$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/0d6f5c86-57d8-4e0d-8445-30cb122bb4dd.roa File: 0d6f5c86-57d8-4e0d-8445-30cb122bb4dd.roa (raw, json) Hash identifier: vCI88bva643xaM7jYA8g+iFBAaMwwWWCrpkmuTLFCSw= Subject key identifier: A2:0C:1A:0C:1C:7A:7D:08:35:A5:8D:76:43:9E:8A:B1:33:A7:E7:85 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 2A4C973D8C8B91C070F0B5E30531AE4CED76604E Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/0d6f5c86-57d8-4e0d-8445-30cb122bb4dd.roa Signing time: Wed 09 Jul 2025 00:00:47 +0000 ROA not before: Wed 09 Jul 2025 00:00:47 +0000 ROA not after: Wed 13 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 240f:8014::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:4c:97:3d:8c:8b:91:c0:70:f0:b5:e3:05:31:ae:4c:ed:76:60:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Jul 9 00:00:47 2025 GMT Not After : Aug 13 23:59:59 2025 GMT Subject: serialNumber=b9e8d211206f56b37ff705a3d2ea5145fc59a77c19969a5521a90539776aeaba, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fc:b9:70:23:35:16:e5:81:ce:95:39:45:44: 1a:8c:df:eb:30:72:d1:4f:4b:06:ab:ff:7c:4a:5d: f4:6a:74:ab:51:86:bc:37:fe:6c:bc:cd:39:1c:0f: 78:8f:c6:c2:49:df:7f:6a:e0:29:bb:4d:99:1e:fa: b9:4a:e4:45:4a:fd:98:db:f8:38:8d:60:35:72:f1: 99:ed:78:33:84:2a:c3:6e:6e:f4:0c:1a:11:cf:c8: 50:ed:91:b2:4a:7c:1a:f7:40:55:17:7d:97:67:ba: cb:15:64:10:fb:82:91:1a:c1:48:e2:5b:d2:11:81: 95:6f:1e:e3:e2:24:24:c1:73:3c:0c:bb:67:48:52: 04:f9:c2:d6:9d:84:27:57:ac:6f:d2:f0:1c:cc:5b: 9f:f0:7d:98:3c:7b:8a:ec:0a:bd:d3:13:c3:22:fb: 18:42:90:79:2c:55:75:c9:38:37:56:71:5e:9d:9a: 0a:9b:e9:41:7a:ad:27:c1:cd:54:ef:2d:6d:31:3e: e9:f3:1a:e9:36:6e:0a:f2:72:55:c6:84:59:0b:b4: ea:80:56:c3:ef:10:2f:51:01:81:26:cb:09:90:90: c3:87:91:70:75:5c:c3:54:c3:32:5e:36:b2:dc:58: 74:fd:da:61:af:f4:06:0b:c9:7a:f0:99:4f:e4:28: e5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:0C:1A:0C:1C:7A:7D:08:35:A5:8D:76:43:9E:8A:B1:33:A7:E7:85 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/0d6f5c86-57d8-4e0d-8445-30cb122bb4dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:8014::/36 Signature Algorithm: sha256WithRSAEncryption a6:b5:20:85:88:cb:ac:da:9e:a2:32:2a:bf:4a:37:91:e0:43: e0:26:e1:7b:22:86:9f:4a:a1:f4:99:50:b1:44:b4:0e:8b:1d: e7:53:02:80:cf:41:cb:d6:fe:e4:68:69:b6:36:d7:23:d9:18: 8e:0d:2e:24:88:51:99:84:b6:f6:2c:7d:12:10:97:8e:88:6e: 8c:19:42:ac:a4:5d:94:95:78:b4:85:7f:e0:8a:45:7a:2e:d3: 26:cb:39:26:b0:8c:6c:dc:0a:a6:89:7b:f6:f5:43:84:f1:83: 06:56:99:70:5a:a5:68:97:12:6c:f4:db:cd:31:85:36:72:ae: 0f:f4:89:39:bd:c3:3a:57:ab:10:5a:7f:fc:7e:bb:ca:a0:fc: 62:63:1c:59:10:9f:0b:f5:30:52:58:f3:20:f3:e6:2a:09:89: 48:1b:c9:e8:6d:90:8c:73:50:d7:0b:fe:6d:0a:2e:a9:51:4f: 75:0d:4a:a0:8d:ad:d6:f8:f1:12:33:15:1d:9d:05:7f:2e:19: e5:1d:a8:99:81:e5:52:93:ba:5a:48:9e:ab:a1:e1:34:ed:28: 16:82:3c:c0:1f:87:d2:0e:ba:7b:d0:a1:23:f5:2f:6b:dc:3c: 39:17:ba:ca:61:ec:a6:53:21:db:e4:f2:d7:18:ce:40:20:56: 82:29:95:68 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUKkyXPYyLkcBw8LXjBTGuTO12YE4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI1MDcwOTAwMDA0N1oX DTI1MDgxMzIzNTk1OVowejFJMEcGA1UEBRNAYjllOGQyMTEyMDZmNTZiMzdmZjcw NWEzZDJlYTUxNDVmYzU5YTc3YzE5OTY5YTU1MjFhOTA1Mzk3NzZhZWFiYTEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/y5cCM1FuWBzpU5RUQajN/rMHLR T0sGq/98Sl30anSrUYa8N/5svM05HA94j8bCSd9/auApu02ZHvq5SuRFSv2Y2/g4 jWA1cvGZ7XgzhCrDbm70DBoRz8hQ7ZGySnwa90BVF32XZ7rLFWQQ+4KRGsFI4lvS EYGVbx7j4iQkwXM8DLtnSFIE+cLWnYQnV6xv0vAczFuf8H2YPHuK7Aq90xPDIvsY QpB5LFV1yTg3VnFenZoKm+lBeq0nwc1U7y1tMT7p8xrpNm4K8nJVxoRZC7TqgFbD 7xAvUQGBJssJkJDDh5FwdVzDVMMyXjay3Fh0/dphr/QGC8l68JlP5CjlhQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKIMGgwcen0INaWNdkOeirEzp+eFMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzBkNmY1Yzg2LTU3ZDgtNGUwZC04NDQ1LTMwY2IxMjJiYjRkZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJA+AFAAwDQYJKoZIhvcNAQELBQADggEBAKa1IIWIy6zanqIyKr9K N5HgQ+Am4Xsihp9KofSZULFEtA6LHedTAoDPQcvW/uRoabY21yPZGI4NLiSIUZmE tvYsfRIQl46IbowZQqykXZSVeLSFf+CKRXou0ybLOSawjGzcCqaJe/b1Q4TxgwZW mXBapWiXEmz0280xhTZyrg/0iTm9wzpXqxBaf/x+u8qg/GJjHFkQnwv1MFJY8yDz 5ioJiUgbyehtkIxzUNcL/m0KLqlRT3UNSqCNrdb48RIzFR2dBX8uGeUdqJmB5VKT ulpInquh4TTtKBaCPMAfh9IOunvQoSP1L2vcPDkXusph7KZTIdvk8tcYzkAgVoIp lWg= -----END CERTIFICATE-----Generated at Tue Jul 22 19:31:43 2025 by rpki-client