$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1be81b8b-723f-40f7-b725-279fceb1a1b2.roa File: 1be81b8b-723f-40f7-b725-279fceb1a1b2.roa (raw, json) Hash identifier: Tw/28xBH13hwXeHFZ9ZPt7a+ir4vVB4TBElMGf46pWQ= Subject key identifier: 2D:6B:60:EE:89:A7:62:5B:5F:3C:47:4E:8A:FC:C4:5D:55:A0:68:58 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 791E34546596F23D9CC40088C12284157313844A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1be81b8b-723f-40f7-b725-279fceb1a1b2.roa Signing time: Sat 28 Feb 2026 00:00:56 +0000 ROA not before: Sat 28 Feb 2026 00:00:56 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daef:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:1e:34:54:65:96:f2:3d:9c:c4:00:88:c1:22:84:15:73:13:84:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 28 00:00:56 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=4002f5a8b057234da018f9c026338bc13ceda365aecee564513b7c1ffbf8e93e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e8:05:60:da:7d:6c:05:d5:0b:71:84:48:35: 19:d2:05:74:c1:34:fd:b7:61:34:21:4b:55:ed:7e: d2:ea:d4:b7:48:42:7e:b9:22:95:1e:68:9d:ed:3e: ba:b9:22:33:98:b8:6f:78:33:a9:59:d2:04:4c:1c: f6:d0:74:5c:89:e3:ef:60:65:3b:c5:11:57:9b:65: ff:b9:fe:b5:e3:0f:eb:22:a5:e1:c1:8d:9a:9a:f9: 81:be:9c:e8:98:80:7a:b5:a2:52:85:8f:a6:56:04: 9e:6d:f7:fc:6a:85:05:e7:00:81:c4:6d:a1:12:4a: 2f:eb:2b:83:db:50:7c:ee:c6:5c:9e:45:ac:c5:b4: b1:74:df:b4:7c:29:a4:16:ea:20:b2:b8:f1:cd:88: 2d:6f:8f:17:48:ef:1b:36:95:a1:22:9f:fc:4e:a0: 12:9d:c9:fc:af:e0:83:d9:92:06:5a:a3:a2:1a:d3: 4b:c7:57:e9:a1:1c:8a:0b:e3:7f:ce:4a:f0:f5:35: 57:89:7b:33:e3:bd:95:0a:a9:fa:fe:9c:a7:cb:35: b8:67:84:40:27:75:b7:96:6e:e7:a1:e0:2d:32:38: bf:a3:8c:b0:68:d7:25:fe:9d:d8:83:86:79:e6:0b: 97:be:71:db:66:c4:61:9e:2d:68:89:10:17:31:0d: d4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6B:60:EE:89:A7:62:5B:5F:3C:47:4E:8A:FC:C4:5D:55:A0:68:58 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1be81b8b-723f-40f7-b725-279fceb1a1b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:4000::/40 Signature Algorithm: sha256WithRSAEncryption 1b:19:43:ba:46:02:c1:68:18:70:55:bd:6d:fd:9c:32:44:90: 69:33:e0:55:e2:36:7e:e2:ab:63:26:55:c3:da:46:de:4e:18: de:34:3b:d4:cb:01:76:3b:ac:6f:81:36:bb:52:a8:4c:b4:ea: c1:6f:e3:7a:5c:bf:72:b3:60:53:8e:92:1b:4c:c0:f3:57:98: bf:08:71:e5:97:dd:41:fe:95:35:dc:54:07:05:b3:b3:8b:6c: ff:40:98:ca:1f:26:6c:71:6f:c6:c0:04:0f:2b:65:a2:27:3c: 8e:18:4b:8d:17:89:20:02:b0:59:c5:cd:98:3f:68:dd:f2:de: 1e:5a:5a:75:79:d5:bc:1c:ba:82:b8:ba:83:15:a6:21:8d:8b: 9f:33:78:48:46:18:52:19:b8:64:0e:1a:78:0d:c2:ca:cf:a2: 9c:7d:54:29:92:94:dc:5d:42:01:9c:0c:9b:66:1d:f8:f1:a6: 34:74:39:a0:0b:7d:5f:29:57:5d:57:50:76:6d:1a:cd:98:4e: 43:75:5b:db:d6:66:19:f0:a6:91:f6:cf:cb:3b:6e:f8:1d:66: ea:67:f5:2c:96:e7:e6:23:b6:2a:5e:2c:97:55:32:b0:dd:30: db:8a:c7:39:48:84:d9:35:21:c5:40:3a:6e:50:5e:4b:94:61: d2:03:16:32 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUeR40VGWW8j2cxACIwSKEFXMThEowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyODAwMDA1NloX DTI2MDUyOTIzNTk1OVowejFJMEcGA1UEBRNANDAwMmY1YThiMDU3MjM0ZGEwMThm OWMwMjYzMzhiYzEzY2VkYTM2NWFlY2VlNTY0NTEzYjdjMWZmYmY4ZTkzZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnugFYNp9bAXVC3GESDUZ0gV0wTT9 t2E0IUtV7X7S6tS3SEJ+uSKVHmid7T66uSIzmLhveDOpWdIETBz20HRciePvYGU7 xRFXm2X/uf614w/rIqXhwY2amvmBvpzomIB6taJShY+mVgSebff8aoUF5wCBxG2h Ekov6yuD21B87sZcnkWsxbSxdN+0fCmkFuogsrjxzYgtb48XSO8bNpWhIp/8TqAS ncn8r+CD2ZIGWqOiGtNLx1fpoRyKC+N/zkrw9TVXiXsz472VCqn6/pynyzW4Z4RA J3W3lm7noeAtMji/o4ywaNcl/p3Yg4Z55guXvnHbZsRhni1oiRAXMQ3UHwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFC1rYO6Jp2JbXzxHTor8xF1VoGhYMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFiZTgxYjhiLTcyM2YtNDBmNy1iNzI1LTI3OWZjZWIxYTFiMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba70AwDQYJKoZIhvcNAQELBQADggEBABsZQ7pGAsFoGHBVvW39 nDJEkGkz4FXiNn7iq2MmVcPaRt5OGN40O9TLAXY7rG+BNrtSqEy06sFv43pcv3Kz YFOOkhtMwPNXmL8IceWX3UH+lTXcVAcFs7OLbP9AmMofJmxxb8bABA8rZaInPI4Y S40XiSACsFnFzZg/aN3y3h5aWnV51bwcuoK4uoMVpiGNi58zeEhGGFIZuGQOGngN wsrPopx9VCmSlNxdQgGcDJtmHfjxpjR0OaALfV8pV11XUHZtGs2YTkN1W9vWZhnw ppH2z8s7bvgdZupn9SyW5+YjtipeLJdVMrDdMNuKxzlIhNk1IcVAOm5QXkuUYdID FjI= -----END CERTIFICATE-----Generated at Sun Mar 1 22:07:59 2026 by rpki-client