$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/7cf17e61-b049-438c-8aaf-2d4714b51857.roa File: 7cf17e61-b049-438c-8aaf-2d4714b51857.roa (raw, json) Hash identifier: Rslmf9fB7ZQngODGWFEqSBzvmA1g39pN7xGmz7xT2Kc= Subject key identifier: F8:00:0E:F2:90:AA:19:BA:AA:98:25:69:A5:5A:5A:BD:D3:B6:3A:B2 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 6525EB2566FDCC51C9B4FE5493A46C7D605A0E13 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/7cf17e61-b049-438c-8aaf-2d4714b51857.roa Signing time: Fri 01 Aug 2025 00:50:10 +0000 ROA not before: Fri 01 Aug 2025 00:50:10 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 240f:80fa:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 15:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:25:eb:25:66:fd:cc:51:c9:b4:fe:54:93:a4:6c:7d:60:5a:0e:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Aug 1 00:50:10 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=6e810b76d618661f21f61e61c6546bfb2861af2d7e40df918c03dc000a9032bc, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:00:4f:52:3e:39:25:bd:3e:13:20:5e:36:8e: 9a:63:34:88:4a:92:31:9a:e4:99:31:93:df:08:3b: 1d:71:cc:ec:8e:48:02:b8:29:fc:ba:ee:ca:d3:52: 1d:8a:b6:04:3a:3b:9c:50:58:91:31:1e:18:89:e6: 95:48:39:81:79:20:e8:a2:12:be:8f:73:7e:5c:3e: 7f:7e:48:fd:e4:df:df:8c:45:e1:04:81:8f:f4:a8: f7:a6:1e:30:bb:00:c6:b0:3f:e1:7d:2c:b0:d9:22: 00:eb:6f:21:4e:ce:1d:05:5a:20:b2:0f:1f:77:eb: 05:96:09:88:34:2a:62:05:e4:bd:23:6b:a2:75:e4: 31:7b:54:dd:13:d9:22:c2:00:bd:84:2b:68:52:f4: 09:00:05:99:a5:97:0b:71:c9:76:2a:05:90:66:df: 27:de:cd:7a:5f:11:95:b0:13:93:5f:0d:24:79:3b: 24:ac:7d:68:db:58:b4:8b:69:b6:a8:f3:1c:f2:26: 2b:6d:66:50:97:f1:d7:34:d8:05:43:27:da:4a:89: f3:d0:09:a7:67:b6:0f:77:9c:34:8e:e3:37:fe:eb: 70:01:b1:80:7c:92:5f:48:48:b9:8e:ed:b7:61:ac: ef:e4:e1:e2:49:99:4f:2a:8d:fe:d1:0b:e9:7a:50: 66:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:00:0E:F2:90:AA:19:BA:AA:98:25:69:A5:5A:5A:BD:D3:B6:3A:B2 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/7cf17e61-b049-438c-8aaf-2d4714b51857.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:80fa:4000::/40 Signature Algorithm: sha256WithRSAEncryption a8:12:a7:08:1a:74:e8:69:41:72:36:30:91:db:33:48:da:13: ea:a9:50:35:67:f1:6a:12:de:dc:37:91:59:b5:c6:4b:08:2b: f7:f7:68:d0:60:c4:03:5a:e8:d8:4c:53:ae:d0:1d:db:db:4b: 68:d8:99:fe:0f:3d:dd:b1:50:03:73:96:32:56:ee:82:d4:4e: f2:0d:85:d2:65:a9:93:57:72:92:4c:22:53:f7:ab:e4:71:ed: 00:3a:3d:08:c6:8c:e1:a1:f6:6f:5b:b1:af:57:75:33:f9:bb: 39:78:e5:a2:f7:fc:cc:4f:5a:04:e1:6a:f9:bc:9c:bb:57:ba: a3:fa:0d:ae:3d:48:e2:5d:20:23:51:04:b9:b7:98:e7:93:4a: 45:5d:14:c5:3d:46:c3:09:ae:bc:cc:9c:8c:70:78:49:34:60: cf:38:88:c8:8f:20:f4:35:51:a0:07:df:0c:d3:2f:5a:78:6e: 83:01:66:15:31:0f:ea:ad:3c:fd:ee:2e:3d:5f:2a:52:d7:bc: e2:75:2d:4f:be:65:2e:94:ab:8a:81:89:56:96:6a:de:fb:71: 60:98:ed:a0:6b:40:4a:89:28:59:3b:fb:cf:c5:09:a8:f4:d1: fa:75:52:b7:01:e2:8d:5b:cb:3f:e3:dc:e2:33:cf:5d:4b:ec: 18:57:41:c3 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUZSXrJWb9zFHJtP5Uk6RsfWBaDhMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI1MDgwMTAwNTAxMFoX DTI1MDkwNTIzNTk1OVowejFJMEcGA1UEBRNANmU4MTBiNzZkNjE4NjYxZjIxZjYx ZTYxYzY1NDZiZmIyODYxYWYyZDdlNDBkZjkxOGMwM2RjMDAwYTkwMzJiYzEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6wBPUj45Jb0+EyBeNo6aYzSISpIx muSZMZPfCDsdcczsjkgCuCn8uu7K01IdirYEOjucUFiRMR4YieaVSDmBeSDoohK+ j3N+XD5/fkj95N/fjEXhBIGP9Kj3ph4wuwDGsD/hfSyw2SIA628hTs4dBVogsg8f d+sFlgmINCpiBeS9I2uideQxe1TdE9kiwgC9hCtoUvQJAAWZpZcLccl2KgWQZt8n 3s16XxGVsBOTXw0keTskrH1o21i0i2m2qPMc8iYrbWZQl/HXNNgFQyfaSonz0Amn Z7YPd5w0juM3/utwAbGAfJJfSEi5ju23Yazv5OHiSZlPKo3+0QvpelBmRQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPgADvKQqhm6qpglaaVaWr3TtjqyMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzdjZjE3ZTYxLWIwNDktNDM4Yy04YWFmLTJkNDcxNGI1MTg1Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJA+A+kAwDQYJKoZIhvcNAQELBQADggEBAKgSpwgadOhpQXI2MJHb M0jaE+qpUDVn8WoS3tw3kVm1xksIK/f3aNBgxANa6NhMU67QHdvbS2jYmf4PPd2x UANzljJW7oLUTvINhdJlqZNXcpJMIlP3q+Rx7QA6PQjGjOGh9m9bsa9XdTP5uzl4 5aL3/MxPWgThavm8nLtXuqP6Da49SOJdICNRBLm3mOeTSkVdFMU9RsMJrrzMnIxw eEk0YM84iMiPIPQ1UaAH3wzTL1p4boMBZhUxD+qtPP3uLj1fKlLXvOJ1LU++ZS6U q4qBiVaWat77cWCY7aBrQEqJKFk7+8/FCaj00fp1UrcB4o1byz/j3OIzz11L7BhX QcM= -----END CERTIFICATE-----Generated at Wed Aug 6 04:01:54 2025 by rpki-client