$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/0b0c2d18-2b42-4e53-9e6a-d6f7d5dc2334.roa File: 0b0c2d18-2b42-4e53-9e6a-d6f7d5dc2334.roa (raw, json) Hash identifier: ie2o42aSKCyNP9ZTI7XVt3/jAd6pVFmZLYciu0GTo44= Subject key identifier: 7E:6D:9E:9C:58:1E:13:F3:1C:0E:74:13:55:A0:A0:44:1B:07:7D:A7 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 7EBD0B046C6E78924590958ECF8436E7C609D6A2 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/0b0c2d18-2b42-4e53-9e6a-d6f7d5dc2334.roa Signing time: Tue 10 Jun 2025 16:00:03 +0000 ROA not before: Tue 10 Jun 2025 16:00:03 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2403:b300:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 00:03:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:bd:0b:04:6c:6e:78:92:45:90:95:8e:cf:84:36:e7:c6:09:d6:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Jun 10 16:00:03 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=4bd471fb2bdd82321fbee4a992ed8e421d5ac6acfe7cd555b7d9d8b1f45f9b79, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c9:da:f7:31:24:1e:85:1e:8e:ee:16:3c:c3: 4f:9a:9b:bc:c6:a1:9d:c1:cc:55:b7:2f:6d:32:14: 28:a0:37:51:e5:b7:23:4f:82:2e:e7:ef:20:8b:41: ae:29:a5:ef:a9:7e:b5:2b:ea:d9:e0:2b:e3:1e:f0: 5b:01:59:63:ae:f6:6b:74:6c:6e:01:3c:57:13:6b: 62:6c:a2:8c:90:38:c1:68:37:31:54:d4:8e:22:1f: b2:33:92:74:56:04:7a:76:13:36:f5:f0:70:6e:95: 6b:58:f1:bf:d4:16:75:84:a0:cd:f7:e4:0e:1f:fd: a7:14:16:a3:b6:3d:78:1a:6e:93:0d:33:7b:f1:71: 8c:6a:64:99:5e:6e:1b:3a:ef:b4:14:2e:2f:16:c9: f2:18:93:ef:d0:94:9f:6d:78:4c:0f:4f:26:b6:13: 38:e2:ef:79:d2:11:fc:05:ee:0b:a5:18:94:22:28: b4:47:6f:f2:a6:48:2f:75:7a:bb:4c:bc:e8:34:8e: 5e:be:6c:1e:1f:94:ab:cc:09:91:29:a5:7d:55:7d: 8f:45:10:d4:da:c3:55:fc:e6:28:91:cc:da:4b:93: 62:18:c6:32:c5:a7:9a:56:ff:8c:d8:e2:b7:52:f4: a6:95:f1:e4:dd:6d:c7:9b:7b:89:e6:3e:a5:6f:90: 69:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:6D:9E:9C:58:1E:13:F3:1C:0E:74:13:55:A0:A0:44:1B:07:7D:A7 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/0b0c2d18-2b42-4e53-9e6a-d6f7d5dc2334.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b300:1000::/48 Signature Algorithm: sha256WithRSAEncryption 17:e3:7c:32:9d:77:90:fb:8c:c6:05:fa:52:8f:a1:95:f1:60: 25:c5:39:b0:92:5a:cb:22:ae:6d:2c:6d:d6:3d:6e:1a:8d:f0: e9:df:bd:dd:66:68:4e:3a:29:5e:23:15:22:30:4a:d3:fa:f4: 9b:2a:98:5c:ac:65:e8:aa:82:1e:d7:a8:ed:66:56:82:01:87: 07:66:af:f3:6d:2a:31:14:2d:4a:50:40:e9:3b:9a:19:26:24: b4:b1:f7:1e:ff:78:c2:35:a7:6d:9c:2e:b6:31:22:7e:b8:f3: 3f:f0:a0:53:41:80:6e:70:99:02:31:05:37:b9:ae:91:e4:4d: e5:e7:29:b6:41:7b:23:20:de:57:14:9a:75:8c:5d:4f:4a:3f: 9b:6e:ae:e6:07:60:59:f2:f2:a9:4b:b2:fb:0f:41:7c:1f:d4: 4d:60:e5:3d:53:6e:84:f3:b5:92:27:6f:a4:d9:c6:94:bc:2c: 3f:f3:6c:54:d2:1b:89:fa:b6:6e:a2:f9:0d:86:6a:13:e9:df: 48:03:ca:04:c5:8a:70:c9:e5:e9:47:48:b9:32:86:5a:20:69: 36:1c:16:42:22:52:a4:04:bd:f3:19:3e:04:72:0e:5f:65:f1: cd:6c:54:b6:0f:a7:e6:02:a7:1b:c1:bd:f9:21:a9:c1:c1:79: 28:78:6d:95 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUfr0LBGxueJJFkJWOz4Q258YJ1qIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI1MDYxMDE2MDAwM1oX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNANGJkNDcxZmIyYmRkODIzMjFmYmVl NGE5OTJlZDhlNDIxZDVhYzZhY2ZlN2NkNTU1YjdkOWQ4YjFmNDVmOWI3OTEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcna9zEkHoUeju4WPMNPmpu8xqGd wcxVty9tMhQooDdR5bcjT4Iu5+8gi0GuKaXvqX61K+rZ4CvjHvBbAVljrvZrdGxu ATxXE2tibKKMkDjBaDcxVNSOIh+yM5J0VgR6dhM29fBwbpVrWPG/1BZ1hKDN9+QO H/2nFBajtj14Gm6TDTN78XGMamSZXm4bOu+0FC4vFsnyGJPv0JSfbXhMD08mthM4 4u950hH8Be4LpRiUIii0R2/ypkgvdXq7TLzoNI5evmweH5SrzAmRKaV9VX2PRRDU 2sNV/OYokczaS5NiGMYyxaeaVv+M2OK3UvSmlfHk3W3Hm3uJ5j6lb5BpiQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFH5tnpxYHhPzHA50E1WgoEQbB32nMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvNzA4YWFmYWYtMDBiNC00ODViLTg1NGMtMGIzMmNhMzBmNTdi LzBiMGMyZDE4LTJiNDItNGU1My05ZTZhLWQ2ZjdkNWRjMjMzNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMy Y2EzMGY1N2IvMTJlNTkwMDEtMzVhYy00YWJmLTg1OGYtMzdiOTU1YTI0YjNmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAOzABAAMA0GCSqGSIb3DQEBCwUAA4IBAQAX43wynXeQ+4zGBfpS j6GV8WAlxTmwklrLIq5tLG3WPW4ajfDp373dZmhOOileIxUiMErT+vSbKphcrGXo qoIe16jtZlaCAYcHZq/zbSoxFC1KUEDpO5oZJiS0sfce/3jCNadtnC62MSJ+uPM/ 8KBTQYBucJkCMQU3ua6R5E3l5ym2QXsjIN5XFJp1jF1PSj+bbq7mB2BZ8vKpS7L7 D0F8H9RNYOU9U26E87WSJ2+k2caUvCw/82xU0huJ+rZuovkNhmoT6d9IA8oExYpw yeXpR0i5MoZaIGk2HBZCIlKkBL3zGT4Ecg5fZfHNbFS2D6fmAqcbwb35IanBwXko eG2V -----END CERTIFICATE-----Generated at Mon Jun 30 19:43:21 2025 by rpki-client