$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/ab4ad185-2bfb-4281-9e23-00a2ab4b6e8f.roa File: ab4ad185-2bfb-4281-9e23-00a2ab4b6e8f.roa (raw, json) Hash identifier: AACeNp7Obrt8ZwmSJg9Edtb3SszRww+Ko8kYBnXMO0Y= Subject key identifier: 68:79:53:E3:CB:3F:0B:5F:FB:3B:27:FB:BF:CC:E4:72:72:F1:6E:C8 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 03B3523DB0EC988AB37752A623A8B17BF85E01EB Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/ab4ad185-2bfb-4281-9e23-00a2ab4b6e8f.roa Signing time: Wed 09 Jul 2025 00:00:19 +0000 ROA not before: Wed 09 Jul 2025 00:00:19 +0000 ROA not after: Wed 13 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 240f:80ff:8020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:b3:52:3d:b0:ec:98:8a:b3:77:52:a6:23:a8:b1:7b:f8:5e:01:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Jul 9 00:00:19 2025 GMT Not After : Aug 13 23:59:59 2025 GMT Subject: serialNumber=055ad7fdbc9bb85a93e0be6089e2b7aa26573ebfb4ffa88f9d44a4ab3166598a, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f8:06:39:12:aa:6e:ed:c5:15:ea:e8:e4:e4: 39:64:08:74:67:b9:67:2b:18:f7:5a:d3:56:9a:77: 9a:aa:5f:f1:c1:3a:44:3c:0b:49:14:9d:58:0f:48: 08:7e:03:07:d4:2c:16:25:30:b3:49:01:d8:b0:c4: 9f:c7:5d:e1:cb:af:38:f3:f5:02:3d:84:f7:e9:4f: 51:3c:35:3b:1b:c5:ba:ef:bb:b5:75:8f:d8:e3:5f: 4e:e7:df:98:ae:80:7e:b8:9a:13:28:29:4b:be:68: 4a:60:ef:37:ae:dd:d6:12:bb:10:4a:67:6c:36:3a: f8:a1:cc:cc:42:54:d3:1d:bc:db:2a:52:b1:8d:79: 89:48:ac:2d:e4:08:26:db:5a:e2:70:93:6a:9b:c2: 64:af:28:d1:8c:d5:70:15:d3:e8:0d:d9:ec:24:a2: d0:a7:4a:38:af:e5:3f:1e:b9:8a:d7:e0:91:cd:d4: a7:a5:d2:69:b9:47:e4:52:5e:7e:00:a5:d3:0c:53: ac:d9:5f:c8:82:bc:fe:52:69:6f:a2:eb:2f:5e:a2: 2f:0e:8e:d0:fd:90:bd:41:af:83:4d:9a:64:e9:8a: 51:52:83:36:0e:0e:b2:2f:76:55:eb:f2:b2:02:39: f7:1c:9f:43:84:ef:37:2e:77:e1:95:a0:68:7b:48: 0e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:79:53:E3:CB:3F:0B:5F:FB:3B:27:FB:BF:CC:E4:72:72:F1:6E:C8 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/ab4ad185-2bfb-4281-9e23-00a2ab4b6e8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:80ff:8020::/48 Signature Algorithm: sha256WithRSAEncryption 3b:96:78:91:5e:3f:47:44:26:86:b5:f4:78:21:c3:f2:b8:38: ab:59:a5:b1:80:d9:98:6c:86:80:ee:87:30:11:2f:5a:ca:0f: 21:a8:39:ce:e3:f9:e9:b5:df:0c:30:26:85:8f:e2:36:63:de: b3:a7:ea:65:f6:00:ef:c6:8f:6e:f0:82:2a:99:9c:3d:1b:b2: 06:f7:b1:f3:cb:e6:60:09:6c:fe:0b:cf:d2:bb:da:6c:c5:43: 40:94:0b:13:de:2d:4f:be:6b:60:db:0b:41:c6:52:10:ac:d2: 62:83:6e:04:89:39:7f:5c:37:73:25:27:cd:50:2c:38:cc:4a: 4c:a0:2d:3c:4b:b4:f3:1f:6e:87:15:ee:49:61:df:7a:c0:f2: 65:83:24:41:6e:de:27:fd:a7:92:6a:1a:58:2e:4d:36:fa:0f: be:62:ff:24:29:37:98:8d:80:0f:2a:6e:de:ee:06:56:50:46: ad:a3:6b:7a:e6:bb:1a:26:e4:2b:aa:bd:8f:da:c5:00:fe:a3: 4e:21:f3:a8:ae:fc:54:62:52:3c:13:6e:5f:2e:6e:57:a6:8f: 25:01:35:a1:55:3a:c7:fd:16:d6:2f:98:06:ed:ec:0f:5a:4b: 06:2f:5b:35:22:25:bb:17:39:c1:67:e3:af:a7:db:29:38:8c: a8:9f:08:d9 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUA7NSPbDsmIqzd1KmI6ixe/heAeswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI1MDcwOTAwMDAxOVoX DTI1MDgxMzIzNTk1OVowejFJMEcGA1UEBRNAMDU1YWQ3ZmRiYzliYjg1YTkzZTBi ZTYwODllMmI3YWEyNjU3M2ViZmI0ZmZhODhmOWQ0NGE0YWIzMTY2NTk4YTEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfgGORKqbu3FFero5OQ5ZAh0Z7ln Kxj3WtNWmneaql/xwTpEPAtJFJ1YD0gIfgMH1CwWJTCzSQHYsMSfx13hy6848/UC PYT36U9RPDU7G8W677u1dY/Y419O59+YroB+uJoTKClLvmhKYO83rt3WErsQSmds Njr4oczMQlTTHbzbKlKxjXmJSKwt5Agm21ricJNqm8JkryjRjNVwFdPoDdnsJKLQ p0o4r+U/HrmK1+CRzdSnpdJpuUfkUl5+AKXTDFOs2V/Igrz+UmlvousvXqIvDo7Q /ZC9Qa+DTZpk6YpRUoM2Dg6yL3ZV6/KyAjn3HJ9DhO83LnfhlaBoe0gOCQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGh5U+PLPwtf+zsn+7/M5HJy8W7IMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 L2FiNGFkMTg1LTJiZmItNDI4MS05ZTIzLTAwYTJhYjRiNmU4Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJA+A/4AgMA0GCSqGSIb3DQEBCwUAA4IBAQA7lniRXj9HRCaGtfR4 IcPyuDirWaWxgNmYbIaA7ocwES9ayg8hqDnO4/nptd8MMCaFj+I2Y96zp+pl9gDv xo9u8IIqmZw9G7IG97Hzy+ZgCWz+C8/Su9psxUNAlAsT3i1Pvmtg2wtBxlIQrNJi g24EiTl/XDdzJSfNUCw4zEpMoC08S7TzH26HFe5JYd96wPJlgyRBbt4n/aeSahpY Lk02+g++Yv8kKTeYjYAPKm7e7gZWUEato2t65rsaJuQrqr2P2sUA/qNOIfOorvxU YlI8E25fLm5Xpo8lATWhVTrH/RbWL5gG7ewPWksGL1s1IiW7FznBZ+Ovp9spOIyo nwjZ -----END CERTIFICATE-----Generated at Tue Jul 22 11:45:06 2025 by rpki-client