$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/56aba584-e6fd-42ac-9d3c-f747713e6c50.roa File: 56aba584-e6fd-42ac-9d3c-f747713e6c50.roa (raw, json) Hash identifier: ZZ9yLdYLNRhOafk+hpBMTzDz+ldfDD70R/uJYFhblbU= Subject key identifier: 39:E3:02:02:10:9C:B6:06:12:C8:73:C6:6F:DC:1D:8C:C3:7E:36:2B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 170F2D78C7AC9D2FB0876A801EDB471EE4605079 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/56aba584-e6fd-42ac-9d3c-f747713e6c50.roa Signing time: Wed 18 Feb 2026 00:01:30 +0000 ROA not before: Wed 18 Feb 2026 00:01:30 +0000 ROA not after: Tue 19 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:c840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:0f:2d:78:c7:ac:9d:2f:b0:87:6a:80:1e:db:47:1e:e4:60:50:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 18 00:01:30 2026 GMT Not After : May 19 23:59:59 2026 GMT Subject: serialNumber=60fd4debdbff8eeaf4866adb7f5d54c2b8864a8295c646cc71c29064780db7e7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:56:c4:94:b8:fd:99:49:20:d5:38:ad:e2:94: d4:31:28:c3:d7:da:28:5c:91:63:61:42:37:73:12: 0f:79:04:64:3f:4e:64:2f:93:34:45:6d:42:4e:c2: a3:76:e6:3d:74:62:76:12:17:f1:c3:b8:c7:21:bd: ca:02:3d:b5:ed:b6:ff:af:d9:01:7b:aa:3b:1d:7f: 7d:f6:cc:07:b5:63:d4:74:ea:20:51:f5:36:96:c9: 7e:3d:8c:27:d0:6d:3d:52:10:0e:33:98:d8:4c:8b: b3:e4:4b:1b:04:e7:ba:1f:25:8b:2f:26:80:50:ed: b5:78:4a:7d:35:ee:98:e0:0c:5d:11:8b:c1:38:19: 45:f0:99:6d:95:5a:a2:8e:b2:06:6d:fa:5a:cb:7d: 12:e0:07:f7:0e:45:08:3a:aa:50:27:b5:56:01:e8: 6b:f5:68:c4:fb:34:f4:4e:76:bb:be:5d:c1:2f:5f: b5:ad:ef:24:af:94:c4:03:d7:46:80:83:5c:17:f6: 3b:2f:92:33:3e:f0:31:dd:49:3a:51:37:18:dd:39: b0:2b:0c:a2:4f:bb:23:bd:e5:e3:17:53:ac:a7:e8: d3:06:ab:f9:05:30:71:a4:ce:54:ac:2b:be:a5:9b: d7:71:41:0e:b5:f6:4b:ec:ee:b1:63:3f:fb:f5:d6: 55:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E3:02:02:10:9C:B6:06:12:C8:73:C6:6F:DC:1D:8C:C3:7E:36:2B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/56aba584-e6fd-42ac-9d3c-f747713e6c50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:c840::/48 Signature Algorithm: sha256WithRSAEncryption 56:35:42:40:f1:1b:de:97:0c:4c:85:44:0a:84:cc:eb:0f:4e: 3f:72:01:c4:9c:5e:63:e7:87:bb:c9:71:9d:8d:57:68:2a:ef: ff:da:20:c6:f8:c5:d2:58:9d:a6:38:8d:7d:30:91:3c:41:79: fd:8e:d7:69:67:db:af:ac:7b:3b:77:4d:8a:2a:e4:73:46:f3: 0a:2e:ab:ec:ee:02:2f:7f:c1:ca:89:41:28:4a:47:63:51:d5: a2:e3:a9:29:5b:c5:ec:4d:67:95:56:e1:a8:72:5d:99:58:2e: f5:8f:61:68:2f:1f:d5:86:22:ea:fb:e9:63:14:a4:b5:19:bf: 2d:a9:2d:c7:7e:5f:32:ed:a0:e6:a1:03:60:49:5e:32:e1:45: 78:cb:d3:24:72:76:73:f6:49:3d:82:86:e1:f3:5c:07:5b:d3: 6d:54:d9:39:f3:51:ef:57:ab:ba:84:45:0f:f3:52:f3:b5:c2: 2a:dd:0a:32:7a:e5:8d:45:f0:15:3e:d0:b2:13:39:80:f0:50: aa:cd:cf:63:f9:b2:6f:5c:c9:86:f2:2f:07:a2:54:09:85:49: f1:ea:b0:b7:1f:4f:32:4f:e4:6b:6a:15:b5:4c:d2:df:a3:d3: 3d:96:6a:6f:4e:22:21:d8:7c:9f:4b:09:8c:0c:a1:ca:7b:2f: db:9d:2b:93 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUFw8teMesnS+wh2qAHttHHuRgUHkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxODAwMDEzMFoX DTI2MDUxOTIzNTk1OVowejFJMEcGA1UEBRNANjBmZDRkZWJkYmZmOGVlYWY0ODY2 YWRiN2Y1ZDU0YzJiODg2NGE4Mjk1YzY0NmNjNzFjMjkwNjQ3ODBkYjdlNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFbElLj9mUkg1Tit4pTUMSjD19oo XJFjYUI3cxIPeQRkP05kL5M0RW1CTsKjduY9dGJ2Ehfxw7jHIb3KAj217bb/r9kB e6o7HX999swHtWPUdOogUfU2lsl+PYwn0G09UhAOM5jYTIuz5EsbBOe6HyWLLyaA UO21eEp9Ne6Y4AxdEYvBOBlF8JltlVqijrIGbfpay30S4Af3DkUIOqpQJ7VWAehr 9WjE+zT0Tna7vl3BL1+1re8kr5TEA9dGgINcF/Y7L5IzPvAx3Uk6UTcY3TmwKwyi T7sjveXjF1Osp+jTBqv5BTBxpM5UrCu+pZvXcUEOtfZL7O6xYz/79dZVmwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDnjAgIQnLYGEshzxm/cHYzDfjYrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU2YWJhNTg0LWU2ZmQtNDJhYy05ZDNjLWY3NDc3MTNlNmM1MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAMhAMA0GCSqGSIb3DQEBCwUAA4IBAQBWNUJA8RvelwxMhUQK hMzrD04/cgHEnF5j54e7yXGdjVdoKu//2iDG+MXSWJ2mOI19MJE8QXn9jtdpZ9uv rHs7d02KKuRzRvMKLqvs7gIvf8HKiUEoSkdjUdWi46kpW8XsTWeVVuGocl2ZWC71 j2FoLx/VhiLq++ljFKS1Gb8tqS3Hfl8y7aDmoQNgSV4y4UV4y9MkcnZz9kk9gobh 81wHW9NtVNk581HvV6u6hEUP81LztcIq3QoyeuWNRfAVPtCyEzmA8FCqzc9j+bJv XMmG8i8HolQJhUnx6rC3H08yT+RrahW1TNLfo9M9lmpvTiIh2HyfSwmMDKHKey/b nSuT -----END CERTIFICATE-----Generated at Sun Mar 1 22:04:57 2026 by rpki-client