$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4d62567a-b0b0-4bb9-96ac-078c8832194f.roa File: 4d62567a-b0b0-4bb9-96ac-078c8832194f.roa (raw, json) Hash identifier: nV1Hyn6mGx2bT4mcV8wJI5mi2sX/da77PQN+rsLIxmo= Subject key identifier: A0:E4:4E:68:86:8F:40:A7:D8:AF:88:66:46:D6:23:B4:B2:D8:E9:EF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0ED461322CDF06D8CF80507E643722601AF55210 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4d62567a-b0b0-4bb9-96ac-078c8832194f.roa Signing time: Sun 22 Feb 2026 00:10:03 +0000 ROA not before: Sun 22 Feb 2026 00:10:03 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1c:8000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:d4:61:32:2c:df:06:d8:cf:80:50:7e:64:37:22:60:1a:f5:52:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 22 00:10:03 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=5c7a2722519cc233b56ebf821e6c7492d93136e00e77c9fc05e9741b5dffa710, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:51:89:c6:43:b9:07:12:b2:e6:05:c1:86:61: 32:7b:fd:fe:d4:32:16:a8:73:08:b5:1d:fa:87:8a: a8:3a:75:ed:e8:f9:93:fd:49:4e:8b:c1:a9:c5:14: 1b:8a:9e:ee:62:7e:c8:e8:1c:6f:65:d9:4c:ed:20: 63:40:13:49:a1:da:ac:79:9b:ca:f3:22:86:87:3d: a2:5e:4b:4c:55:0f:78:5d:21:49:f3:a5:4a:29:42: 79:96:07:8f:7c:2b:21:a1:f5:bb:cd:9e:72:05:42: 12:86:d3:81:80:81:58:6f:e7:f6:ff:5a:05:3f:0f: 57:51:c7:ff:23:c1:cd:b6:2e:74:2f:0c:c6:bb:91: 81:76:6f:fb:67:2d:68:b0:6c:9b:54:90:72:ca:5a: 3e:0e:7d:b7:a2:cc:91:63:70:3e:b1:f8:f6:27:03: 72:51:04:0e:41:4d:2e:66:c8:8d:de:2d:9c:8b:b3: cc:c8:cd:5c:ef:9e:07:d1:54:ef:15:d4:7b:49:62: 39:d3:57:c5:85:2d:07:4d:f6:17:55:5a:47:45:60: 96:37:ef:99:5a:5c:3c:b2:aa:bd:c1:91:fc:bb:3b: 42:00:b0:0d:64:bb:29:95:05:a8:39:ea:7d:42:aa: 1c:70:54:d2:b3:75:fc:0e:d6:1c:09:1b:a2:6e:31: 9c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E4:4E:68:86:8F:40:A7:D8:AF:88:66:46:D6:23:B4:B2:D8:E9:EF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4d62567a-b0b0-4bb9-96ac-078c8832194f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1c:8000::/38 Signature Algorithm: sha256WithRSAEncryption 47:8b:f5:29:f3:7b:02:d2:d1:fc:13:3c:f1:85:1d:37:84:51: 2d:5e:3c:6a:b5:80:bd:da:c4:c4:c7:7e:83:d5:83:cc:f8:3b: f5:32:6e:b9:c5:0c:d7:ea:0f:4c:8d:ca:6d:38:92:b2:21:35: 30:ea:53:9d:6b:88:e2:92:a8:50:81:09:54:68:87:fd:d3:94: e9:2b:97:a4:ae:30:a1:12:1b:48:c9:97:c9:01:92:56:32:f7: 5a:e6:1b:ac:2b:6c:1d:8c:08:bf:7e:e5:76:cc:4d:f2:2d:fc: dd:67:a9:ea:dd:89:bc:63:ac:fb:44:d3:3f:50:59:7e:da:26: 87:7e:bc:ae:5f:c5:1f:24:b2:2b:d1:70:86:8f:31:f3:3c:5c: fa:b0:cd:3b:59:9a:56:6d:3c:2f:ef:ad:19:53:d7:bf:b4:e2: 91:88:71:78:1e:34:b2:29:c9:ff:2b:d1:6b:a0:ed:c4:88:8e: 16:34:ed:cf:b5:04:f1:c4:3e:63:e2:a5:f5:f3:8f:62:f3:39: 56:73:ff:1f:66:9b:6d:e1:f6:39:96:c2:f5:c4:a3:c4:7d:ad: 25:66:68:1c:36:98:85:8b:c2:78:7c:a1:3d:92:3e:58:1d:c0: f3:c9:3f:8d:5a:bd:a9:99:c2:4f:d2:8b:83:e1:11:2b:d8:49: d8:9a:30:c0 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUDtRhMizfBtjPgFB+ZDciYBr1UhAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMjAwMTAwM1oX DTI2MDUyMzIzNTk1OVowejFJMEcGA1UEBRNANWM3YTI3MjI1MTljYzIzM2I1NmVi ZjgyMWU2Yzc0OTJkOTMxMzZlMDBlNzdjOWZjMDVlOTc0MWI1ZGZmYTcxMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVGJxkO5BxKy5gXBhmEye/3+1DIW qHMItR36h4qoOnXt6PmT/UlOi8GpxRQbip7uYn7I6BxvZdlM7SBjQBNJodqseZvK 8yKGhz2iXktMVQ94XSFJ86VKKUJ5lgePfCshofW7zZ5yBUIShtOBgIFYb+f2/1oF Pw9XUcf/I8HNti50LwzGu5GBdm/7Zy1osGybVJByylo+Dn23osyRY3A+sfj2JwNy UQQOQU0uZsiN3i2ci7PMyM1c754H0VTvFdR7SWI501fFhS0HTfYXVVpHRWCWN++Z Wlw8sqq9wZH8uztCALANZLsplQWoOep9QqoccFTSs3X8DtYcCRuibjGcnwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKDkTmiGj0Cn2K+IZkbWI7Sy2OnvMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRkNjI1NjdhLWIwYjAtNGJiOS05NmFjLTA3OGM4ODMyMTk0Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaHIAwDQYJKoZIhvcNAQELBQADggEBAEeL9SnzewLS0fwTPPGF HTeEUS1ePGq1gL3axMTHfoPVg8z4O/UybrnFDNfqD0yNym04krIhNTDqU51riOKS qFCBCVRoh/3TlOkrl6SuMKESG0jJl8kBklYy91rmG6wrbB2MCL9+5XbMTfIt/N1n qerdibxjrPtE0z9QWX7aJod+vK5fxR8ksivRcIaPMfM8XPqwzTtZmlZtPC/vrRlT 17+04pGIcXgeNLIpyf8r0Wug7cSIjhY07c+1BPHEPmPipfXzj2LzOVZz/x9mm23h 9jmWwvXEo8R9rSVmaBw2mIWLwnh8oT2SPlgdwPPJP41avamZwk/Si4PhESvYSdia MMA= -----END CERTIFICATE-----Generated at Mon Mar 2 01:49:34 2026 by rpki-client