$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/466316d4-3129-402d-9aa7-5d64ed8b2748.roa File: 466316d4-3129-402d-9aa7-5d64ed8b2748.roa (raw, json) Hash identifier: Fv6Cq2qiRRjRas9DxHgtgewLPUh427lcOUYLFJFIFVk= Subject key identifier: 3C:87:73:ED:62:3E:15:5C:79:EE:59:40:D4:7B:C6:38:C6:EC:ED:C3 Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Certificate serial: 49C88D97DAD5AC51D727FE1CE01A0E915B6FA04F Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/466316d4-3129-402d-9aa7-5d64ed8b2748.roa Signing time: Thu 31 Jul 2025 22:36:59 +0000 ROA not before: Thu 31 Jul 2025 22:36:59 +0000 ROA not after: Thu 04 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 159.248.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 00:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:c8:8d:97:da:d5:ac:51:d7:27:fe:1c:e0:1a:0e:91:5b:6f:a0:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Validity Not Before: Jul 31 22:36:59 2025 GMT Not After : Sep 4 23:59:59 2025 GMT Subject: serialNumber=7f73c9dc361c8134861ab1e0fc36f9b896102334b5d6818d37b05cc6f79f2481, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:cc:8f:5d:3a:a3:3a:22:5e:06:1a:eb:8c:27: cf:22:7d:44:8e:b0:d9:21:ac:cc:d4:ba:a7:23:31: da:c7:bb:2d:b1:ba:e0:b6:80:8a:69:90:6e:41:79: 1f:a9:af:69:04:97:69:07:36:40:b2:35:5b:90:7f: 9d:7c:96:27:cd:83:e4:01:07:4d:84:33:ed:f8:14: 2c:4a:9a:0c:a1:49:05:f8:61:51:85:52:f1:ef:e0: 73:54:9a:f2:fe:7b:26:33:e8:3e:34:04:34:17:76: f2:95:1b:39:da:25:4b:b5:03:b0:47:9d:45:2e:16: 96:79:2e:ba:7c:00:0d:31:82:68:38:14:a4:41:9f: 34:68:20:c2:bc:13:31:0f:ef:73:af:0b:8d:47:eb: 8d:e2:a3:55:40:3e:ad:ad:6e:37:79:01:72:09:a1: 01:25:16:31:f9:69:02:b1:5a:4e:48:65:2f:98:a3: eb:d0:d6:c9:75:0b:4b:7f:55:63:73:b3:fa:d8:11: 9d:c4:59:22:db:45:0b:71:a6:dd:3a:58:c1:9c:55: 05:19:d7:8e:6f:38:af:24:c5:73:4f:7a:cc:ae:6d: 82:8e:02:15:3d:39:d7:c3:1e:4c:bf:21:a7:58:2c: 8d:78:4d:4a:ba:4d:50:3c:d7:90:5c:7c:36:80:31: a0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:87:73:ED:62:3E:15:5C:79:EE:59:40:D4:7B:C6:38:C6:EC:ED:C3 X509v3 Authority Key Identifier: keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/466316d4-3129-402d-9aa7-5d64ed8b2748.