$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d43a2e56-2d58-4c7d-8ee2-0ca6ac8a6275.roa File: d43a2e56-2d58-4c7d-8ee2-0ca6ac8a6275.roa (raw, json) Hash identifier: l1vIV/prKGY5fMh+iklac9neg/IYJmaUWYdVQZefy2A= Subject key identifier: 4D:29:E2:5A:A2:63:E4:2B:EC:A9:B8:4D:C6:10:2F:52:CD:FD:85:07 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4D4123F1235BBF11E3B463153235769253C85515 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d43a2e56-2d58-4c7d-8ee2-0ca6ac8a6275.roa Signing time: Wed 06 Aug 2025 00:00:11 +0000 ROA not before: Wed 06 Aug 2025 00:00:11 +0000 ROA not after: Wed 10 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daef:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:41:23:f1:23:5b:bf:11:e3:b4:63:15:32:35:76:92:53:c8:55:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 6 00:00:11 2025 GMT Not After : Sep 10 23:59:59 2025 GMT Subject: serialNumber=58bd095902136fc6fdb620877ee0ac330c818614cf5342934f35e33cb19dbe87, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9c:28:28:19:1e:38:5a:65:f1:f7:e9:ed:a8: df:b3:d7:bd:6b:9c:53:24:03:a6:4b:2d:0a:2c:71: 1b:4c:a2:0c:0c:cc:cb:4e:e2:e3:7b:84:db:ce:19: 53:9c:34:9c:92:3a:bc:7e:90:af:00:8c:39:d7:47: 23:d4:5f:83:f8:2d:b6:0a:61:59:7b:c4:0c:39:e4: c8:6e:02:6a:8f:ff:ab:8e:84:5f:d0:2e:ee:70:e7: d7:a4:6e:37:17:de:eb:10:c5:4e:9e:96:dd:12:46: 34:ee:da:47:59:35:f2:61:8f:9b:b6:95:33:37:9f: 99:cc:53:6c:7a:5f:2a:f9:8c:10:70:fa:2f:24:62: 11:8b:a1:a0:33:d6:fc:3c:c4:d1:32:81:34:9d:a1: b8:ee:ae:c6:9d:2b:25:89:a6:25:23:a6:7d:3c:1d: 37:5c:b1:41:5a:99:2e:1d:99:6d:81:f4:c0:1d:e1: 32:d6:00:ef:ae:bf:5b:3f:e0:af:17:c9:21:fb:bb: 56:ca:92:1b:56:3f:e3:9c:55:49:99:ef:cb:58:3a: 6f:2f:ac:95:f4:bd:43:70:8f:17:80:5c:7a:a7:f2: 24:11:7d:41:98:e8:a5:06:7a:d1:0c:00:6a:73:72: 84:33:ba:d2:86:9f:2a:68:25:99:2b:b8:20:75:df: d1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:29:E2:5A:A2:63:E4:2B:EC:A9:B8:4D:C6:10:2F:52:CD:FD:85:07 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d43a2e56-2d58-4c7d-8ee2-0ca6ac8a6275.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:2800::/40 Signature Algorithm: sha256WithRSAEncryption 5d:cc:b8:ab:de:dd:1d:83:58:34:e7:dd:72:48:f9:a9:4c:2d: 78:23:31:cb:7d:69:a5:f7:b9:a7:04:81:76:15:7d:d5:ba:9c: a1:62:e0:27:07:64:96:a1:38:0e:56:a6:bf:8c:2c:44:bf:19: 6d:fc:ad:01:ea:3d:08:20:67:f1:9b:29:07:fe:c1:f4:e8:1b: e3:cd:5b:d7:01:fe:49:0f:05:9a:da:0a:9d:fb:b3:9c:bd:1c: 2a:17:c1:51:04:94:1a:fe:f0:0d:db:9f:a5:a7:5d:e9:64:4b: e7:22:a8:2e:fa:f8:8d:3e:ef:37:60:c1:1a:91:39:a1:9c:13: af:12:a5:9c:eb:07:3c:ab:a7:6d:0c:85:00:b0:f6:df:29:78: 2c:65:59:8e:26:91:09:90:40:41:42:d3:c3:43:81:0d:e0:1c: 0a:5b:dc:81:63:6e:e6:9b:5c:5e:9d:4b:39:01:18:9e:ad:11: 88:0c:ea:b4:5b:e4:c2:83:59:1a:2f:f9:41:48:ee:e9:5a:cb: 96:70:0c:ae:9f:1b:9c:07:ed:87:ea:e7:69:3f:67:e8:10:0d: f3:35:d3:d4:87:41:3c:ce:c5:f4:a2:c4:71:cb:2e:12:c0:79: db:64:3a:96:c8:64:97:5c:a6:37:41:e3:23:56:e8:48:ee:4b: 84:9d:cb:4c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUTUEj8SNbvxHjtGMVMjV2klPIVRUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwNjAwMDAxMVoX DTI1MDkxMDIzNTk1OVowejFJMEcGA1UEBRNANThiZDA5NTkwMjEzNmZjNmZkYjYy MDg3N2VlMGFjMzMwYzgxODYxNGNmNTM0MjkzNGYzNWUzM2NiMTlkYmU4NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZwoKBkeOFpl8ffp7ajfs9e9a5xT JAOmSy0KLHEbTKIMDMzLTuLje4TbzhlTnDSckjq8fpCvAIw510cj1F+D+C22CmFZ e8QMOeTIbgJqj/+rjoRf0C7ucOfXpG43F97rEMVOnpbdEkY07tpHWTXyYY+btpUz N5+ZzFNsel8q+YwQcPovJGIRi6GgM9b8PMTRMoE0naG47q7GnSsliaYlI6Z9PB03 XLFBWpkuHZltgfTAHeEy1gDvrr9bP+CvF8kh+7tWypIbVj/jnFVJme/LWDpvL6yV 9L1DcI8XgFx6p/IkEX1BmOilBnrRDABqc3KEM7rShp8qaCWZK7ggdd/RqwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFE0p4lqiY+Qr7Km4TcYQL1LN/YUHMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q0M2EyZTU2LTJkNTgtNGM3ZC04ZWUyLTBjYTZhYzhhNjI3NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7ygwDQYJKoZIhvcNAQELBQADggEBAF3MuKve3R2DWDTn3XJI +alMLXgjMct9aaX3uacEgXYVfdW6nKFi4CcHZJahOA5Wpr+MLES/GW38rQHqPQgg Z/GbKQf+wfToG+PNW9cB/kkPBZraCp37s5y9HCoXwVEElBr+8A3bn6WnXelkS+ci qC76+I0+7zdgwRqROaGcE68SpZzrBzyrp20MhQCw9t8peCxlWY4mkQmQQEFC08ND gQ3gHApb3IFjbuabXF6dSzkBGJ6tEYgM6rRb5MKDWRov+UFI7ulay5ZwDK6fG5wH 7Yfq52k/Z+gQDfM109SHQTzOxfSixHHLLhLAedtkOpbIZJdcpjdB4yNW6EjuS4Sd y0w= -----END CERTIFICATE-----Generated at Sat Aug 23 15:41:20 2025 by rpki-client