$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/403cdc26-1adf-4e8c-a40c-6cc31efe9fb8.roa File: 403cdc26-1adf-4e8c-a40c-6cc31efe9fb8.roa (raw, json) Hash identifier: ePmgJrB+332M03f9PdhYSIXvUIWVSo2igPZPTAfq4cY= Subject key identifier: 1E:CC:50:2C:1B:1F:0E:86:8B:48:6C:3A:C4:20:3F:AD:27:E2:D6:6D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 032EAFA0B2CF78AB47C729EBDC0501F6953B1D51 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/403cdc26-1adf-4e8c-a40c-6cc31efe9fb8.roa Signing time: Sat 21 Feb 2026 00:10:27 +0000 ROA not before: Sat 21 Feb 2026 00:10:27 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:4060::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:2e:af:a0:b2:cf:78:ab:47:c7:29:eb:dc:05:01:f6:95:3b:1d:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 21 00:10:27 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=eb2aefc4a8df99283cc6bfce3c17100c06ac4cd4d6abce8c3b96c58ce5d62a18, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b4:c8:f5:67:72:93:11:31:28:75:9a:14:ee: 9c:e5:55:7b:d4:bb:82:f0:7b:60:da:ff:0f:b5:e2: 1e:04:7c:07:58:18:f0:0d:ae:f4:b2:17:2a:63:b2: 23:39:c1:74:c9:09:96:28:b1:67:e4:d6:55:9e:9f: 86:bf:3d:1f:ef:8a:db:0d:15:6c:8e:74:bf:f5:33: 3b:0b:f3:7c:a8:c0:a7:98:ff:8a:6b:6f:09:05:cf: 55:65:82:7c:a7:4d:7e:fb:b7:80:af:b5:4d:61:83: a0:3b:1b:7c:cf:21:86:70:92:00:3d:1c:d6:f4:5c: fe:e7:e6:bf:79:67:ec:f7:07:cd:9c:f7:96:1a:1d: 6f:ca:27:be:b1:6f:87:67:b8:21:2d:12:00:a2:30: 30:61:c4:d0:ba:5c:90:2f:0c:38:3e:d2:ee:db:11: 2f:0b:fa:29:17:57:f1:eb:e2:65:59:be:c9:37:08: f1:bf:a0:1f:23:0e:e6:1a:04:68:6b:6b:16:c2:d7: 6b:3d:da:b3:db:c0:54:1e:98:e0:f7:b4:e2:ef:98: a9:d1:0f:33:ee:7e:a6:04:13:6b:6f:e5:63:58:ce: 2b:5c:c2:1c:c0:8d:2c:cf:de:13:e1:e0:be:2c:fd: a0:c9:de:a2:4f:6a:d2:ec:b3:32:08:04:ba:93:1b: 5b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CC:50:2C:1B:1F:0E:86:8B:48:6C:3A:C4:20:3F:AD:27:E2:D6:6D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/403cdc26-1adf-4e8c-a40c-6cc31efe9fb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:4060::/48 Signature Algorithm: sha256WithRSAEncryption 92:f1:93:08:aa:13:9e:08:e1:c8:b8:7a:2d:57:3c:18:a1:1b: 14:5c:86:d3:46:ec:48:5c:ac:61:09:46:12:81:5f:f2:0c:e5: d3:5d:2b:b6:e7:da:63:e6:74:f4:dc:eb:6e:d1:f6:da:d9:c3: 54:53:4d:90:57:9b:63:f5:f2:25:dd:3d:77:ad:75:8d:31:ca: cd:5c:ed:f1:1f:31:83:07:3a:68:25:9e:bc:28:68:ab:08:3e: ea:57:3b:1f:d2:e6:08:02:d2:40:07:80:9c:57:6d:6a:7e:4f: dc:06:43:f4:40:78:f9:95:75:df:bb:8d:f9:6c:08:ab:92:8f: 06:71:78:28:df:13:7c:d9:52:f8:1f:22:bd:b2:2a:9b:41:ef: 67:53:ec:b3:f0:39:e7:2a:09:7f:ef:58:41:4b:b1:35:68:bc: 59:3a:36:87:17:b9:0b:77:90:38:e6:09:36:f4:99:24:ed:54: 43:2f:cd:75:cf:46:f5:bd:01:76:eb:10:76:00:67:15:83:7c: 24:09:f4:89:0c:f6:06:bc:c7:e9:5f:63:0f:77:f2:e9:11:cf: 8c:cd:a4:72:95:d4:ad:24:f3:97:d5:f7:29:b8:1c:22:55:47: 26:5d:13:c7:79:5c:6b:0c:79:f8:b5:d3:a0:35:a0:a6:81:4f: a9:7d:7a:61 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUAy6voLLPeKtHxynr3AUB9pU7HVEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMTAwMTAyN1oX DTI2MDUyMjIzNTk1OVowejFJMEcGA1UEBRNAZWIyYWVmYzRhOGRmOTkyODNjYzZi ZmNlM2MxNzEwMGMwNmFjNGNkNGQ2YWJjZThjM2I5NmM1OGNlNWQ2MmExODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLTI9WdykxExKHWaFO6c5VV71LuC 8Htg2v8PteIeBHwHWBjwDa70shcqY7IjOcF0yQmWKLFn5NZVnp+Gvz0f74rbDRVs jnS/9TM7C/N8qMCnmP+Ka28JBc9VZYJ8p01++7eAr7VNYYOgOxt8zyGGcJIAPRzW 9Fz+5+a/eWfs9wfNnPeWGh1vyie+sW+HZ7ghLRIAojAwYcTQulyQLww4PtLu2xEv C/opF1fx6+JlWb7JNwjxv6AfIw7mGgRoa2sWwtdrPdqz28BUHpjg97Ti75ip0Q8z 7n6mBBNrb+VjWM4rXMIcwI0sz94T4eC+LP2gyd6iT2rS7LMyCAS6kxtbWQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFB7MUCwbHw6Gi0hsOsQgP60n4tZtMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQwM2NkYzI2LTFhZGYtNGU4Yy1hNDBjLTZjYzMxZWZlOWZiOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAEBgMA0GCSqGSIb3DQEBCwUAA4IBAQCS8ZMIqhOeCOHIuHot VzwYoRsUXIbTRuxIXKxhCUYSgV/yDOXTXSu259pj5nT03Otu0fba2cNUU02QV5tj 9fIl3T13rXWNMcrNXO3xHzGDBzpoJZ68KGirCD7qVzsf0uYIAtJAB4CcV21qfk/c BkP0QHj5lXXfu435bAirko8GcXgo3xN82VL4HyK9siqbQe9nU+yz8DnnKgl/71hB S7E1aLxZOjaHF7kLd5A45gk29Jkk7VRDL811z0b1vQF26xB2AGcVg3wkCfSJDPYG vMfpX2MPd/LpEc+MzaRyldStJPOX1fcpuBwiVUcmXRPHeVxrDHn4tdOgNaCmgU+p fXph -----END CERTIFICATE-----Generated at Mon Mar 2 13:47:49 2026 by rpki-client