$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8457b23d-d50e-4b48-bd70-aa0e3c7abb86.roa File: 8457b23d-d50e-4b48-bd70-aa0e3c7abb86.roa (raw, json) Hash identifier: fZu8hErGfTNwNeVSL7qaLBHiOB/Zfny374MCe31ilaE= Subject key identifier: 02:42:8E:90:F2:88:24:14:53:80:82:93:0C:30:35:57:0E:8F:12:0F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4B2F271A781294FE1E54A299A3E42AF098902A35 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8457b23d-d50e-4b48-bd70-aa0e3c7abb86.roa Signing time: Wed 30 Jul 2025 17:52:17 +0000 ROA not before: Wed 30 Jul 2025 17:52:17 +0000 ROA not after: Wed 03 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:2f:27:1a:78:12:94:fe:1e:54:a2:99:a3:e4:2a:f0:98:90:2a:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 30 17:52:17 2025 GMT Not After : Sep 3 23:59:59 2025 GMT Subject: serialNumber=20bca08b2fb067f9dc1200364e21a211ac00ff1b0d3f081aa0d75b005cec08b2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f9:8a:2f:13:10:8b:93:cd:9c:d9:9d:8c:69: 8d:37:64:68:ab:09:15:18:a5:f0:fc:e8:78:df:f5: d1:48:1c:69:19:ed:93:0b:db:4d:e7:a3:f7:21:06: 96:e4:83:8a:e0:96:2f:10:92:9f:a7:db:7c:6f:e7: 16:4d:98:40:ec:fd:11:ca:f7:14:10:90:63:a8:71: 2f:26:78:5f:58:fd:5c:33:57:bf:dc:7b:5a:16:e8: 18:88:1b:96:55:34:9b:af:5f:1d:28:06:6f:b6:35: 25:6a:b6:eb:c6:3e:cf:c3:ce:37:a0:93:d0:89:5f: ce:21:7f:4d:c1:0a:6b:49:8b:d2:1a:1b:4d:64:e4: df:96:01:77:59:90:4e:60:4b:ce:32:24:41:15:38: 4f:80:d1:36:17:8e:ae:53:0d:fb:18:02:41:96:3a: 91:48:b4:98:e5:5e:45:79:db:c0:5c:32:4e:d2:a6: d9:63:e9:e2:9c:08:f4:97:49:68:df:4f:a8:d5:66: 66:b5:81:2d:67:6b:c2:3b:f8:15:78:74:b6:70:b0: 08:16:c5:a5:97:94:09:a0:4e:c0:64:80:b7:5e:89: aa:ab:d0:23:c2:86:cd:6b:60:12:41:ce:b7:76:83: 31:f2:2b:89:30:05:ed:6e:5c:86:27:02:7f:5f:99: e1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:42:8E:90:F2:88:24:14:53:80:82:93:0C:30:35:57:0E:8F:12:0F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8457b23d-d50e-4b48-bd70-aa0e3c7abb86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:b000::/40 Signature Algorithm: sha256WithRSAEncryption 41:21:1c:08:77:e5:e2:1e:25:47:a4:ae:04:af:27:47:71:a7: a1:72:52:a5:23:4b:3d:7d:ca:73:09:0b:4b:8d:34:17:38:b2: 61:01:3d:de:a6:9d:d4:6a:c0:a7:a0:89:a5:c7:3b:ee:39:6b: d3:45:f9:5e:6f:bd:a3:64:82:7d:56:70:bd:a1:a9:5f:15:2a: ed:e2:4b:13:a4:21:20:4d:79:47:37:00:a9:6b:5f:dd:a7:d1: b0:0f:c0:4b:29:76:42:90:20:07:5f:6e:1d:f5:2e:ee:52:4a: f7:d1:ce:75:e9:d0:2c:89:0c:24:d6:a3:d4:34:79:2d:c3:08: ba:62:92:39:ac:cb:44:0c:3c:18:93:1f:f3:9b:88:ba:d9:cf: bd:1d:a9:b8:6c:c8:82:a5:62:35:c1:ae:a1:4c:03:f0:95:de: 9e:d4:d7:47:4c:51:da:b2:ba:bf:44:cb:30:08:e4:e5:3e:ca: 3a:24:a1:a9:b3:57:a7:d1:44:72:33:05:27:63:97:31:ae:4c: 53:51:d7:ad:4a:5a:1d:d5:60:55:e6:6e:61:db:af:20:13:0b: df:2c:f1:ab:18:7e:a0:f9:da:b6:65:16:31:74:8e:56:7d:bd: 8b:a1:d4:9b:b8:74:39:68:53:b0:b2:72:52:73:3b:91:7d:29: c8:5a:b1:19 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUSy8nGngSlP4eVKKZo+Qq8JiQKjUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDczMDE3NTIxN1oX DTI1MDkwMzIzNTk1OVowejFJMEcGA1UEBRNAMjBiY2EwOGIyZmIwNjdmOWRjMTIw MDM2NGUyMWEyMTFhYzAwZmYxYjBkM2YwODFhYTBkNzViMDA1Y2VjMDhiMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/mKLxMQi5PNnNmdjGmNN2RoqwkV GKXw/Oh43/XRSBxpGe2TC9tN56P3IQaW5IOK4JYvEJKfp9t8b+cWTZhA7P0RyvcU EJBjqHEvJnhfWP1cM1e/3HtaFugYiBuWVTSbr18dKAZvtjUlarbrxj7Pw843oJPQ iV/OIX9NwQprSYvSGhtNZOTflgF3WZBOYEvOMiRBFThPgNE2F46uUw37GAJBljqR SLSY5V5FedvAXDJO0qbZY+ninAj0l0lo30+o1WZmtYEtZ2vCO/gVeHS2cLAIFsWl l5QJoE7AZIC3Xomqq9AjwobNa2ASQc63doMx8iuJMAXtblyGJwJ/X5nhfwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAJCjpDyiCQUU4CCkwwwNVcOjxIPMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg0NTdiMjNkLWQ1MGUtNGI0OC1iZDcwLWFhMGUzYzdhYmI4Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+7AwDQYJKoZIhvcNAQELBQADggEBAEEhHAh35eIeJUekrgSv J0dxp6FyUqUjSz19ynMJC0uNNBc4smEBPd6mndRqwKegiaXHO+45a9NF+V5vvaNk gn1WcL2hqV8VKu3iSxOkISBNeUc3AKlrX92n0bAPwEspdkKQIAdfbh31Lu5SSvfR znXp0CyJDCTWo9Q0eS3DCLpikjmsy0QMPBiTH/ObiLrZz70dqbhsyIKlYjXBrqFM A/CV3p7U10dMUdqyur9EyzAI5OU+yjokoamzV6fRRHIzBSdjlzGuTFNR161KWh3V YFXmbmHbryATC98s8asYfqD52rZlFjF0jlZ9vYuh1Ju4dDloU7CyclJzO5F9Kcha sRk= -----END CERTIFICATE-----Generated at Mon Aug 4 14:17:02 2025 by rpki-client