$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa File: 74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa (raw, json) Hash identifier: uDXloq2/EA9UvfmbL39nWK2kROceUEcyJ/RTb3BJT6I= Subject key identifier: 61:DD:06:87:AB:9C:22:85:FF:8B:2A:46:11:44:51:B4:CE:96:F8:8F Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 4E2AF8723E20ABF0ED8A4173E5954E18638CF50B Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa Signing time: Tue 08 Jul 2025 00:00:15 +0000 ROA not before: Tue 08 Jul 2025 00:00:15 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 00:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:2a:f8:72:3e:20:ab:f0:ed:8a:41:73:e5:95:4e:18:63:8c:f5:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Jul 8 00:00:15 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=4f9b15b6fdbb29094a4c2e65a5c33d06908f45de2d70d1d473097b95bda12dd4, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2a:39:4a:1f:91:a3:d4:cf:4a:54:a3:c5:05: de:5d:a7:ef:ea:74:a2:42:72:93:25:e6:e0:e0:0d: 7e:02:98:c4:51:68:6f:50:52:68:19:32:45:f8:74: 38:b5:b6:09:41:b7:63:80:8e:e2:8c:82:65:d1:46: 24:b4:87:cd:fd:78:55:12:7f:9a:17:41:c1:3e:77: 84:dd:2a:4c:8a:c9:08:c6:51:1a:e4:55:ca:8c:d5: 4b:34:51:53:d7:7c:66:16:84:98:c8:83:51:64:58: 54:e1:b4:15:90:57:22:1c:46:4f:23:52:3a:f7:f1: 55:d8:d6:0d:0f:82:d9:5e:eb:91:fd:91:04:ef:aa: 5f:67:a3:91:4c:e2:76:07:3e:ff:b6:10:b4:83:c3: 8d:e9:ce:6c:8c:a8:f1:8f:7b:66:d2:f2:64:f0:6f: 0d:87:83:8c:1a:99:82:c1:8e:88:b1:6f:24:3d:e8: a6:de:9f:9a:57:a7:61:33:aa:20:76:41:b4:14:31: 78:41:f8:e6:03:25:18:e5:8f:28:e1:97:18:af:98: 19:29:a6:7c:1c:8c:41:b0:d6:da:fd:9b:d0:99:5c: 5e:ad:6c:f8:af:15:55:a6:60:56:1f:af:51:f8:54: 73:a0:2b:5a:be:dc:15:e0:cb:7f:cf:04:03:af:96: db:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:DD:06:87:AB:9C:22:85:FF:8B:2A:46:11:44:51:B4:CE:96:F8:8F X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.240.0/20 Signature Algorithm: sha256WithRSAEncryption ab:62:13:d7:ae:19:d1:ec:e0:b8:cc:c1:8b:ee:21:21:68:4f: 4a:bf:72:20:f3:e7:ec:1e:c4:d2:3d:87:27:58:95:de:3c:73: 18:87:f2:2e:8e:2e:f0:4e:05:d9:4c:0a:21:cb:24:c2:79:af: 2e:c1:99:fd:28:aa:94:9b:f6:7b:94:eb:25:b0:0d:4c:7d:19: aa:b5:e8:22:96:fe:d9:05:60:ca:d7:0e:33:60:f8:42:54:4c: e9:7c:de:08:0c:c0:35:83:d7:40:70:4b:f3:59:d8:5e:4c:5d: 39:a7:45:65:be:e9:bf:e8:a6:b1:0d:1b:a2:3c:fe:34:3d:48: ce:83:73:d2:66:d4:50:67:70:19:b9:53:e9:d5:5c:11:74:bc: af:d1:e4:35:ae:49:de:16:d8:12:24:b2:fb:65:d6:1d:94:9a: a3:51:5d:03:0c:e7:a2:13:d0:a4:e6:f3:1b:13:1d:57:e0:99: 77:fc:55:aa:46:97:c5:42:d4:d8:24:24:4f:16:fe:15:4f:c4: 8c:27:cd:2b:31:0f:83:5f:3c:07:4c:8f:72:f8:c2:9f:23:df: 36:d8:90:ad:f7:62:ca:f7:6c:29:2a:92:75:55:34:aa:a3:f9: 0a:d0:2d:7f:83:64:64:e6:c0:cf:03:74:b6:34:0b:1e:d6:12: 30:b2:dd:6d -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUTir4cj4gq/DtikFz5ZVOGGOM9QswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI1MDcwODAwMDAxNVoX DTI1MDgxMjIzNTk1OVowejFJMEcGA1UEBRNANGY5YjE1YjZmZGJiMjkwOTRhNGMy ZTY1YTVjMzNkMDY5MDhmNDVkZTJkNzBkMWQ0NzMwOTdiOTViZGExMmRkNDEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSo5Sh+Ro9TPSlSjxQXeXafv6nSi QnKTJebg4A1+ApjEUWhvUFJoGTJF+HQ4tbYJQbdjgI7ijIJl0UYktIfN/XhVEn+a F0HBPneE3SpMiskIxlEa5FXKjNVLNFFT13xmFoSYyINRZFhU4bQVkFciHEZPI1I6 9/FV2NYND4LZXuuR/ZEE76pfZ6ORTOJ2Bz7/thC0g8ON6c5sjKjxj3tm0vJk8G8N h4OMGpmCwY6IsW8kPeim3p+aV6dhM6ogdkG0FDF4QfjmAyUY5Y8o4ZcYr5gZKaZ8 HIxBsNba/ZvQmVxerWz4rxVVpmBWH69R+FRzoCtavtwV4Mt/zwQDr5bb8wIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFGHdBoernCKF/4sqRhFEUbTOlviPMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 Lzc0ZWZlOGIzLWQzOWMtNGE4Yi05YjdiLTU5OTRhYTRjOGQ4Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQErynwMA0GCSqGSIb3DQEBCwUAA4IBAQCrYhPXrhnR7OC4zMGL7iEh aE9Kv3Ig8+fsHsTSPYcnWJXePHMYh/Iuji7wTgXZTAohyyTCea8uwZn9KKqUm/Z7 lOslsA1MfRmqtegilv7ZBWDK1w4zYPhCVEzpfN4IDMA1g9dAcEvzWdheTF05p0Vl vum/6KaxDRuiPP40PUjOg3PSZtRQZ3AZuVPp1VwRdLyv0eQ1rkneFtgSJLL7ZdYd lJqjUV0DDOeiE9Ck5vMbEx1X4Jl3/FWqRpfFQtTYJCRPFv4VT8SMJ80rMQ+DXzwH TI9y+MKfI9822JCt92LK92wpKpJ1VTSqo/kK0C1/g2Rk5sDPA3S2NAse1hIwst1t -----END CERTIFICATE-----Generated at Mon Jul 21 23:18:57 2025 by rpki-client