$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/c1564659-f3aa-4021-a7a5-8f4b1c2c4963.roa File: c1564659-f3aa-4021-a7a5-8f4b1c2c4963.roa (raw, json) Hash identifier: MDz5QyWJgPD5YovlmkSTMLBsWYLrrpw3wE0mAJ6O9dM= Subject key identifier: 9D:D2:C0:9F:41:91:6F:0D:98:12:8A:B7:02:C6:02:52:B5:42:E2:E9 Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 49D78C9679943B43C8D8DB58452C899504CE67B5 Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/c1564659-f3aa-4021-a7a5-8f4b1c2c4963.roa Signing time: Sat 14 Jun 2025 00:00:24 +0000 ROA not before: Sat 14 Jun 2025 00:00:24 +0000 ROA not after: Sat 19 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2400:6700::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:d7:8c:96:79:94:3b:43:c8:d8:db:58:45:2c:89:95:04:ce:67:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Jun 14 00:00:24 2025 GMT Not After : Jul 19 23:59:59 2025 GMT Subject: serialNumber=f7ce8215169a0959cfe5bff3ca90fc8fb4d97feed0598ec99d71af9ac102d95c, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:13:ba:3d:45:ff:90:1b:c9:5b:e5:3e:58:3a: 54:c7:ec:46:70:a8:93:2a:e1:7d:d8:3a:11:22:ad: a5:70:a1:e2:a5:12:c9:54:4b:f8:43:0e:85:40:9b: a3:fa:c4:6b:7f:72:dc:43:1c:fa:e5:49:85:be:87: 8a:85:56:4a:cd:a1:09:28:99:ff:a3:13:0a:ea:f8: 0f:0b:2b:b8:16:de:72:30:a4:b5:57:ef:20:de:55: 49:8d:e5:bc:2a:24:02:dd:dc:10:85:59:07:45:ea: d0:61:22:8c:f0:d6:8a:0b:eb:5e:14:2a:a2:9c:fa: 8c:e5:a0:29:18:16:ee:f8:39:37:2d:e7:8e:03:aa: a8:bf:0b:17:43:02:10:ac:39:28:58:28:b8:ae:40: 5e:63:8b:a4:63:32:5e:de:bb:c4:e5:98:34:1a:65: 5b:25:27:a0:7f:e6:b4:28:ed:83:90:9c:2a:35:d9: 2d:1d:bf:54:d7:a3:b5:86:26:13:92:be:76:9b:0b: e0:dd:c3:1a:0c:d8:f0:8c:86:3d:81:85:ee:38:ba: d4:a2:20:13:77:14:33:1b:f1:fb:53:1c:27:6e:b6: c8:fb:be:a9:e2:d1:ef:c6:de:52:47:2d:57:72:47: 29:2a:de:4b:d0:8b:4d:dc:01:cd:c3:1d:2c:43:c8: c9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D2:C0:9F:41:91:6F:0D:98:12:8A:B7:02:C6:02:52:B5:42:E2:E9 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/c1564659-f3aa-4021-a7a5-8f4b1c2c4963.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:6700::/48 Signature Algorithm: sha256WithRSAEncryption 03:a7:41:31:1d:fe:d2:ee:ef:b7:4f:60:cb:ff:c7:49:be:43: df:c0:d6:dd:00:63:86:61:34:6d:74:ab:10:a4:4b:ab:ac:91: 5d:64:3b:9a:af:03:02:0c:31:8d:cf:3d:89:23:29:07:a6:14: 14:c4:6d:23:8c:b0:6c:44:8f:30:e7:26:44:e0:24:dd:eb:bf: ad:af:44:d4:1b:ce:0d:db:91:5d:cc:27:cd:51:5e:4f:5f:de: 21:b3:5b:c7:33:da:7e:17:34:1e:32:cc:8e:cf:4c:cc:eb:1c: 2a:b7:dd:a6:29:1a:d5:14:43:14:ee:9a:52:25:20:8e:56:92: d4:18:a5:94:6c:90:f3:81:a3:f0:c9:74:2d:22:f3:41:0a:83: 3e:a5:58:ea:69:fa:58:cf:c9:23:0b:d6:12:31:49:4d:ba:f7: ab:b9:1b:7d:81:b5:a6:66:64:6b:d5:3b:73:b5:3f:e5:00:d5: 70:b6:0b:03:7e:fb:72:dd:8c:2f:ed:e8:5d:ad:f3:e4:ca:4d: 07:83:f8:9d:27:48:9b:f3:3d:c9:5d:d6:e9:fd:f5:7b:cc:3e: 67:86:b3:3a:21:fb:82:4c:4c:c0:c3:1b:de:d0:9e:1d:02:b8: d1:1e:5e:98:b3:21:f8:8f:8e:29:27:7d:51:2f:57:4d:ec:e6: 1e:66:82:2b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUSdeMlnmUO0PI2NtYRSyJlQTOZ7UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI1MDYxNDAwMDAyNFoX DTI1MDcxOTIzNTk1OVowejFJMEcGA1UEBRNAZjdjZTgyMTUxNjlhMDk1OWNmZTVi ZmYzY2E5MGZjOGZiNGQ5N2ZlZWQwNTk4ZWM5OWQ3MWFmOWFjMTAyZDk1YzEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRO6PUX/kBvJW+U+WDpUx+xGcKiT KuF92DoRIq2lcKHipRLJVEv4Qw6FQJuj+sRrf3LcQxz65UmFvoeKhVZKzaEJKJn/ oxMK6vgPCyu4Ft5yMKS1V+8g3lVJjeW8KiQC3dwQhVkHRerQYSKM8NaKC+teFCqi nPqM5aApGBbu+Dk3LeeOA6qovwsXQwIQrDkoWCi4rkBeY4ukYzJe3rvE5Zg0GmVb JSegf+a0KO2DkJwqNdktHb9U16O1hiYTkr52mwvg3cMaDNjwjIY9gYXuOLrUoiAT dxQzG/H7UxwnbrbI+76p4tHvxt5SRy1XckcpKt5L0ItN3AHNwx0sQ8jJEwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJ3SwJ9BkW8NmBKKtwLGAlK1QuLpMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 L2MxNTY0NjU5LWYzYWEtNDAyMS1hN2E1LThmNGIxYzJjNDk2My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJABnAAAAMA0GCSqGSIb3DQEBCwUAA4IBAQADp0ExHf7S7u+3T2DL /8dJvkPfwNbdAGOGYTRtdKsQpEurrJFdZDuarwMCDDGNzz2JIykHphQUxG0jjLBs RI8w5yZE4CTd67+tr0TUG84N25FdzCfNUV5PX94hs1vHM9p+FzQeMsyOz0zM6xwq t92mKRrVFEMU7ppSJSCOVpLUGKWUbJDzgaPwyXQtIvNBCoM+pVjqafpYz8kjC9YS MUlNuveruRt9gbWmZmRr1TtztT/lANVwtgsDfvty3Ywv7ehdrfPkyk0Hg/idJ0ib 8z3JXdbp/fV7zD5nhrM6IfuCTEzAwxve0J4dArjRHl6YsyH4j44pJ31RL1dN7OYe ZoIr -----END CERTIFICATE-----Generated at Sat Jun 14 06:23:11 2025 by rpki-client