$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa File: 74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa (raw, json) Hash identifier: b2ja9xAZSOQ0UudwTblH3Dp1d/9T84irOvR5C6pUGgQ= Subject key identifier: 4A:00:F5:C2:B9:35:8A:71:93:FB:1C:D2:6A:22:64:6C:5D:D5:DC:60 Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 20F708F8085FAF018BE8015D8BB5E60A27122F90 Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa Signing time: Sat 29 Mar 2025 00:00:10 +0000 ROA not before: Sat 29 Mar 2025 00:00:10 +0000 ROA not after: Sat 03 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 00:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:f7:08:f8:08:5f:af:01:8b:e8:01:5d:8b:b5:e6:0a:27:12:2f:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000 Validity Not Before: Mar 29 00:00:10 2025 GMT Not After : May 3 23:59:59 2025 GMT Subject: CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:86:2c:4b:94:b3:e3:a7:7c:c6:4e:bf:a3:e5: 5b:18:e5:f8:36:89:ca:a4:fa:b1:75:ec:0b:1b:43: 5d:7e:51:ea:40:5c:7a:04:fc:46:16:aa:17:85:ab: 6b:da:df:6a:90:ef:b7:02:2e:0d:72:8c:c3:ba:13: 51:f1:47:87:40:34:8e:fd:b8:c6:37:8e:ef:cb:e0: 60:6e:f5:42:7a:45:44:79:24:fe:6f:df:d8:07:c4: e8:91:9f:d2:c8:0b:69:f4:15:da:ab:37:bc:4e:35: 96:07:9f:f4:ed:d6:45:b4:e3:b6:cf:2f:ad:b1:64: e1:55:b4:65:9a:fb:42:70:a3:07:61:7e:64:65:e6: 32:55:b7:ec:a5:df:4e:ee:a2:b6:ee:48:b0:0d:54: d3:f7:b4:dc:0f:80:e4:18:87:b2:21:7a:83:2d:96: 36:d3:9a:71:47:43:84:b5:08:ed:23:a0:3d:a1:8b: 4d:c2:8d:e0:d0:cd:19:67:07:28:eb:70:59:03:dc: ae:37:0c:a4:56:a3:4e:de:64:01:c0:32:1c:4f:62: 65:57:9d:15:f8:37:93:6a:c0:d5:3b:4c:1f:4f:a3: 3e:bb:b3:7d:5f:9c:2d:e3:6c:c4:08:d4:3a:6d:9a: 0a:72:af:af:25:f5:84:1c:74:32:b7:e9:37:a4:a9: 4c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:00:F5:C2:B9:35:8A:71:93:FB:1C:D2:6A:22:64:6C:5D:D5:DC:60 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.240.0/20 Signature Algorithm: sha256WithRSAEncryption 30:4a:66:c1:70:85:98:c9:c1:6f:99:9f:70:94:d4:cc:32:79: e3:df:39:16:85:64:6f:a7:1a:32:a3:03:8c:6c:57:07:e7:a1: 7c:3f:0c:0d:60:1e:c6:db:2e:28:28:c5:f0:92:27:60:df:39: ed:78:01:66:d6:92:7f:07:78:d1:a9:8b:39:fd:e8:a1:78:f0: c9:1d:95:07:44:dc:0d:b0:8f:80:74:bf:0e:bc:41:1e:4c:a5: 81:a3:10:b2:72:df:27:ed:6b:0e:9c:d2:64:58:c8:ed:dd:6c: ef:49:0b:39:12:73:f4:3c:94:0c:ba:5a:17:d9:13:02:df:67: e2:6d:50:31:79:09:0d:fb:cc:e7:10:38:cd:9b:31:4f:e2:7e: 38:8a:b7:28:03:6b:17:7c:78:4d:5d:68:42:6a:00:fa:02:b0: 6b:aa:93:46:b3:8d:40:66:04:c4:b4:06:0a:53:61:1f:93:42: 8f:21:87:bc:3b:dd:a2:25:52:69:53:04:47:77:cd:c8:6f:83: f6:03:21:ee:29:7b:e9:7b:57:7d:1c:d8:8a:ef:b1:0a:34:74: 1e:89:bf:17:65:c1:65:7a:a8:07:aa:ad:be:74:7d:c8:12:19: 29:66:37:ac:99:70:ba:08:b3:ad:b9:44:d0:77:c8:ff:e9:82: d6:c4:f0:04 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUIPcI+AhfrwGL6AFdi7XmCicSL5AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI1MDMyOTAwMDAxMFoX DTI1MDUwMzIzNTk1OVowejFJMEcGA1UEBRNAMmQxM2ZjZmQxYzgwODA5NmFlY2Iy ZjRmMzE5YTE3OTkxMzM0OWMyNWEwZTg5ZDkwMzkwMDczOWVlZGQ5NDdkOTEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoYsS5Sz46d8xk6/o+VbGOX4NonK pPqxdewLG0NdflHqQFx6BPxGFqoXhatr2t9qkO+3Ai4NcozDuhNR8UeHQDSO/bjG N47vy+BgbvVCekVEeST+b9/YB8TokZ/SyAtp9BXaqze8TjWWB5/07dZFtOO2zy+t sWThVbRlmvtCcKMHYX5kZeYyVbfspd9O7qK27kiwDVTT97TcD4DkGIeyIXqDLZY2 05pxR0OEtQjtI6A9oYtNwo3g0M0ZZwco63BZA9yuNwykVqNO3mQBwDIcT2JlV50V +DeTasDVO0wfT6M+u7N9X5wt42zECNQ6bZoKcq+vJfWEHHQyt+k3pKlMkQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFEoA9cK5NYpxk/sc0moiZGxd1dxgMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 Lzc0ZWZlOGIzLWQzOWMtNGE4Yi05YjdiLTU5OTRhYTRjOGQ4Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQErynwMA0GCSqGSIb3DQEBCwUAA4IBAQAwSmbBcIWYycFvmZ9wlNTM Mnnj3zkWhWRvpxoyowOMbFcH56F8PwwNYB7G2y4oKMXwkidg3znteAFm1pJ/B3jR qYs5/eihePDJHZUHRNwNsI+AdL8OvEEeTKWBoxCyct8n7WsOnNJkWMjt3WzvSQs5 EnP0PJQMuloX2RMC32fibVAxeQkN+8znEDjNmzFP4n44ircoA2sXfHhNXWhCagD6 ArBrqpNGs41AZgTEtAYKU2Efk0KPIYe8O92iJVJpUwRHd83Ib4P2AyHuKXvpe1d9 HNiK77EKNHQeib8XZcFleqgHqq2+dH3IEhkpZjesmXC6CLOtuUTQd8j/6YLWxPAE -----END CERTIFICATE-----Generated at Sat Apr 5 10:53:11 2025 by rpki-client