$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/42ad6457-9831-48b3-bc79-de5f9459d461.roa File: 42ad6457-9831-48b3-bc79-de5f9459d461.roa (raw, json) Hash identifier: b8z8npF3UeMT0i1ah9maKUq4iyru4mQ51PBBCJaN7NU= Subject key identifier: 2F:E5:74:89:A8:6E:8B:37:64:7E:9A:A4:B3:1F:5D:2F:A7:2A:4A:3C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 421268FE9CA50F847ACA08AD2D7DCC456C61C38D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/42ad6457-9831-48b3-bc79-de5f9459d461.roa Signing time: Mon 07 Jul 2025 15:40:59 +0000 ROA not before: Mon 07 Jul 2025 15:40:59 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da12:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:12:68:fe:9c:a5:0f:84:7a:ca:08:ad:2d:7d:cc:45:6c:61:c3:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 7 15:40:59 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=6f79e87b265f54dae86e8d44a429d23644a91210135558c152c5f31fe3f01258, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:40:76:a5:bc:52:e5:d9:f3:e6:5a:05:f7:55: 99:c5:1d:b8:67:71:b8:85:45:33:08:8f:31:9b:b1: ad:6d:08:14:8b:64:22:7e:8c:27:37:5a:45:15:c9: bd:09:48:31:8f:ce:d7:05:d0:35:49:b5:17:d1:bc: c5:49:74:f1:78:f1:e0:64:22:50:a5:ac:2c:fb:78: bc:7d:f0:16:67:9f:6d:71:5a:dc:be:ce:c4:91:54: 9e:34:42:5e:2e:58:f5:55:72:fa:16:35:51:eb:bf: b0:3f:e8:ea:29:52:22:46:d6:1a:3a:2b:4e:e2:d9: cc:0c:34:3d:cb:37:83:ee:b9:8d:56:ed:e7:00:b9: 7f:c7:ce:c3:6f:f9:84:16:22:13:1f:c4:42:93:28: 6e:4b:97:67:ac:bc:60:e2:41:68:a8:ac:1b:f1:a3: c8:1a:bd:f1:09:a9:83:b9:6a:c4:b0:61:02:98:e5: 36:c8:2e:90:49:3a:48:0d:d7:d1:44:0c:97:a1:af: d9:23:dd:3b:ab:80:4a:ba:91:16:03:7f:58:25:14: 41:b4:49:15:14:ec:3f:cb:31:c1:e3:2d:c3:de:d2: cf:eb:ef:29:80:c6:08:47:3b:4e:7a:11:b4:66:9b: 7e:8f:0f:79:ba:5a:c8:0e:0d:b9:ea:28:05:e7:1c: a6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:E5:74:89:A8:6E:8B:37:64:7E:9A:A4:B3:1F:5D:2F:A7:2A:4A:3C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/42ad6457-9831-48b3-bc79-de5f9459d461.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da12:8000::/36 Signature Algorithm: sha256WithRSAEncryption 2f:c8:6f:6b:8d:16:b6:aa:34:f5:6d:9a:46:16:3c:7f:40:6a: 71:e6:f1:ef:b7:65:42:97:ae:37:cc:95:0b:bc:74:37:c3:48: 46:9a:b0:86:05:49:5a:d9:87:d1:8d:bb:db:98:ba:09:32:15: bb:77:07:27:8c:66:02:f6:d7:45:1a:ea:50:a1:b3:9f:32:72: af:f7:31:06:bf:0b:7e:6a:af:eb:ce:98:b9:96:a6:4b:bb:dd: e0:1b:14:d7:ae:6e:24:28:49:ac:ac:a4:d5:7f:de:20:fa:09: 49:43:02:2d:8c:21:9c:dd:5e:ac:d8:71:3a:94:6e:4a:88:d7: 1b:04:29:8f:fc:42:94:90:c0:43:d0:c1:a0:70:f2:8e:54:8b: 49:8a:79:97:6a:35:44:4a:01:3c:1d:2a:7d:62:3e:7a:ea:b0: 3b:d4:3d:07:8a:d8:6d:71:71:67:30:99:ad:da:e9:cb:78:bb: 57:23:21:29:03:4f:0f:8e:db:d6:e2:d9:b3:cc:67:bc:3d:79: 44:6c:56:ff:1c:b5:58:c9:f8:a0:e7:b3:4f:6d:63:4d:6b:d4: b0:f3:f7:05:f6:0d:c8:58:91:84:b2:4f:f8:35:f2:55:ec:12: a4:8c:ec:a6:0a:0f:f1:01:f4:36:0e:b8:05:e0:90:83:1b:df: 7f:3b:36:de -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQhJo/pylD4R6ygitLX3MRWxhw40wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcwNzE1NDA1OVoX DTI1MDgxMTIzNTk1OVowejFJMEcGA1UEBRNANmY3OWU4N2IyNjVmNTRkYWU4NmU4 ZDQ0YTQyOWQyMzY0NGE5MTIxMDEzNTU1OGMxNTJjNWYzMWZlM2YwMTI1ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30B2pbxS5dnz5loF91WZxR24Z3G4 hUUzCI8xm7GtbQgUi2QifownN1pFFcm9CUgxj87XBdA1SbUX0bzFSXTxePHgZCJQ paws+3i8ffAWZ59tcVrcvs7EkVSeNEJeLlj1VXL6FjVR67+wP+jqKVIiRtYaOitO 4tnMDDQ9yzeD7rmNVu3nALl/x87Db/mEFiITH8RCkyhuS5dnrLxg4kFoqKwb8aPI Gr3xCamDuWrEsGECmOU2yC6QSTpIDdfRRAyXoa/ZI907q4BKupEWA39YJRRBtEkV FOw/yzHB4y3D3tLP6+8pgMYIRztOehG0Zpt+jw95ulrIDg256igF5xymnQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFC/ldImobos3ZH6apLMfXS+nKko8MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQyYWQ2NDU3LTk4MzEtNDhiMy1iYzc5LWRlNWY5NDU5ZDQ2MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaEoAwDQYJKoZIhvcNAQELBQADggEBAC/Ib2uNFraqNPVtmkYW PH9AanHm8e+3ZUKXrjfMlQu8dDfDSEaasIYFSVrZh9GNu9uYugkyFbt3ByeMZgL2 10Ua6lChs58ycq/3MQa/C35qr+vOmLmWpku73eAbFNeubiQoSayspNV/3iD6CUlD Ai2MIZzdXqzYcTqUbkqI1xsEKY/8QpSQwEPQwaBw8o5Ui0mKeZdqNURKATwdKn1i PnrqsDvUPQeK2G1xcWcwma3a6ct4u1cjISkDTw+O29bi2bPMZ7w9eURsVv8ctVjJ +KDns09tY01r1LDz9wX2DchYkYSyT/g18lXsEqSM7KYKD/EB9DYOuAXgkIMb3387 Nt4= -----END CERTIFICATE-----Generated at Thu Jul 31 01:05:20 2025 by rpki-client