$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/29fe4454-f7a8-42fd-8c35-77a6d6f8e60f.roa File: 29fe4454-f7a8-42fd-8c35-77a6d6f8e60f.roa (raw, json) Hash identifier: YfY68y7KJEM0kK+UuOzkavt/I/unpX1qvofQrrhAVGE= Subject key identifier: D6:C4:42:F2:F4:7F:2A:59:DA:4D:F9:BD:E5:8E:3C:EA:80:A1:79:A8 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 449ED40653AA0ED9261B84B8AC815D421BA03FC5 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/29fe4454-f7a8-42fd-8c35-77a6d6f8e60f.roa Signing time: Wed 09 Jul 2025 00:00:29 +0000 ROA not before: Wed 09 Jul 2025 00:00:29 +0000 ROA not after: Wed 13 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 240f:8018:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:9e:d4:06:53:aa:0e:d9:26:1b:84:b8:ac:81:5d:42:1b:a0:3f:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Jul 9 00:00:29 2025 GMT Not After : Aug 13 23:59:59 2025 GMT Subject: serialNumber=fd1b092610f259c4b9e1bd9fa477d037cb7f86793446557bd493dd8405e09ff2, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:31:ab:58:d9:d0:fa:57:a5:b0:36:7b:33:67: 3a:16:1a:5d:c9:2e:b9:28:e3:5f:e0:ce:10:00:76: e2:5a:24:1d:19:a5:67:40:0b:18:77:78:03:b4:83: 07:3f:b1:82:58:a8:1f:ae:7e:df:32:d5:2d:28:85: f0:2a:74:6d:b7:a8:c7:aa:80:31:39:b9:a9:33:ef: 53:bd:e0:73:0c:1a:2d:d6:a1:54:30:55:36:13:6b: ff:c3:2f:fb:57:0c:5d:c5:56:bf:e7:aa:0e:5c:5a: 71:5a:1a:ca:be:fd:0d:29:c3:21:27:5b:eb:4a:88: ae:ef:30:8f:37:40:eb:c6:53:8c:81:2b:40:aa:a9: b6:fb:87:67:a9:82:07:34:f1:82:c1:68:41:a0:97: 90:87:1d:75:2e:dd:03:2c:31:5a:fd:c5:a6:0a:8c: ad:77:f4:98:d1:e0:57:82:9d:bc:1d:63:45:82:76: a2:f0:e3:07:df:cf:07:01:e7:37:13:e7:ac:6f:22: 04:3c:84:f7:ff:00:f3:de:b9:bd:30:de:20:93:49: 65:e8:7a:2b:e6:9c:77:17:30:5d:ca:3b:84:b2:6f: c2:3d:cb:3c:98:a5:d0:a1:2c:ea:f5:65:c3:80:11: 77:df:3b:24:5c:f6:d0:bc:77:34:93:a0:5d:12:15: ba:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C4:42:F2:F4:7F:2A:59:DA:4D:F9:BD:E5:8E:3C:EA:80:A1:79:A8 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/29fe4454-f7a8-42fd-8c35-77a6d6f8e60f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:8018:c00::/38 Signature Algorithm: sha256WithRSAEncryption 36:3d:e2:fd:f6:19:bb:d6:95:50:15:86:f3:0c:a4:11:0c:b5: de:c3:46:1f:8d:be:9e:97:fc:62:bc:53:d5:a7:41:2b:d0:8e: 3d:45:02:61:5e:a6:1c:37:cf:13:e6:a2:85:9a:97:69:27:4b: 26:c1:8e:e2:59:80:50:4a:75:27:44:bd:58:3d:5f:e3:31:7a: 95:bd:ba:cb:d2:f0:71:04:d4:70:cd:16:9e:36:69:bc:d8:7a: 56:3f:e2:1e:8f:da:b8:8a:1b:cb:9a:fc:28:0e:14:d4:0e:5a: 56:97:55:02:83:fa:26:da:b1:d7:47:c5:52:88:a6:bc:71:d1: 8b:4a:01:ac:96:6e:6a:96:e9:f3:04:68:e3:2a:fd:42:49:20: 65:07:47:1c:85:2b:38:c9:64:53:c7:0e:9e:d5:b7:30:25:ca: e2:31:20:b7:5a:a7:de:66:13:fe:11:43:6a:87:5b:26:16:ea: 17:54:97:e7:d6:b3:94:15:32:e5:db:d8:a1:44:d1:db:58:05: 68:82:d7:02:ae:2d:d0:a3:6e:94:e6:a1:a7:48:00:22:b1:28: 92:7e:27:d3:9a:74:0e:99:76:84:90:37:92:53:43:8d:86:c8: 4f:52:21:1e:ff:22:bb:b1:43:b4:6b:10:77:10:92:4c:c3:4c: 93:6d:c8:52 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIURJ7UBlOqDtkmG4S4rIFdQhugP8UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI1MDcwOTAwMDAyOVoX DTI1MDgxMzIzNTk1OVowejFJMEcGA1UEBRNAZmQxYjA5MjYxMGYyNTljNGI5ZTFi ZDlmYTQ3N2QwMzdjYjdmODY3OTM0NDY1NTdiZDQ5M2RkODQwNWUwOWZmMjEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjGrWNnQ+lelsDZ7M2c6FhpdyS65 KONf4M4QAHbiWiQdGaVnQAsYd3gDtIMHP7GCWKgfrn7fMtUtKIXwKnRtt6jHqoAx ObmpM+9TveBzDBot1qFUMFU2E2v/wy/7VwxdxVa/56oOXFpxWhrKvv0NKcMhJ1vr Soiu7zCPN0DrxlOMgStAqqm2+4dnqYIHNPGCwWhBoJeQhx11Lt0DLDFa/cWmCoyt d/SY0eBXgp28HWNFgnai8OMH388HAec3E+esbyIEPIT3/wDz3rm9MN4gk0ll6Hor 5px3FzBdyjuEsm/CPcs8mKXQoSzq9WXDgBF33zskXPbQvHc0k6BdEhW6kwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNbEQvL0fypZ2k35veWOPOqAoXmoMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzI5ZmU0NDU0LWY3YTgtNDJmZC04YzM1LTc3YTZkNmY4ZTYwZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJA+AGAwwDQYJKoZIhvcNAQELBQADggEBADY94v32GbvWlVAVhvMM pBEMtd7DRh+Nvp6X/GK8U9WnQSvQjj1FAmFephw3zxPmooWal2knSybBjuJZgFBK dSdEvVg9X+MxepW9usvS8HEE1HDNFp42abzYelY/4h6P2riKG8ua/CgOFNQOWlaX VQKD+ibasddHxVKIprxx0YtKAayWbmqW6fMEaOMq/UJJIGUHRxyFKzjJZFPHDp7V tzAlyuIxILdap95mE/4RQ2qHWyYW6hdUl+fWs5QVMuXb2KFE0dtYBWiC1wKuLdCj bpTmoadIACKxKJJ+J9OadA6ZdoSQN5JTQ42GyE9SIR7/IruxQ7RrEHcQkkzDTJNt yFI= -----END CERTIFICATE-----Generated at Tue Jul 22 19:31:22 2025 by rpki-client