$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46a9243f-83f1-42ec-bf8b-cbcd0e65fe25.roa File: 46a9243f-83f1-42ec-bf8b-cbcd0e65fe25.roa (raw, json) Hash identifier: mqOfiLIjmVAafuQzJzC21MNzXkGQXVDwTJmwG+D5mgw= Subject key identifier: F4:E1:F3:56:D1:9D:D9:F7:51:62:CF:8F:1F:B3:A7:F6:2B:07:31:DD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3B2A65A84210B4DAAD78B768708B44AAEC0D4F1E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46a9243f-83f1-42ec-bf8b-cbcd0e65fe25.roa Signing time: Tue 10 Jun 2025 00:20:12 +0000 ROA not before: Tue 10 Jun 2025 00:20:12 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:8c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:2a:65:a8:42:10:b4:da:ad:78:b7:68:70:8b:44:aa:ec:0d:4f:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 00:20:12 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=a9b400ed53e0d66a31eeb23b34e1cdc7419f341147678cd7eaacda73bd94a0b9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:46:cc:04:f0:5d:ec:9d:8d:88:a0:6c:6e:5f: 22:b2:bd:a7:22:d1:46:31:1a:9a:ea:86:fb:7f:ee: ec:a2:a7:df:c8:8c:37:47:af:b1:4e:26:35:3b:6c: 1a:78:35:2a:20:38:fc:ee:4c:26:86:1f:c4:c1:ec: 22:54:ef:6f:97:ca:e0:e4:23:9c:c1:ed:c3:06:60: 00:c3:5a:0d:95:aa:08:e5:d0:29:4e:31:e9:f9:12: 6c:6b:2a:c2:b4:2c:c0:ac:91:fe:5f:70:05:d6:08: 34:d4:46:15:e1:27:a8:3d:04:8d:2d:09:0f:c3:03: d4:44:77:15:4d:40:91:f2:10:c4:ae:55:53:b4:3d: b5:58:df:c8:b9:a0:9f:98:ba:e9:47:c8:ed:02:e2: ed:f5:f2:bc:d7:04:22:23:61:f9:87:04:e0:59:0e: 23:48:43:7c:35:df:7d:b6:15:1d:4a:1c:6a:03:11: a4:e2:72:31:3c:5c:05:80:ec:8b:7b:9c:e9:9d:81: e4:4e:a8:17:f2:91:07:17:6b:50:eb:ab:f7:db:2f: f4:f2:ee:5e:1c:3b:4b:80:a1:80:d2:77:ca:90:ce: 3c:0f:a0:b7:5a:60:23:c1:5a:07:ed:7a:1c:66:11: dd:ba:9c:af:e7:5c:01:49:c7:86:92:0c:72:e8:58: b2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E1:F3:56:D1:9D:D9:F7:51:62:CF:8F:1F:B3:A7:F6:2B:07:31:DD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46a9243f-83f1-42ec-bf8b-cbcd0e65fe25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:8c0::/46 Signature Algorithm: sha256WithRSAEncryption 36:61:16:a5:fc:eb:1b:c8:22:e5:70:73:33:53:f6:03:f9:41: 7d:c4:0a:76:34:26:57:81:fe:9e:73:5a:ec:28:ee:45:e4:63: d9:a8:21:c1:d4:5d:ec:4c:df:9d:01:25:cf:1e:25:0f:11:42: d3:f2:5f:c8:3e:01:98:3b:43:2d:24:8a:0c:d6:14:16:49:dd: 5b:af:9d:3f:d8:ea:b6:a0:55:2c:37:6c:f7:71:9a:0b:61:af: 16:89:1c:c3:75:4b:03:8e:5e:9b:f3:dd:2a:13:4e:78:b7:79: 58:4d:a2:b6:d2:a5:bb:69:cc:98:53:b0:19:77:40:76:ca:c8: c5:7a:3c:8d:fe:95:f1:9f:9e:8a:b4:7e:cd:94:af:b7:2e:86: 65:e5:12:3c:ee:a6:b4:ec:72:64:73:a6:8e:bd:a4:3b:71:b4: 29:fb:af:91:11:e6:6c:db:38:40:32:f5:bb:69:af:07:34:97: bd:a8:6b:3b:24:bd:66:dc:01:2b:6c:49:55:5b:0e:3a:89:df: ea:0d:fd:77:28:fd:f4:42:29:3e:83:32:5c:f2:64:ab:ec:fe: 28:9b:b9:2e:70:7f:9f:d3:98:4d:77:32:67:39:5c:89:27:6f: c1:82:93:c3:fc:ab:7c:e5:25:d0:a7:ef:17:37:5e:4a:1f:1e: 32:bb:5c:b5 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUOyplqEIQtNqteLdocItEquwNTx4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDAwMjAxMloX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAYTliNDAwZWQ1M2UwZDY2YTMxZWVi MjNiMzRlMWNkYzc0MTlmMzQxMTQ3Njc4Y2Q3ZWFhY2RhNzNiZDk0YTBiOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUbMBPBd7J2NiKBsbl8isr2nItFG MRqa6ob7f+7soqffyIw3R6+xTiY1O2waeDUqIDj87kwmhh/EwewiVO9vl8rg5COc we3DBmAAw1oNlaoI5dApTjHp+RJsayrCtCzArJH+X3AF1gg01EYV4SeoPQSNLQkP wwPURHcVTUCR8hDErlVTtD21WN/IuaCfmLrpR8jtAuLt9fK81wQiI2H5hwTgWQ4j SEN8Nd99thUdShxqAxGk4nIxPFwFgOyLe5zpnYHkTqgX8pEHF2tQ66v32y/08u5e HDtLgKGA0nfKkM48D6C3WmAjwVoH7XocZhHdupyv51wBSceGkgxy6FiyyQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPTh81bRndn3UWLPjx+zp/YrBzHdMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ2YTkyNDNmLTgzZjEtNDJlYy1iZjhiLWNiY2QwZTY1ZmUyNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba+wjAMA0GCSqGSIb3DQEBCwUAA4IBAQA2YRal/OsbyCLlcHMz U/YD+UF9xAp2NCZXgf6ec1rsKO5F5GPZqCHB1F3sTN+dASXPHiUPEULT8l/IPgGY O0MtJIoM1hQWSd1br50/2Oq2oFUsN2z3cZoLYa8WiRzDdUsDjl6b890qE054t3lY TaK20qW7acyYU7AZd0B2ysjFejyN/pXxn56KtH7NlK+3LoZl5RI87qa07HJkc6aO vaQ7cbQp+6+REeZs2zhAMvW7aa8HNJe9qGs7JL1m3AErbElVWw46id/qDf13KP30 Qik+gzJc8mSr7P4om7kucH+f05hNdzJnOVyJJ2/BgpPD/Kt85SXQp+8XN15KHx4y u1y1 -----END CERTIFICATE-----Generated at Sat Jun 14 06:10:37 2025 by rpki-client