$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/38bd3773-19a5-4905-be3f-1be5e134a4ad.roa File: 38bd3773-19a5-4905-be3f-1be5e134a4ad.roa (raw, json) Hash identifier: AkYjNc8Q65M6SO835FAb6LbTKCb9MQEjLBQ+2qjk/0g= Subject key identifier: A9:3D:EE:FB:74:23:43:36:0D:D5:12:33:09:49:05:16:4E:E8:3D:36 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4E8609D2B2F98B3A23A9CF4782D253F5940D9481 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/38bd3773-19a5-4905-be3f-1be5e134a4ad.roa Signing time: Sun 22 Feb 2026 00:11:02 +0000 ROA not before: Sun 22 Feb 2026 00:11:02 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1e::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:86:09:d2:b2:f9:8b:3a:23:a9:cf:47:82:d2:53:f5:94:0d:94:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 22 00:11:02 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=d89c4c16b1f662e0c381245ee37d915f03ee8f1da91ea646ab6f8affc26264ed, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ec:8e:b9:c1:84:9f:15:15:65:82:63:c5:38: 80:62:fc:0c:22:11:48:14:5a:b1:dd:f9:2a:67:bb: 69:5c:9c:95:4b:b8:d9:da:ec:8b:62:64:46:fa:5f: 45:72:5a:98:83:5f:6c:4e:ad:ec:57:85:be:f4:87: 55:e3:31:25:4a:be:24:98:01:b1:66:e6:15:71:99: b2:88:a4:36:67:65:e6:bb:61:92:b1:91:f7:50:46: c1:32:f9:d2:48:2f:d1:29:46:9c:dd:a0:43:63:c0: 14:16:50:3c:60:58:dc:26:63:37:e0:b1:f0:8a:8f: 19:6d:3e:c8:3a:93:9a:ba:ea:7f:42:5b:95:47:1c: 9d:a6:b7:75:1e:a7:20:d2:7b:3e:54:8e:25:26:9f: 13:26:78:b4:69:43:ce:7a:22:72:18:79:0d:1f:83: 5e:4a:4f:26:18:74:0e:28:7c:b0:6c:57:b3:34:21: 63:11:01:2e:6b:14:36:c1:bf:c1:f1:3a:b1:8b:47: ee:d7:b5:21:86:36:f9:2e:c6:a4:1a:ac:b8:bb:fa: 54:18:1f:c1:d2:df:ed:d0:8a:66:54:02:79:c4:c6: 9c:9b:6b:4b:aa:4a:96:c3:ef:17:97:5d:86:eb:e9: d3:25:59:ae:88:a0:8e:99:32:11:8d:93:fc:ad:b1: c8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:3D:EE:FB:74:23:43:36:0D:D5:12:33:09:49:05:16:4E:E8:3D:36 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/38bd3773-19a5-4905-be3f-1be5e134a4ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1e::/36 Signature Algorithm: sha256WithRSAEncryption 72:4b:92:df:f0:1c:75:47:7f:1c:6c:96:28:2c:97:a2:fb:0b: 93:68:7a:1c:2a:35:31:4b:a3:35:0e:50:a0:45:4d:df:19:b6: f0:e7:56:75:a9:95:74:a4:45:b0:e9:f5:8a:71:ff:bf:c4:15: 68:dc:4d:b9:bf:25:8b:17:fd:b7:5f:f3:87:4a:49:09:e2:a7: f5:c7:6e:91:86:c1:1b:b0:4b:88:01:8c:0d:a4:aa:2f:b9:0c: eb:56:10:a7:1e:40:14:eb:b1:42:c8:4c:7b:fa:ca:33:68:a5: 22:78:e9:82:50:f8:8c:dd:07:67:c1:fd:24:e6:a6:55:17:2e: ea:49:ec:9e:c1:d1:9b:7b:9e:42:69:b4:92:06:27:40:b9:31: 9e:52:80:3b:d7:ef:b8:87:13:a6:88:d7:11:9b:dd:e5:70:74: 07:90:20:fb:72:9d:6d:0a:26:35:ad:d2:23:8b:70:b7:f0:4b: 7e:07:b8:c3:c9:ff:e1:3c:05:9a:79:09:2b:47:d1:38:16:9c: 75:56:c4:0a:47:9b:9c:22:e2:58:93:04:e7:66:81:6f:b5:af: 04:00:da:81:69:65:23:5d:3a:2c:2a:51:b0:45:c1:ee:a3:38: e4:a4:36:5c:64:b8:c1:b1:c2:ab:c3:64:3e:39:81:fa:35:55: 58:42:ed:3b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUToYJ0rL5izojqc9HgtJT9ZQNlIEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMjAwMTEwMloX DTI2MDUyMzIzNTk1OVowejFJMEcGA1UEBRNAZDg5YzRjMTZiMWY2NjJlMGMzODEy NDVlZTM3ZDkxNWYwM2VlOGYxZGE5MWVhNjQ2YWI2ZjhhZmZjMjYyNjRlZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+yOucGEnxUVZYJjxTiAYvwMIhFI FFqx3fkqZ7tpXJyVS7jZ2uyLYmRG+l9FclqYg19sTq3sV4W+9IdV4zElSr4kmAGx ZuYVcZmyiKQ2Z2Xmu2GSsZH3UEbBMvnSSC/RKUac3aBDY8AUFlA8YFjcJmM34LHw io8ZbT7IOpOauup/QluVRxydprd1Hqcg0ns+VI4lJp8TJni0aUPOeiJyGHkNH4Ne Sk8mGHQOKHywbFezNCFjEQEuaxQ2wb/B8Tqxi0fu17Uhhjb5LsakGqy4u/pUGB/B 0t/t0IpmVAJ5xMacm2tLqkqWw+8Xl12G6+nTJVmuiKCOmTIRjZP8rbHImQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKk97vt0I0M2DdUSMwlJBRZO6D02MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM4YmQzNzczLTE5YTUtNDkwNS1iZTNmLTFiZTVlMTM0YTRhZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaHgAwDQYJKoZIhvcNAQELBQADggEBAHJLkt/wHHVHfxxsligs l6L7C5NoehwqNTFLozUOUKBFTd8ZtvDnVnWplXSkRbDp9Ypx/7/EFWjcTbm/JYsX /bdf84dKSQnip/XHbpGGwRuwS4gBjA2kqi+5DOtWEKceQBTrsULITHv6yjNopSJ4 6YJQ+IzdB2fB/STmplUXLupJ7J7B0Zt7nkJptJIGJ0C5MZ5SgDvX77iHE6aI1xGb 3eVwdAeQIPtynW0KJjWt0iOLcLfwS34HuMPJ/+E8BZp5CStH0TgWnHVWxApHm5wi 4liTBOdmgW+1rwQA2oFpZSNdOiwqUbBFwe6jOOSkNlxkuMGxwqvDZD45gfo1VVhC 7Ts= -----END CERTIFICATE-----Generated at Sun Mar 1 23:52:46 2026 by rpki-client