$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/070bdab9-7162-422b-9f8a-f8d4ae428be1.roa File: 070bdab9-7162-422b-9f8a-f8d4ae428be1.roa (raw, json) Hash identifier: lZ1gsdaQ08IcFhEORYSaX0U/lgx+u4+8ofLuqstGOJM= Subject key identifier: 07:32:0A:8B:6D:62:FE:D0:CC:B4:7A:7D:FA:98:DD:06:3A:D4:FB:F7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4CBDE7DC80F2A2325E8D272FC4FE4933AD70220B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/070bdab9-7162-422b-9f8a-f8d4ae428be1.roa Signing time: Sat 28 Feb 2026 00:00:44 +0000 ROA not before: Sat 28 Feb 2026 00:00:44 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da2a:8000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:bd:e7:dc:80:f2:a2:32:5e:8d:27:2f:c4:fe:49:33:ad:70:22:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 28 00:00:44 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=1e16bd51278c30dcb05c037defd165af693d06f51f3474ec62948c20268d3a40, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d3:85:49:5e:d6:1e:27:4f:b1:70:00:4c:84: c8:42:1e:91:23:82:b9:80:7f:37:24:ec:42:26:79: 0b:cd:a0:04:a0:8c:23:81:bc:94:69:52:01:04:99: 97:0d:de:e4:f5:8b:65:72:1f:87:8e:cf:5b:dd:97: b6:08:14:0f:49:81:1d:89:b3:59:01:12:af:ca:2e: 66:40:6c:42:5b:be:a2:62:aa:52:b2:56:bf:c0:10: fc:b6:65:ac:bc:18:74:76:ac:ee:db:2e:d9:4f:12: 20:be:f5:09:a6:f4:0d:f3:2c:fe:3c:4c:16:21:e1: e9:27:9b:12:da:51:86:8a:f1:5a:ac:6c:12:64:45: 37:1b:24:dc:f0:24:05:c8:6d:21:86:61:1b:1d:16: 5d:88:89:34:c0:b2:24:16:de:70:c2:1c:6b:dd:3b: 22:29:b4:95:31:a9:3e:76:8d:d2:b8:35:da:b7:e7: c1:fc:c8:d4:a6:00:03:56:2a:90:25:12:5f:d8:20: dd:1b:fe:7d:79:56:f6:01:f0:15:20:77:5d:b9:4d: f3:36:03:18:ea:4a:32:2b:39:41:1f:1d:f4:57:3e: 9f:74:be:92:46:27:99:07:d6:6a:2d:b2:9f:02:fd: 96:16:29:e0:e3:3e:5e:1d:8c:ec:c0:6e:56:d0:25: 4f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:32:0A:8B:6D:62:FE:D0:CC:B4:7A:7D:FA:98:DD:06:3A:D4:FB:F7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/070bdab9-7162-422b-9f8a-f8d4ae428be1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da2a:8000::/37 Signature Algorithm: sha256WithRSAEncryption 9d:e1:80:f1:e7:f0:0c:14:4d:b3:ec:5f:e5:00:21:80:2c:a1: b0:9d:a1:1a:75:22:9f:05:61:25:27:50:7c:c0:30:e4:af:1d: 47:31:95:69:69:85:87:45:c5:96:f8:dd:e1:45:98:09:8e:37: f8:23:5d:f5:01:bc:20:1a:2c:83:48:44:8d:e4:3a:ff:9f:21: d4:d7:8d:d0:06:20:2f:75:df:44:2a:e9:e9:11:64:4d:8c:5f: 68:0e:7f:a6:7f:65:1d:f7:ea:1d:d0:e3:4a:75:3d:05:57:b8: 2a:2f:77:3d:ab:64:b4:d8:99:f6:59:36:be:71:3a:94:51:e7: 74:57:dc:ae:02:24:c6:69:ab:b6:d0:5f:94:63:8f:4d:7f:cd: 52:d8:12:99:9c:91:04:51:9a:7b:b0:7b:54:9f:eb:56:ba:27: 17:2f:be:b4:c3:d4:ed:a3:9b:db:69:33:54:e3:ca:b4:4c:1b: d4:1a:50:56:01:e9:54:30:f0:42:44:5a:70:29:75:d4:b9:71: a6:69:d0:b9:06:a8:a0:c9:cd:dd:74:44:7b:11:2c:fb:5b:cf: b0:d9:77:cc:ef:53:d8:38:fa:16:dd:48:63:a1:52:63:4e:23: c0:b2:06:e1:7d:27:e8:ff:84:a8:cb:3d:59:98:81:59:50:ff: f1:6a:f1:3a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUTL3n3IDyojJejScvxP5JM61wIgswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyODAwMDA0NFoX DTI2MDUyOTIzNTk1OVowejFJMEcGA1UEBRNAMWUxNmJkNTEyNzhjMzBkY2IwNWMw MzdkZWZkMTY1YWY2OTNkMDZmNTFmMzQ3NGVjNjI5NDhjMjAyNjhkM2E0MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdOFSV7WHidPsXAATITIQh6RI4K5 gH83JOxCJnkLzaAEoIwjgbyUaVIBBJmXDd7k9Ytlch+Hjs9b3Ze2CBQPSYEdibNZ ARKvyi5mQGxCW76iYqpSsla/wBD8tmWsvBh0dqzu2y7ZTxIgvvUJpvQN8yz+PEwW IeHpJ5sS2lGGivFarGwSZEU3GyTc8CQFyG0hhmEbHRZdiIk0wLIkFt5wwhxr3Tsi KbSVMak+do3SuDXat+fB/MjUpgADViqQJRJf2CDdG/59eVb2AfAVIHdduU3zNgMY 6koyKzlBHx30Vz6fdL6SRieZB9ZqLbKfAv2WFing4z5eHYzswG5W0CVP+wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAcyCottYv7QzLR6ffqY3QY61Pv3MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA3MGJkYWI5LTcxNjItNDIyYi05ZjhhLWY4ZDRhZTQyOGJlMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYDJAbaKoAwDQYJKoZIhvcNAQELBQADggEBAJ3hgPHn8AwUTbPsX+UA IYAsobCdoRp1Ip8FYSUnUHzAMOSvHUcxlWlphYdFxZb43eFFmAmON/gjXfUBvCAa LINIRI3kOv+fIdTXjdAGIC9130Qq6ekRZE2MX2gOf6Z/ZR336h3Q40p1PQVXuCov dz2rZLTYmfZZNr5xOpRR53RX3K4CJMZpq7bQX5Rjj01/zVLYEpmckQRRmnuwe1Sf 61a6JxcvvrTD1O2jm9tpM1TjyrRMG9QaUFYB6VQw8EJEWnApddS5caZp0LkGqKDJ zd10RHsRLPtbz7DZd8zvU9g4+hbdSGOhUmNOI8CyBuF9J+j/hKjLPVmYgVlQ//Fq 8To= -----END CERTIFICATE-----Generated at Sun Mar 1 22:12:14 2026 by rpki-client