$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b336b02-f773-4fbb-bbc4-a1149b172ad2.roa File: 6b336b02-f773-4fbb-bbc4-a1149b172ad2.roa (raw, json) Hash identifier: t83ni+sw88jzrL/RK2UXrPweKaHiQq+ZHe/R656uVk0= Subject key identifier: F8:EC:37:C9:4B:DD:A3:CF:4F:E8:D5:53:85:57:18:FB:20:10:13:E4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 35285E76048AA76446E715A0C8FA8CFC35E8EDB4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b336b02-f773-4fbb-bbc4-a1149b172ad2.roa Signing time: Tue 24 Feb 2026 00:00:08 +0000 ROA not before: Tue 24 Feb 2026 00:00:08 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daa0:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:28:5e:76:04:8a:a7:64:46:e7:15:a0:c8:fa:8c:fc:35:e8:ed:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 24 00:00:08 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=f5b4bcf6c85e1f9a802f80ff7525fe23da665dbc6b17306b1663d8ab828f32ff, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b9:6d:c6:c1:b4:93:cb:df:86:d2:54:56:09: 62:3c:66:57:c1:d3:8d:63:23:6b:0a:88:73:40:da: 88:6f:dd:f2:4a:2e:4a:d9:97:51:63:7e:32:5a:79: f5:21:36:ed:82:0c:30:7a:81:cd:98:24:ba:b5:99: a2:49:f9:47:89:a8:09:38:c9:76:e8:e2:bc:72:e0: bd:35:32:a6:b8:3a:56:6a:a8:da:7c:5c:70:63:b5: 33:60:28:1f:15:22:0c:bf:78:d0:fe:8f:e4:9c:bb: 52:c5:e4:6f:10:7b:c3:a8:a4:5e:1d:67:8e:dd:ec: 62:ff:37:f5:43:e8:93:79:a0:a8:6f:62:ba:85:1d: a2:df:29:88:32:ab:cc:97:d7:31:c8:e1:87:a7:83: d4:f1:3a:75:6d:b8:42:db:1d:9a:04:a9:e8:aa:1c: 15:91:97:25:f7:a3:95:bc:3a:1f:f2:52:28:0e:30: 39:6e:37:e1:31:68:a4:db:a9:f2:10:5b:a9:e9:76: d1:53:a4:54:21:8d:33:0f:9e:95:69:f2:64:10:53: 72:1b:7c:36:a7:be:05:1a:9b:eb:4f:11:68:74:aa: 41:56:dd:a4:a3:5c:fe:b3:2e:66:d5:18:e5:69:99: a8:69:c2:67:0d:4a:bd:f8:b5:02:4c:7a:9d:98:5f: 6e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:EC:37:C9:4B:DD:A3:CF:4F:E8:D5:53:85:57:18:FB:20:10:13:E4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b336b02-f773-4fbb-bbc4-a1149b172ad2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daa0:b000::/40 Signature Algorithm: sha256WithRSAEncryption 6d:80:95:6a:65:9f:e5:17:af:a2:6d:af:9c:9a:41:3c:73:ff: 91:e4:f1:1c:53:df:4a:59:44:75:72:8c:ac:8e:92:da:0a:c0: 2b:0e:d9:16:1f:a4:09:69:a6:aa:d5:b0:4a:4b:24:60:cf:82: e9:4d:60:85:eb:d9:50:f8:1c:17:a0:b5:c3:11:fa:fe:fe:e4: a1:6f:35:43:0e:38:46:2f:4e:6b:51:0a:4c:8c:22:55:2d:5a: 74:9d:5c:ed:cd:d0:1d:17:66:ad:f8:8b:71:16:23:c2:db:58: c3:98:c7:f3:64:cd:a3:9b:0f:da:36:94:09:a5:96:0a:91:1f: d3:fe:86:5a:bd:a9:1a:3b:fa:5a:25:16:fb:25:8a:e4:ba:1e: 78:f2:b8:36:ac:72:0f:d7:b3:a7:15:f6:43:7d:3d:15:69:20: 63:e5:29:f4:09:38:1d:a9:2e:8c:d8:42:bc:d4:42:f9:69:3b: c0:ef:66:87:6f:56:64:21:96:eb:7a:e2:fc:e0:31:39:9a:11: fe:7d:43:09:a1:3b:1f:b4:20:16:c4:09:28:36:74:64:3e:88: ec:61:b9:e3:99:41:d8:2d:8c:ff:fc:cb:82:cc:58:1b:93:df: f0:1a:d0:fe:8d:91:d4:ad:5a:6a:25:91:ca:60:0f:ea:84:3c: 7c:cf:1b:da -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUNShedgSKp2RG5xWgyPqM/DXo7bQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyNDAwMDAwOFoX DTI2MDUyNTIzNTk1OVowejFJMEcGA1UEBRNAZjViNGJjZjZjODVlMWY5YTgwMmY4 MGZmNzUyNWZlMjNkYTY2NWRiYzZiMTczMDZiMTY2M2Q4YWI4MjhmMzJmZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrltxsG0k8vfhtJUVgliPGZXwdON YyNrCohzQNqIb93ySi5K2ZdRY34yWnn1ITbtggwweoHNmCS6tZmiSflHiagJOMl2 6OK8cuC9NTKmuDpWaqjafFxwY7UzYCgfFSIMv3jQ/o/knLtSxeRvEHvDqKReHWeO 3exi/zf1Q+iTeaCob2K6hR2i3ymIMqvMl9cxyOGHp4PU8Tp1bbhC2x2aBKnoqhwV kZcl96OVvDof8lIoDjA5bjfhMWik26nyEFup6XbRU6RUIY0zD56VafJkEFNyG3w2 p74FGpvrTxFodKpBVt2ko1z+sy5m1RjlaZmoacJnDUq9+LUCTHqdmF9ulQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPjsN8lL3aPPT+jVU4VXGPsgEBPkMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzZiMzM2YjAyLWY3NzMtNGZiYi1iYmM0LWExMTQ5YjE3MmFkMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaoLAwDQYJKoZIhvcNAQELBQADggEBAG2AlWpln+UXr6Jtr5ya QTxz/5Hk8RxT30pZRHVyjKyOktoKwCsO2RYfpAlppqrVsEpLJGDPgulNYIXr2VD4 HBegtcMR+v7+5KFvNUMOOEYvTmtRCkyMIlUtWnSdXO3N0B0XZq34i3EWI8LbWMOY x/NkzaObD9o2lAmllgqRH9P+hlq9qRo7+lolFvsliuS6HnjyuDascg/Xs6cV9kN9 PRVpIGPlKfQJOB2pLozYQrzUQvlpO8DvZodvVmQhlut64vzgMTmaEf59QwmhOx+0 IBbECSg2dGQ+iOxhueOZQdgtjP/8y4LMWBuT3/Aa0P6NkdStWmolkcpgD+qEPHzP G9o= -----END CERTIFICATE-----Generated at Sun Mar 1 22:14:16 2026 by rpki-client