$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/375520d4-df61-4e6c-9222-5f7232d9f4b8.roa File: 375520d4-df61-4e6c-9222-5f7232d9f4b8.roa (raw, json) Hash identifier: 5tjIw7XYCFib16AgDayU/fGdMdJ9RD/RT88cqdZ+f8I= Subject key identifier: 31:95:9B:DF:46:F6:7F:8E:95:7D:B7:91:1E:A0:ED:A4:48:FC:15:20 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 64C70EA179B68FE21A856E953EEC8655398D752F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/375520d4-df61-4e6c-9222-5f7232d9f4b8.roa Signing time: Fri 20 Feb 2026 00:10:22 +0000 ROA not before: Fri 20 Feb 2026 00:10:22 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:4020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:c7:0e:a1:79:b6:8f:e2:1a:85:6e:95:3e:ec:86:55:39:8d:75:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 20 00:10:22 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=15330d4aeb958fb9b07840996e7c5e61f51064014b10a6085680c3ec53fb0aa0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d7:96:10:fd:cc:94:13:c8:a0:6d:69:69:38: d9:1f:21:39:b6:de:5a:f1:99:44:a9:4c:e5:d5:49: 47:a6:a1:df:9d:19:32:ae:d6:f6:3b:4e:27:e3:e6: ce:16:38:2f:e3:f4:79:06:87:69:5b:1a:a7:6c:bb: 02:9d:76:df:9f:9f:d8:d1:d0:f5:4c:89:9b:d8:c5: 6f:48:e1:0e:af:6f:f5:21:1e:e2:6e:c2:23:ea:83: a8:71:96:c8:84:3d:d1:e9:fe:27:5e:a6:ac:90:88: ba:d5:12:d4:ad:0f:22:91:ae:73:94:6f:42:69:3a: ec:e4:63:6c:09:ec:89:d0:17:e2:97:23:67:6c:10: 51:90:2a:ec:1a:0e:fe:f1:89:38:a3:7d:31:8a:62: 27:da:7c:8d:9b:76:11:3c:b0:b4:18:a2:4a:77:a4: 4f:1b:d0:13:c9:02:7e:15:78:1f:d1:be:97:cb:ae: 54:d5:20:2a:ec:c8:a7:aa:71:00:81:17:e2:c0:96: 47:3e:a7:e1:fd:59:ed:8d:73:65:bf:86:42:fe:4f: a9:f0:d7:9c:d2:39:02:17:bb:0c:3d:df:aa:ac:20: 5f:3b:e9:f8:b5:50:5e:26:a1:a4:ab:be:3b:d8:68: 51:d1:b6:63:35:74:80:06:3d:2f:86:59:bf:16:86: 99:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:95:9B:DF:46:F6:7F:8E:95:7D:B7:91:1E:A0:ED:A4:48:FC:15:20 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/375520d4-df61-4e6c-9222-5f7232d9f4b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:4020::/48 Signature Algorithm: sha256WithRSAEncryption a4:2e:c0:04:a2:2d:a7:51:10:f4:8e:65:4c:b5:26:dc:d1:72: 0e:2c:a8:b8:21:86:42:58:51:46:ca:31:bf:c7:45:27:e4:74: 6b:b4:62:ef:ab:e5:86:93:96:b3:d7:89:90:a2:ca:2a:fa:84: 89:70:d0:23:2b:84:ec:fd:94:57:ef:da:dd:00:7e:f6:c4:d3: de:56:f7:d3:07:6e:ce:c5:01:c5:f3:cd:3c:a8:ce:38:b6:b7: 5e:36:47:83:f7:86:08:c7:63:ac:14:fe:f5:81:da:19:77:58: f6:d0:bc:10:01:2f:de:fc:2a:4e:b9:26:d3:7e:4a:ed:89:86: ec:9e:f9:6b:2b:6b:77:cc:31:d9:d2:09:12:3a:74:a2:14:f0: f8:37:8b:3a:3a:a4:d4:d8:16:9f:90:d3:b4:6e:29:88:19:28: 04:f0:c9:9e:37:09:bd:fd:b3:ec:f9:69:26:80:b6:8b:1e:ee: 0b:0a:8a:e7:9a:98:60:fd:e0:d6:a4:17:e2:ba:bf:71:6e:3d: e7:c9:a3:28:07:9f:3c:4b:70:a3:fd:2d:4d:e5:af:5b:53:75: b4:fc:6e:ab:7a:1c:c1:1b:13:bf:83:e5:cd:e9:e3:e6:7a:10: 16:97:9e:83:f1:16:cd:6e:5e:88:37:e8:c3:f8:2e:f3:d4:3d: 49:39:d6:bc -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUZMcOoXm2j+IahW6VPuyGVTmNdS8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMDAwMTAyMloX DTI2MDUyMTIzNTk1OVowejFJMEcGA1UEBRNAMTUzMzBkNGFlYjk1OGZiOWIwNzg0 MDk5NmU3YzVlNjFmNTEwNjQwMTRiMTBhNjA4NTY4MGMzZWM1M2ZiMGFhMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNeWEP3MlBPIoG1paTjZHyE5tt5a 8ZlEqUzl1UlHpqHfnRkyrtb2O04n4+bOFjgv4/R5BodpWxqnbLsCnXbfn5/Y0dD1 TImb2MVvSOEOr2/1IR7ibsIj6oOocZbIhD3R6f4nXqaskIi61RLUrQ8ika5zlG9C aTrs5GNsCeyJ0BfilyNnbBBRkCrsGg7+8Yk4o30ximIn2nyNm3YRPLC0GKJKd6RP G9ATyQJ+FXgf0b6Xy65U1SAq7MinqnEAgRfiwJZHPqfh/VntjXNlv4ZC/k+p8Nec 0jkCF7sMPd+qrCBfO+n4tVBeJqGkq7472GhR0bZjNXSABj0vhlm/FoaZdQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDGVm99G9n+OlX23kR6g7aRI/BUgMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM3NTUyMGQ0LWRmNjEtNGU2Yy05MjIyLTVmNzIzMmQ5ZjRiOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/0AgMA0GCSqGSIb3DQEBCwUAA4IBAQCkLsAEoi2nURD0jmVM tSbc0XIOLKi4IYZCWFFGyjG/x0Un5HRrtGLvq+WGk5az14mQosoq+oSJcNAjK4Ts /ZRX79rdAH72xNPeVvfTB27OxQHF8808qM44trdeNkeD94YIx2OsFP71gdoZd1j2 0LwQAS/e/CpOuSbTfkrtiYbsnvlrK2t3zDHZ0gkSOnSiFPD4N4s6OqTU2BafkNO0 bimIGSgE8MmeNwm9/bPs+WkmgLaLHu4LCornmphg/eDWpBfiur9xbj3nyaMoB588 S3Cj/S1N5a9bU3W0/G6rehzBGxO/g+XN6ePmehAWl56D8RbNbl6IN+jD+C7z1D1J Oda8 -----END CERTIFICATE-----Generated at Sun Mar 1 23:47:11 2026 by rpki-client