$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5d80cf0b-c3f5-47ad-ab79-ca1b0d0f6bdb.roa File: 5d80cf0b-c3f5-47ad-ab79-ca1b0d0f6bdb.roa (raw, json) Hash identifier: 4Bw84NCBb0Qp0aIwlO0YXdxomowkLx9cFj4bvQEy5Lg= Subject key identifier: E3:72:5E:3F:29:C6:0E:3C:F6:3C:E1:2E:EE:6C:5A:CC:75:D7:49:E3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: EDA92AAD2CE62E34AA4C0D9D9249F7F40633EE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5d80cf0b-c3f5-47ad-ab79-ca1b0d0f6bdb.roa Signing time: Fri 06 Feb 2026 00:00:05 +0000 ROA not before: Fri 06 Feb 2026 00:00:05 +0000 ROA not after: Thu 07 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daed:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ed:a9:2a:ad:2c:e6:2e:34:aa:4c:0d:9d:92:49:f7:f4:06:33:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 6 00:00:05 2026 GMT Not After : May 7 23:59:59 2026 GMT Subject: serialNumber=89ff3d1906bc07c7f9940cba2259f3f9533717d2395ceb417093466dc9f7d327, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:12:8d:e6:db:1c:86:96:c3:01:19:67:e7:a8: 8c:8b:aa:97:c6:5d:e2:b8:9b:ec:16:9e:b0:79:3b: 53:73:ce:d4:b0:f0:46:e7:fd:6e:71:78:89:5f:e1: 5a:7c:da:a6:77:20:0c:00:c0:29:1c:6b:9c:98:0c: 22:8d:b4:1c:f8:c8:d0:da:bb:20:68:7d:f1:66:0a: 10:a5:ee:57:ab:68:6c:1c:ce:b3:35:d4:13:aa:ce: cc:5e:fe:6e:7b:dc:f9:7a:5a:8d:53:a5:7f:3d:f9: 71:b9:c5:a9:42:fe:43:06:bb:be:9a:10:48:c2:62: 32:ac:c2:f9:f0:8c:5b:7f:f5:37:d4:25:35:fa:24: e7:0c:19:33:e0:8c:b4:23:ed:82:f6:c5:2b:b0:c7: 78:32:28:8e:4b:02:13:35:17:d7:e7:68:be:b8:4e: e2:80:41:89:a8:dc:d9:81:18:30:70:21:a3:40:4c: 1c:06:db:8a:82:36:13:eb:d4:d1:34:41:b7:69:c4: 00:a8:92:5b:03:94:a8:d0:46:60:56:e4:45:71:df: 03:92:c4:c4:9a:ec:a8:c0:cd:3f:cd:e8:ce:3d:9c: 6e:14:bc:62:9a:8a:61:0a:ed:ca:60:3d:0c:6c:76: 91:f5:87:8e:16:6c:d4:85:a2:80:a9:e9:ea:14:e8: ff:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:72:5E:3F:29:C6:0E:3C:F6:3C:E1:2E:EE:6C:5A:CC:75:D7:49:E3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5d80cf0b-c3f5-47ad-ab79-ca1b0d0f6bdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daed:a000::/40 Signature Algorithm: sha256WithRSAEncryption 49:c1:b1:22:06:11:54:d4:05:29:d2:69:5f:22:e4:88:42:49: 95:c3:b6:c7:ef:fd:20:f4:cb:d5:8a:58:14:84:d1:9c:0c:81: de:04:58:68:67:ed:30:e1:9a:c3:23:76:4d:a3:3f:66:40:4b: 48:cb:47:e6:97:03:c5:13:33:44:26:dd:77:60:79:68:bc:81: be:ef:ef:16:ae:4c:01:c2:d5:98:39:7e:5e:a9:a9:e2:26:63: d0:fb:df:91:af:63:a5:d2:3f:33:86:0e:77:e4:38:47:fc:ed: ff:48:7c:7f:cd:72:f1:64:4e:e9:a8:b6:0a:ba:55:c2:da:83: 15:a7:84:d2:72:42:88:a7:00:b7:ab:0f:1e:56:a8:fb:6a:cd: 7c:cb:a9:1c:e2:80:57:d1:bc:a9:99:ab:2b:d2:9e:3d:6d:64: c8:4e:90:f0:22:da:c3:d3:38:4c:69:85:a3:06:fe:23:51:21: 24:db:65:15:81:e4:ac:41:9a:19:72:90:0c:02:7b:b0:e5:d9: a2:8a:7f:25:68:8e:9b:cf:b3:c2:d9:c0:d4:96:29:e0:6e:d0: ed:0d:b7:c1:97:9e:ab:45:50:7e:e5:c9:7b:e2:fc:40:6a:4a: c9:f1:7f:02:cc:2c:f4:4b:5f:b4:ca:c0:76:e8:70:57:5e:d4: c2:91:a0:93 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUAO2pKq0s5i40qkwNnZJJ9/QGM+4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIwNjAwMDAwNVoX DTI2MDUwNzIzNTk1OVowejFJMEcGA1UEBRNAODlmZjNkMTkwNmJjMDdjN2Y5OTQw Y2JhMjI1OWYzZjk1MzM3MTdkMjM5NWNlYjQxNzA5MzQ2NmRjOWY3ZDMyNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhKN5tschpbDARln56iMi6qXxl3i uJvsFp6weTtTc87UsPBG5/1ucXiJX+FafNqmdyAMAMApHGucmAwijbQc+MjQ2rsg aH3xZgoQpe5Xq2hsHM6zNdQTqs7MXv5ue9z5elqNU6V/PflxucWpQv5DBru+mhBI wmIyrML58Ixbf/U31CU1+iTnDBkz4Iy0I+2C9sUrsMd4MiiOSwITNRfX52i+uE7i gEGJqNzZgRgwcCGjQEwcBtuKgjYT69TRNEG3acQAqJJbA5So0EZgVuRFcd8DksTE muyowM0/zejOPZxuFLximophCu3KYD0MbHaR9YeOFmzUhaKAqenqFOj/fwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFONyXj8pxg489jzhLu5sWsx110njMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVkODBjZjBiLWMzZjUtNDdhZC1hYjc5LWNhMWIwZDBmNmJkYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7aAwDQYJKoZIhvcNAQELBQADggEBAEnBsSIGEVTUBSnSaV8i 5IhCSZXDtsfv/SD0y9WKWBSE0ZwMgd4EWGhn7TDhmsMjdk2jP2ZAS0jLR+aXA8UT M0Qm3XdgeWi8gb7v7xauTAHC1Zg5fl6pqeImY9D735GvY6XSPzOGDnfkOEf87f9I fH/NcvFkTumotgq6VcLagxWnhNJyQoinALerDx5WqPtqzXzLqRzigFfRvKmZqyvS nj1tZMhOkPAi2sPTOExphaMG/iNRISTbZRWB5KxBmhlykAwCe7Dl2aKKfyVojpvP s8LZwNSWKeBu0O0Nt8GXnqtFUH7lyXvi/EBqSsnxfwLMLPRLX7TKwHbocFde1MKR oJM= -----END CERTIFICATE-----Generated at Sun Mar 1 23:38:04 2026 by rpki-client