$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/57e5a746-78cb-4122-b964-f449ba6f6e5f.roa File: 57e5a746-78cb-4122-b964-f449ba6f6e5f.roa (raw, json) Hash identifier: a/hNan3Hqoz8xcMqx86nnHxMOSEG8YT78Q7nt/wjWis= Subject key identifier: 26:8A:DE:1A:E2:7F:51:9C:F3:4C:FC:71:63:CC:D2:9C:B5:99:1E:9C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 34BF8F71E2EAE8374525985ECA3BD0346EA6ECE7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/57e5a746-78cb-4122-b964-f449ba6f6e5f.roa Signing time: Tue 10 Jun 2025 00:10:18 +0000 ROA not before: Tue 10 Jun 2025 00:10:18 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:a000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:bf:8f:71:e2:ea:e8:37:45:25:98:5e:ca:3b:d0:34:6e:a6:ec:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 00:10:18 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=9706acbffa9aa4e2f4f4270084492520583469cb1449f5c32373c8036b2b4383, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d0:45:b9:ee:d8:a3:41:46:c6:c4:64:33:7f: cd:f7:2b:92:79:d2:bf:3e:3c:4a:3f:0d:f1:68:b5: a7:dd:0e:a1:8b:a4:4c:f3:ec:54:0b:7b:ff:27:6e: 14:87:5f:45:62:0d:22:b0:ae:c1:38:79:c1:2e:d9: dd:66:bc:52:00:c6:e4:6a:eb:d2:0f:08:70:a3:32: 68:c4:9c:2f:0d:b7:6b:3e:6e:2e:7d:96:31:49:88: b0:a3:0a:58:fa:a3:55:35:38:8d:b8:70:3c:61:64: cb:19:2b:26:86:9c:ec:12:0b:68:5a:63:fe:75:c8: d5:a6:5a:a5:4f:d8:5a:35:a3:57:90:61:89:c4:18: 35:fb:66:b4:21:49:d2:a9:0a:21:93:51:f3:be:2e: 3f:84:7a:70:9a:c4:46:b0:ee:49:28:5a:21:7c:35: 2b:bd:c6:85:64:d6:09:12:30:81:dd:0d:28:de:cb: 6a:cd:1e:e3:77:ed:04:fb:0d:8a:1e:de:65:bb:fc: 78:9e:a0:d6:2e:a0:22:16:be:3e:e7:c0:50:eb:d2: 93:9e:70:0d:21:0a:26:67:aa:23:e1:a5:99:07:67: 2f:b5:df:40:ce:bb:32:68:df:32:6d:83:86:bb:22: 8d:0e:20:95:3b:92:70:cc:91:80:64:36:b4:ea:35: 18:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:8A:DE:1A:E2:7F:51:9C:F3:4C:FC:71:63:CC:D2:9C:B5:99:1E:9C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/57e5a746-78cb-4122-b964-f449ba6f6e5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:a000::/40 Signature Algorithm: sha256WithRSAEncryption 9c:4e:c4:bb:05:83:e0:ca:07:c8:03:96:3f:59:e5:d5:ef:10: 23:72:ab:63:53:6d:2e:9e:d4:f1:a9:ee:dd:e6:1a:a1:72:2f: 25:9d:6b:a7:c5:ae:fd:d3:d5:b3:f2:6b:b1:69:4c:43:77:3e: f9:ec:96:04:2d:18:f3:0c:ac:b4:da:cc:0e:b9:94:c1:ed:f8: 63:f3:46:f2:05:b7:e2:f6:b6:31:d8:cd:52:61:cc:34:10:e1: fb:1c:ff:aa:8e:a9:08:84:12:63:5d:09:e2:1f:82:71:41:93: 06:e0:65:75:41:d9:d9:2b:91:05:23:c2:e0:2c:0f:f7:c4:2d: 23:85:5d:7e:31:55:f9:50:14:11:c1:cf:c9:25:17:50:b9:17: 7b:7b:51:ce:66:c0:d7:d4:d2:89:f0:5b:63:40:25:d2:36:76: 82:26:0f:2b:71:74:e4:c5:f4:e7:47:6b:3f:20:46:6e:ee:36: c4:86:a4:0b:e6:a4:d7:1f:04:10:6c:58:d5:aa:db:ce:01:1c: 34:8b:cf:c3:17:0d:d2:bc:9f:fc:37:e2:a3:eb:4a:6d:07:62: f5:7c:ea:50:46:c5:4e:dd:c9:c1:4d:aa:00:e9:6f:19:38:00: 95:33:36:c4:fe:1c:65:3a:b1:03:86:5e:10:5e:47:30:c8:41: 5a:2f:d3:2f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUNL+PceLq6DdFJZheyjvQNG6m7OcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDAwMTAxOFoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAOTcwNmFjYmZmYTlhYTRlMmY0ZjQy NzAwODQ0OTI1MjA1ODM0NjljYjE0NDlmNWMzMjM3M2M4MDM2YjJiNDM4MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNBFue7Yo0FGxsRkM3/N9yuSedK/ PjxKPw3xaLWn3Q6hi6RM8+xUC3v/J24Uh19FYg0isK7BOHnBLtndZrxSAMbkauvS DwhwozJoxJwvDbdrPm4ufZYxSYiwowpY+qNVNTiNuHA8YWTLGSsmhpzsEgtoWmP+ dcjVplqlT9haNaNXkGGJxBg1+2a0IUnSqQohk1Hzvi4/hHpwmsRGsO5JKFohfDUr vcaFZNYJEjCB3Q0o3stqzR7jd+0E+w2KHt5lu/x4nqDWLqAiFr4+58BQ69KTnnAN IQomZ6oj4aWZB2cvtd9AzrsyaN8ybYOGuyKNDiCVO5JwzJGAZDa06jUY7wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCaK3hrif1Gc80z8cWPM0py1mR6cMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU3ZTVhNzQ2LTc4Y2ItNDEyMi1iOTY0LWY0NDliYTZmNmU1Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaOKAwDQYJKoZIhvcNAQELBQADggEBAJxOxLsFg+DKB8gDlj9Z 5dXvECNyq2NTbS6e1PGp7t3mGqFyLyWda6fFrv3T1bPya7FpTEN3PvnslgQtGPMM rLTazA65lMHt+GPzRvIFt+L2tjHYzVJhzDQQ4fsc/6qOqQiEEmNdCeIfgnFBkwbg ZXVB2dkrkQUjwuAsD/fELSOFXX4xVflQFBHBz8klF1C5F3t7Uc5mwNfU0onwW2NA JdI2doImDytxdOTF9OdHaz8gRm7uNsSGpAvmpNcfBBBsWNWq284BHDSLz8MXDdK8 n/w34qPrSm0HYvV86lBGxU7dycFNqgDpbxk4AJUzNsT+HGU6sQOGXhBeRzDIQVov 0y8= -----END CERTIFICATE-----Generated at Sat Jun 14 06:27:14 2025 by rpki-client