$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/19c2d4e6-f756-4329-8ef7-563420636cfb.roa File: 19c2d4e6-f756-4329-8ef7-563420636cfb.roa (raw, json) Hash identifier: u9iyEeiXnDC/OZC8lNpWe/UwqvAqXTVzZ/urioFQ5v8= Subject key identifier: D9:35:25:CF:01:D1:FC:20:18:50:C6:39:E8:9D:B8:FB:43:8F:CF:66 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 324227A9EDE5C2BCEB47EC4B0DDDC6C015A1D7DB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/19c2d4e6-f756-4329-8ef7-563420636cfb.roa Signing time: Tue 17 Feb 2026 00:00:08 +0000 ROA not before: Tue 17 Feb 2026 00:00:08 +0000 ROA not after: Mon 18 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:42:27:a9:ed:e5:c2:bc:eb:47:ec:4b:0d:dd:c6:c0:15:a1:d7:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 17 00:00:08 2026 GMT Not After : May 18 23:59:59 2026 GMT Subject: serialNumber=b3283a090ece33ef36e82df2fa248ca77772f776585c4a939619479dd5d7627e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cc:1c:bf:6b:99:2c:ba:36:84:be:f7:9d:55: 11:36:09:73:4b:0c:3b:b5:28:89:b4:bb:c3:44:71: 68:7a:56:54:a8:7c:c8:11:ec:01:15:e2:c2:e7:0c: f9:47:b2:ee:0e:a1:78:46:9b:f4:36:2c:a8:eb:ab: 24:e3:44:e6:cb:52:b3:1b:c8:ae:49:6c:89:7c:b7: e8:64:59:9e:81:cd:2d:e1:de:49:4d:51:46:f7:68: 28:44:a4:9a:66:05:0d:96:25:f5:6e:84:fb:9b:ed: 08:40:5c:cf:cd:80:e3:e6:86:28:a5:b9:41:3d:c1: 47:b8:11:81:af:c4:12:ef:f7:8e:1c:a3:82:90:3d: 7b:e4:6c:99:d5:85:7f:cd:15:0b:fc:db:60:2e:23: d3:eb:57:b6:7d:d5:7c:aa:c7:d0:4b:af:a0:25:1d: 44:14:0e:68:e9:60:2e:35:cd:4b:38:9a:59:96:57: 0e:f2:b1:6b:d3:53:61:b0:b7:7f:5c:72:5f:61:2a: eb:58:66:c0:d3:9c:c9:ce:13:f1:75:85:ea:cb:03: 24:26:88:70:51:14:54:1d:e9:0a:ec:8f:bd:75:9b: 24:15:1a:ea:2d:8e:71:d7:14:4c:74:f0:ec:fb:46: c4:25:7a:c5:cd:ca:95:63:04:2e:8b:25:37:04:e2: a2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:35:25:CF:01:D1:FC:20:18:50:C6:39:E8:9D:B8:FB:43:8F:CF:66 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/19c2d4e6-f756-4329-8ef7-563420636cfb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:4000::/48 Signature Algorithm: sha256WithRSAEncryption 36:c0:bc:a8:b0:d4:3e:fb:36:9d:8f:1f:ca:fb:b1:7e:90:62: 4b:64:5b:b8:81:4e:0a:b7:ee:99:78:89:07:10:50:71:07:d4: 1a:a4:fe:28:91:61:31:6a:96:af:53:ce:c1:82:a1:0b:8f:3d: 0e:2c:a7:27:15:0b:eb:54:f7:d0:30:b8:da:d6:17:6a:4f:04: 85:17:16:03:f0:43:f8:14:6f:c1:3b:8e:3f:e7:28:3e:50:ae: 72:3f:ea:51:a9:c7:79:2f:0b:7e:16:59:fe:cf:d8:d1:68:aa: c8:44:db:c7:9e:f7:5b:43:23:55:dc:0a:d3:f8:ed:8a:5e:54: b8:1b:93:50:c7:3a:10:91:98:c0:12:07:3a:9d:ef:af:cd:46: d2:55:06:f1:84:e1:ad:75:8e:69:f3:2c:a1:4d:ec:94:3a:5b: 54:fd:32:16:be:84:c3:25:37:d8:fc:b0:e4:d3:b7:c5:01:36: 10:a4:65:13:ea:24:f3:c9:ff:c9:61:79:31:9d:20:8f:30:51: ff:64:fd:92:fb:fd:58:81:30:44:ec:74:17:38:c0:23:f8:78: 84:c8:cb:e9:a9:d9:c9:c2:bd:80:e1:00:3f:e5:66:f2:c2:54: 8b:bc:f2:38:54:d3:ce:d5:19:16:d7:68:31:08:96:24:08:70: c7:d3:5b:5e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUMkInqe3lwrzrR+xLDd3GwBWh19swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxNzAwMDAwOFoX DTI2MDUxODIzNTk1OVowejFJMEcGA1UEBRNAYjMyODNhMDkwZWNlMzNlZjM2ZTgy ZGYyZmEyNDhjYTc3NzcyZjc3NjU4NWM0YTkzOTYxOTQ3OWRkNWQ3NjI3ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxswcv2uZLLo2hL73nVURNglzSww7 tSiJtLvDRHFoelZUqHzIEewBFeLC5wz5R7LuDqF4Rpv0Niyo66sk40Tmy1KzG8iu SWyJfLfoZFmegc0t4d5JTVFG92goRKSaZgUNliX1boT7m+0IQFzPzYDj5oYopblB PcFHuBGBr8QS7/eOHKOCkD175GyZ1YV/zRUL/NtgLiPT61e2fdV8qsfQS6+gJR1E FA5o6WAuNc1LOJpZllcO8rFr01NhsLd/XHJfYSrrWGbA05zJzhPxdYXqywMkJohw URRUHekK7I+9dZskFRrqLY5x1xRMdPDs+0bEJXrFzcqVYwQuiyU3BOKixwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNk1Jc8B0fwgGFDGOeiduPtDj89mMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE5YzJkNGU2LWY3NTYtNDMyOS04ZWY3LTU2MzQyMDYzNmNmYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba9kAAMA0GCSqGSIb3DQEBCwUAA4IBAQA2wLyosNQ++zadjx/K +7F+kGJLZFu4gU4Kt+6ZeIkHEFBxB9QapP4okWExapavU87BgqELjz0OLKcnFQvr VPfQMLja1hdqTwSFFxYD8EP4FG/BO44/5yg+UK5yP+pRqcd5Lwt+Fln+z9jRaKrI RNvHnvdbQyNV3ArT+O2KXlS4G5NQxzoQkZjAEgc6ne+vzUbSVQbxhOGtdY5p8yyh TeyUOltU/TIWvoTDJTfY/LDk07fFATYQpGUT6iTzyf/JYXkxnSCPMFH/ZP2S+/1Y gTBE7HQXOMAj+HiEyMvpqdnJwr2A4QA/5WbywlSLvPI4VNPO1RkW12gxCJYkCHDH 01te -----END CERTIFICATE-----Generated at Sun Mar 1 22:16:30 2026 by rpki-client