$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/977f90e2-d257-4dde-9740-b0391458d8ed.roa File: 977f90e2-d257-4dde-9740-b0391458d8ed.roa (raw, json) Hash identifier: 09+9mWK4yasmxj2zFp0+y4bgXbIGqRHBatR5r6b7sDY= Subject key identifier: FB:9C:90:3C:3A:6F:BC:1E:16:1A:74:02:8C:F6:EA:75:D0:22:F2:43 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 66D046CA6224503470F00B1FF7C398375D57D117 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/977f90e2-d257-4dde-9740-b0391458d8ed.roa Signing time: Wed 09 Jul 2025 00:00:46 +0000 ROA not before: Wed 09 Jul 2025 00:00:46 +0000 ROA not after: Wed 13 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 240f:8000::/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:d0:46:ca:62:24:50:34:70:f0:0b:1f:f7:c3:98:37:5d:57:d1:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Jul 9 00:00:46 2025 GMT Not After : Aug 13 23:59:59 2025 GMT Subject: serialNumber=7b1895a0f3e714a68adc27b85599012f3ea2af944c80c970cbf92d45e2520be6, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ce:20:a0:fa:94:20:f8:8b:0f:51:e2:c0:f3: 6e:23:63:e6:3f:5c:a4:79:40:77:99:7f:fe:16:2d: 86:2b:e5:0e:4c:f4:76:89:c8:7f:ce:f2:3f:e0:f4: ef:2d:a5:bf:00:b5:e2:98:83:de:d2:8d:b8:9a:d8: 50:8a:c5:67:00:fc:a0:ff:ef:8c:c1:7c:5a:ad:73: fb:46:2d:88:21:69:4d:c3:33:50:a1:47:7b:e2:5c: 71:d1:06:2a:4a:36:32:32:a0:bf:f8:0f:56:bf:56: 58:f0:cd:04:34:0c:8c:87:37:f7:66:00:f7:16:74: 71:78:73:65:2b:41:72:73:29:e2:0a:81:b4:12:75: 03:27:2f:2e:d8:7e:ad:58:ed:20:2a:40:93:d8:f0: aa:c9:24:96:91:2a:a1:0a:aa:f8:df:0f:75:96:bd: 1a:7f:0d:b5:dc:d8:a5:ad:9f:08:2e:33:e0:5c:eb: c2:4d:86:8f:70:54:eb:f7:2b:2f:ba:af:00:29:7b: 9f:4e:f5:0e:a4:16:2f:5b:1e:f8:99:1b:ff:39:7f: 66:9a:79:3a:b5:45:24:90:7b:a7:34:88:a8:d1:c3: 6a:9d:4a:51:d8:5c:8e:93:9d:12:03:c9:52:66:f1: 88:d3:c1:4c:3b:20:40:2d:6d:f7:fa:87:95:44:77: 46:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:9C:90:3C:3A:6F:BC:1E:16:1A:74:02:8C:F6:EA:75:D0:22:F2:43 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/977f90e2-d257-4dde-9740-b0391458d8ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:8000::/24 Signature Algorithm: sha256WithRSAEncryption 34:e4:f8:0f:ee:43:6e:d2:61:1f:8c:56:f0:2a:1e:ea:44:a3: 7f:f0:a5:f0:a0:b9:1e:ca:f2:a4:9a:f5:63:24:14:19:32:90: 19:74:90:43:23:5f:1c:13:17:0d:19:72:96:b3:ee:9c:22:1a: fe:c1:93:f2:e7:86:dc:63:76:b4:0c:95:2d:28:47:18:5c:99: aa:b4:ad:4b:26:24:1b:60:c1:a1:0d:b0:68:1c:34:cf:c9:19: 85:2c:1d:75:e3:a7:3e:c1:69:a2:83:a3:d3:85:8f:7a:99:a1: fb:1a:92:72:b5:a2:b9:51:b0:29:64:01:5f:9a:7f:9f:c5:b5: 5e:bf:f9:8b:8d:9f:e4:ad:91:2e:21:e1:14:20:92:3a:69:97: 42:68:11:8f:f2:36:4f:6e:d8:0b:ed:7d:de:2e:f8:44:ef:2f: 56:35:00:a1:38:44:e5:43:de:35:c6:d4:cf:0d:5d:51:6b:38: 70:03:de:c6:f8:29:22:fd:51:f4:92:f6:ef:d3:d1:51:01:24: bb:0b:3e:43:bc:fb:a5:fa:a9:ef:b7:1b:17:ed:f2:57:34:3a: 98:aa:21:6e:c0:3a:d0:5e:e4:9a:f5:60:4f:6e:c9:2a:0d:67: c6:fa:6a:87:59:4a:dd:54:01:08:51:41:83:81:6b:84:8e:7a: 2f:aa:3a:97 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUZtBGymIkUDRw8Asf98OYN11X0RcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI1MDcwOTAwMDA0NloX DTI1MDgxMzIzNTk1OVowejFJMEcGA1UEBRNAN2IxODk1YTBmM2U3MTRhNjhhZGMy N2I4NTU5OTAxMmYzZWEyYWY5NDRjODBjOTcwY2JmOTJkNDVlMjUyMGJlNjEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM4goPqUIPiLD1HiwPNuI2PmP1yk eUB3mX/+Fi2GK+UOTPR2ich/zvI/4PTvLaW/ALXimIPe0o24mthQisVnAPyg/++M wXxarXP7Ri2IIWlNwzNQoUd74lxx0QYqSjYyMqC/+A9Wv1ZY8M0ENAyMhzf3ZgD3 FnRxeHNlK0FycyniCoG0EnUDJy8u2H6tWO0gKkCT2PCqySSWkSqhCqr43w91lr0a fw213NilrZ8ILjPgXOvCTYaPcFTr9ysvuq8AKXufTvUOpBYvWx74mRv/OX9mmnk6 tUUkkHunNIio0cNqnUpR2FyOk50SA8lSZvGI08FMOyBALW33+oeVRHdGmwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFPuckDw6b7weFhp0Aoz26nXQIvJDMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 Lzk3N2Y5MGUyLWQyNTctNGRkZS05NzQwLWIwMzkxNDU4ZDhlZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAAjAGAwQAJA+AMA0GCSqGSIb3DQEBCwUAA4IBAQA05PgP7kNu0mEfjFbwKh7q RKN/8KXwoLkeyvKkmvVjJBQZMpAZdJBDI18cExcNGXKWs+6cIhr+wZPy54bcY3a0 DJUtKEcYXJmqtK1LJiQbYMGhDbBoHDTPyRmFLB1146c+wWmig6PThY96maH7GpJy taK5UbApZAFfmn+fxbVev/mLjZ/krZEuIeEUIJI6aZdCaBGP8jZPbtgL7X3eLvhE 7y9WNQChOETlQ941xtTPDV1RazhwA97G+Cki/VH0kvbv09FRASS7Cz5DvPul+qnv txsX7fJXNDqYqiFuwDrQXuSa9WBPbskqDWfG+mqHWUrdVAEIUUGDgWuEjnovqjqX -----END CERTIFICATE-----Generated at Tue Jul 22 19:31:23 2025 by rpki-client