$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46414410-3c41-474e-9f4b-cac045e67568.roa File: 46414410-3c41-474e-9f4b-cac045e67568.roa (raw, json) Hash identifier: aAZ6nU//ltO2E7iIHEqV683Y7blfxhXfgnP++rVsM80= Subject key identifier: D3:D1:9D:95:0D:91:5D:91:09:7B:67:4D:17:CB:D3:DE:17:E0:88:BF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 63350E4F45DDC013C3E4467028DD000794D3EA80 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46414410-3c41-474e-9f4b-cac045e67568.roa Signing time: Wed 15 Oct 2025 00:50:27 +0000 ROA not before: Wed 15 Oct 2025 00:50:27 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da14:8800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:35:0e:4f:45:dd:c0:13:c3:e4:46:70:28:dd:00:07:94:d3:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 15 00:50:27 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=b74ad6f87f947a2bea721613766e4afb8349a8521429361cf31285c95b249faf, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:28:77:e8:ec:2a:6a:6e:27:1c:5f:1f:98:af: ab:cb:1c:bd:8c:3c:69:b3:b4:cc:cb:56:da:4e:bf: a0:70:89:52:fc:a8:1b:a5:84:b3:9c:66:9d:49:92: 6c:fa:44:e0:5b:c5:37:6f:86:83:01:da:f1:cf:9a: 5f:80:e6:26:17:b4:83:0c:71:7e:ae:41:ce:5c:22: 1b:11:f0:04:a4:12:9f:f1:78:51:54:3f:99:65:8d: af:16:29:22:f8:33:4c:a0:f7:47:9f:15:08:e5:a5: dc:44:d2:8c:77:f2:f7:3e:27:b0:f4:ac:51:28:b8: f8:5d:94:e8:46:1d:98:a7:7e:97:25:59:ad:45:0b: 38:cf:8f:02:6b:48:12:ab:58:0f:98:c3:87:dc:ac: e9:7e:cf:6f:cb:6f:0b:5e:62:da:03:fe:1c:d2:86: 71:90:35:1f:b7:63:30:1b:0d:e5:38:e1:86:16:ac: 54:36:67:bc:2e:02:67:c3:ba:d4:90:36:04:6f:c8: e6:7f:ce:79:6b:30:64:c4:0a:b8:69:98:22:72:32: f6:b7:85:99:57:30:b2:80:cf:91:81:82:9d:01:49: b4:fb:32:c1:48:f3:0f:50:cf:c5:91:6e:00:11:99: 40:21:0e:a2:7b:91:97:c0:10:a0:17:4a:75:92:4c: 9b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D1:9D:95:0D:91:5D:91:09:7B:67:4D:17:CB:D3:DE:17:E0:88:BF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46414410-3c41-474e-9f4b-cac045e67568.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da14:8800::/38 Signature Algorithm: sha256WithRSAEncryption 3c:77:88:80:cf:44:11:73:16:61:98:ad:26:16:ed:37:b2:c9: 15:53:33:ff:eb:99:d9:c0:80:35:c8:6e:f4:d6:66:08:66:23: ce:87:aa:9a:45:3e:80:7f:79:4f:b7:ce:16:6b:7f:b5:38:0a: da:3b:54:e9:39:ca:de:fd:95:42:af:25:6c:95:9f:ef:da:2b: 0c:a3:92:73:06:96:9f:78:6d:c6:04:1c:b3:82:9a:fe:0d:42: b6:e0:9c:42:bb:0a:fa:33:2a:db:f9:bb:94:cf:df:69:fd:98: 1b:21:5e:a2:44:10:5d:1e:ca:b6:15:d4:bd:8e:81:38:24:f3: cb:16:0e:6e:72:12:02:66:73:e1:8d:58:79:6f:73:c2:ea:bf: 9e:86:4c:e4:07:e1:05:0f:1c:d2:49:c7:2b:e5:f3:19:de:46: 16:f7:61:71:61:a0:c6:71:84:95:b5:60:53:3d:94:c7:21:2c: 1e:54:41:76:07:ef:75:59:08:ea:a3:f4:17:c5:9a:1d:4a:d4: 2c:aa:c4:8a:dd:6a:09:b2:4d:3e:27:9c:07:cd:92:a8:2c:27: 59:40:1f:6b:30:6f:bb:2c:7e:1e:1f:0e:97:7d:33:54:91:41: 0a:5a:78:ec:03:7e:be:8b:15:52:a2:3c:f3:12:b0:07:4b:50: 48:41:eb:0b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUYzUOT0XdwBPD5EZwKN0AB5TT6oAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNTAwNTAyN1oX DTI1MTExOTIzNTk1OVowejFJMEcGA1UEBRNAYjc0YWQ2Zjg3Zjk0N2EyYmVhNzIx NjEzNzY2ZTRhZmI4MzQ5YTg1MjE0MjkzNjFjZjMxMjg1Yzk1YjI0OWZhZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSh36Owqam4nHF8fmK+ryxy9jDxp s7TMy1baTr+gcIlS/KgbpYSznGadSZJs+kTgW8U3b4aDAdrxz5pfgOYmF7SDDHF+ rkHOXCIbEfAEpBKf8XhRVD+ZZY2vFiki+DNMoPdHnxUI5aXcRNKMd/L3Piew9KxR KLj4XZToRh2Yp36XJVmtRQs4z48Ca0gSq1gPmMOH3Kzpfs9vy28LXmLaA/4c0oZx kDUft2MwGw3lOOGGFqxUNme8LgJnw7rUkDYEb8jmf855azBkxAq4aZgicjL2t4WZ VzCygM+RgYKdAUm0+zLBSPMPUM/FkW4AEZlAIQ6ie5GXwBCgF0p1kkybTwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNPRnZUNkV2RCXtnTRfL094X4Ii/MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ2NDE0NDEwLTNjNDEtNDc0ZS05ZjRiLWNhYzA0NWU2NzU2OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaFIgwDQYJKoZIhvcNAQELBQADggEBADx3iIDPRBFzFmGYrSYW 7TeyyRVTM//rmdnAgDXIbvTWZghmI86HqppFPoB/eU+3zhZrf7U4Cto7VOk5yt79 lUKvJWyVn+/aKwyjknMGlp94bcYEHLOCmv4NQrbgnEK7CvozKtv5u5TP32n9mBsh XqJEEF0eyrYV1L2OgTgk88sWDm5yEgJmc+GNWHlvc8Lqv56GTOQH4QUPHNJJxyvl 8xneRhb3YXFhoMZxhJW1YFM9lMchLB5UQXYH73VZCOqj9BfFmh1K1CyqxIrdagmy TT4nnAfNkqgsJ1lAH2swb7ssfh4fDpd9M1SRQQpaeOwDfr6LFVKiPPMSsAdLUEhB 6ws= -----END CERTIFICATE-----Generated at Mon Oct 20 13:11:23 2025 by rpki-client