$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/435e4f2b-d839-459a-86a5-1cfb7aa7d6f8.roa File: 435e4f2b-d839-459a-86a5-1cfb7aa7d6f8.roa (raw, json) Hash identifier: nxc0nZ6C5EZCVxY9H/MmSfKpnFjSMu/PDesYG/uSwt4= Subject key identifier: A5:CE:B2:3E:13:8A:4A:FA:AD:5A:44:58:0B:4A:BD:F1:FE:58:67:7A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3A5C23F2B27EEE554E1E2833B4122CDC7B77ADB1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/435e4f2b-d839-459a-86a5-1cfb7aa7d6f8.roa Signing time: Fri 01 Aug 2025 00:21:16 +0000 ROA not before: Fri 01 Aug 2025 00:21:16 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab9:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:5c:23:f2:b2:7e:ee:55:4e:1e:28:33:b4:12:2c:dc:7b:77:ad:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:21:16 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=8b3aa6cb0c6ed4df94527ced1fe0494bfe5088de7c7d13ebd58030d0b7953672, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:59:d1:e7:72:8f:45:6c:56:a7:24:c7:c5:ba: fc:c2:a3:be:af:54:94:ed:0c:a5:26:ce:ea:2c:a6: 1a:71:04:7f:a8:df:88:33:e4:5a:1d:49:08:21:8a: 81:9c:f6:a3:40:b6:18:f9:11:32:6f:7f:b1:58:63: a4:f9:00:2c:ce:81:db:58:16:1c:82:46:2e:87:c7: e6:f9:6d:91:74:dc:71:f1:11:f4:06:92:9f:9f:7b: 3e:67:1f:7a:32:11:20:22:bf:47:78:f1:f0:5a:cf: d4:e0:ba:c1:03:4e:b9:01:96:0c:35:d8:eb:01:7e: 92:5b:86:16:36:98:f9:f5:09:c1:e9:fa:58:ed:51: 75:d7:b3:f2:a5:c0:83:d2:8c:10:9b:de:72:5e:39: 7a:43:7b:b3:28:ff:52:6b:5d:77:d3:52:d5:28:9a: 6b:cf:85:26:98:06:83:3c:f0:44:cf:3f:53:6c:62: 8a:ff:f3:63:f0:36:cf:b0:18:46:a5:c6:7f:b9:f6: ee:2b:85:4a:5d:43:b2:bd:50:bf:59:ab:37:85:51: cf:06:f9:3b:0a:d3:7a:12:5f:29:47:1a:41:f4:49: e2:f2:55:a1:29:8a:0c:0f:a1:6c:ac:ab:00:2f:0d: fe:21:72:60:6b:08:1a:87:38:d1:b3:4d:60:f3:0e: 88:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:CE:B2:3E:13:8A:4A:FA:AD:5A:44:58:0B:4A:BD:F1:FE:58:67:7A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/435e4f2b-d839-459a-86a5-1cfb7aa7d6f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:4000::/40 Signature Algorithm: sha256WithRSAEncryption 32:e5:5c:99:7b:bf:f2:87:9d:74:9d:f1:ab:2e:6d:ce:96:81: a5:e4:f9:83:e4:78:c3:23:f7:ac:90:43:58:c7:e1:6e:91:60: 77:4c:1e:9d:ac:85:3c:c9:ff:af:62:9d:d8:fa:86:5a:73:4d: 4e:ec:97:ee:e3:cf:86:4e:6c:b9:d8:d4:3e:81:29:97:cb:f2: e0:7c:10:75:3a:f5:b3:3e:fa:bf:9e:2d:32:23:0c:8c:e0:5b: dd:c6:38:05:f0:d3:ab:26:00:28:f7:cb:94:29:3a:8a:b6:1e: 3a:ff:9e:a6:d1:39:29:10:48:1d:a5:81:45:a6:38:b2:3f:24: eb:f8:33:28:d7:ca:15:4f:b6:b2:f5:c2:60:e5:f1:6b:8c:ae: 41:47:43:f1:3a:78:f1:2f:72:35:30:50:7e:e2:4b:5b:97:9f: 7b:3a:2f:89:e4:1e:9f:2f:b8:96:6c:88:15:eb:b8:d6:93:b5: 85:02:cb:60:a9:52:bd:63:ba:e0:48:82:55:08:d2:58:af:cd: 6b:55:d7:17:4b:e9:72:06:e3:62:4b:b8:8c:df:20:aa:4c:fe: 4f:8d:55:f1:f3:4a:a8:56:c1:14:72:28:1a:e3:9d:a1:4f:af: 77:32:ec:72:7a:37:4e:a9:68:cd:7c:48:97:3a:42:21:bb:c5: 58:a2:e6:00 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUOlwj8rJ+7lVOHigztBIs3Ht3rbEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwMTAwMjExNloX DTI1MDkwNTIzNTk1OVowejFJMEcGA1UEBRNAOGIzYWE2Y2IwYzZlZDRkZjk0NTI3 Y2VkMWZlMDQ5NGJmZTUwODhkZTdjN2QxM2ViZDU4MDMwZDBiNzk1MzY3MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFnR53KPRWxWpyTHxbr8wqO+r1SU 7QylJs7qLKYacQR/qN+IM+RaHUkIIYqBnPajQLYY+REyb3+xWGOk+QAszoHbWBYc gkYuh8fm+W2RdNxx8RH0BpKfn3s+Zx96MhEgIr9HePHwWs/U4LrBA065AZYMNdjr AX6SW4YWNpj59QnB6fpY7VF117PypcCD0owQm95yXjl6Q3uzKP9Sa11301LVKJpr z4UmmAaDPPBEzz9TbGKK//Nj8DbPsBhGpcZ/ufbuK4VKXUOyvVC/Was3hVHPBvk7 CtN6El8pRxpB9Eni8lWhKYoMD6FsrKsALw3+IXJgawgahzjRs01g8w6IaQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKXOsj4Tikr6rVpEWAtKvfH+WGd6MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQzNWU0ZjJiLWQ4MzktNDU5YS04NmE1LTFjZmI3YWE3ZDZmOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauUAwDQYJKoZIhvcNAQELBQADggEBADLlXJl7v/KHnXSd8asu bc6WgaXk+YPkeMMj96yQQ1jH4W6RYHdMHp2shTzJ/69indj6hlpzTU7sl+7jz4ZO bLnY1D6BKZfL8uB8EHU69bM++r+eLTIjDIzgW93GOAXw06smACj3y5QpOoq2Hjr/ nqbROSkQSB2lgUWmOLI/JOv4MyjXyhVPtrL1wmDl8WuMrkFHQ/E6ePEvcjUwUH7i S1uXn3s6L4nkHp8vuJZsiBXruNaTtYUCy2CpUr1juuBIglUI0livzWtV1xdL6XIG 42JLuIzfIKpM/k+NVfHzSqhWwRRyKBrjnaFPr3cy7HJ6N06paM18SJc6QiG7xVii 5gA= -----END CERTIFICATE-----Generated at Mon Aug 4 14:44:31 2025 by rpki-client