$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e5ffe65e-7287-4628-8759-7c141866ee12.roa File: e5ffe65e-7287-4628-8759-7c141866ee12.roa (raw, json) Hash identifier: d+4S0jPtrVh/DC2I8KLzybMGjBJw30P/AlaDwGRj+W4= Subject key identifier: 86:2F:DB:7C:49:E2:D2:F8:75:98:36:C9:03:D0:98:78:46:BB:BF:34 Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Certificate serial: 454E80EA8F5EC8B90FC42C8B489EAD8ED6E8A07D Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e5ffe65e-7287-4628-8759-7c141866ee12.roa Signing time: Mon 04 Aug 2025 15:00:18 +0000 ROA not before: Mon 04 Aug 2025 15:00:18 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 159.248.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 00:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:4e:80:ea:8f:5e:c8:b9:0f:c4:2c:8b:48:9e:ad:8e:d6:e8:a0:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Validity Not Before: Aug 4 15:00:18 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=41f045795169ac2dd28503dcb3aecaab140ce5b4e80553eb7782aa1c319b860e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:75:34:82:38:21:2f:6e:27:43:50:d0:2e:23: 43:96:ac:bf:79:3e:18:cf:6a:48:ce:b1:ac:bb:ca: 54:b9:5f:dd:52:7d:3a:0b:00:c2:b6:60:c1:28:56: f6:6d:5d:e4:f9:bd:fb:c3:56:14:80:82:d1:e4:c4: ba:34:9c:ab:d0:53:7a:cd:7a:22:3e:f6:dc:f1:91: 3f:64:05:d1:32:17:6c:fb:7e:86:bb:44:ba:a7:f2: c3:42:55:50:f3:0b:6e:e0:84:6f:50:98:85:7f:8c: c8:86:a8:9a:0a:24:07:a7:da:1d:49:a4:0b:cd:d7: 85:3d:de:e2:f7:ed:a7:7c:29:fd:29:fb:02:36:c1: 37:0e:01:59:8d:b5:d4:97:8e:ef:79:24:00:ff:ac: 29:57:21:90:46:82:24:f4:8c:b2:16:1d:62:04:71: 13:b4:f3:b9:58:fd:19:62:98:8a:99:61:f5:da:11: 71:99:89:bf:1b:09:be:2d:a0:50:ff:e3:e5:e0:70: 52:62:12:0c:2c:97:1f:10:70:bd:ba:f4:61:e2:fe: 88:c5:92:8e:92:55:09:b6:8c:31:76:78:5e:ec:df: d3:90:22:7d:a4:85:30:ca:f2:48:0f:db:90:73:7f: b0:5f:06:26:e3:c2:ce:ea:fb:ef:0a:f5:04:1f:e9: db:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2F:DB:7C:49:E2:D2:F8:75:98:36:C9:03:D0:98:78:46:BB:BF:34 X509v3 Authority Key Identifier: keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e5ffe65e-7287-4628-8759-7c141866ee12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.248.0.0/16 Signature Algorithm: sha256WithRSAEncryption 22:66:d8:b1:a7:6f:38:70:74:b7:32:8f:f7:c5:b5:0b:61:7b: 15:8c:71:51:2e:c4:61:23:55:1a:03:20:2d:da:7a:1e:74:d6: 2f:17:a8:fd:3f:e2:b4:18:a4:79:21:0f:6e:ce:b8:0d:c9:98: 6b:d7:72:01:18:98:ba:57:b6:73:5e:79:54:42:c8:89:f2:ab: f0:00:c9:9b:0c:38:4e:8d:5a:ea:55:c0:93:03:af:ce:3a:60: 7f:60:81:d9:bf:87:84:9c:b7:d1:68:0d:03:75:f9:43:a2:56: 99:a0:3a:19:c1:cd:54:77:4e:8e:46:6d:5b:e4:e5:0e:65:8c: 36:01:48:ec:2d:33:ca:6c:3e:6f:7a:18:ac:47:37:17:ca:b0: f2:28:2b:d9:e1:76:6c:47:8e:c3:7b:95:7e:f6:e0:11:cc:8f: 61:a9:9f:bb:fb:3c:fd:7f:48:c4:63:19:3f:e6:63:6a:fa:17: 71:0e:df:24:32:a7:b4:57:37:c4:72:19:29:2f:34:a9:a0:38: a0:fe:5f:3d:9d:54:34:2c:fb:ea:19:7a:97:12:89:a3:94:c5: 26:18:a5:8a:80:6e:05:57:1e:c3:9e:bb:8d:95:9e:9f:5e:99: 02:01:45:d2:55:8e:35:6e:18:7f:73:3f:b6:b5:5d:0b:93:de: 26:ef:0f:09 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIURU6A6o9eyLkPxCyLSJ6tjtbooH0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg1M0RDMjIxMjVG QTM0RjM5ODZDQkYxMjQyMkUzNEY5QjlDNjYxQkU3MB4XDTI1MDgwNDE1MDAxOFoX DTI1MDkwODIzNTk1OVowejFJMEcGA1UEBRNANDFmMDQ1Nzk1MTY5YWMyZGQyODUw M2RjYjNhZWNhYWIxNDBjZTViNGU4MDU1M2ViNzc4MmFhMWMzMTliODYwZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXU0gjghL24nQ1DQLiNDlqy/eT4Y z2pIzrGsu8pUuV/dUn06CwDCtmDBKFb2bV3k+b37w1YUgILR5MS6NJyr0FN6zXoi Pvbc8ZE/ZAXRMhds+36Gu0S6p/LDQlVQ8wtu4IRvUJiFf4zIhqiaCiQHp9odSaQL zdeFPd7i9+2nfCn9KfsCNsE3DgFZjbXUl47veSQA/6wpVyGQRoIk9IyyFh1iBHET tPO5WP0ZYpiKmWH12hFxmYm/Gwm+LaBQ/+Pl4HBSYhIMLJcfEHC9uvRh4v6IxZKO klUJtowxdnhe7N/TkCJ9pIUwyvJID9uQc3+wXwYm48LO6vvvCvUEH+nbwQIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFIYv23xJ4tL4dZg2yQPQmHhGu780MB8GA1UdIwQY MBaAFFPcIhJfo085hsvxJCLjT5ucZhvnMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9VOXdpRWwt alR6bUd5X0VrSXVOUG01eG1HLWMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2U1ZmZlNjVlLTcyODctNDYyOC04NzU5LTdjMTQxODY2ZWUxMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvYTViMDFiZGQtY2RlYi00Y2ZjLThjOTMtN2U3MGM1ZTA5MzA2LmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAn/gwDQYJKoZIhvcNAQELBQADggEBACJm2LGnbzhwdLcyj/fFtQth exWMcVEuxGEjVRoDIC3aeh501i8XqP0/4rQYpHkhD27OuA3JmGvXcgEYmLpXtnNe eVRCyInyq/AAyZsMOE6NWupVwJMDr846YH9ggdm/h4Sct9FoDQN1+UOiVpmgOhnB zVR3To5GbVvk5Q5ljDYBSOwtM8psPm96GKxHNxfKsPIoK9nhdmxHjsN7lX724BHM j2Gpn7v7PP1/SMRjGT/mY2r6F3EO3yQyp7RXN8RyGSkvNKmgOKD+Xz2dVDQs++oZ epcSiaOUxSYYpYqAbgVXHsOeu42Vnp9emQIBRdJVjjVuGH9zP7a1XQuT3ibvDwk= -----END CERTIFICATE-----Generated at Wed Aug 6 16:12:37 2025 by rpki-client