$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43b40021-be8f-464d-b054-4e7db7c9b814.roa File: 43b40021-be8f-464d-b054-4e7db7c9b814.roa (raw, json) Hash identifier: c3tp+y9OzTVc/F9V9zrOoasjxEwm3FacZ/oObB7RClo= Subject key identifier: 14:78:32:40:0F:D1:E1:E0:31:50:6D:79:50:21:13:9B:7B:39:97:5B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 71D2F7A922D97E238B258002892D9DB3D2DB582C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43b40021-be8f-464d-b054-4e7db7c9b814.roa Signing time: Mon 07 Jul 2025 15:40:19 +0000 ROA not before: Mon 07 Jul 2025 15:40:19 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da12:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:d2:f7:a9:22:d9:7e:23:8b:25:80:02:89:2d:9d:b3:d2:db:58:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 7 15:40:19 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=c043a7dc73003d1d3d8cdca23dbf83296415e94e90c6f40552cef4108872349a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a6:29:66:ce:bf:2e:9d:bb:ca:c5:83:ad:c5: 54:3e:9f:4e:27:c2:46:7f:25:50:e2:18:1e:a6:34: 1d:0c:ad:e2:44:23:f8:49:8c:0f:ba:b3:d4:f0:dd: 1b:31:56:c1:3e:9f:16:db:56:46:7b:85:e2:e0:91: 1d:8e:42:02:e4:fa:49:e6:b7:73:25:bf:a3:3a:2c: 8b:b6:26:9d:0d:4b:5e:36:5d:9c:08:4d:57:cb:8e: 09:d8:45:f5:24:9b:6b:46:94:5c:1f:71:b8:3e:bf: 23:93:2a:f2:1d:cc:4e:87:fe:75:b9:75:3d:2c:14: 72:05:5a:49:b4:30:e2:c9:69:8d:2f:99:bf:a3:80: 4e:ea:0b:cf:c7:e2:17:e4:60:4d:e7:a1:8e:b2:57: 89:c4:c7:6f:0d:03:75:27:b6:bc:2e:59:72:ac:77: 27:bd:c2:ad:9c:4a:cb:b1:12:c4:47:5a:4e:41:56: fb:a5:74:93:40:64:31:72:03:24:10:3e:9b:23:e0: c9:b1:9c:db:ae:66:61:ea:e5:b6:8b:f8:d5:15:f0: 64:08:bc:97:49:0e:8d:9c:98:93:15:1e:fd:cd:30: c6:06:de:7e:a0:f7:15:e8:6d:40:d7:ec:3a:ca:cb: b2:f2:0b:c0:64:06:e6:f4:c3:18:3f:9a:a7:7a:b5: 3c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:78:32:40:0F:D1:E1:E0:31:50:6D:79:50:21:13:9B:7B:39:97:5B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43b40021-be8f-464d-b054-4e7db7c9b814.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da12:400::/38 Signature Algorithm: sha256WithRSAEncryption 8e:a4:74:e6:f5:d8:19:7b:b0:38:45:92:99:bb:c0:2b:45:29: e9:b8:b6:75:1c:c0:1d:20:6e:46:b0:eb:3b:6d:e4:13:a8:3d: c6:e1:24:e7:02:cc:dd:35:64:96:79:84:35:b6:1b:a1:53:91: 6d:2e:77:79:c5:f1:75:02:89:25:b4:c7:bb:0b:99:59:df:c5: 0f:4b:cb:78:38:52:ec:33:ac:26:5d:4c:dc:01:26:b4:43:fd: c2:d0:cb:80:29:64:3a:ed:40:44:82:0a:72:1e:2b:1c:49:33: e5:99:bb:f0:eb:7e:d9:22:b6:a1:43:5b:66:72:64:19:e5:48: c4:12:2a:cd:47:db:96:6f:62:56:4c:36:0b:22:be:ab:a5:a9: 1d:d7:e3:5a:41:26:ca:91:7e:de:73:eb:6e:14:34:b5:4d:ed: 18:d4:92:20:dd:18:cc:d2:20:71:b3:1f:24:f4:eb:50:38:41: c3:68:83:2a:c2:03:94:28:3e:6a:73:66:d3:3e:0e:e7:8c:4a: 5c:7e:29:83:8e:06:35:46:42:e1:33:4a:13:36:98:a4:3e:c7: c7:c3:71:81:bb:6b:d1:92:2d:3f:a9:7f:88:42:c5:91:83:29: 56:05:c8:be:78:2c:30:b3:10:2f:f3:d6:0d:88:99:fb:5f:d7: 71:7d:59:17 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUcdL3qSLZfiOLJYACiS2ds9LbWCwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcwNzE1NDAxOVoX DTI1MDgxMTIzNTk1OVowejFJMEcGA1UEBRNAYzA0M2E3ZGM3MzAwM2QxZDNkOGNk Y2EyM2RiZjgzMjk2NDE1ZTk0ZTkwYzZmNDA1NTJjZWY0MTA4ODcyMzQ5YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqYpZs6/Lp27ysWDrcVUPp9OJ8JG fyVQ4hgepjQdDK3iRCP4SYwPurPU8N0bMVbBPp8W21ZGe4Xi4JEdjkIC5PpJ5rdz Jb+jOiyLtiadDUteNl2cCE1Xy44J2EX1JJtrRpRcH3G4Pr8jkyryHcxOh/51uXU9 LBRyBVpJtDDiyWmNL5m/o4BO6gvPx+IX5GBN56GOsleJxMdvDQN1J7a8LllyrHcn vcKtnErLsRLER1pOQVb7pXSTQGQxcgMkED6bI+DJsZzbrmZh6uW2i/jVFfBkCLyX SQ6NnJiTFR79zTDGBt5+oPcV6G1A1+w6ysuy8gvAZAbm9MMYP5qnerU88wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBR4MkAP0eHgMVBteVAhE5t7OZdbMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQzYjQwMDIxLWJlOGYtNDY0ZC1iMDU0LTRlN2RiN2M5YjgxNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaEgQwDQYJKoZIhvcNAQELBQADggEBAI6kdOb12Bl7sDhFkpm7 wCtFKem4tnUcwB0gbkaw6ztt5BOoPcbhJOcCzN01ZJZ5hDW2G6FTkW0ud3nF8XUC iSW0x7sLmVnfxQ9Ly3g4UuwzrCZdTNwBJrRD/cLQy4ApZDrtQESCCnIeKxxJM+WZ u/DrftkitqFDW2ZyZBnlSMQSKs1H25ZvYlZMNgsivqulqR3X41pBJsqRft5z624U NLVN7RjUkiDdGMzSIHGzHyT061A4QcNogyrCA5QoPmpzZtM+DueMSlx+KYOOBjVG QuEzShM2mKQ+x8fDcYG7a9GSLT+pf4hCxZGDKVYFyL54LDCzEC/z1g2Imftf13F9 WRc= -----END CERTIFICATE-----Generated at Thu Jul 31 01:02:17 2025 by rpki-client