$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/30151f9e-f6c9-40d6-bebe-daced959a278.roa File: 30151f9e-f6c9-40d6-bebe-daced959a278.roa (raw, json) Hash identifier: xBkVzFzBRe7hmulwLlqD84iK24Dqo7Az3vQz83OjEFc= Subject key identifier: 3C:5B:8A:04:08:09:E8:9B:D9:5A:2A:26:50:20:75:A7:56:BE:C3:75 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 05D9AA8D3608AD7C332F7F17D8FE2E5B677F5101 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/30151f9e-f6c9-40d6-bebe-daced959a278.roa Signing time: Fri 20 Feb 2026 00:01:13 +0000 ROA not before: Fri 20 Feb 2026 00:01:13 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:2880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:d9:aa:8d:36:08:ad:7c:33:2f:7f:17:d8:fe:2e:5b:67:7f:51:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 20 00:01:13 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=4349503f071de08b5f0c91b84783f11ad9d7a20e50b998fc1e7866795367cb30, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f7:8e:35:05:63:6e:55:5d:3b:c7:ea:65:7f: 7b:e1:42:c2:92:6b:65:b0:8d:36:cf:f6:32:da:62: b2:47:2b:91:0f:11:2a:60:aa:6e:b6:66:df:d1:19: 2e:07:8c:d7:79:27:e5:34:03:f3:cb:05:de:2b:65: 8c:9f:f0:c8:4c:85:ce:88:95:0b:ff:ca:51:2b:c9: 0c:53:2a:e8:05:68:e0:5a:8d:0e:cc:4f:1b:22:d0: 5a:9f:4d:a4:91:0d:99:a9:e4:60:e3:7d:91:c8:24: 34:42:07:79:86:37:0c:37:26:e8:ed:d4:f3:78:43: 5a:19:20:02:88:61:af:0a:6d:d2:b9:0c:53:88:3c: 0e:42:5f:82:a5:03:f5:f5:e2:8f:99:f8:23:9a:44: c2:84:3d:73:d3:4e:2a:1f:f4:cd:29:fa:e3:e8:34: cb:c6:cc:0e:a3:f0:9e:f2:bf:f7:dc:89:1b:43:aa: f3:e4:7c:03:17:fc:66:23:02:c4:db:2f:fc:fa:03: 3f:3c:60:6a:68:f2:90:26:e4:39:2a:19:d5:87:06: 58:76:a5:4b:16:8b:9d:46:90:d7:db:d2:3c:1f:aa: c3:56:9c:97:34:bf:61:d7:46:0e:4b:32:cb:b5:cb: 7b:5f:d9:35:a2:e8:98:64:0c:ba:ad:55:3e:b2:d0: 13:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:5B:8A:04:08:09:E8:9B:D9:5A:2A:26:50:20:75:A7:56:BE:C3:75 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/30151f9e-f6c9-40d6-bebe-daced959a278.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:2880::/48 Signature Algorithm: sha256WithRSAEncryption a2:57:53:cb:e4:6c:04:a4:cb:41:e7:c2:44:7d:d5:b2:c4:28: de:44:ef:24:d7:3b:6d:4a:3e:f5:1f:09:bf:16:ef:fa:69:4a: 38:29:89:0c:80:d6:65:78:ce:d7:61:fe:73:77:90:06:8b:b6: 67:13:f6:a5:7b:d9:20:4f:d6:9c:33:3b:1e:11:95:57:61:69: 6a:6a:b4:08:56:f4:e9:ba:34:48:ad:6f:16:11:bf:ef:02:46: 3a:34:f3:d0:43:42:7c:21:ca:94:56:58:b5:01:7b:9d:42:93: b4:92:2f:01:c8:f3:54:8b:07:0a:eb:6f:76:06:47:8e:74:be: de:2d:30:40:29:53:a6:53:2f:d6:b0:06:b5:05:da:c2:79:de: 72:01:1f:05:ce:26:84:b8:ac:57:25:f9:8c:3b:ba:ca:4b:55: 20:c0:01:2f:15:a9:45:9d:97:e9:b7:1f:79:d1:d8:e8:4b:7b: 2d:de:e2:5c:d0:ae:67:83:86:e5:7f:08:4f:66:e9:3d:9f:39: a8:29:4d:b2:e1:db:3c:9c:f9:81:26:0b:a5:4a:83:f8:20:29: 24:37:23:c0:d3:3d:73:ba:e6:c1:5c:eb:ec:31:e2:07:e3:40: 47:75:58:3c:f2:16:05:05:61:fe:33:54:dd:73:f6:47:02:5b: 3e:62:bf:5a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUBdmqjTYIrXwzL38X2P4uW2d/UQEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMDAwMDExM1oX DTI2MDUyMTIzNTk1OVowejFJMEcGA1UEBRNANDM0OTUwM2YwNzFkZTA4YjVmMGM5 MWI4NDc4M2YxMWFkOWQ3YTIwZTUwYjk5OGZjMWU3ODY2Nzk1MzY3Y2IzMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsveONQVjblVdO8fqZX974ULCkmtl sI02z/Yy2mKyRyuRDxEqYKputmbf0RkuB4zXeSflNAPzywXeK2WMn/DITIXOiJUL /8pRK8kMUyroBWjgWo0OzE8bItBan02kkQ2ZqeRg432RyCQ0Qgd5hjcMNybo7dTz eENaGSACiGGvCm3SuQxTiDwOQl+CpQP19eKPmfgjmkTChD1z004qH/TNKfrj6DTL xswOo/Ce8r/33IkbQ6rz5HwDF/xmIwLE2y/8+gM/PGBqaPKQJuQ5KhnVhwZYdqVL FoudRpDX29I8H6rDVpyXNL9h10YOSzLLtct7X9k1ouiYZAy6rVU+stATVwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDxbigQICeib2VoqJlAgdadWvsN1MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzMwMTUxZjllLWY2YzktNDBkNi1iZWJlLWRhY2VkOTU5YTI3OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8iiAMA0GCSqGSIb3DQEBCwUAA4IBAQCiV1PL5GwEpMtB58JE fdWyxCjeRO8k1zttSj71Hwm/Fu/6aUo4KYkMgNZleM7XYf5zd5AGi7ZnE/ale9kg T9acMzseEZVXYWlqarQIVvTpujRIrW8WEb/vAkY6NPPQQ0J8IcqUVli1AXudQpO0 ki8ByPNUiwcK6292BkeOdL7eLTBAKVOmUy/WsAa1BdrCed5yAR8FziaEuKxXJfmM O7rKS1UgwAEvFalFnZfptx950djoS3st3uJc0K5ng4blfwhPZuk9nzmoKU2y4ds8 nPmBJgulSoP4ICkkNyPA0z1zuubBXOvsMeIH40BHdVg88hYFBWH+M1Tdc/ZHAls+ Yr9a -----END CERTIFICATE-----Generated at Sun Mar 1 22:23:55 2026 by rpki-client