$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/17ae18fe-9d0a-4abf-a634-7c34efc9ac29.roa File: 17ae18fe-9d0a-4abf-a634-7c34efc9ac29.roa (raw, json) Hash identifier: 9ryFhi5B3peM1XtlqrShfpwJVgCmLMq6gOZLvLzdrkI= Subject key identifier: 0F:D0:94:CD:F6:41:E5:BD:53:DA:FA:A2:0F:F7:3E:15:57:9D:CD:9E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 34A4EE71BD4D00461C3AE012B4EA5062BD124AFF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/17ae18fe-9d0a-4abf-a634-7c34efc9ac29.roa Signing time: Sat 21 Feb 2026 00:10:12 +0000 ROA not before: Sat 21 Feb 2026 00:10:12 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daec:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:a4:ee:71:bd:4d:00:46:1c:3a:e0:12:b4:ea:50:62:bd:12:4a:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 21 00:10:12 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=4e5580a42db446ba0befb3b98b340687cdb973db5ab0294f7ae84150ff590b93, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:93:c5:e3:e1:c2:62:a5:75:bf:0a:4d:6e:77: f9:e8:c9:67:43:3e:5c:51:96:ed:c1:4e:c9:0b:0c: 49:8e:b0:92:d9:cb:31:a9:a1:8b:65:0f:da:fd:8b: 2f:f1:7c:4c:23:f0:9a:1b:39:78:70:93:a6:79:5f: 75:42:dd:27:d1:77:3c:f1:5d:f6:ce:48:bf:6a:a7: 94:2b:10:ce:44:7e:a9:a7:75:8c:14:21:a8:69:97: 74:4a:3c:15:f9:bd:2c:f4:e2:60:a6:15:9c:d5:6b: 7b:7d:f8:0b:91:2d:be:e5:48:3f:6b:95:77:e0:2e: 05:b2:11:d6:dd:45:08:74:33:ac:57:8c:1e:6d:ff: c7:7d:4a:5c:93:58:0c:82:b3:a3:03:a4:1b:66:29: af:e1:ac:e4:07:4f:18:62:7f:56:56:7f:73:e7:42: e0:3b:bf:97:d7:f6:c3:27:33:3d:7b:2f:29:10:ef: 79:7f:5e:dd:db:3d:a1:c0:f5:c9:f7:ba:eb:ee:68: 5f:8a:95:83:9f:49:a8:5c:44:d3:b6:93:c7:36:41: 54:2c:ac:18:7f:0b:30:95:ce:49:d3:68:df:f5:7b: e6:6f:47:2a:8b:fb:e8:ba:ab:60:b4:06:28:8b:0c: de:cd:28:6e:33:2e:7e:74:c3:73:1c:c6:17:97:7a: 63:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D0:94:CD:F6:41:E5:BD:53:DA:FA:A2:0F:F7:3E:15:57:9D:CD:9E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/17ae18fe-9d0a-4abf-a634-7c34efc9ac29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daec:8000::/48 Signature Algorithm: sha256WithRSAEncryption 40:20:3a:ae:03:ec:36:ee:34:af:ae:fd:10:3b:7a:a3:dd:b4: a7:cb:60:8c:76:b7:2b:4d:a5:ce:e8:72:cc:b6:aa:d1:48:93: 3a:be:2e:73:1d:be:6b:00:93:e6:7d:2c:6c:f1:52:2a:b2:bf: 63:e3:39:88:cc:6c:45:72:9a:e4:4d:2b:23:65:23:b9:fa:f7: 4a:96:36:c6:07:98:96:88:48:53:f8:6b:a4:22:18:4c:61:a2: 90:b4:69:e8:ea:32:61:c9:38:01:02:09:82:4f:27:91:c3:fc: 75:21:97:f0:d7:11:f2:e7:17:8a:48:be:c6:ba:76:f1:e3:60: f3:a0:2c:ca:24:fe:94:be:2c:34:6a:34:a8:6c:2f:37:c6:0a: 43:01:b2:96:13:41:b8:67:af:3f:75:88:6a:7a:a9:49:70:c3: e8:2a:44:6a:60:7a:a0:5b:97:10:a8:8b:ac:51:c0:f7:28:f1: a7:dd:40:d3:73:dd:99:ca:54:0f:92:c0:39:10:26:cc:5a:dd: 9b:a9:8a:9a:4c:25:5f:aa:a1:6c:ef:34:51:5e:d8:00:b8:81: a4:62:ee:aa:24:42:44:9d:25:08:1e:06:50:e8:a9:19:be:50: b6:3f:4c:58:21:a5:75:ab:e1:70:0e:7f:6b:d0:79:1f:c1:56: 18:79:92:28 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUNKTucb1NAEYcOuAStOpQYr0SSv8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMTAwMTAxMloX DTI2MDUyMjIzNTk1OVowejFJMEcGA1UEBRNANGU1NTgwYTQyZGI0NDZiYTBiZWZi M2I5OGIzNDA2ODdjZGI5NzNkYjVhYjAyOTRmN2FlODQxNTBmZjU5MGI5MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZPF4+HCYqV1vwpNbnf56MlnQz5c UZbtwU7JCwxJjrCS2csxqaGLZQ/a/Ysv8XxMI/CaGzl4cJOmeV91Qt0n0Xc88V32 zki/aqeUKxDORH6pp3WMFCGoaZd0SjwV+b0s9OJgphWc1Wt7ffgLkS2+5Ug/a5V3 4C4FshHW3UUIdDOsV4webf/HfUpck1gMgrOjA6QbZimv4azkB08YYn9WVn9z50Lg O7+X1/bDJzM9ey8pEO95f17d2z2hwPXJ97rr7mhfipWDn0moXETTtpPHNkFULKwY fwswlc5J02jf9Xvmb0cqi/vouqtgtAYoiwzezShuMy5+dMNzHMYXl3pjYwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFA/QlM32QeW9U9r6og/3PhVXnc2eMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE3YWUxOGZlLTlkMGEtNGFiZi1hNjM0LTdjMzRlZmM5YWMyOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba7IAAMA0GCSqGSIb3DQEBCwUAA4IBAQBAIDquA+w27jSvrv0Q O3qj3bSny2CMdrcrTaXO6HLMtqrRSJM6vi5zHb5rAJPmfSxs8VIqsr9j4zmIzGxF cprkTSsjZSO5+vdKljbGB5iWiEhT+GukIhhMYaKQtGno6jJhyTgBAgmCTyeRw/x1 IZfw1xHy5xeKSL7Gunbx42DzoCzKJP6Uviw0ajSobC83xgpDAbKWE0G4Z68/dYhq eqlJcMPoKkRqYHqgW5cQqIusUcD3KPGn3UDTc92ZylQPksA5ECbMWt2bqYqaTCVf qqFs7zRRXtgAuIGkYu6qJEJEnSUIHgZQ6KkZvlC2P0xYIaV1q+FwDn9r0HkfwVYY eZIo -----END CERTIFICATE-----Generated at Sun Mar 1 22:09:06 2026 by rpki-client