$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/3407e5b6-a83d-4668-898f-fdbb23092502.roa File: 3407e5b6-a83d-4668-898f-fdbb23092502.roa (raw, json) Hash identifier: A0wnw0quNtVmHeyhoJc3ngPgkoR5pNkVFJpBKs1ZGLc= Subject key identifier: 9C:8B:73:25:7B:94:B4:7F:C3:19:A5:E2:3D:D1:5B:F3:E5:2A:B0:E8 Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 25B696159567C0A116B6EA30B35CBEF265AAB4C4 Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/3407e5b6-a83d-4668-898f-fdbb23092502.roa Signing time: Mon 04 Aug 2025 15:00:47 +0000 ROA not before: Mon 04 Aug 2025 15:00:47 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2400:6700::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 15:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:b6:96:15:95:67:c0:a1:16:b6:ea:30:b3:5c:be:f2:65:aa:b4:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Aug 4 15:00:47 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=ac29a5c6d042a7b4675f4dd57f9673a241745d060794d940a233211c536eb783, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:52:7f:3c:39:dc:f1:a2:d0:b6:b0:24:a4:7e: 93:e3:04:18:4e:a2:17:d5:0c:ff:88:22:b6:d7:20: 89:19:aa:1c:fd:4f:76:aa:e2:0e:f1:af:b1:6c:a3: dd:0e:65:7b:24:f4:c8:60:18:f3:75:09:b5:c5:33: f9:68:64:3e:3c:73:23:8a:63:80:1b:0d:85:98:43: a8:65:77:4f:52:f5:aa:6d:e2:83:d7:e7:b8:2d:d4: 90:27:5b:9b:74:b0:93:a2:4b:a6:4d:ea:ca:3e:14: 65:60:3d:10:87:31:a1:38:95:b1:98:7c:8a:63:07: e1:f0:05:81:23:b3:19:68:35:09:50:e1:c6:fc:ff: 51:96:01:fb:14:2f:ea:f9:e8:94:89:1e:d9:2d:fe: ce:5c:fa:a8:6f:1a:ca:e9:91:e7:76:f6:16:7e:9f: 4a:91:4e:4b:5a:53:b2:0a:e7:99:c5:ac:d4:da:70: bc:3e:8f:49:0c:da:4e:0d:94:30:f3:67:28:30:40: 4f:34:a3:81:23:01:4a:3c:35:a7:31:5c:96:52:88: cb:92:91:8f:e8:cb:74:32:2d:70:e5:db:a3:23:29: 00:9c:d3:80:90:39:eb:3e:01:3d:11:dd:fd:f9:ed: 6c:71:a5:25:9d:75:8c:1d:1e:4e:42:1b:f5:ef:d0: d8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:8B:73:25:7B:94:B4:7F:C3:19:A5:E2:3D:D1:5B:F3:E5:2A:B0:E8 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/3407e5b6-a83d-4668-898f-fdbb23092502.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:6700::/32 Signature Algorithm: sha256WithRSAEncryption a9:80:aa:26:57:ea:ea:3e:fb:17:85:ca:33:aa:cc:03:8e:53: 47:bc:6f:7d:cb:1e:da:d1:2e:25:d1:c5:1b:3f:f6:1a:12:8e: f9:19:74:4c:8e:44:3f:1a:eb:51:83:40:1e:e1:a5:04:27:bb: 57:7f:1d:e4:b9:da:ff:0a:13:57:be:60:8d:52:10:c6:6c:5b: 7c:27:90:c5:4e:30:96:a4:75:57:c5:f9:62:1e:bc:88:71:b1: 44:08:53:7f:e5:c4:6c:78:a7:6c:b8:b6:23:ef:ab:04:22:26: 6e:81:48:84:45:70:a6:ef:34:0c:e1:06:ec:8f:b1:1e:72:80: 02:74:18:86:68:11:b4:0f:4b:af:67:37:c9:87:1e:af:be:5d: 91:af:ca:6c:ea:09:93:62:30:a5:85:a4:ef:be:e1:ce:5a:03: 31:0f:34:c3:05:7d:da:d1:72:18:15:79:8d:72:41:d4:8a:1e: 13:42:a7:38:52:b5:da:92:b9:dc:2e:e1:ae:9b:79:15:c0:49: 4f:9f:8d:51:3d:93:60:ad:c5:d7:00:04:8e:cb:b7:a4:90:db: bb:61:52:6f:94:cc:7c:0f:b0:3b:d4:7f:b3:1e:1e:b5:46:0a: df:07:08:d6:2e:1e:14:a6:a7:cc:72:b6:c6:92:d1:25:f1:73: 30:f3:a9:77 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUJbaWFZVnwKEWtuows1y+8mWqtMQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI1MDgwNDE1MDA0N1oX DTI1MDkwODIzNTk1OVowejFJMEcGA1UEBRNAYWMyOWE1YzZkMDQyYTdiNDY3NWY0 ZGQ1N2Y5NjczYTI0MTc0NWQwNjA3OTRkOTQwYTIzMzIxMWM1MzZlYjc4MzEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1J/PDnc8aLQtrAkpH6T4wQYTqIX 1Qz/iCK21yCJGaoc/U92quIO8a+xbKPdDmV7JPTIYBjzdQm1xTP5aGQ+PHMjimOA Gw2FmEOoZXdPUvWqbeKD1+e4LdSQJ1ubdLCTokumTerKPhRlYD0QhzGhOJWxmHyK Ywfh8AWBI7MZaDUJUOHG/P9RlgH7FC/q+eiUiR7ZLf7OXPqobxrK6ZHndvYWfp9K kU5LWlOyCueZxazU2nC8Po9JDNpODZQw82coMEBPNKOBIwFKPDWnMVyWUojLkpGP 6Mt0Mi1w5dujIykAnNOAkDnrPgE9Ed39+e1scaUlnXWMHR5OQhv179DYJwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFJyLcyV7lLR/wxml4j3RW/PlKrDoMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 LzM0MDdlNWI2LWE4M2QtNDY2OC04OThmLWZkYmIyMzA5MjUwMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJABnADANBgkqhkiG9w0BAQsFAAOCAQEAqYCqJlfq6j77F4XKM6rM A45TR7xvfcse2tEuJdHFGz/2GhKO+Rl0TI5EPxrrUYNAHuGlBCe7V38d5Lna/woT V75gjVIQxmxbfCeQxU4wlqR1V8X5Yh68iHGxRAhTf+XEbHinbLi2I++rBCImboFI hEVwpu80DOEG7I+xHnKAAnQYhmgRtA9Lr2c3yYcer75dka/KbOoJk2IwpYWk777h zloDMQ80wwV92tFyGBV5jXJB1IoeE0KnOFK12pK53C7hrpt5FcBJT5+NUT2TYK3F 1wAEjsu3pJDbu2FSb5TMfA+wO9R/sx4etUYK3wcI1i4eFKanzHK2xpLRJfFzMPOp dw== -----END CERTIFICATE-----Generated at Mon Aug 4 18:31:44 2025 by rpki-client