO8WJNgYU0QOPwQEWI2JRZbf9t b+jojkl8KPl41Vde3/DE5sWwHUp3txxVtW3W/BJ93b7PbgtC3FuvtSD4yQIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFE1uom0+MwWYXj23EV3tgxJ4dC4mMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvNzA4YWFmYWYtMDBiNC00ODViLTg1NGMtMGIzMmNhMzBmNTdi LzJkMmFmOTUyLTM1ZTYtNDNlNy1iMDdhLTc0OTU2YjY5YjRhMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMy Y2EzMGY1N2IvMTJlNTkwMDEtMzVhYy00YWJmLTg1OGYtMzdiOTU1YTI0YjNmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAOzADANBgkqhkiG9w0BAQsFAAOCAQEARpnntDotsmQ5Ub/r7Ga0 HwSwbsUkGKpghIh79qnQQ7JFEXfHGUkJjzZybheZ6pnJkurYME13zIU9JYqp35Yc pMN83FGqvWGV4uy4uQMzE4OtDrmym3NgAfHjpQteiNQrPlWsHwXWtdtx/8XAGEcM Rb5ZqTm/Zha6YLLWJ4n9kOCGqEbrpHmtu7mRwfGsTMsOmPfI/YlA0+YVBZxhLHZz SkT0TOSZ0Jfb9KCWuv07JYdoH3+1CKJHTfgiMtA55Po/AJxC9D0LUSWN6C9cuZyc IR/L2qG3TDBgDhkXF/WfVuYOFQ0bWXX17MClJgimpEdLd1M//x5TwYqzwf1gHJvX Lg== -----END CERTIFICATE-----Generated at Thu Nov 21 17:28:40 2024 by rpki-client on console-fra.rpki-client.org