$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/7cf17e61-b049-438c-8aaf-2d4714b51857.roa File: 7cf17e61-b049-438c-8aaf-2d4714b51857.roa (raw, json) Hash identifier: Z7hSKSvhTraHvSSawAfWkwKQ9JHS5b/Mz0aq3p1okQk= Subject key identifier: AC:AB:9E:53:1F:1E:F5:18:7D:BB:87:B7:01:9F:3F:40:C2:FD:A5:38 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 6E60A0C2C03D27E477B06623B9C72129FF685D5F Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/7cf17e61-b049-438c-8aaf-2d4714b51857.roa Signing time: Wed 11 Jun 2025 00:00:02 +0000 ROA not before: Wed 11 Jun 2025 00:00:02 +0000 ROA not after: Wed 16 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 240f:80fa:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:60:a0:c2:c0:3d:27:e4:77:b0:66:23:b9:c7:21:29:ff:68:5d:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Jun 11 00:00:02 2025 GMT Not After : Jul 16 23:59:59 2025 GMT Subject: serialNumber=9bf2a1bc5a98b31fac0cb8e0fdaa96840752da9b80853d90e91b0264ad7e5046, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:47:72:78:4c:f1:a7:3d:67:c5:43:55:d0:d3: 8a:40:9a:e6:05:e5:72:78:64:ae:55:76:9e:39:f3: 6e:b0:7c:13:a5:58:b8:ec:df:8d:ad:3c:5b:64:5d: b2:a5:50:4e:b8:ec:be:d8:11:db:8c:bf:02:5d:33: e9:71:8d:50:8d:2f:11:30:f6:73:12:01:dc:ee:cc: 1d:91:35:44:78:45:fe:a1:fa:45:3a:cd:58:26:fd: 85:82:53:e8:00:28:61:76:59:0c:94:da:5f:11:1e: 31:e2:e2:80:de:f2:4c:21:15:60:3c:7d:21:e0:07: 51:5b:f3:6f:ff:f3:61:76:58:79:75:c9:b5:52:e3: f2:a1:2b:97:ef:d6:ff:fb:e3:f2:b7:67:dc:8f:a8: c7:1d:68:e1:83:ec:3f:63:87:9a:00:67:8c:87:a3: af:44:ea:b0:c9:a5:1e:36:91:0b:a7:ee:3e:94:bc: d8:fc:57:1b:57:78:f4:3c:fa:8f:6c:bf:ba:52:6e: 16:6d:86:21:d0:f2:47:25:0f:02:2e:81:7c:b5:d9: 13:2f:d6:de:27:3c:05:51:93:81:31:04:08:95:f7: 96:1b:82:a4:6b:f4:53:7c:da:2a:a2:de:a4:37:6c: 5b:77:8f:dc:aa:e9:ea:a4:d3:d8:2c:31:81:bd:10: 7f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:AB:9E:53:1F:1E:F5:18:7D:BB:87:B7:01:9F:3F:40:C2:FD:A5:38 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/7cf17e61-b049-438c-8aaf-2d4714b51857.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:80fa:4000::/40 Signature Algorithm: sha256WithRSAEncryption b7:0c:a7:f4:fe:57:e6:29:c4:b0:a3:38:99:ff:c0:01:99:08: 9d:8b:c0:31:28:be:ff:8a:ee:63:5d:f5:7a:04:82:d7:c6:92: ac:85:a7:b5:91:4b:82:34:ad:fd:3d:fe:4a:e9:66:f4:c4:c0: 61:c4:60:b8:ed:4d:0d:ea:bb:8a:78:19:7c:4b:2d:43:65:79: b8:41:77:c5:d7:2f:3a:76:08:e9:5e:a7:1f:30:ef:9c:22:61: fc:4c:06:a3:3a:59:cb:b1:6b:54:9c:86:bc:e9:0e:11:3d:19: 37:ea:3e:11:d9:84:2d:cc:be:c8:f3:d7:9f:a4:4d:a7:b7:b2: 6b:18:03:3a:b9:92:ba:49:a0:a6:cc:7b:01:9a:76:5e:23:e7: 23:a6:96:e0:5f:57:65:a8:38:be:7b:e9:4a:76:e6:f0:23:51: 3e:c8:62:a9:57:d5:58:d8:9b:ce:cc:6a:5e:12:77:a9:fe:58: 66:62:a4:29:d9:8c:da:7b:7b:15:43:dd:b7:72:a4:78:29:01: 61:99:a6:0a:9c:72:5f:13:a4:b0:ee:f6:85:8c:42:99:83:c2: 80:ed:64:35:fd:29:5e:f0:61:f2:fd:aa:cf:3c:7a:9a:aa:5f: 47:ce:4f:54:8c:23:4e:8f:ef:ab:5d:c1:52:02:97:4a:e3:c9: 1a:b5:6f:46 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUbmCgwsA9J+R3sGYjucchKf9oXV8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI1MDYxMTAwMDAwMloX DTI1MDcxNjIzNTk1OVowejFJMEcGA1UEBRNAOWJmMmExYmM1YTk4YjMxZmFjMGNi OGUwZmRhYTk2ODQwNzUyZGE5YjgwODUzZDkwZTkxYjAyNjRhZDdlNTA0NjEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/kdyeEzxpz1nxUNV0NOKQJrmBeVy eGSuVXaeOfNusHwTpVi47N+NrTxbZF2ypVBOuOy+2BHbjL8CXTPpcY1QjS8RMPZz EgHc7swdkTVEeEX+ofpFOs1YJv2FglPoAChhdlkMlNpfER4x4uKA3vJMIRVgPH0h 4AdRW/Nv//Nhdlh5dcm1UuPyoSuX79b/++Pyt2fcj6jHHWjhg+w/Y4eaAGeMh6Ov ROqwyaUeNpELp+4+lLzY/FcbV3j0PPqPbL+6Um4WbYYh0PJHJQ8CLoF8tdkTL9be JzwFUZOBMQQIlfeWG4Kka/RTfNoqot6kN2xbd4/cqunqpNPYLDGBvRB/1QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKyrnlMfHvUYfbuHtwGfP0DC/aU4MB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzdjZjE3ZTYxLWIwNDktNDM4Yy04YWFmLTJkNDcxNGI1MTg1Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJA+A+kAwDQYJKoZIhvcNAQELBQADggEBALcMp/T+V+YpxLCjOJn/ wAGZCJ2LwDEovv+K7mNd9XoEgtfGkqyFp7WRS4I0rf09/krpZvTEwGHEYLjtTQ3q u4p4GXxLLUNlebhBd8XXLzp2COlepx8w75wiYfxMBqM6Wcuxa1SchrzpDhE9GTfq PhHZhC3Mvsjz15+kTae3smsYAzq5krpJoKbMewGadl4j5yOmluBfV2WoOL576Up2 5vAjUT7IYqlX1VjYm87Mal4Sd6n+WGZipCnZjNp7exVD3bdypHgpAWGZpgqccl8T pLDu9oWMQpmDwoDtZDX9KV7wYfL9qs88epqqX0fOT1SMI06P76tdwVICl0rjyRq1 b0Y= -----END CERTIFICATE-----Generated at Sat Jun 14 06:33:24 2025 by rpki-client