$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/453c01e0-c333-4283-987c-be2c8b71798c.roa File: 453c01e0-c333-4283-987c-be2c8b71798c.roa (raw, json) Hash identifier: UOhr589w5BHbr6QXhuRfKvFy2IkuhoR5z0Q9XTTDbg8= Subject key identifier: 56:02:67:26:26:C6:AD:31:1B:7A:CA:D5:29:FB:FE:91:03:74:C1:6A Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 1E813981B43E87FF9A2AAA6B6EFC32C439E5BC22 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/453c01e0-c333-4283-987c-be2c8b71798c.roa Signing time: Tue 20 May 2025 00:00:31 +0000 ROA not before: Tue 20 May 2025 00:00:31 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 240f:80ff:80c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 00:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:81:39:81:b4:3e:87:ff:9a:2a:aa:6b:6e:fc:32:c4:39:e5:bc:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: May 20 00:00:31 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=eb04edff26667b05790a1c131b2fa51bb7dd049eae17f9ed914b8e66a2787f8c, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:f8:b5:24:e0:73:b8:e9:eb:46:b4:55:f1:ff: 3d:8a:41:0d:59:db:38:8f:28:10:11:4e:5c:44:4b: b5:4a:fc:ad:6a:f1:94:30:5a:7f:fe:c3:61:b3:37: 89:fd:4b:4e:ae:af:da:dd:a6:98:3b:9e:f3:d2:6a: 3a:d5:d8:33:a6:dd:b6:b5:dd:d4:d2:67:01:b5:95: 89:93:76:f1:ed:81:67:52:df:7d:c9:f9:8e:c5:c7: 1f:cc:05:fd:79:42:b0:53:ba:ee:e0:3a:6a:be:77: eb:21:4b:82:fb:60:84:af:30:c4:18:e7:d2:f4:bf: c4:4b:43:47:7a:3e:10:6b:3b:fc:32:6d:f8:41:e2: 69:c6:40:bb:f4:7f:67:85:21:03:67:d4:80:72:09: 3a:c6:84:27:5c:a7:d0:e3:36:9a:c8:39:dc:18:b6: 1c:67:80:80:83:1a:d8:b9:bc:70:aa:7d:be:01:17: 24:10:05:64:a8:1f:15:17:20:7a:d0:e6:4f:ab:da: fb:d8:5e:76:4e:7f:93:d9:71:bb:8c:ba:8a:10:15: 62:ca:c5:e1:a4:11:d5:d5:50:cf:02:e4:63:00:56: 7c:a5:57:c9:a3:fe:1f:09:f9:f5:7a:db:ac:be:1f: db:0b:64:60:72:47:1d:f7:1e:1b:73:92:d5:90:c4: ab:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:02:67:26:26:C6:AD:31:1B:7A:CA:D5:29:FB:FE:91:03:74:C1:6A X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/453c01e0-c333-4283-987c-be2c8b71798c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:80ff:80c0::/48 Signature Algorithm: sha256WithRSAEncryption 85:ae:36:98:6d:25:3d:d7:8a:76:3b:e9:cb:26:d8:99:ab:06: cc:cf:ef:d2:bf:15:b3:07:af:50:d6:b0:8f:28:f2:7c:3c:3f: 07:ab:a2:10:28:d7:0d:0a:40:7c:40:29:e3:22:d3:d1:93:40: 10:97:a4:52:b8:ca:18:c8:ae:d1:5e:59:f1:1f:0c:26:1e:56: 8a:77:db:1b:9f:3f:60:0a:82:14:58:1e:1b:58:5b:d2:51:cd: f7:63:34:7f:a5:82:ff:4e:bb:37:65:c1:53:c0:e0:71:3b:46: bb:7d:06:c1:37:1d:f8:e7:2f:69:21:ce:1c:07:a0:32:f6:72: 08:6e:e6:d3:b9:fd:c0:18:33:5c:de:51:da:ff:8b:53:36:ff: a4:d1:06:07:2c:e3:68:1d:20:1a:2f:c7:9b:bd:19:95:ce:7b: 7c:bd:da:48:c4:af:7e:da:21:8f:8c:3c:f1:de:a3:9f:c7:1e: 60:f8:93:b9:79:10:b9:d1:f1:54:e2:57:16:06:5b:35:b7:74: 34:cd:a7:33:a8:c3:52:59:c0:b4:cf:11:83:6b:19:56:96:0c: d1:4d:01:9c:cb:3e:59:34:a9:f9:cd:3c:66:5b:11:d2:5f:5e: 56:9c:3a:29:fc:07:74:4f:ca:9d:94:85:ac:1f:f6:c0:97:2f: 05:2b:e9:7d -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUHoE5gbQ+h/+aKqprbvwyxDnlvCIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI1MDUyMDAwMDAzMVoX DTI1MDYyNDIzNTk1OVowejFJMEcGA1UEBRNAZWIwNGVkZmYyNjY2N2IwNTc5MGEx YzEzMWIyZmE1MWJiN2RkMDQ5ZWFlMTdmOWVkOTE0YjhlNjZhMjc4N2Y4YzEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9vi1JOBzuOnrRrRV8f89ikENWds4 jygQEU5cREu1SvytavGUMFp//sNhszeJ/UtOrq/a3aaYO57z0mo61dgzpt22td3U 0mcBtZWJk3bx7YFnUt99yfmOxccfzAX9eUKwU7ru4DpqvnfrIUuC+2CErzDEGOfS 9L/ES0NHej4Qazv8Mm34QeJpxkC79H9nhSEDZ9SAcgk6xoQnXKfQ4zaayDncGLYc Z4CAgxrYubxwqn2+ARckEAVkqB8VFyB60OZPq9r72F52Tn+T2XG7jLqKEBViysXh pBHV1VDPAuRjAFZ8pVfJo/4fCfn1etusvh/bC2Rgckcd9x4bc5LVkMSrfQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFYCZyYmxq0xG3rK1Sn7/pEDdMFqMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzQ1M2MwMWUwLWMzMzMtNDI4My05ODdjLWJlMmM4YjcxNzk4Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJA+A/4DAMA0GCSqGSIb3DQEBCwUAA4IBAQCFrjaYbSU914p2O+nL JtiZqwbMz+/SvxWzB69Q1rCPKPJ8PD8Hq6IQKNcNCkB8QCnjItPRk0AQl6RSuMoY yK7RXlnxHwwmHlaKd9sbnz9gCoIUWB4bWFvSUc33YzR/pYL/Trs3ZcFTwOBxO0a7 fQbBNx345y9pIc4cB6Ay9nIIbubTuf3AGDNc3lHa/4tTNv+k0QYHLONoHSAaL8eb vRmVznt8vdpIxK9+2iGPjDzx3qOfxx5g+JO5eRC50fFU4lcWBls1t3Q0zaczqMNS WcC0zxGDaxlWlgzRTQGcyz5ZNKn5zTxmWxHSX15WnDop/Ad0T8qdlIWsH/bAly8F K+l9 -----END CERTIFICATE-----Generated at Mon Jun 2 04:42:54 2025 by rpki-client