$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/32e4ece6-d35e-41cf-8da1-3b7733e46e63.roa File: 32e4ece6-d35e-41cf-8da1-3b7733e46e63.roa (raw, json) Hash identifier: nMyNajMaXK20+tkYZrsvVNqIKo2XVD5NWZWb5f7Y8Gw= Subject key identifier: C8:B8:4E:F5:8D:8B:AE:C0:C9:A1:13:2C:C1:D4:05:44:6C:C6:27:30 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5706DED4F8F17525A1D8A9DFE4798CD5D9C5D942 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/32e4ece6-d35e-41cf-8da1-3b7733e46e63.roa Signing time: Sun 15 Feb 2026 00:00:14 +0000 ROA not before: Sun 15 Feb 2026 00:00:14 +0000 ROA not after: Sat 16 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da60:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:06:de:d4:f8:f1:75:25:a1:d8:a9:df:e4:79:8c:d5:d9:c5:d9:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 15 00:00:14 2026 GMT Not After : May 16 23:59:59 2026 GMT Subject: serialNumber=b98a2da26e45052576a1cc46dde170fd08c34d9552abddd825f90eb4887e144e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:ac:0c:14:3f:52:ef:98:54:19:c9:8f:8f:1d: b7:9c:8d:67:0d:20:00:d3:79:dc:81:bd:96:1d:3b: 89:d2:9a:35:e5:b6:b0:60:a0:6c:68:86:a7:6a:e7: a4:e6:af:30:db:e3:e9:9e:ef:9e:64:c3:08:0f:70: 44:4b:fa:9c:51:fc:2a:02:4a:9b:58:e2:10:c7:b5: 0f:75:0c:f3:3c:13:ab:3e:2e:aa:b4:47:8c:8e:e1: 55:e7:30:37:1d:c5:98:b0:19:c3:1a:86:55:90:fd: 4d:1b:ea:a4:a9:a4:7d:52:8f:17:0a:3f:eb:b6:7b: 52:8f:3a:36:59:32:36:f7:4e:a3:5a:47:51:20:ea: 10:a5:14:e3:2e:4b:90:0d:9b:7c:8c:02:03:2d:44: e9:1d:c8:11:80:58:10:b1:4e:30:2a:cf:63:57:c5: 75:fa:ee:67:52:09:14:1b:1c:96:89:1f:fe:c8:04: 66:ec:70:4d:ec:7e:46:58:8f:c2:6f:67:98:b3:70: 6b:c5:ea:af:12:33:7c:86:f2:39:29:09:41:b5:d4: f8:11:ee:ca:51:8b:98:2a:e6:94:48:7b:19:61:31: 1e:a8:53:db:8e:e2:7e:d5:17:40:a5:4f:59:85:a9: 68:89:c4:f9:56:a1:d1:84:77:e0:c4:2c:e2:63:6d: 07:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B8:4E:F5:8D:8B:AE:C0:C9:A1:13:2C:C1:D4:05:44:6C:C6:27:30 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/32e4ece6-d35e-41cf-8da1-3b7733e46e63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:a000::/40 Signature Algorithm: sha256WithRSAEncryption 4c:a6:9b:9e:69:3f:20:26:c0:55:76:34:ce:48:b0:99:3b:7c: 84:19:98:75:7e:d7:ca:dc:63:2a:6e:53:58:2a:5e:db:0a:75: 30:d0:b2:da:c9:b9:15:a0:d2:7d:37:d1:68:0e:ac:8d:e8:c0: 10:f9:c1:93:52:0c:78:58:09:fe:98:38:96:80:3f:2a:c9:23: 01:f6:07:2c:e9:a8:e9:6a:21:12:31:1a:e1:ef:36:25:79:24: 2f:0c:8e:81:76:5f:f8:99:d7:94:1d:36:0d:a7:96:80:25:b3: 0f:1c:17:33:5a:0d:bb:8e:6d:7e:57:34:a3:2c:9d:a0:ee:f2: e5:10:83:21:32:4f:8f:af:a1:42:2e:d0:93:b5:ef:0a:4e:58: 18:fb:30:f0:da:54:81:70:c2:2f:8a:9b:1b:a8:23:b7:c4:9e: 07:03:f0:33:31:37:1c:5b:d0:7c:98:cb:0d:36:ae:30:a3:1c: ed:9a:da:ca:e8:ca:0f:ef:cc:69:68:e3:3a:d5:22:60:13:0c: 76:a7:5c:a6:f0:5a:39:29:db:5d:4f:30:28:66:5d:7b:84:f2: d5:1f:d0:ed:7e:cc:7e:ba:4f:71:5f:07:5f:98:65:00:ac:a5: 2b:0e:c2:b6:c7:20:e2:38:70:81:53:ba:44:f2:ab:ba:8f:1f: 88:44:73:07 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUVwbe1PjxdSWh2Knf5HmM1dnF2UIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxNTAwMDAxNFoX DTI2MDUxNjIzNTk1OVowejFJMEcGA1UEBRNAYjk4YTJkYTI2ZTQ1MDUyNTc2YTFj YzQ2ZGRlMTcwZmQwOGMzNGQ5NTUyYWJkZGQ4MjVmOTBlYjQ4ODdlMTQ0ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9qwMFD9S75hUGcmPjx23nI1nDSAA 03ncgb2WHTuJ0po15bawYKBsaIanauek5q8w2+Ppnu+eZMMID3BES/qcUfwqAkqb WOIQx7UPdQzzPBOrPi6qtEeMjuFV5zA3HcWYsBnDGoZVkP1NG+qkqaR9Uo8XCj/r tntSjzo2WTI2906jWkdRIOoQpRTjLkuQDZt8jAIDLUTpHcgRgFgQsU4wKs9jV8V1 +u5nUgkUGxyWiR/+yARm7HBN7H5GWI/Cb2eYs3BrxeqvEjN8hvI5KQlBtdT4Ee7K UYuYKuaUSHsZYTEeqFPbjuJ+1RdApU9ZhaloicT5VqHRhHfgxCziY20HoQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMi4TvWNi67AyaETLMHUBURsxicwMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzMyZTRlY2U2LWQzNWUtNDFjZi04ZGExLTNiNzczM2U0NmU2My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYKAwDQYJKoZIhvcNAQELBQADggEBAEymm55pPyAmwFV2NM5I sJk7fIQZmHV+18rcYypuU1gqXtsKdTDQstrJuRWg0n030WgOrI3owBD5wZNSDHhY Cf6YOJaAPyrJIwH2ByzpqOlqIRIxGuHvNiV5JC8MjoF2X/iZ15QdNg2nloAlsw8c FzNaDbuObX5XNKMsnaDu8uUQgyEyT4+voUIu0JO17wpOWBj7MPDaVIFwwi+Kmxuo I7fEngcD8DMxNxxb0HyYyw02rjCjHO2a2sroyg/vzGlo4zrVImATDHanXKbwWjkp 211PMChmXXuE8tUf0O1+zH66T3FfB1+YZQCspSsOwrbHIOI4cIFTukTyq7qPH4hE cwc= -----END CERTIFICATE-----Generated at Mon Mar 2 01:40:14 2026 by rpki-client