$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/589cbaa9-e0fe-4ad9-ba2a-25c4433a8da4.roa File: 589cbaa9-e0fe-4ad9-ba2a-25c4433a8da4.roa (raw, json) Hash identifier: +JqMWS09keV1WslqzPsNAJcFVyJRth9Jy0jVZQKPemw= Subject key identifier: B5:38:25:AE:E5:58:DE:52:B6:00:9F:5C:37:9E:33:43:B5:05:96:AD Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 5A4D64CD3BA7AC930E25722D69D0E562FD44AA36 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/589cbaa9-e0fe-4ad9-ba2a-25c4433a8da4.roa Signing time: Sat 16 Sep 2023 00:00:00 +0000 ROA not before: Sat 16 Sep 2023 00:00:00 +0000 ROA not after: Sat 21 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 240f:8000:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 Sep 2023 12:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:4d:64:cd:3b:a7:ac:93:0e:25:72:2d:69:d0:e5:62:fd:44:aa:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Sep 16 00:00:00 2023 GMT Not After : Oct 21 23:59:59 2023 GMT Subject: serialNumber=95c4740392c721093abd3ba6ef9f5df19b1a5ea70caa4b5eeee4fa5c1fe242cb, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:da:de:69:c2:3b:e7:7b:2a:48:36:61:0c:78: 8a:8c:b1:8f:42:ec:03:39:25:fe:2b:8f:97:80:73: 77:58:e2:d4:82:48:9a:43:99:ea:56:75:d1:01:a4: d4:0e:22:dc:a5:b3:f1:af:2e:89:71:7f:0f:de:49: 3f:36:b8:0d:76:e8:a6:83:8d:97:dc:64:ec:5e:54: 12:90:dc:0e:5b:52:e0:94:1a:46:d4:6d:f4:32:2c: e0:4a:0e:81:d4:f5:99:12:ba:de:39:c8:6f:0c:4d: e0:5f:37:3c:3a:8d:bb:77:b5:ef:54:e4:92:91:ae: 6e:7a:5e:f5:36:b2:20:0b:70:d0:6d:70:0d:0c:e4: 7f:ae:59:d3:80:3f:64:bf:d9:64:96:a8:18:b1:4b: 3e:b5:8d:56:3b:a6:83:1b:d5:5c:80:bc:1f:2f:3e: 93:72:ab:0d:57:32:7c:2c:a6:b1:1b:87:42:02:1b: 39:ed:3a:01:80:49:d6:f5:2c:9a:19:72:d8:da:66: 61:8a:bc:23:9b:f9:ba:a6:e4:8e:12:12:32:2e:74: aa:6c:aa:b9:bd:be:35:85:3a:9c:6f:e2:5a:c9:09: 34:9a:ea:fd:35:6c:2d:0d:5f:c6:6b:bb:38:91:32: 54:53:2c:d0:31:67:57:91:a4:f0:f1:fd:a0:1a:3e: 1b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:38:25:AE:E5:58:DE:52:B6:00:9F:5C:37:9E:33:43:B5:05:96:AD X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/589cbaa9-e0fe-4ad9-ba2a-25c4433a8da4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:8000:4000::/40 Signature Algorithm: sha256WithRSAEncryption ac:b6:86:2a:9a:d2:cc:c7:84:cb:1b:45:58:b9:31:60:09:89: c4:90:1b:6a:92:0f:d3:7b:70:ac:82:67:68:77:45:19:16:2a: df:6c:44:a5:09:7f:27:4b:6d:fa:7e:ea:04:9e:e9:e1:88:29: dc:e8:60:18:64:66:8a:b5:ed:ce:19:c0:c8:1c:21:d4:08:cc: f2:06:85:c1:9c:6f:7a:00:22:cc:36:cc:7c:0f:7a:16:1f:26: a4:72:36:df:30:09:e0:7b:7f:3b:fd:c9:3e:32:d5:0d:a6:56: 81:d3:c0:1a:7c:35:1d:db:6b:83:fa:2a:23:70:49:2a:68:87: 40:7d:16:6f:36:38:ef:69:ed:3b:ef:51:a4:df:5f:dd:37:88: 0a:70:98:bc:50:38:69:04:5f:c1:d7:29:c9:0c:cc:90:e0:70: 1e:12:d0:e6:10:a3:9e:ca:df:7e:72:9f:e5:77:a6:b2:72:51: 66:0f:01:8e:bf:27:b3:c9:a9:6d:95:44:33:fd:bb:90:9a:73: f6:b0:ed:c4:88:5a:d7:94:0a:66:8d:8b:fc:51:45:21:0f:4b: 6e:44:5b:83:fd:8e:ac:b4:0d:19:d1:bc:03:fc:97:29:cb:b3: fc:98:45:bf:6c:ef:a1:d9:68:82:f4:e9:40:ac:10:5d:3b:59: be:78:65:9b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUWk1kzTunrJMOJXItadDlYv1EqjYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTIzMDkxNjAwMDAwMFoX DTIzMTAyMTIzNTk1OVowejFJMEcGA1UEBRNAOTVjNDc0MDM5MmM3MjEwOTNhYmQz YmE2ZWY5ZjVkZjE5YjFhNWVhNzBjYWE0YjVlZWVlNGZhNWMxZmUyNDJjYjEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NreacI753sqSDZhDHiKjLGPQuwD OSX+K4+XgHN3WOLUgkiaQ5nqVnXRAaTUDiLcpbPxry6JcX8P3kk/NrgNduimg42X 3GTsXlQSkNwOW1LglBpG1G30MizgSg6B1PWZErreOchvDE3gXzc8Oo27d7XvVOSS ka5uel71NrIgC3DQbXANDOR/rlnTgD9kv9lklqgYsUs+tY1WO6aDG9VcgLwfLz6T cqsNVzJ8LKaxG4dCAhs57ToBgEnW9SyaGXLY2mZhirwjm/m6puSOEhIyLnSqbKq5 vb41hTqcb+JayQk0mur9NWwtDV/Ga7s4kTJUUyzQMWdXkaTw8f2gGj4beQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLU4Ja7lWN5StgCfXDeeM0O1BZatMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzU4OWNiYWE5LWUwZmUtNGFkOS1iYTJhLTI1YzQ0MzNhOGRhNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJA+AAEAwDQYJKoZIhvcNAQELBQADggEBAKy2hiqa0szHhMsbRVi5 MWAJicSQG2qSD9N7cKyCZ2h3RRkWKt9sRKUJfydLbfp+6gSe6eGIKdzoYBhkZoq1 7c4ZwMgcIdQIzPIGhcGcb3oAIsw2zHwPehYfJqRyNt8wCeB7fzv9yT4y1Q2mVoHT wBp8NR3ba4P6KiNwSSpoh0B9Fm82OO9p7TvvUaTfX903iApwmLxQOGkEX8HXKckM zJDgcB4S0OYQo57K335yn+V3prJyUWYPAY6/J7PJqW2VRDP9u5Cac/aw7cSIWteU CmaNi/xRRSEPS25EW4P9jqy0DRnRvAP8lynLs/yYRb9s76HZaIL06UCsEF07Wb54 ZZs= -----END CERTIFICATE-----Generated at Sat Sep 16 00:30:27 2023 by rpki-client on console-ams.rpki-client.org