$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4340d3ab-0665-4d5d-b19f-2f3cef58b325.roa File: 4340d3ab-0665-4d5d-b19f-2f3cef58b325.roa (raw, json) Hash identifier: 20RfGsYv0lRayxlq1Um7qy8z97J/raJ4qDrlblDms3A= Subject key identifier: F3:20:BD:6C:50:C6:C4:76:C1:AF:BC:A8:84:71:EB:7D:20:EE:A0:24 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 58A1176B79B77E361A653CDBE39C29F5E68828ED Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4340d3ab-0665-4d5d-b19f-2f3cef58b325.roa Signing time: Fri 20 Feb 2026 00:20:30 +0000 ROA not before: Fri 20 Feb 2026 00:20:30 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:2840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:a1:17:6b:79:b7:7e:36:1a:65:3c:db:e3:9c:29:f5:e6:88:28:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 20 00:20:30 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=fe85d24c6b866bd0121478400ee44fffb4cb968e8d015a13ef6de9e4375722ed, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:65:4c:d5:2e:e5:cd:58:a0:f7:cc:55:c8:d8: 87:ce:a3:d2:1e:ca:1d:c6:99:04:fd:dd:3a:0c:0d: ff:35:44:a9:9a:f4:e8:65:9c:ef:1e:09:0f:64:fd: 8a:84:c1:82:b6:75:c0:66:08:c7:2a:4d:6d:77:df: df:6c:82:dc:14:02:32:13:30:a3:f1:37:cf:83:93: 7f:a2:6a:25:49:cd:d0:58:3d:61:bc:ff:e4:12:e3: db:8d:95:2d:2f:da:aa:09:af:65:6d:fb:b5:20:66: 2d:ab:c0:47:55:76:e3:91:13:29:1a:bd:7c:e6:a4: d3:c9:05:c3:3c:df:d9:c2:71:73:6f:de:2e:21:0a: ae:5b:fd:6e:d6:59:48:fe:a3:be:3c:63:e6:da:cf: 6c:b0:6c:dc:be:56:1f:c5:ef:4b:b2:7f:15:b3:87: 60:16:2e:f9:83:93:f8:ea:31:5b:7c:bd:11:14:4c: 23:26:bc:17:9c:16:fa:42:f3:08:57:32:ca:f2:43: 60:39:9b:85:99:ef:1e:2f:1d:d6:14:e9:b3:2a:c9: 12:d7:7c:06:aa:0c:67:28:e5:bf:82:bc:9c:40:12: 85:13:d3:b1:01:a3:aa:10:71:08:bc:61:3f:d1:1b: 75:61:ea:17:66:ee:9d:aa:77:d0:82:0e:fd:16:ee: a7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:20:BD:6C:50:C6:C4:76:C1:AF:BC:A8:84:71:EB:7D:20:EE:A0:24 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4340d3ab-0665-4d5d-b19f-2f3cef58b325.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:2840::/48 Signature Algorithm: sha256WithRSAEncryption c9:07:01:41:86:d8:7f:9c:d8:1a:11:9d:cd:6d:74:a8:4a:48: f6:55:50:d6:fd:cb:12:31:ce:fe:b8:20:80:b9:a5:1c:aa:d9: 4d:ee:36:85:23:41:d2:91:ae:c7:b1:d4:35:d0:a2:3f:d4:73: 61:42:0a:6c:36:a8:f9:8a:4f:22:ee:de:94:00:a1:04:14:bb: ad:01:ea:58:2d:2c:e5:d6:4b:14:49:3b:0d:4a:b6:81:28:b6: a0:23:33:0e:37:8e:2e:3d:ad:26:43:4c:88:1e:aa:cd:df:66: 17:7d:cd:f9:99:5c:16:98:5e:a0:d1:73:24:4e:78:17:e3:5e: ea:02:0a:0a:3e:b8:c5:b2:d2:0d:2c:b4:f7:95:11:51:8e:b2: d8:b5:03:6a:08:f1:32:1d:07:dd:6a:8e:6a:f4:5a:b6:73:bc: bb:11:57:e6:98:9f:5a:c6:e4:17:a5:7b:bd:ee:bc:a9:20:ca: 8e:ab:98:21:f1:db:3f:b3:21:f8:50:a4:f2:09:0a:80:ca:f2: 46:21:ff:13:e6:75:23:74:04:37:eb:6b:39:7d:a9:28:96:66: 04:36:d2:ba:75:bc:c6:39:40:e6:33:35:6b:fd:29:71:ad:1d: ae:04:59:3d:18:4e:c0:48:fc:82:08:f9:60:47:80:2a:73:90: 85:d2:33:d8 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUWKEXa3m3fjYaZTzb45wp9eaIKO0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMDAwMjAzMFoX DTI2MDUyMTIzNTk1OVowejFJMEcGA1UEBRNAZmU4NWQyNGM2Yjg2NmJkMDEyMTQ3 ODQwMGVlNDRmZmZiNGNiOTY4ZThkMDE1YTEzZWY2ZGU5ZTQzNzU3MjJlZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WVM1S7lzVig98xVyNiHzqPSHsod xpkE/d06DA3/NUSpmvToZZzvHgkPZP2KhMGCtnXAZgjHKk1td9/fbILcFAIyEzCj 8TfPg5N/omolSc3QWD1hvP/kEuPbjZUtL9qqCa9lbfu1IGYtq8BHVXbjkRMpGr18 5qTTyQXDPN/ZwnFzb94uIQquW/1u1llI/qO+PGPm2s9ssGzcvlYfxe9Lsn8Vs4dg Fi75g5P46jFbfL0RFEwjJrwXnBb6QvMIVzLK8kNgOZuFme8eLx3WFOmzKskS13wG qgxnKOW/grycQBKFE9OxAaOqEHEIvGE/0Rt1YeoXZu6dqnfQgg79Fu6njQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPMgvWxQxsR2wa+8qIRx630g7qAkMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQzNDBkM2FiLTA2NjUtNGQ1ZC1iMTlmLTJmM2NlZjU4YjMyNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/yhAMA0GCSqGSIb3DQEBCwUAA4IBAQDJBwFBhth/nNgaEZ3N bXSoSkj2VVDW/csSMc7+uCCAuaUcqtlN7jaFI0HSka7HsdQ10KI/1HNhQgpsNqj5 ik8i7t6UAKEEFLutAepYLSzl1ksUSTsNSraBKLagIzMON44uPa0mQ0yIHqrN32YX fc35mVwWmF6g0XMkTngX417qAgoKPrjFstINLLT3lRFRjrLYtQNqCPEyHQfdao5q 9Fq2c7y7EVfmmJ9axuQXpXu97rypIMqOq5gh8ds/syH4UKTyCQqAyvJGIf8T5nUj dAQ362s5fakolmYENtK6dbzGOUDmMzVr/SlxrR2uBFk9GE7ASPyCCPlgR4Aqc5CF 0jPY -----END CERTIFICATE-----Generated at Sun Mar 1 23:48:45 2026 by rpki-client