$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77745ad7-44b5-44a8-9e13-4096720b7c90.roa File: 77745ad7-44b5-44a8-9e13-4096720b7c90.roa (raw, json) Hash identifier: c++W8JFvCsvgyDeyo/82eHprzJnp3SEpDo82zL/bZjs= Subject key identifier: 2B:D4:E3:CE:04:E0:10:54:EF:C5:0E:EE:4B:63:E2:57:1A:31:3F:E8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 11471690207913472E0D55CD6AFF5F965E5309D0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77745ad7-44b5-44a8-9e13-4096720b7c90.roa Signing time: Fri 20 Feb 2026 00:10:08 +0000 ROA not before: Fri 20 Feb 2026 00:10:08 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:9080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:47:16:90:20:79:13:47:2e:0d:55:cd:6a:ff:5f:96:5e:53:09:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 20 00:10:08 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=219745e2bf3e1f96fa8655a541b9f5511a7d95dbab138358162cd7e6b002bb21, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:82:65:9c:f0:ba:6b:90:27:c8:fc:80:fe:fb: 6e:ac:32:bd:b5:a0:be:69:ed:83:c4:3a:f8:96:55: cc:ea:6d:47:55:7b:7f:f5:80:a0:04:69:0b:ec:54: b3:95:de:6f:a4:a7:5b:94:c6:6e:af:c6:a9:ef:70: 22:bb:57:8e:a7:29:40:b8:20:49:8b:d1:01:ac:07: af:a0:1d:e5:ef:dd:90:f7:4a:dc:70:03:62:17:bb: 7a:75:21:56:6c:2f:3b:54:06:95:82:e4:f4:eb:ac: 71:32:cd:fd:b6:ea:a6:ae:60:4a:1e:51:58:3d:a4: 9b:b2:4c:38:95:42:75:0a:7b:df:38:27:e0:ea:69: e9:cc:42:8a:9d:c0:8a:7a:da:a7:38:3b:29:f8:65: 13:cc:2e:db:01:c9:16:ed:60:51:67:02:53:6b:91: 37:7a:0a:2a:06:c3:82:cd:4d:6c:5c:27:54:9f:7f: c8:4f:c1:32:64:cc:67:38:59:5f:6e:1c:c3:a1:d2: 72:1c:fa:b9:96:8c:c4:34:c2:58:1f:d0:10:09:eb: 86:b3:73:18:52:fa:b3:1a:d7:a0:b0:78:c3:4d:54: 7c:5f:f9:41:65:38:c9:a3:9d:38:47:1c:92:b6:c6: 8c:fe:4d:38:0c:31:df:d1:b5:d6:78:9c:89:61:1b: 20:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D4:E3:CE:04:E0:10:54:EF:C5:0E:EE:4B:63:E2:57:1A:31:3F:E8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77745ad7-44b5-44a8-9e13-4096720b7c90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:9080::/48 Signature Algorithm: sha256WithRSAEncryption 66:16:31:9d:8c:52:0d:1f:23:92:93:da:62:c5:2d:62:ac:71: 91:17:7a:8e:2e:d9:9d:a5:9a:3d:c7:80:36:58:ff:e6:e2:20: 44:43:1f:30:96:dc:a3:7e:96:be:52:b2:e2:80:ab:1c:b1:32: 4a:f1:95:e3:45:09:df:78:1c:60:f4:9b:4d:26:de:6b:5d:0b: 83:90:d1:9e:2d:10:c8:62:0a:33:7e:28:ff:d9:20:b7:32:67: af:d0:1d:ad:be:92:17:33:a7:1f:da:7a:aa:db:16:7c:93:c1: 96:81:f7:33:55:27:8e:ce:c6:12:ab:38:ae:5d:a1:3d:d1:cf: 53:c7:a5:c4:cf:76:6b:3b:0b:e8:f3:a8:85:15:fd:f5:cb:50: e6:91:f0:92:55:cb:e8:c8:09:73:d7:49:38:22:07:9f:5c:f5: 51:1e:69:82:a4:86:22:00:a3:d6:64:93:3e:8b:e2:4c:15:e7: 1e:8f:12:86:5d:7e:95:aa:71:eb:fa:bf:0d:87:4b:83:28:85: 01:e0:84:f3:d8:20:a8:a4:e4:62:87:e4:2e:51:43:bb:32:28: 37:71:11:26:9d:74:ef:94:7e:b1:20:94:28:80:60:49:45:15: 1e:64:da:46:84:9d:7b:bb:0b:97:65:c6:07:32:c8:70:f1:a7: ec:67:64:11 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUEUcWkCB5E0cuDVXNav9fll5TCdAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMDAwMTAwOFoX DTI2MDUyMTIzNTk1OVowejFJMEcGA1UEBRNAMjE5NzQ1ZTJiZjNlMWY5NmZhODY1 NWE1NDFiOWY1NTExYTdkOTVkYmFiMTM4MzU4MTYyY2Q3ZTZiMDAyYmIyMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroJlnPC6a5AnyPyA/vturDK9taC+ ae2DxDr4llXM6m1HVXt/9YCgBGkL7FSzld5vpKdblMZur8ap73Aiu1eOpylAuCBJ i9EBrAevoB3l792Q90rccANiF7t6dSFWbC87VAaVguT066xxMs39tuqmrmBKHlFY PaSbskw4lUJ1CnvfOCfg6mnpzEKKncCKetqnODsp+GUTzC7bAckW7WBRZwJTa5E3 egoqBsOCzU1sXCdUn3/IT8EyZMxnOFlfbhzDodJyHPq5lozENMJYH9AQCeuGs3MY UvqzGtegsHjDTVR8X/lBZTjJo504RxyStsaM/k04DDHf0bXWeJyJYRsgHQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCvU484E4BBU78UO7ktj4lcaMT/oMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc3NzQ1YWQ3LTQ0YjUtNDRhOC05ZTEzLTQwOTY3MjBiN2M5MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/5CAMA0GCSqGSIb3DQEBCwUAA4IBAQBmFjGdjFINHyOSk9pi xS1irHGRF3qOLtmdpZo9x4A2WP/m4iBEQx8wltyjfpa+UrLigKscsTJK8ZXjRQnf eBxg9JtNJt5rXQuDkNGeLRDIYgozfij/2SC3Mmev0B2tvpIXM6cf2nqq2xZ8k8GW gfczVSeOzsYSqziuXaE90c9Tx6XEz3ZrOwvo86iFFf31y1DmkfCSVcvoyAlz10k4 IgefXPVRHmmCpIYiAKPWZJM+i+JMFecejxKGXX6VqnHr+r8Nh0uDKIUB4ITz2CCo pORih+QuUUO7Mig3cREmnXTvlH6xIJQogGBJRRUeZNpGhJ17uwuXZcYHMshw8afs Z2QR -----END CERTIFICATE-----Generated at Sun Mar 1 23:54:26 2026 by rpki-client