$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/13126cec-b0b1-4417-bf14-3d918163685c.roa File: 13126cec-b0b1-4417-bf14-3d918163685c.roa (raw, json) Hash identifier: PYhIohEYKEX0fiyiisxgDwQx84A/4pnlQfS9f4jMf1Y= Subject key identifier: AE:B9:F5:70:E7:2B:1C:46:09:40:2F:7F:F2:43:5F:EB:F6:4A:1E:AB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 14C5AD070ACD2855624403E6E37E8C07BCA283BD Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/13126cec-b0b1-4417-bf14-3d918163685c.roa Signing time: Wed 18 Feb 2026 00:01:15 +0000 ROA not before: Wed 18 Feb 2026 00:01:15 +0000 ROA not after: Tue 19 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:e040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:c5:ad:07:0a:cd:28:55:62:44:03:e6:e3:7e:8c:07:bc:a2:83:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 18 00:01:15 2026 GMT Not After : May 19 23:59:59 2026 GMT Subject: serialNumber=f6b664963787cea0aa8e54c625d34aa382f1cec28c0e843598d5df1495aaf593, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2d:cb:54:5b:e9:1e:27:df:1f:f9:d4:8b:e7: 2c:19:d1:c4:71:c3:b9:70:1e:c1:d8:15:f6:47:21: 81:92:b1:32:23:3a:d1:28:01:9c:19:fa:dc:49:94: 65:f5:bc:19:a9:35:f5:ac:fc:c8:b6:ee:a6:f9:7a: 51:dd:a8:d1:08:c6:10:06:18:9e:89:8b:0f:82:d6: 5b:97:68:84:23:6f:3d:22:d4:ef:b6:c2:73:5b:30: 86:f5:a8:ee:17:85:3b:0f:8f:b2:86:1e:1d:bc:34: 1b:6d:04:29:95:2d:cb:72:55:57:c1:c0:b6:8d:fa: e5:56:6a:77:b8:cd:19:35:c6:29:27:62:04:56:4b: 17:2a:4a:ae:50:bf:f7:3f:ba:75:49:f9:9b:c5:22: 02:1e:59:3d:56:38:da:ee:97:e4:50:ac:29:65:e6: 3a:d5:8f:da:0a:1f:59:06:4a:60:d3:0f:d9:95:2a: ef:05:56:d1:3a:7d:77:8a:28:2c:be:3a:23:6f:47: 92:14:3e:6c:2c:6d:22:9f:f0:c4:9e:d0:71:7e:a9: 6d:93:45:5a:fa:87:1e:05:f3:92:d9:82:e7:1b:be: 3d:95:2e:d4:58:04:d5:bb:c1:82:5c:21:22:02:c6: 23:65:c6:8c:a9:fe:f3:d6:11:39:28:bf:b2:60:67: bb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B9:F5:70:E7:2B:1C:46:09:40:2F:7F:F2:43:5F:EB:F6:4A:1E:AB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/13126cec-b0b1-4417-bf14-3d918163685c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:e040::/48 Signature Algorithm: sha256WithRSAEncryption 28:d3:9e:0a:c9:a5:49:1c:d8:c4:61:a5:30:2d:29:81:02:43: f0:1a:c6:25:3c:6f:eb:3e:66:5e:51:38:9d:72:e1:de:6f:7f: 32:33:60:22:e2:64:be:a5:ff:a3:be:52:d2:01:f1:93:67:85: a8:7d:37:dd:2b:91:fc:c4:b8:ad:6e:5f:36:4d:eb:ac:23:de: a8:e6:c4:16:96:41:44:66:0c:16:22:db:c6:3a:20:88:76:ab: 5f:d1:56:24:30:00:94:31:e1:bb:3d:ad:01:96:43:8a:dd:50: bd:4e:f0:05:6b:a8:73:d0:18:80:f4:a1:0f:42:60:f0:e1:7b: 9b:09:30:11:5f:64:8c:e0:68:55:23:24:28:9a:64:4d:df:97: b3:26:66:c8:ce:b3:76:32:84:32:ce:46:41:30:f2:3b:94:9a: 2e:47:3e:ec:62:b2:5a:c2:4d:58:6f:5d:1c:08:6d:d3:d4:7a: 15:89:fe:58:35:1a:9d:fa:56:a8:7e:9d:c9:56:89:2e:2d:bc: 38:70:3f:76:db:26:47:8b:29:22:42:c3:6b:a9:b3:de:f6:95: fb:fe:d6:ce:f0:76:a6:3b:45:13:cd:d0:51:d4:6a:7e:28:98: 1c:53:d5:d1:f8:f8:f0:ae:e4:c7:d9:32:02:dc:28:e6:41:56: aa:41:66:ad -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUFMWtBwrNKFViRAPm436MB7yig70wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxODAwMDExNVoX DTI2MDUxOTIzNTk1OVowejFJMEcGA1UEBRNAZjZiNjY0OTYzNzg3Y2VhMGFhOGU1 NGM2MjVkMzRhYTM4MmYxY2VjMjhjMGU4NDM1OThkNWRmMTQ5NWFhZjU5MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1C3LVFvpHiffH/nUi+csGdHEccO5 cB7B2BX2RyGBkrEyIzrRKAGcGfrcSZRl9bwZqTX1rPzItu6m+XpR3ajRCMYQBhie iYsPgtZbl2iEI289ItTvtsJzWzCG9ajuF4U7D4+yhh4dvDQbbQQplS3LclVXwcC2 jfrlVmp3uM0ZNcYpJ2IEVksXKkquUL/3P7p1SfmbxSICHlk9Vjja7pfkUKwpZeY6 1Y/aCh9ZBkpg0w/ZlSrvBVbROn13iigsvjojb0eSFD5sLG0in/DEntBxfqltk0Va +oceBfOS2YLnG749lS7UWATVu8GCXCEiAsYjZcaMqf7z1hE5KL+yYGe7yQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFK659XDnKxxGCUAvf/JDX+v2Sh6rMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzEzMTI2Y2VjLWIwYjEtNDQxNy1iZjE0LTNkOTE4MTYzNjg1Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8uBAMA0GCSqGSIb3DQEBCwUAA4IBAQAo054KyaVJHNjEYaUw LSmBAkPwGsYlPG/rPmZeUTidcuHeb38yM2Ai4mS+pf+jvlLSAfGTZ4WofTfdK5H8 xLitbl82TeusI96o5sQWlkFEZgwWItvGOiCIdqtf0VYkMACUMeG7Pa0BlkOK3VC9 TvAFa6hz0BiA9KEPQmDw4XubCTARX2SM4GhVIyQommRN35ezJmbIzrN2MoQyzkZB MPI7lJouRz7sYrJawk1Yb10cCG3T1HoVif5YNRqd+laofp3JVokuLbw4cD922yZH iykiQsNrqbPe9pX7/tbO8HamO0UTzdBR1Gp+KJgcU9XR+PjwruTH2TIC3CjmQVaq QWat -----END CERTIFICATE-----Generated at Sun Mar 1 22:22:48 2026 by rpki-client