$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e5ffe65e-7287-4628-8759-7c141866ee12.roa File: e5ffe65e-7287-4628-8759-7c141866ee12.roa (raw, json) Hash identifier: RaXPdlyXBi6W4Qn1iuKyWO4kZkNUpjZP7K2vnM/Qvuk= Subject key identifier: 84:C8:4B:95:23:0F:4F:2D:3C:3C:F6:EF:D6:A4:76:9C:FA:1A:C3:83 Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Certificate serial: 421AF0512895EB992A7F222C2149CA16906E2DF6 Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e5ffe65e-7287-4628-8759-7c141866ee12.roa Signing time: Sat 14 Jun 2025 00:00:03 +0000 ROA not before: Sat 14 Jun 2025 00:00:03 +0000 ROA not after: Sat 19 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 159.248.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:1a:f0:51:28:95:eb:99:2a:7f:22:2c:21:49:ca:16:90:6e:2d:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Validity Not Before: Jun 14 00:00:03 2025 GMT Not After : Jul 19 23:59:59 2025 GMT Subject: serialNumber=c0f2ba55cbb7f16bdf348906e0affd389b61d9811570d432cb44bc2883154b42, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c7:72:29:b1:ae:13:8c:a2:af:d1:00:c9:1e: d2:1e:9e:ac:a2:6e:e0:ca:bc:3f:c8:75:23:14:ba: 93:ee:21:1c:99:7e:03:16:ab:82:a8:f0:5b:f4:72: 5d:30:69:01:3c:27:97:07:1b:ac:fc:bb:66:05:14: 7c:2d:a8:7d:9d:ca:6e:c1:21:bb:f3:40:66:27:e9: 5b:cf:49:76:df:5b:14:01:7c:32:9d:83:b7:bd:87: 78:be:91:4c:c2:5b:bc:fa:ce:72:b4:75:c3:d5:16: 66:cf:e7:4e:15:7f:46:70:7f:8d:62:70:83:d8:10: f6:f7:3f:dd:60:a1:43:13:1e:20:36:b6:a8:55:68: 74:c0:a6:ef:d0:1e:64:87:07:ce:b0:c5:06:66:c4: eb:05:21:52:70:71:0e:96:39:1a:b6:d7:c5:65:bd: e2:30:69:a1:db:f6:1b:a7:93:f4:71:10:7a:d4:9b: 33:82:bc:83:17:de:90:92:aa:8d:15:fc:e9:32:65: c0:ef:48:ee:1e:ed:60:f7:50:80:33:87:81:41:ce: 1f:e4:c4:e9:4d:1b:88:bb:32:be:1d:0a:46:a2:40: 32:45:2d:d0:ae:f9:37:b5:4f:c3:16:e0:23:49:38: 39:3c:b5:a5:2c:a7:83:4e:3e:1d:30:bd:2f:fc:11: 68:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C8:4B:95:23:0F:4F:2D:3C:3C:F6:EF:D6:A4:76:9C:FA:1A:C3:83 X509v3 Authority Key Identifier: keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e5ffe65e-7287-4628-8759-7c141866ee12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.248.