$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46414410-3c41-474e-9f4b-cac045e67568.roa File: 46414410-3c41-474e-9f4b-cac045e67568.roa (raw, json) Hash identifier: /hPlVhRBZ9YjyJFBp4KtuXUEaEEAZX/Lp5Jz7fZGs8s= Subject key identifier: 4F:00:E4:4F:63:DA:0A:4F:B6:28:1E:D1:5E:6C:5E:C2:A0:73:FA:29 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 19A34219E79B660B49F871749A8DE5FDF5338548 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46414410-3c41-474e-9f4b-cac045e67568.roa Signing time: Fri 16 May 2025 15:50:07 +0000 ROA not before: Fri 16 May 2025 15:50:07 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da14:8800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 00:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:a3:42:19:e7:9b:66:0b:49:f8:71:74:9a:8d:e5:fd:f5:33:85:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 15:50:07 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=8e7d5472470fdab764810bd9c1bdb16d50a8fee3a01203383495a79041fefe3f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:37:41:c6:6a:5b:7b:32:b8:a7:d6:93:e9:6b: 63:f2:82:aa:ac:80:05:da:7d:1a:e1:84:41:77:4a: 02:e6:58:27:d6:6e:82:30:3b:b0:86:2a:70:70:8f: c4:18:f1:e5:d4:03:2c:ae:bc:d3:89:29:02:33:5b: 17:c5:8c:2b:d3:2e:f5:61:16:67:3f:9a:22:19:f1: 43:30:a2:d9:70:e2:ea:38:53:b6:5b:af:ce:96:5a: 69:c2:8b:1b:9e:77:b4:a6:94:c3:37:e9:f6:8e:fd: 9f:32:50:1e:fd:72:ea:5a:24:61:43:36:29:e0:32: db:f6:8a:ff:19:63:d0:69:2f:56:49:a9:f7:00:37: ef:47:cf:9f:27:e5:b5:47:72:cb:f9:d3:e2:37:5c: a2:9f:a8:47:9a:e0:93:4d:4a:6c:a5:da:72:f2:4f: 4f:e8:60:68:ad:5b:ea:c1:6b:55:61:fa:29:e9:38: 53:d8:62:64:9a:52:92:72:97:a1:61:a9:02:09:e8: 5d:a6:7c:ad:b2:7d:1d:bf:2a:03:51:e0:60:65:e7: d9:51:a8:a2:a1:df:81:b0:5f:2b:06:5e:3e:17:e5: b2:8f:f0:66:9b:bc:42:7b:1b:ef:1f:4d:1c:a9:88: a3:7e:38:f2:a6:32:8b:e9:e0:e7:4f:a3:b9:34:59: 49:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:00:E4:4F:63:DA:0A:4F:B6:28:1E:D1:5E:6C:5E:C2:A0:73:FA:29 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46414410-3c41-474e-9f4b-cac045e67568.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da14:8800::/38 Signature Algorithm: sha256WithRSAEncryption 42:33:ba:18:b6:81:09:fe:36:35:6c:fc:84:ad:b3:df:ea:a9: f2:3d:6c:5d:80:5a:22:2a:47:93:56:54:91:53:f2:6f:75:6d: bf:bd:fc:25:69:2e:87:81:59:55:4e:e8:41:1a:2f:d1:86:70: 96:dd:4a:f8:49:74:c4:cb:15:c4:db:4c:89:db:a1:a8:84:9b: ee:e1:a8:f8:20:fa:8c:d4:ae:61:e0:e1:03:cc:73:fe:09:3b: 84:b4:ab:8e:f7:31:7d:94:5a:db:a3:aa:97:92:39:f9:dd:29: 3e:0f:3a:0f:43:56:d0:07:cd:ad:6d:ce:80:76:61:e8:e5:c2: b5:ff:c2:9b:7d:3d:6f:a9:54:89:f0:e9:b8:49:9a:c3:fd:c6: fe:fb:49:94:ad:fb:a6:41:d2:40:90:1a:6f:d4:95:a1:91:e6: f8:08:49:da:88:6f:dd:54:84:01:96:77:53:ab:06:0b:1b:b4: f7:fa:a5:32:56:88:a8:02:21:37:ab:ea:08:65:c9:9d:77:49: 98:38:99:8d:97:d8:21:df:b1:47:87:b6:de:f9:a8:5c:4a:d6: 40:d5:d3:fb:e7:c1:c4:a3:33:6c:d1:af:8a:61:bc:31:f9:c0: 2f:12:d2:5b:90:59:7b:32:4e:45:8f:72:be:3a:d5:d6:82:1a: 63:f8:b3:1a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUGaNCGeebZgtJ+HF0mo3l/fUzhUgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjE1NTAwN1oX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAOGU3ZDU0NzI0NzBmZGFiNzY0ODEw YmQ5YzFiZGIxNmQ1MGE4ZmVlM2EwMTIwMzM4MzQ5NWE3OTA0MWZlZmUzZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDdBxmpbezK4p9aT6Wtj8oKqrIAF 2n0a4YRBd0oC5lgn1m6CMDuwhipwcI/EGPHl1AMsrrzTiSkCM1sXxYwr0y71YRZn P5oiGfFDMKLZcOLqOFO2W6/Ollppwosbnne0ppTDN+n2jv2fMlAe/XLqWiRhQzYp 4DLb9or/GWPQaS9WSan3ADfvR8+fJ+W1R3LL+dPiN1yin6hHmuCTTUpspdpy8k9P 6GBorVvqwWtVYfop6ThT2GJkmlKScpehYakCCehdpnytsn0dvyoDUeBgZefZUaii od+BsF8rBl4+F+Wyj/Bmm7xCexvvH00cqYijfjjypjKL6eDnT6O5NFlJAwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFE8A5E9j2gpPtige0V5sXsKgc/opMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ2NDE0NDEwLTNjNDEtNDc0ZS05ZjRiLWNhYzA0NWU2NzU2OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaFIgwDQYJKoZIhvcNAQELBQADggEBAEIzuhi2gQn+NjVs/ISt s9/qqfI9bF2AWiIqR5NWVJFT8m91bb+9/CVpLoeBWVVO6EEaL9GGcJbdSvhJdMTL FcTbTInboaiEm+7hqPgg+ozUrmHg4QPMc/4JO4S0q473MX2UWtujqpeSOfndKT4P Og9DVtAHza1tzoB2YejlwrX/wpt9PW+pVInw6bhJmsP9xv77SZSt+6ZB0kCQGm/U laGR5vgISdqIb91UhAGWd1OrBgsbtPf6pTJWiKgCITer6ghlyZ13SZg4mY2X2CHf sUeHtt75qFxK1kDV0/vnwcSjM2zRr4phvDH5wC8S0luQWXsyTkWPcr461daCGmP4 sxo= -----END CERTIFICATE-----Generated at Mon Jun 2 06:27:40 2025 by rpki-client