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.248.0.0/20 Signature Algorithm: sha256WithRSAEncryption 3d:c3:5f:b3:79:f7:0f:41:60:9c:3f:0c:8c:38:72:f7:56:65: 08:ad:52:c7:2a:5c:cd:e2:9b:99:a3:4c:36:5b:c7:e4:0f:5f: 38:e4:b4:5b:7c:bd:0b:2a:0c:22:54:8c:63:4d:c7:80:2e:19: df:84:97:43:69:ca:1c:b9:46:ad:23:54:ef:0a:87:e3:b9:c4: be:3a:50:66:a1:25:83:61:cf:65:a4:48:4e:30:8a:18:dc:25: fc:cf:b1:df:b3:7d:ce:bd:46:e5:9f:d9:3f:cd:55:45:b3:e1: 8f:fb:a3:f0:1a:17:ae:c9:5a:86:3c:1d:3b:9e:66:14:6f:09: 6d:77:df:c9:97:0b:6f:f6:73:24:91:7e:6d:07:a3:8a:2e:e6: 5a:1b:10:ca:1b:43:41:a0:13:a5:3f:ee:f5:ab:2b:4b:b6:a1: 34:8c:34:16:0f:22:64:b2:67:fe:ac:71:2b:a2:a6:9c:67:c7: a8:10:3a:c2:fc:66:09:8e:24:1a:09:a7:a0:d2:83:30:2b:0f: d4:cd:86:f3:78:65:9c:9a:74:18:05:79:24:55:08:32:af:cd: 98:ee:82:a3:5c:35:f2:85:16:af:63:c1:53:0a:66:37:97:fa: 1d:74:27:53:b4:df:95:f7:e6:7a:69:ff:f0:36:e5:90:d9:8d: 9c:16:75:7d -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUSciNl9rVrFHXJ/4c4BoOkVtvoE8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg1M0RDMjIxMjVG QTM0RjM5ODZDQkYxMjQyMkUzNEY5QjlDNjYxQkU3MB4XDTI1MDczMTIyMzY1OVoX DTI1MDkwNDIzNTk1OVowejFJMEcGA1UEBRNAN2Y3M2M5ZGMzNjFjODEzNDg2MWFi MWUwZmMzNmY5Yjg5NjEwMjMzNGI1ZDY4MThkMzdiMDVjYzZmNzlmMjQ4MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsyPXTqjOiJeBhrrjCfPIn1EjrDZ IazM1LqnIzHax7stsbrgtoCKaZBuQXkfqa9pBJdpBzZAsjVbkH+dfJYnzYPkAQdN hDPt+BQsSpoMoUkF+GFRhVLx7+BzVJry/nsmM+g+NAQ0F3bylRs52iVLtQOwR51F LhaWeS66fAANMYJoOBSkQZ80aCDCvBMxD+9zrwuNR+uN4qNVQD6trW43eQFyCaEB JRYx+WkCsVpOSGUvmKPr0NbJdQtLf1Vjc7P62BGdxFki20ULcabdOljBnFUFGdeO bzivJMVzT3rMrm2CjgIVPTnXwx5MvyGnWCyNeE1Kuk1QPNeQXHw2gDGglwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFDyHc+1iPhVcee5ZQNR7xjjG7O3DMB8GA1UdIwQY MBaAFFPcIhJfo085hsvxJCLjT5ucZhvnMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9VOXdpRWwt alR6bUd5X0VrSXVOUG01eG1HLWMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ2NjMxNmQ0LTMxMjktNDAyZC05YWE3LTVkNjRlZDhiMjc0OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvYTViMDFiZGQtY2RlYi00Y2ZjLThjOTMtN2U3MGM1ZTA5MzA2LmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEn/gAMA0GCSqGSIb3DQEBCwUAA4IBAQA9w1+zefcPQWCcPwyMOHL3 VmUIrVLHKlzN4puZo0w2W8fkD1845LRbfL0LKgwiVIxjTceALhnfhJdDacocuUat I1TvCofjucS+OlBmoSWDYc9lpEhOMIoY3CX8z7Hfs33OvUbln9k/zVVFs+GP+6Pw GheuyVqGPB07nmYUbwltd9/Jlwtv9nMkkX5tB6OKLuZaGxDKG0NBoBOlP+71qytL tqE0jDQWDyJksmf+rHEroqacZ8eoEDrC/GYJjiQaCaeg0oMwKw/UzYbzeGWcmnQY BXkkVQgyr82Y7oKjXDXyhRavY8FTCmY3l/oddCdTtN+V9+Z6af/wNuWQ2Y2cFnV9 -----END CERTIFICATE-----Generated at Thu Aug 7 03:52:53 2025 by rpki-client