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1a:4f:e5:83:ec:15:e2:e3:e0:45:a2:5f:3a:83:ed:c4:13:c7: 4b:36:69:ec:b5:7a:5a:fd:05:67:50:3d:cf:07:11:6c:c1:93: a0:46:3d:1b:aa:23:be:b6:a4:f5:a3:30:ea:35:56:22:f9:6c: 4e:e5:59:db:f3:1c:4e:73:08:e3:37:3c:fe:2d:4d:88:e4:70: 1c:34:c0:21:2a:c1:a3:c6:ef:d7:eb:30:d9:ed:d4:c7:3a:8e: 2b:d6:f0:57:ee:53:a4:17:d9:5c:24:80:62:dc:97:b6:f4:42: 74:3e:d1:90:b4:ab:a6:41:d2:5a:c2:32:eb:6f:35:10:ef:91: 57:4b:f6:56:60:75:79:1a:9c:15:15:18:60:db:f9:1d:84:a6: 81:05:15:a9:1f:8e:95:3d:b2:cd:36:ab:30:76:4b:a2:14:d3: 47:cb:8a:24:d7:b8:3a:ce:d6:86:39:da:9c:8f:5b:9e:d5:82: 02:03:3b:a7:7a:b3:66:20:ea:6d:0d:bd:3e:77:d6:a5:d0:01: 9c:cb:1a:76:1a:0a:6b:1a:f4:52:89:37:fc:c6:08:b8:f6:62: 7d:c8:8d:d6:f7:64:e8:2e:e4:dc:cf:15:36:0e:06:fb:c3:4d: d0:59:39:af:aa:14:63:ff:17:22:74:63:2e:81:d0:0b:f1:c9: cf:5a:0a:87 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUQhrwUSiV65kqfyIsIUnKFpBuLfYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg1M0RDMjIxMjVG QTM0RjM5ODZDQkYxMjQyMkUzNEY5QjlDNjYxQkU3MB4XDTI1MDYxNDAwMDAwM1oX DTI1MDcxOTIzNTk1OVowejFJMEcGA1UEBRNAYzBmMmJhNTVjYmI3ZjE2YmRmMzQ4 OTA2ZTBhZmZkMzg5YjYxZDk4MTE1NzBkNDMyY2I0NGJjMjg4MzE1NGI0MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8dyKbGuE4yir9EAyR7SHp6som7g yrw/yHUjFLqT7iEcmX4DFquCqPBb9HJdMGkBPCeXBxus/LtmBRR8Lah9ncpuwSG7 80BmJ+lbz0l231sUAXwynYO3vYd4vpFMwlu8+s5ytHXD1RZmz+dOFX9GcH+NYnCD 2BD29z/dYKFDEx4gNraoVWh0wKbv0B5khwfOsMUGZsTrBSFScHEOljkattfFZb3i MGmh2/Ybp5P0cRB61JszgryDF96QkqqNFfzpMmXA70juHu1g91CAM4eBQc4f5MTp TRuIuzK+HQpGokAyRS3Qrvk3tU/DFuAjSTg5PLWlLKeDTj4dML0v/BFoSQIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFITIS5UjD08tPDz279akdpz6GsODMB8GA1UdIwQY MBaAFFPcIhJfo085hsvxJCLjT5ucZhvnMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9VOXdpRWwt alR6bUd5X0VrSXVOUG01eG1HLWMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2U1ZmZlNjVlLTcyODctNDYyOC04NzU5LTdjMTQxODY2ZWUxMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvYTViMDFiZGQtY2RlYi00Y2ZjLThjOTMtN2U3MGM1ZTA5MzA2LmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAn/gwDQYJKoZIhvcNAQELBQADggEBABpP5YPsFeLj4EWiXzqD7cQT x0s2aey1elr9BWdQPc8HEWzBk6BGPRuqI762pPWjMOo1ViL5bE7lWdvzHE5zCOM3 PP4tTYjkcBw0wCEqwaPG79frMNnt1Mc6jivW8FfuU6QX2VwkgGLcl7b0QnQ+0ZC0 q6ZB0lrCMutvNRDvkVdL9lZgdXkanBUVGGDb+R2EpoEFFakfjpU9ss02qzB2S6IU 00fLiiTXuDrO1oY52pyPW57VggIDO6d6s2Yg6m0NvT531qXQAZzLGnYaCmsa9FKJ N/zGCLj2Yn3Ijdb3ZOgu5NzPFTYOBvvDTdBZOa+qFGP/FyJ0Yy6B0Avxyc9aCoc= -----END CERTIFICATE-----Generated at Sat Jun 14 06:50:47 2025 by rpki-client