$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e5ffe65e-7287-4628-8759-7c141866ee12.roa File: e5ffe65e-7287-4628-8759-7c141866ee12.roa (raw, json) Hash identifier: MMhH1wdUHYCEddEO6UTRAUA7g3ur8f92TPehB2ogU0I= Subject key identifier: 7B:C5:2A:F0:91:A0:27:2F:8A:5B:D4:9F:C5:34:DE:96:D6:6A:A2:07 Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Certificate serial: 1259B699E7EF2D5C008799D084E3F733B87FDCD6 Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e5ffe65e-7287-4628-8759-7c141866ee12.roa Signing time: Wed 25 Jun 2025 00:00:40 +0000 ROA not before: Wed 25 Jun 2025 00:00:40 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 159.248.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 00:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:59:b6:99:e7:ef:2d:5c:00:87:99:d0:84:e3:f7:33:b8:7f:dc:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Validity Not Before: Jun 25 00:00:40 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=4a2c89b5f6980d01f1d5234bbae36bb34dc3114579267a608df8df1e9252b0ce, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:42:5c:48:03:eb:0f:9a:d1:79:db:51:fc:a1: ee:40:14:67:1e:c3:b5:8d:4c:09:66:84:94:61:99: 3d:39:b2:ba:7b:33:6a:72:00:b0:da:d9:8e:11:cc: 18:71:5b:71:fe:99:cb:e1:2d:49:fd:4c:dc:8c:5b: d9:5c:1d:af:07:00:d7:d4:44:e9:33:e9:04:52:f0: 10:21:b2:22:2d:f0:b0:67:59:79:29:28:c8:b3:d0: 80:4d:bf:7a:84:b0:47:59:ba:bd:68:87:27:5e:a0: e0:66:a9:10:d1:1f:f3:3c:96:b5:9d:68:03:44:50: 2e:eb:4b:3b:45:4a:7d:c7:d0:eb:f6:69:4e:a1:92: 41:e1:d7:cc:fb:9c:61:ad:bd:a0:0c:e1:6f:85:47: cc:da:27:83:b3:e1:67:c5:ea:51:3c:b1:12:73:1a: ff:ea:3e:b7:f6:a6:81:17:71:1a:cf:31:8d:7f:1f: 11:53:c6:90:1e:b7:89:c1:73:d9:f1:c1:27:6b:c3: 74:70:2e:2c:3c:a1:a3:02:13:95:e3:88:dc:6a:87: e6:94:90:bd:e0:22:d1:0c:3c:6d:8c:fd:d6:a7:24: 40:8a:1d:d0:00:10:0c:77:60:ae:ef:61:7e:d0:30: 18:0f:3b:62:98:38:9e:27:14:72:c8:bc:36:1d:8a: d4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C5:2A:F0:91:A0:27:2F:8A:5B:D4:9F:C5:34:DE:96:D6:6A:A2:07 X509v3 Authority Key Identifier: keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e5ffe65e-7287-4628-8759-7c141866ee12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.248.0.0/16 Signature Algorithm: sha256WithRSAEncryption 75:4d:40:97:4d:13:20:c0:00:60:a9:41:19:7f:ff:d0:af:8a: dd:94:5d:3a:32:11:b0:fe:d2:b3:97:fa:ee:b8:a6:67:fa:0a: ec:05:eb:7f:c4:9e:18:14:23:16:69:99:1f:f1:8c:a3:6c:94: 1e:e1:ea:40:79:17:19:e8:af:2f:ab:26:2e:6a:53:48:df:74: 77:52:0e:0e:7c:14:6d:ae:36:9c:34:6e:59:82:76:59:6d:03: 36:0e:ec:bf:f3:0e:54:db:fb:5c:ed:cd:7c:5d:77:18:ef:e4: b8:d9:9e:bf:c7:58:e4:87:96:a5:16:a8:53:a5:82:e3:36:16: d7:f9:88:79:7e:8d:5d:da:89:b1:0b:1e:e1:65:82:27:96:7c: 35:8f:37:b8:6a:31:0d:3f:d8:a3:47:a1:c8:06:9b:72:28:ff: d3:d8:b3:8a:c6:3e:a6:8e:50:cd:28:90:83:f3:97:7a:f2:75: 59:cd:c1:84:58:c3:8a:cb:27:b6:b8:0d:c1:4c:ec:15:c3:1f: df:75:5d:d8:0c:99:96:0f:fd:2d:e7:61:93:1a:86:03:18:f8: 22:46:49:0b:a9:92:32:b8:1a:d8:31:15:05:fe:d0:ac:06:03: cc:1d:13:57:b4:3a:62:5a:d5:59:60:7d:72:28:81:3d:11:fd: 05:7c:de:90 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUElm2mefvLVwAh5nQhOP3M7h/3NYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg1M0RDMjIxMjVG QTM0RjM5ODZDQkYxMjQyMkUzNEY5QjlDNjYxQkU3MB4XDTI1MDYyNTAwMDA0MFoX DTI1MDczMDIzNTk1OVowejFJMEcGA1UEBRNANGEyYzg5YjVmNjk4MGQwMWYxZDUy MzRiYmFlMzZiYjM0ZGMzMTE0NTc5MjY3YTYwOGRmOGRmMWU5MjUyYjBjZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UJcSAPrD5rRedtR/KHuQBRnHsO1 jUwJZoSUYZk9ObK6ezNqcgCw2tmOEcwYcVtx/pnL4S1J/UzcjFvZXB2vBwDX1ETp M+kEUvAQIbIiLfCwZ1l5KSjIs9CATb96hLBHWbq9aIcnXqDgZqkQ0R/zPJa1nWgD RFAu60s7RUp9x9Dr9mlOoZJB4dfM+5xhrb2gDOFvhUfM2ieDs+FnxepRPLEScxr/ 6j639qaBF3EazzGNfx8RU8aQHreJwXPZ8cEna8N0cC4sPKGjAhOV44jcaofmlJC9 4CLRDDxtjP3WpyRAih3QABAMd2Cu72F+0DAYDztimDieJxRyyLw2HYrUKQIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFHvFKvCRoCcvilvUn8U03pbWaqIHMB8GA1UdIwQY MBaAFFPcIhJfo085hsvxJCLjT5ucZhvnMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9VOXdpRWwt alR6bUd5X0VrSXVOUG01eG1HLWMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2U1ZmZlNjVlLTcyODctNDYyOC04NzU5LTdjMTQxODY2ZWUxMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvYTViMDFiZGQtY2RlYi00Y2ZjLThjOTMtN2U3MGM1ZTA5MzA2LmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAn/gwDQYJKoZIhvcNAQELBQADggEBAHVNQJdNEyDAAGCpQRl//9Cv it2UXToyEbD+0rOX+u64pmf6CuwF63/EnhgUIxZpmR/xjKNslB7h6kB5Fxnory+r Ji5qU0jfdHdSDg58FG2uNpw0blmCdlltAzYO7L/zDlTb+1ztzXxddxjv5LjZnr/H WOSHlqUWqFOlguM2Ftf5iHl+jV3aibELHuFlgieWfDWPN7hqMQ0/2KNHocgGm3Io /9PYs4rGPqaOUM0okIPzl3rydVnNwYRYw4rLJ7a4DcFM7BXDH991XdgMmZYP/S3n YZMahgMY+CJGSQupkjK4GtgxFQX+0KwGA8wdE1e0OmJa1VlgfXIogT0R/QV83pA= -----END CERTIFICATE-----Generated at Mon Jun 30 18:29:47 2025 by rpki-client