$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f190963-16ca-4ba3-9370-65813f5adc68.roa File: 4f190963-16ca-4ba3-9370-65813f5adc68.roa (raw, json) Hash identifier: ulF4vhYr1PRpqSn+sBgTWWGkyDZQLl41yPkmWPr/EOM= Subject key identifier: ED:9E:1A:08:0C:4A:99:44:7D:08:F1:D4:06:A1:74:F0:49:2A:E5:DD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3742BC0F9FAD091047BD7252227746E6106A1DB8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f190963-16ca-4ba3-9370-65813f5adc68.roa Signing time: Sun 22 Feb 2026 00:01:19 +0000 ROA not before: Sun 22 Feb 2026 00:01:19 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab9:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:42:bc:0f:9f:ad:09:10:47:bd:72:52:22:77:46:e6:10:6a:1d:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 22 00:01:19 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=7f22e8b38162e2be02ad94aacb40086f7a726e656d2dfac9635d8c6361e46efc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a6:79:b7:2e:92:68:dd:b0:f2:a5:0e:5e:59: 49:f9:dd:ed:9c:3b:f6:65:ac:1b:4a:37:cd:ee:1e: 08:c7:5b:42:e1:60:6a:a8:63:a5:bd:05:95:7a:83: 2d:cb:9b:6f:05:3a:19:72:92:90:35:b6:06:63:ac: c9:68:23:1c:22:38:44:2f:0e:cc:c1:32:12:29:57: 7d:fb:59:7d:16:84:6c:8f:bd:07:97:43:29:c5:73: 06:42:77:61:06:5e:cb:31:9d:04:e9:1b:e3:0b:f2: b5:14:f9:0d:fe:fb:66:cc:0b:46:89:89:d6:3f:63: 50:df:92:7d:db:9f:d6:d5:ec:fd:b6:93:87:8b:2b: ef:63:59:f4:62:27:e4:cb:39:6f:c2:3c:26:55:d2: 89:09:5e:67:c9:cb:06:19:46:9f:16:92:be:ac:f7: 3e:02:03:eb:bd:83:25:85:5a:74:c6:b5:98:f2:87: db:5b:2a:f6:26:a6:9d:cb:b5:e2:89:78:06:81:b6: 7a:3f:5d:7b:31:82:07:2c:ed:fe:ff:08:a4:a6:3e: 74:22:83:9f:40:d8:1b:0f:82:78:9a:f0:6b:29:c4: 29:e5:3f:87:8b:70:84:f0:18:a0:16:1a:ae:31:a7: 85:c1:c5:14:ef:e5:2a:1b:52:a6:cd:75:42:33:89: 8a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:9E:1A:08:0C:4A:99:44:7D:08:F1:D4:06:A1:74:F0:49:2A:E5:DD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f190963-16ca-4ba3-9370-65813f5adc68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:2000::/40 Signature Algorithm: sha256WithRSAEncryption 36:d1:74:71:3b:dc:47:a5:7a:3b:af:a4:e8:a8:4e:a6:be:e8: c7:86:79:0e:96:84:81:83:ff:7c:b5:f7:26:44:7a:ef:95:a4: 6a:a5:8d:6d:0d:78:13:8c:02:7d:21:7e:d3:63:16:6f:a9:7f: 9f:26:7f:c0:59:1d:90:10:99:09:b2:aa:2d:0b:00:8f:0d:ed: 72:eb:bb:a7:9a:45:a4:81:84:4a:d7:dd:6a:69:1c:11:83:0b: 8d:ae:00:4e:ed:fb:78:28:d2:31:94:08:b2:87:01:3b:d5:2c: 35:31:13:f4:9b:2f:0a:35:ab:e0:71:ee:8b:cd:ad:b2:7b:75: 70:9c:6f:54:33:23:58:8a:73:05:0c:d4:11:33:27:ff:e7:da: ea:1e:04:90:da:6c:3a:8f:9e:48:49:27:36:38:66:bb:a7:b2: 3e:2e:10:18:7b:b4:80:77:6f:c1:9d:95:ac:28:90:10:e0:2d: fe:31:6b:81:5b:be:e9:c0:fd:27:66:32:b4:6f:f1:32:b9:8d: 8b:71:6b:c8:8a:ee:cf:b9:e4:75:fd:bf:a1:09:8b:e8:56:cc: 9c:28:14:de:e5:9c:5a:af:4a:16:24:09:38:36:58:bd:78:6c: b5:74:11:65:3e:2e:71:4e:6d:f7:68:06:95:e8:e9:fc:6f:93: ab:ab:bf:03 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUN0K8D5+tCRBHvXJSIndG5hBqHbgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMjAwMDExOVoX DTI2MDUyMzIzNTk1OVowejFJMEcGA1UEBRNAN2YyMmU4YjM4MTYyZTJiZTAyYWQ5 NGFhY2I0MDA4NmY3YTcyNmU2NTZkMmRmYWM5NjM1ZDhjNjM2MWU0NmVmYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraZ5ty6SaN2w8qUOXllJ+d3tnDv2 ZawbSjfN7h4Ix1tC4WBqqGOlvQWVeoMty5tvBToZcpKQNbYGY6zJaCMcIjhELw7M wTISKVd9+1l9FoRsj70Hl0MpxXMGQndhBl7LMZ0E6RvjC/K1FPkN/vtmzAtGiYnW P2NQ35J925/W1ez9tpOHiyvvY1n0YifkyzlvwjwmVdKJCV5nycsGGUafFpK+rPc+ AgPrvYMlhVp0xrWY8ofbWyr2Jqady7XiiXgGgbZ6P117MYIHLO3+/wikpj50IoOf QNgbD4J4mvBrKcQp5T+Hi3CE8BigFhquMaeFwcUU7+UqG1KmzXVCM4mKhQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFO2eGggMSplEfQjx1AahdPBJKuXdMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRmMTkwOTYzLTE2Y2EtNGJhMy05MzcwLTY1ODEzZjVhZGM2OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauSAwDQYJKoZIhvcNAQELBQADggEBADbRdHE73EelejuvpOio Tqa+6MeGeQ6WhIGD/3y19yZEeu+VpGqljW0NeBOMAn0hftNjFm+pf58mf8BZHZAQ mQmyqi0LAI8N7XLru6eaRaSBhErX3WppHBGDC42uAE7t+3go0jGUCLKHATvVLDUx E/SbLwo1q+Bx7ovNrbJ7dXCcb1QzI1iKcwUM1BEzJ//n2uoeBJDabDqPnkhJJzY4 Zrunsj4uEBh7tIB3b8GdlawokBDgLf4xa4FbvunA/SdmMrRv8TK5jYtxa8iK7s+5 5HX9v6EJi+hWzJwoFN7lnFqvShYkCTg2WL14bLV0EWU+LnFObfdoBpXo6fxvk6ur vwM= -----END CERTIFICATE-----Generated at Sun Mar 1 22:14:08 2026 by rpki-client