$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/a3080b31-8684-4ce8-b4e6-33db63d13627.roa File: a3080b31-8684-4ce8-b4e6-33db63d13627.roa (raw, json) Hash identifier: HxCl6qLPnrDiRpaRI/sBdQKNxSplYMxEG5NL2ocKR7U= Subject key identifier: 1E:30:36:D5:A3:2F:58:4A:8A:F7:EC:17:EB:12:AB:A4:09:94:2E:67 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 50447090C63CCE3CF7CEFB788F7513CD9F9AA954 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/a3080b31-8684-4ce8-b4e6-33db63d13627.roa Signing time: Tue 20 May 2025 00:00:10 +0000 ROA not before: Tue 20 May 2025 00:00:10 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 240f:8060::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 00:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:44:70:90:c6:3c:ce:3c:f7:ce:fb:78:8f:75:13:cd:9f:9a:a9:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: May 20 00:00:10 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=c12fb593b7fc25937b84196c0240d5d540db8dbdf70051086be24479b55c2d9d, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:12:04:f9:17:a0:0d:28:c2:3f:b7:24:57:b7: a5:07:03:a5:bb:6b:54:23:b6:cc:c7:9e:34:fd:07: 69:cc:b4:0f:5b:eb:20:f3:cf:f1:91:2c:a7:20:73: f4:4a:bf:52:08:25:a8:7a:85:d6:30:54:52:f3:07: df:02:29:a4:14:02:72:ef:2a:c6:2b:ab:10:ad:2f: 3b:30:a1:d5:aa:86:82:7a:68:7c:52:99:61:46:73: d0:2f:a6:88:2d:04:8a:3f:09:6f:de:fb:89:7f:eb: ea:0a:f9:d2:b7:e7:58:b4:de:bc:0a:c6:e3:02:5f: dc:28:9f:5a:e1:42:4c:9e:2b:4a:a5:d0:ff:cd:8c: d1:46:ee:ca:d7:8c:20:ed:ae:6b:e4:22:bf:f1:3c: 18:e8:80:87:32:be:ca:e0:aa:77:2a:9d:e3:78:18: 52:7f:48:25:c3:2b:e9:d5:00:61:40:a9:50:2c:7e: b8:be:83:0e:a7:b5:a8:2f:34:9a:2c:ea:d7:2f:5c: ad:77:c3:b3:a6:ec:26:e7:72:18:34:3b:c1:93:c3: e9:6f:1c:9b:f2:71:3b:1e:4b:ec:7d:ac:8f:42:27: 27:2b:3d:c5:93:85:b1:88:24:ee:ce:6e:65:98:3a: f7:b2:73:37:7c:04:d6:ea:b8:ac:db:6b:49:4a:86: c0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:30:36:D5:A3:2F:58:4A:8A:F7:EC:17:EB:12:AB:A4:09:94:2E:67 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/a3080b31-8684-4ce8-b4e6-33db63d13627.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:8060::/32 Signature Algorithm: sha256WithRSAEncryption 5a:4b:a1:b2:9c:e5:61:4d:1c:4a:63:27:11:99:be:8a:ff:7d: 92:61:6a:dc:d0:75:97:c3:46:ef:0a:41:77:26:09:c5:f1:81: 7f:21:06:9b:05:a1:19:c9:82:f1:2f:85:2c:56:80:2c:e2:54: 86:ff:d5:3d:5b:76:f5:87:6a:9d:0e:fc:c1:b6:04:87:df:1c: f5:ea:4f:59:13:e2:4e:8a:58:71:95:02:e8:8d:a3:c4:e3:63: 99:f9:f0:12:a9:b5:2b:d3:45:8f:94:1f:24:11:f5:ec:16:e7: b5:27:ae:bd:95:33:12:70:a6:e9:1e:7a:fb:4b:15:23:96:21: 33:97:5a:b5:7e:6e:4a:21:41:c0:e6:d5:d0:7b:2c:79:eb:23: f1:03:44:9d:ba:ff:3b:d5:7e:c2:9d:68:6c:5f:1e:f8:be:dd: 6d:0e:02:20:6f:c5:02:4a:e7:36:87:16:86:29:fc:cf:df:a6: 06:db:df:6a:b4:15:6d:fa:d9:b7:60:96:8f:67:70:4f:55:82: 40:1a:ad:a4:e3:3b:9c:96:bd:f6:fd:d2:ce:13:43:d0:e6:e5: c8:76:fa:88:82:e7:bd:02:0e:2f:eb:94:46:db:8d:46:9b:4b: 6c:ab:fe:21:5a:d2:47:26:bb:6b:e4:9e:27:b9:53:41:fe:41: 25:da:34:40 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUUERwkMY8zjz3zvt4j3UTzZ+aqVQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI1MDUyMDAwMDAxMFoX DTI1MDYyNDIzNTk1OVowejFJMEcGA1UEBRNAYzEyZmI1OTNiN2ZjMjU5MzdiODQx OTZjMDI0MGQ1ZDU0MGRiOGRiZGY3MDA1MTA4NmJlMjQ0NzliNTVjMmQ5ZDEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxIE+RegDSjCP7ckV7elBwOlu2tU I7bMx540/QdpzLQPW+sg88/xkSynIHP0Sr9SCCWoeoXWMFRS8wffAimkFAJy7yrG K6sQrS87MKHVqoaCemh8UplhRnPQL6aILQSKPwlv3vuJf+vqCvnSt+dYtN68Csbj Al/cKJ9a4UJMnitKpdD/zYzRRu7K14wg7a5r5CK/8TwY6ICHMr7K4Kp3Kp3jeBhS f0glwyvp1QBhQKlQLH64voMOp7WoLzSaLOrXL1ytd8Ozpuwm53IYNDvBk8Ppbxyb 8nE7HkvsfayPQicnKz3Fk4WxiCTuzm5lmDr3snM3fATW6ris22tJSobA/QIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFB4wNtWjL1hKivfsF+sSq6QJlC5nMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 L2EzMDgwYjMxLTg2ODQtNGNlOC1iNGU2LTMzZGI2M2QxMzYyNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJA+AYDANBgkqhkiG9w0BAQsFAAOCAQEAWkuhspzlYU0cSmMnEZm+ iv99kmFq3NB1l8NG7wpBdyYJxfGBfyEGmwWhGcmC8S+FLFaALOJUhv/VPVt29Ydq nQ78wbYEh98c9epPWRPiTopYcZUC6I2jxONjmfnwEqm1K9NFj5QfJBH17BbntSeu vZUzEnCm6R56+0sVI5YhM5datX5uSiFBwObV0Hsseesj8QNEnbr/O9V+wp1obF8e +L7dbQ4CIG/FAkrnNocWhin8z9+mBtvfarQVbfrZt2CWj2dwT1WCQBqtpOM7nJa9 9v3SzhND0OblyHb6iILnvQIOL+uURtuNRptLbKv+IVrSRya7a+SeJ7lTQf5BJdo0 QA== -----END CERTIFICATE-----Generated at Mon Jun 2 04:47:50 2025 by rpki-client