$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/3407e5b6-a83d-4668-898f-fdbb23092502.roa File: 3407e5b6-a83d-4668-898f-fdbb23092502.roa (raw, json) Hash identifier: Iz7DMJnZXaw0SLuqj1vT8wVnUsx8GDwtdf2dojcceF8= Subject key identifier: 94:BC:8B:D8:F0:C4:D5:36:00:BA:AB:2B:D0:59:36:EE:B4:91:D7:C3 Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 0A69846CBF0FD62DCE25E0929511D47FF961779F Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/3407e5b6-a83d-4668-898f-fdbb23092502.roa Signing time: Sat 14 Jun 2025 00:00:24 +0000 ROA not before: Sat 14 Jun 2025 00:00:24 +0000 ROA not after: Sat 19 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2400:6700::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:69:84:6c:bf:0f:d6:2d:ce:25:e0:92:95:11:d4:7f:f9:61:77:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Jun 14 00:00:24 2025 GMT Not After : Jul 19 23:59:59 2025 GMT Subject: serialNumber=ec4e97046bcb647ba6ba37c82e12ac8b73a3f1fc493f9c5fd978d325250f793f, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:36:44:85:90:b3:95:c4:3f:d9:5f:88:3c:6a: 27:dd:9f:fc:48:27:c2:28:c7:19:14:0b:a3:65:3f: 12:12:d1:3a:25:b5:60:da:e3:51:5e:2f:36:ed:9a: 4d:63:6c:26:53:55:45:5e:b4:8f:5a:da:fe:c1:22: 41:99:9b:f7:f7:4d:fa:a2:c0:11:6b:ab:fc:91:7b: de:ab:dc:62:84:f0:0a:23:fa:8f:82:c5:15:65:49: c6:00:7b:c9:e8:bc:cf:fb:a1:27:91:1f:0e:28:2d: 13:75:63:45:6f:ab:b3:5b:1b:e0:64:d7:09:7f:91: d3:86:52:7d:9a:f0:01:08:bd:88:7d:1d:ba:8f:ef: cd:6a:d3:80:ba:65:7b:4d:ec:ff:aa:03:9c:31:f2: 9c:46:0d:cc:a5:5b:6e:45:a8:dc:fd:4e:f4:97:0c: 42:47:04:34:19:fc:83:d3:63:f4:ec:05:7e:92:e4: 6f:01:43:77:f4:d8:9b:36:a9:97:18:12:5c:a8:16: 5c:b2:78:c2:fe:a0:17:57:5d:fd:da:97:33:b9:57: c8:3b:e0:29:cd:f9:d5:fe:14:b5:52:d2:3e:e9:9d: 69:1a:f1:8f:50:bb:95:e3:79:e4:ac:32:44:e1:c0: 2a:ed:b8:38:af:27:70:a0:bd:f2:20:31:a3:99:d3: 2c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:BC:8B:D8:F0:C4:D5:36:00:BA:AB:2B:D0:59:36:EE:B4:91:D7:C3 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/3407e5b6-a83d-4668-898f-fdbb23092502.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:6700::/32 Signature Algorithm: sha256WithRSAEncryption 83:85:08:1e:94:e0:ea:ca:a3:0c:c9:f7:77:9d:25:cc:47:31: 11:6e:05:19:38:94:37:ea:19:b7:ec:bb:4f:43:5a:5e:4f:9a: cd:f4:1d:68:6c:90:5a:96:05:91:34:b7:2f:ac:39:d9:0a:ec: 21:70:50:24:5b:eb:97:af:e8:e5:98:08:95:f0:2a:b6:e5:f3: ef:22:7d:9e:56:ea:cb:fe:65:fd:c9:d0:fc:89:86:c2:66:f5: b4:29:84:b0:cb:b7:49:4c:24:eb:a3:d8:72:9d:51:b5:1a:c4: c9:e4:4f:6d:87:b9:5f:bc:cc:e9:af:b0:fe:62:ba:1d:22:70: 6c:19:18:3d:5c:29:ee:56:6f:5e:cb:63:4e:36:58:3e:07:e3: a5:f8:3e:fa:3c:d8:8c:84:ce:54:e9:5d:20:27:c3:60:68:c3: 7c:e9:e9:57:95:a5:04:5d:8b:2d:c6:82:cf:b0:44:7c:e7:50: 90:38:b2:6f:67:36:c2:d9:ab:4d:7e:81:b4:90:0d:d0:7e:5a: 6e:44:5e:c9:a4:35:2a:8b:fb:88:aa:d9:34:e8:a5:72:05:fe: 30:ea:d5:2a:6e:b2:e5:48:18:2d:f4:ae:c5:89:11:b9:f6:c7: c9:5f:a2:73:5e:19:e5:71:60:6c:2f:ac:ec:c4:63:8c:00:00: c2:ff:ff:99 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUCmmEbL8P1i3OJeCSlRHUf/lhd58wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI1MDYxNDAwMDAyNFoX DTI1MDcxOTIzNTk1OVowejFJMEcGA1UEBRNAZWM0ZTk3MDQ2YmNiNjQ3YmE2YmEz N2M4MmUxMmFjOGI3M2EzZjFmYzQ5M2Y5YzVmZDk3OGQzMjUyNTBmNzkzZjEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDZEhZCzlcQ/2V+IPGon3Z/8SCfC KMcZFAujZT8SEtE6JbVg2uNRXi827ZpNY2wmU1VFXrSPWtr+wSJBmZv39036osAR a6v8kXveq9xihPAKI/qPgsUVZUnGAHvJ6LzP+6EnkR8OKC0TdWNFb6uzWxvgZNcJ f5HThlJ9mvABCL2IfR26j+/NatOAumV7Tez/qgOcMfKcRg3MpVtuRajc/U70lwxC RwQ0GfyD02P07AV+kuRvAUN39NibNqmXGBJcqBZcsnjC/qAXV1392pczuVfIO+Ap zfnV/hS1UtI+6Z1pGvGPULuV43nkrDJE4cAq7bg4rydwoL3yIDGjmdMsBwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFJS8i9jwxNU2ALqrK9BZNu60kdfDMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 LzM0MDdlNWI2LWE4M2QtNDY2OC04OThmLWZkYmIyMzA5MjUwMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJABnADANBgkqhkiG9w0BAQsFAAOCAQEAg4UIHpTg6sqjDMn3d50l zEcxEW4FGTiUN+oZt+y7T0NaXk+azfQdaGyQWpYFkTS3L6w52QrsIXBQJFvrl6/o 5ZgIlfAqtuXz7yJ9nlbqy/5l/cnQ/ImGwmb1tCmEsMu3SUwk66PYcp1RtRrEyeRP bYe5X7zM6a+w/mK6HSJwbBkYPVwp7lZvXstjTjZYPgfjpfg++jzYjITOVOldICfD YGjDfOnpV5WlBF2LLcaCz7BEfOdQkDiyb2c2wtmrTX6BtJAN0H5abkReyaQ1Kov7 iKrZNOilcgX+MOrVKm6y5UgYLfSuxYkRufbHyV+ic14Z5XFgbC+s7MRjjAAAwv// mQ== -----END CERTIFICATE-----Generated at Sat Jun 14 06:11:51 2025 by rpki-client