$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/52ed4ede-452e-4252-99d4-ab87dca3e810.roa File: 52ed4ede-452e-4252-99d4-ab87dca3e810.roa (raw, json) Hash identifier: 70A1hYNs2i3b97sDmTZUpOCWjs2mcuRUVKyayMaEhwc= Subject key identifier: B7:41:A2:88:4E:4F:D5:4A:9A:8F:4D:05:5F:89:53:2D:09:52:5A:0C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5101199D4A9A9FEC26D3DAE409B928E3B6F8D385 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/52ed4ede-452e-4252-99d4-ab87dca3e810.roa Signing time: Sun 22 Feb 2026 00:10:23 +0000 ROA not before: Sun 22 Feb 2026 00:10:23 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafe:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:01:19:9d:4a:9a:9f:ec:26:d3:da:e4:09:b9:28:e3:b6:f8:d3:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 22 00:10:23 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=2ff7c06ba34c49820d11155adfa7546e268ad7d387d3828a8756fafcb937583d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:98:69:9e:51:1c:12:ef:b3:3c:62:f4:62:f1: ff:04:ca:23:9d:59:d8:b4:3e:21:0e:47:ec:38:cf: a2:4e:d5:76:ff:93:fc:44:58:6d:a4:2e:b2:3e:91: 5d:39:3a:24:73:2b:4d:ff:49:4c:ae:a6:27:e9:9d: 0e:18:9e:7f:82:f7:1c:01:a7:d8:84:21:91:90:c0: b3:67:0a:cd:eb:28:82:d0:c9:e9:ae:88:d8:dd:84: 99:7e:d8:98:de:00:b1:41:4f:f5:01:10:b3:01:1c: fe:54:8b:68:31:ec:b7:40:93:7a:e4:a1:99:95:6d: db:e0:31:9a:0e:c2:c5:d7:4a:6d:1a:98:60:ad:71: 62:5f:d4:36:b0:43:f3:f0:76:ed:fa:b4:ec:4a:27: c7:da:78:76:2f:04:0c:f8:f5:38:d3:de:29:5b:94: 54:89:3c:1e:51:35:63:19:1a:79:db:25:4c:f3:9b: bf:8d:bd:b7:37:15:bc:bf:6f:a1:f0:ec:43:7c:d1: 00:3e:6b:28:14:cd:d8:8f:fd:3c:ea:b2:44:aa:ca: 22:7b:a2:2a:f7:f1:af:c8:2b:d7:b2:e1:f5:4a:ba: 0c:4e:7e:0a:0f:af:44:d2:f8:23:fc:37:8e:6f:91: ad:ff:24:62:64:20:e1:92:22:c6:72:b8:f8:8b:9a: 37:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:41:A2:88:4E:4F:D5:4A:9A:8F:4D:05:5F:89:53:2D:09:52:5A:0C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/52ed4ede-452e-4252-99d4-ab87dca3e810.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafe:a000::/40 Signature Algorithm: sha256WithRSAEncryption 40:1a:09:41:4c:66:8e:57:9d:05:64:9e:94:9a:d4:94:d2:b9: 5f:57:2e:71:3b:77:77:11:f3:aa:22:ff:ee:ff:20:2f:d1:86: ca:41:00:b0:c6:83:92:60:e6:8d:31:56:ab:ea:15:38:2b:36: 20:be:7b:7d:17:bd:8a:62:6b:47:dd:33:b2:89:42:5a:7c:2d: 08:6c:45:a6:f1:5c:45:63:29:b6:57:f4:9b:fe:62:97:6c:b0: be:80:e6:8d:5f:8d:7c:be:3e:0e:ba:aa:c1:e0:cc:e1:17:22: cd:34:10:83:23:dc:f9:1f:27:77:41:60:ea:ef:e6:59:e0:7d: c2:20:fc:e9:26:87:30:10:f3:f5:bd:a7:07:fc:1c:5e:ea:a4: 44:ff:9e:9e:01:f3:c4:13:b2:25:fd:f0:e0:d2:bf:fc:68:8e: da:b0:a1:01:52:c4:ff:80:31:1b:1f:30:e4:81:c0:af:b6:9d: d4:2c:c1:f8:fe:10:6f:c2:6b:8a:7d:d0:ad:18:72:13:46:22: e5:7d:ed:cb:ee:1a:99:5a:9a:bd:76:bf:88:57:47:29:b4:8d: d5:5a:e8:79:dd:13:f8:43:ca:56:16:a0:59:52:70:9a:99:bc: bc:5c:91:0d:11:f6:fc:9b:b1:76:66:0d:cd:cb:7b:0e:ff:04: d5:42:e9:14 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUUQEZnUqan+wm09rkCbko47b404UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMjAwMTAyM1oX DTI2MDUyMzIzNTk1OVowejFJMEcGA1UEBRNAMmZmN2MwNmJhMzRjNDk4MjBkMTEx NTVhZGZhNzU0NmUyNjhhZDdkMzg3ZDM4MjhhODc1NmZhZmNiOTM3NTgzZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1phpnlEcEu+zPGL0YvH/BMojnVnY tD4hDkfsOM+iTtV2/5P8RFhtpC6yPpFdOTokcytN/0lMrqYn6Z0OGJ5/gvccAafY hCGRkMCzZwrN6yiC0MnprojY3YSZftiY3gCxQU/1ARCzARz+VItoMey3QJN65KGZ lW3b4DGaDsLF10ptGphgrXFiX9Q2sEPz8Hbt+rTsSifH2nh2LwQM+PU4094pW5RU iTweUTVjGRp52yVM85u/jb23NxW8v2+h8OxDfNEAPmsoFM3Yj/086rJEqsoie6Iq 9/GvyCvXsuH1SroMTn4KD69E0vgj/DeOb5Gt/yRiZCDhkiLGcrj4i5o32QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLdBoohOT9VKmo9NBV+JUy0JUloMMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUyZWQ0ZWRlLTQ1MmUtNDI1Mi05OWQ0LWFiODdkY2EzZTgxMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/qAwDQYJKoZIhvcNAQELBQADggEBAEAaCUFMZo5XnQVknpSa 1JTSuV9XLnE7d3cR86oi/+7/IC/RhspBALDGg5Jg5o0xVqvqFTgrNiC+e30XvYpi a0fdM7KJQlp8LQhsRabxXEVjKbZX9Jv+YpdssL6A5o1fjXy+Pg66qsHgzOEXIs00 EIMj3PkfJ3dBYOrv5lngfcIg/OkmhzAQ8/W9pwf8HF7qpET/np4B88QTsiX98ODS v/xojtqwoQFSxP+AMRsfMOSBwK+2ndQswfj+EG/Ca4p90K0YchNGIuV97cvuGpla mr12v4hXRym0jdVa6HndE/hDylYWoFlScJqZvLxckQ0R9vybsXZmDc3Lew7/BNVC 6RQ= -----END CERTIFICATE-----Generated at Sun Mar 1 22:03:25 2026 by rpki-client