$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2304fccd-a194-40a7-978d-bdb25807cebe.roa File: 2304fccd-a194-40a7-978d-bdb25807cebe.roa (raw, json) Hash identifier: KhTdreL1wGeij1sTQZD5KaR5GTSsfRbc9IhIQfKtHI4= Subject key identifier: 8E:1D:39:9C:CE:5D:50:36:AE:AC:26:06:FD:97:88:2B:1E:DE:D9:25 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 252CCB525D01BACE111E23E277F2BD01C7712EEF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2304fccd-a194-40a7-978d-bdb25807cebe.roa Signing time: Sat 28 Feb 2026 00:00:42 +0000 ROA not before: Sat 28 Feb 2026 00:00:42 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daef:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:2c:cb:52:5d:01:ba:ce:11:1e:23:e2:77:f2:bd:01:c7:71:2e:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 28 00:00:42 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=b117af72cb517404e7f25d3c5e9b120c742da46f699976ec75024eecd86e1285, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:07:96:6d:c3:05:7c:a5:82:df:88:12:c0:42: 8a:bd:68:e6:7e:18:74:4c:5b:71:94:73:c4:4e:be: f5:4e:d5:27:fc:5a:8f:2f:74:75:77:0a:f1:ab:8a: 43:5a:1f:c6:4c:48:6e:6b:96:be:93:20:19:07:35: d1:9f:d3:7a:ae:d3:2e:2c:e1:d9:96:20:cf:a8:e4: 84:02:b0:9a:67:63:04:76:5a:18:0c:4e:a0:70:f0: 3b:c6:dc:50:ca:c6:76:93:80:24:8c:7a:bc:c6:ff: 18:a6:74:ac:e2:fa:07:88:7e:88:a2:9e:b9:98:05: bb:03:bc:d7:9c:10:73:34:ea:c0:b6:18:9d:c6:66: 67:66:ea:67:4a:d0:2f:b2:02:0e:ba:18:76:b1:56: 48:54:a0:97:71:98:35:70:88:7c:bd:33:9a:3c:72: c6:0c:62:9c:45:c5:1c:0e:f6:31:4d:8f:5b:cd:e4: b4:52:a3:38:f8:a2:7b:32:59:e4:3b:92:93:87:c6: 93:10:ce:5f:6a:85:7e:2c:b9:94:74:60:81:f8:a1: e4:99:b3:e3:e6:da:fb:10:af:bf:21:bc:ea:5a:32: 11:f1:25:cb:1e:b9:21:60:83:fe:e9:a6:05:fa:5f: 39:8d:fa:f8:2b:7f:6c:49:24:82:a1:23:e9:33:4d: a6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1D:39:9C:CE:5D:50:36:AE:AC:26:06:FD:97:88:2B:1E:DE:D9:25 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2304fccd-a194-40a7-978d-bdb25807cebe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:c800::/40 Signature Algorithm: sha256WithRSAEncryption 32:9f:eb:81:42:b2:48:a0:57:3f:eb:59:7b:25:8e:1a:6b:7a: ee:47:17:08:86:a9:0d:b5:9d:36:6f:ec:9b:a7:0e:8b:5b:05: 31:96:a9:62:8b:c5:93:51:ee:f9:e3:c9:47:83:3c:1a:2e:bb: 98:85:60:60:b6:19:a8:41:0d:90:a5:25:72:84:92:92:40:10: 40:ae:76:22:c9:de:ce:92:8a:38:0f:a4:8d:e4:0a:57:c5:0b: 40:d4:c5:15:f4:73:2b:5d:06:41:6b:a0:a0:93:be:10:7b:dd: 6e:bf:dc:9a:56:89:d0:7c:c9:15:b1:39:40:2f:4f:81:0c:23: 19:ba:71:11:42:d6:99:1e:25:5e:8d:12:f2:c4:e3:cc:2d:0e: 97:a8:76:c3:5f:31:d5:92:9f:0c:5f:8b:39:45:aa:98:d1:6d: cf:de:40:ad:74:30:82:da:1c:76:d6:93:8b:12:99:22:17:9b: b0:d8:de:61:0f:83:af:81:25:8b:23:ed:f9:b4:20:a4:61:a3: ae:cd:d2:49:4e:1c:62:e7:e9:ae:25:b0:a1:24:78:a4:e7:50: fa:dd:85:78:0a:82:00:4f:1f:df:ad:28:2c:75:c1:5d:4a:04: cf:7f:8a:5a:de:18:2b:cb:dd:7d:f7:8f:a0:00:dc:fc:f3:a4: ed:d5:48:1b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUJSzLUl0Bus4RHiPid/K9AcdxLu8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyODAwMDA0MloX DTI2MDUyOTIzNTk1OVowejFJMEcGA1UEBRNAYjExN2FmNzJjYjUxNzQwNGU3ZjI1 ZDNjNWU5YjEyMGM3NDJkYTQ2ZjY5OTk3NmVjNzUwMjRlZWNkODZlMTI4NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugeWbcMFfKWC34gSwEKKvWjmfhh0 TFtxlHPETr71TtUn/FqPL3R1dwrxq4pDWh/GTEhua5a+kyAZBzXRn9N6rtMuLOHZ liDPqOSEArCaZ2MEdloYDE6gcPA7xtxQysZ2k4AkjHq8xv8YpnSs4voHiH6Iop65 mAW7A7zXnBBzNOrAthidxmZnZupnStAvsgIOuhh2sVZIVKCXcZg1cIh8vTOaPHLG DGKcRcUcDvYxTY9bzeS0UqM4+KJ7MlnkO5KTh8aTEM5faoV+LLmUdGCB+KHkmbPj 5tr7EK+/IbzqWjIR8SXLHrkhYIP+6aYF+l85jfr4K39sSSSCoSPpM02m+wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFI4dOZzOXVA2rqwmBv2XiCse3tklMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIzMDRmY2NkLWExOTQtNDBhNy05NzhkLWJkYjI1ODA3Y2ViZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba78gwDQYJKoZIhvcNAQELBQADggEBADKf64FCskigVz/rWXsl jhpreu5HFwiGqQ21nTZv7JunDotbBTGWqWKLxZNR7vnjyUeDPBouu5iFYGC2GahB DZClJXKEkpJAEECudiLJ3s6SijgPpI3kClfFC0DUxRX0cytdBkFroKCTvhB73W6/ 3JpWidB8yRWxOUAvT4EMIxm6cRFC1pkeJV6NEvLE48wtDpeodsNfMdWSnwxfizlF qpjRbc/eQK10MILaHHbWk4sSmSIXm7DY3mEPg6+BJYsj7fm0IKRho67N0klOHGLn 6a4lsKEkeKTnUPrdhXgKggBPH9+tKCx1wV1KBM9/ilreGCvL3X33j6AA3PzzpO3V SBs= -----END CERTIFICATE-----Generated at Sun Mar 1 22:04:18 2026 by rpki-client