$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5637e746-68a9-4187-b79d-5e4d4b5c348e.roa File: 5637e746-68a9-4187-b79d-5e4d4b5c348e.roa (raw, json) Hash identifier: P+afZd3E7/LBjZdwzLVlWovCxphuGQfwCfkRJHakrEk= Subject key identifier: 80:6F:5B:67:48:F6:AB:81:9A:04:8D:41:85:38:CF:C1:F8:12:7C:51 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4771BBABCFA1002275124E01617F6556600E73FD Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5637e746-68a9-4187-b79d-5e4d4b5c348e.roa Signing time: Sun 22 Feb 2026 00:00:59 +0000 ROA not before: Sun 22 Feb 2026 00:00:59 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da2c:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:71:bb:ab:cf:a1:00:22:75:12:4e:01:61:7f:65:56:60:0e:73:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 22 00:00:59 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=3d1be5db116e0005cd0cd405a3f9cf37fefb2803b9315154a1f03216036bbd4f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5d:25:e3:ab:4f:98:65:cc:0b:76:cf:3a:ac: b3:27:b3:02:c6:e6:5c:49:3e:6e:b6:9d:af:98:35: 0b:2b:92:81:a6:b2:3d:23:89:4c:93:5d:8a:a7:9a: bb:6a:21:04:bc:2c:8d:63:3a:93:94:ad:cd:c4:53: ac:e6:ec:73:33:b7:96:4c:eb:44:14:85:90:4d:d7: ae:71:46:45:f8:af:8e:de:14:66:fb:fa:d7:57:bb: 1c:aa:28:17:7a:f3:e4:9a:b5:39:a9:3c:e7:02:50: 02:c7:22:86:45:24:5c:a3:46:27:81:2e:0f:32:46: b3:79:9f:ab:80:d5:b2:2d:91:ff:31:ce:cc:59:8d: f0:96:77:1c:32:c7:06:dc:90:74:e3:de:da:4e:41: 4f:ee:dd:75:d1:b7:74:5f:70:5b:35:4f:75:23:6b: 06:98:bb:45:fd:c1:8b:68:2f:0b:3a:e1:1f:14:17: de:b7:7b:65:77:5a:f5:83:d8:24:ab:d2:af:f5:c9: 7d:f6:f2:11:49:91:5b:59:61:ae:35:62:d6:d3:31: ec:13:89:ab:0e:e8:54:1e:e7:55:69:3c:b4:d6:df: bf:c8:3f:ae:2e:58:3f:c0:e7:2e:b7:6c:64:f2:73: 1b:21:15:b7:b2:b2:73:c8:fa:7a:f6:a1:e0:16:76: 3f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:6F:5B:67:48:F6:AB:81:9A:04:8D:41:85:38:CF:C1:F8:12:7C:51 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5637e746-68a9-4187-b79d-5e4d4b5c348e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da2c:8000::/36 Signature Algorithm: sha256WithRSAEncryption 45:9c:d7:23:19:d9:ce:09:85:d7:85:b0:65:3f:39:35:41:ed: 79:da:ee:85:f5:e3:5c:7c:2f:aa:61:b3:5f:73:a9:05:dd:d9: 54:a9:91:4c:20:2c:c4:4a:ee:c0:8f:06:38:58:8b:ec:d0:31: e1:e1:e8:c7:fe:96:af:b6:0b:3c:c1:22:65:3c:0b:a2:84:c3: 39:59:eb:78:15:e9:4e:6d:3d:47:6d:25:2f:95:69:4d:a1:78: e4:c3:80:df:d9:d7:43:cf:1a:85:38:57:29:b8:4e:c8:4e:4a: 7b:83:c1:2c:b7:18:ea:2b:88:20:ce:f2:f8:14:a2:e5:be:52: 85:2c:c6:8a:9d:1b:29:bc:4d:82:53:5b:27:da:a3:86:1e:ea: 3a:0c:12:fd:e5:7b:74:9a:b2:42:ba:56:2e:f0:a8:0e:57:1f: 98:cd:1e:7f:30:fc:b9:e5:74:68:02:85:dd:c5:8c:94:a0:95: 95:78:15:e0:6b:51:cc:bc:7f:cc:0b:7f:3d:95:14:81:b8:2c: 11:cb:ce:4e:3b:05:63:04:90:f6:53:e3:b1:b3:1c:9e:f6:6e: d1:b6:3e:1d:61:62:ee:bb:c9:b6:ba:1d:c7:f0:62:07:d6:0f: af:c0:55:f0:79:b0:96:b3:40:71:33:81:91:96:0f:9c:7b:42: 59:6a:ab:01 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUR3G7q8+hACJ1Ek4BYX9lVmAOc/0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMjAwMDA1OVoX DTI2MDUyMzIzNTk1OVowejFJMEcGA1UEBRNAM2QxYmU1ZGIxMTZlMDAwNWNkMGNk NDA1YTNmOWNmMzdmZWZiMjgwM2I5MzE1MTU0YTFmMDMyMTYwMzZiYmQ0ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF0l46tPmGXMC3bPOqyzJ7MCxuZc ST5utp2vmDULK5KBprI9I4lMk12Kp5q7aiEEvCyNYzqTlK3NxFOs5uxzM7eWTOtE FIWQTdeucUZF+K+O3hRm+/rXV7scqigXevPkmrU5qTznAlACxyKGRSRco0YngS4P MkazeZ+rgNWyLZH/Mc7MWY3wlnccMscG3JB0497aTkFP7t110bd0X3BbNU91I2sG mLtF/cGLaC8LOuEfFBfet3tld1r1g9gkq9Kv9cl99vIRSZFbWWGuNWLW0zHsE4mr DuhUHudVaTy01t+/yD+uLlg/wOcut2xk8nMbIRW3srJzyPp69qHgFnY/rQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIBvW2dI9quBmgSNQYU4z8H4EnxRMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU2MzdlNzQ2LTY4YTktNDE4Ny1iNzlkLTVlNGQ0YjVjMzQ4ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaLIAwDQYJKoZIhvcNAQELBQADggEBAEWc1yMZ2c4JhdeFsGU/ OTVB7Xna7oX141x8L6phs19zqQXd2VSpkUwgLMRK7sCPBjhYi+zQMeHh6Mf+lq+2 CzzBImU8C6KEwzlZ63gV6U5tPUdtJS+VaU2heOTDgN/Z10PPGoU4Vym4TshOSnuD wSy3GOoriCDO8vgUouW+UoUsxoqdGym8TYJTWyfao4Ye6joMEv3le3SaskK6Vi7w qA5XH5jNHn8w/LnldGgChd3FjJSglZV4FeBrUcy8f8wLfz2VFIG4LBHLzk47BWME kPZT47GzHJ72btG2Ph1hYu67yba6HcfwYgfWD6/AVfB5sJazQHEzgZGWD5x7Qllq qwE= -----END CERTIFICATE-----Generated at Mon Mar 2 03:23:22 2026 by rpki-client