$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6de13c1e-8034-41b3-90e3-760249997c22.roa File: 6de13c1e-8034-41b3-90e3-760249997c22.roa (raw, json) Hash identifier: RIuz4yuvpiSkGTD2hLIrJSFU3rQ9aTqDfK0M2P4tTzk= Subject key identifier: BD:B5:80:04:D8:1F:79:5B:DE:77:06:0C:6A:25:C1:22:4A:15:96:87 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 12502CF8B1A7DBEF967DD71ACB4714CB41A9B526 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6de13c1e-8034-41b3-90e3-760249997c22.roa Signing time: Wed 11 Feb 2026 00:11:03 +0000 ROA not before: Wed 11 Feb 2026 00:11:03 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafe:8800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:50:2c:f8:b1:a7:db:ef:96:7d:d7:1a:cb:47:14:cb:41:a9:b5:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 11 00:11:03 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=25380f5b67ace79b14c91e64c06c998a2028c9dcb493a96d82c413b4cdba37ae, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fd:b4:d6:62:ff:aa:2c:ab:83:18:3a:36:40: b2:f2:08:d8:64:c4:df:07:cb:00:94:d8:3f:8d:98: 6e:a4:fe:ac:9a:5f:8f:e3:35:60:cf:dd:9d:3b:fa: 99:1e:cf:c3:55:5d:60:e9:e8:55:1f:af:f7:b2:8a: 26:8e:89:e9:73:0e:c2:9f:e7:f1:9e:ff:89:02:9c: 8e:cb:a0:a5:af:3f:13:c5:ef:1e:17:11:56:84:dc: 69:8a:2c:0f:ec:fb:64:70:13:1a:7a:14:b2:fd:2e: 8b:36:e7:07:7a:ba:2a:ad:39:6d:52:b3:69:7d:b6: dc:7d:58:01:b0:50:a9:e9:30:85:a4:93:ac:cb:45: 90:89:0b:43:3b:d2:f1:21:db:1f:fa:77:80:d1:2c: 79:da:13:dc:7b:63:3e:bb:b1:14:6a:b3:cc:97:b6: c1:a6:2b:07:ec:8e:00:33:76:72:51:22:fa:0a:bf: 4e:03:a1:97:2a:7e:40:34:c1:d1:aa:e5:ae:97:18: 7d:06:73:75:31:2c:fc:e1:a3:40:dc:ee:8e:99:cc: ff:86:56:dc:48:10:f6:75:85:e4:30:8c:2a:71:73: 89:66:d3:6e:cc:9b:02:fa:d8:26:42:8f:0a:42:01: c5:1d:71:1d:fd:37:8f:8c:fc:36:27:cc:53:e0:b3: 59:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B5:80:04:D8:1F:79:5B:DE:77:06:0C:6A:25:C1:22:4A:15:96:87 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6de13c1e-8034-41b3-90e3-760249997c22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafe:8800::/40 Signature Algorithm: sha256WithRSAEncryption c9:fb:c2:e0:e7:6b:f1:25:74:69:da:54:24:19:72:56:0d:43: a5:d9:19:2b:87:63:24:b8:36:db:e1:22:a8:68:42:81:63:a5: c8:b4:45:00:78:53:e4:14:9b:77:43:6c:ea:e0:f7:b4:68:7c: 3f:4b:af:14:f9:43:c8:20:d0:b4:d7:41:f2:34:55:e0:04:35: c4:92:a8:bb:8d:f4:05:ba:8a:f7:99:f4:9e:1b:61:e5:6f:6a: 6b:a5:53:17:67:bf:54:06:1e:40:3c:bf:1e:8c:00:19:b9:fa: ed:43:fd:8c:91:e9:19:c6:bb:29:f6:bc:b9:97:b7:19:bf:a0: ac:ca:9f:36:9c:ed:e2:6a:a7:b3:c6:30:b0:48:34:b4:ea:8b: 1f:59:8a:ad:30:14:15:22:3e:d9:7f:85:3b:d9:08:db:4a:d7: 5e:40:28:de:e3:0f:fe:56:fe:f5:20:0b:55:84:90:72:5d:dd: 1d:76:dc:9f:fa:ca:28:f1:db:18:77:86:94:17:cf:21:1e:70: e8:40:3d:db:3e:85:20:8e:b7:a7:6c:eb:99:18:36:c4:5b:be: e9:df:66:90:f5:fd:07:4e:31:62:23:8b:58:5a:41:dc:82:84: 3a:ef:cc:26:38:b1:66:ba:a6:f6:b2:54:a5:88:dd:19:e7:3d: 74:35:f5:68 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUElAs+LGn2++Wfdcay0cUy0GptSYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxMTAwMTEwM1oX DTI2MDUxMjIzNTk1OVowejFJMEcGA1UEBRNAMjUzODBmNWI2N2FjZTc5YjE0Yzkx ZTY0YzA2Yzk5OGEyMDI4YzlkY2I0OTNhOTZkODJjNDEzYjRjZGJhMzdhZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwf201mL/qiyrgxg6NkCy8gjYZMTf B8sAlNg/jZhupP6sml+P4zVgz92dO/qZHs/DVV1g6ehVH6/3soomjonpcw7Cn+fx nv+JApyOy6Clrz8Txe8eFxFWhNxpiiwP7PtkcBMaehSy/S6LNucHeroqrTltUrNp fbbcfVgBsFCp6TCFpJOsy0WQiQtDO9LxIdsf+neA0Sx52hPce2M+u7EUarPMl7bB pisH7I4AM3ZyUSL6Cr9OA6GXKn5ANMHRquWulxh9BnN1MSz84aNA3O6Omcz/hlbc SBD2dYXkMIwqcXOJZtNuzJsC+tgmQo8KQgHFHXEd/TePjPw2J8xT4LNZwQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFL21gATYH3lb3ncGDGolwSJKFZaHMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzZkZTEzYzFlLTgwMzQtNDFiMy05MGUzLTc2MDI0OTk5N2MyMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/ogwDQYJKoZIhvcNAQELBQADggEBAMn7wuDna/EldGnaVCQZ clYNQ6XZGSuHYyS4NtvhIqhoQoFjpci0RQB4U+QUm3dDbOrg97RofD9LrxT5Q8gg 0LTXQfI0VeAENcSSqLuN9AW6iveZ9J4bYeVvamulUxdnv1QGHkA8vx6MABm5+u1D /YyR6RnGuyn2vLmXtxm/oKzKnzac7eJqp7PGMLBINLTqix9Ziq0wFBUiPtl/hTvZ CNtK115AKN7jD/5W/vUgC1WEkHJd3R123J/6yijx2xh3hpQXzyEecOhAPds+hSCO t6ds65kYNsRbvunfZpD1/QdOMWIji1haQdyChDrvzCY4sWa6pvayVKWI3RnnPXQ1 9Wg= -----END CERTIFICATE-----Generated at Sun Mar 1 22:17:53 2026 by rpki-client