$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77b66450-4698-44c5-9f99-8e8f76945e37.roa File: 77b66450-4698-44c5-9f99-8e8f76945e37.roa (raw, json) Hash identifier: xCIiXKcHkKfGuwWjWsQ78xr5/iOBJ9c3dr77gJEatbE= Subject key identifier: 43:44:24:C9:47:18:A3:E1:F6:D0:03:37:17:DE:46:D5:04:1D:26:47 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 437C7E8138EE84FA2170715CF0D0DBD246B1AAB8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77b66450-4698-44c5-9f99-8e8f76945e37.roa Signing time: Sat 21 Feb 2026 00:10:46 +0000 ROA not before: Sat 21 Feb 2026 00:10:46 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:7c:7e:81:38:ee:84:fa:21:70:71:5c:f0:d0:db:d2:46:b1:aa:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 21 00:10:46 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=93c6d2ce47683cd455189f4c642d2695e48562fd69883e29fbff4ab459ecdc4f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:26:1d:57:85:0d:1a:c4:ba:e2:4b:20:5b:7d: 54:31:c2:54:45:c2:42:9f:e8:b1:37:e4:75:7b:25: f6:a4:f2:e7:79:9d:9e:55:16:3b:55:83:14:f3:ef: da:e5:b8:92:00:e7:0a:2a:85:09:79:d1:a9:53:12: 35:d8:3f:e0:fc:27:ee:5f:d5:4e:68:45:a3:5d:81: 13:99:a2:43:6d:62:c2:08:51:0d:c4:ce:23:da:18: 45:3e:85:f7:09:b4:f8:46:ed:31:01:62:1a:29:e6: e6:2c:ab:60:ad:ac:32:a3:4d:a0:b1:d6:0b:b9:a4: b8:86:7d:5d:46:07:99:98:7d:2d:d2:9c:5d:ce:bc: 2a:30:fc:e6:64:11:0a:de:13:e4:55:4d:3e:b1:6a: 7e:16:a5:f8:83:a5:05:29:05:65:c9:89:38:58:8d: 1e:d7:11:4e:66:f8:7f:84:7b:07:c1:a9:87:a8:a4: f1:b3:15:a4:5c:27:bf:83:ba:0b:ed:8d:ba:aa:43: 1f:7b:96:90:5f:33:4e:76:07:c0:a4:21:76:57:00: 42:04:ef:5e:4e:6d:d0:ee:2a:e3:d7:5b:f3:7c:22: 74:5e:79:f3:8d:c0:fa:f6:15:83:58:2c:44:dc:46: e7:33:5d:df:89:b3:7e:fc:17:22:d4:5b:96:cc:08: b1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:44:24:C9:47:18:A3:E1:F6:D0:03:37:17:DE:46:D5:04:1D:26:47 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77b66450-4698-44c5-9f99-8e8f76945e37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:1000::/40 Signature Algorithm: sha256WithRSAEncryption 94:4a:4c:c0:12:09:4b:8e:5b:24:eb:5f:df:93:91:82:cd:3e: 7b:87:c4:6e:78:7a:83:f8:f0:fe:7f:08:ed:f7:63:00:aa:8a: b1:4b:9d:45:28:69:60:41:e8:85:3d:24:39:d7:53:cf:1d:7e: 5e:ab:64:c5:d0:c4:92:4c:d6:2c:96:8b:3c:21:78:6c:f5:be: 38:e0:9b:19:07:69:93:ce:1d:f2:ac:df:c7:58:e3:45:3b:37: 8b:42:06:3e:a0:bf:77:c4:e9:4c:03:cc:5a:c8:2c:14:52:c2: 5f:bb:cb:ce:66:14:7b:5e:80:2c:60:c7:0c:83:77:6f:22:3f: 0a:4d:f0:ce:e8:2c:cf:31:c7:b4:d7:a5:df:f4:5b:bc:fb:60: d0:3e:3c:5a:1d:5b:f8:e7:ba:41:5f:7e:68:e2:51:c8:7e:80: 88:7d:60:8b:2f:20:9e:6a:89:4d:94:92:20:d6:a1:8e:45:7f: 46:8f:17:7b:43:d4:b3:72:ee:2a:3d:08:a0:ed:b3:9b:4d:94: 10:62:ec:42:87:35:69:fd:38:cd:56:3e:e1:1f:24:23:cd:85: c8:20:cc:22:76:02:5e:69:02:ac:7e:27:bf:2f:f7:0c:b7:67: 3d:d8:cb:0c:c6:f0:4d:7a:ac:7f:72:56:15:37:00:46:d2:b7: e8:2b:0c:1d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQ3x+gTjuhPohcHFc8NDb0kaxqrgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMTAwMTA0NloX DTI2MDUyMjIzNTk1OVowejFJMEcGA1UEBRNAOTNjNmQyY2U0NzY4M2NkNDU1MTg5 ZjRjNjQyZDI2OTVlNDg1NjJmZDY5ODgzZTI5ZmJmZjRhYjQ1OWVjZGM0ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiYdV4UNGsS64ksgW31UMcJURcJC n+ixN+R1eyX2pPLneZ2eVRY7VYMU8+/a5biSAOcKKoUJedGpUxI12D/g/CfuX9VO aEWjXYETmaJDbWLCCFENxM4j2hhFPoX3CbT4Ru0xAWIaKebmLKtgrawyo02gsdYL uaS4hn1dRgeZmH0t0pxdzrwqMPzmZBEK3hPkVU0+sWp+FqX4g6UFKQVlyYk4WI0e 1xFOZvh/hHsHwamHqKTxsxWkXCe/g7oL7Y26qkMfe5aQXzNOdgfApCF2VwBCBO9e Tm3Q7irj11vzfCJ0XnnzjcD69hWDWCxE3EbnM13fibN+/Bci1FuWzAixnQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFENEJMlHGKPh9tADNxfeRtUEHSZHMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc3YjY2NDUwLTQ2OTgtNDRjNS05Zjk5LThlOGY3Njk0NWUzNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+xAwDQYJKoZIhvcNAQELBQADggEBAJRKTMASCUuOWyTrX9+T kYLNPnuHxG54eoP48P5/CO33YwCqirFLnUUoaWBB6IU9JDnXU88dfl6rZMXQxJJM 1iyWizwheGz1vjjgmxkHaZPOHfKs38dY40U7N4tCBj6gv3fE6UwDzFrILBRSwl+7 y85mFHtegCxgxwyDd28iPwpN8M7oLM8xx7TXpd/0W7z7YNA+PFodW/jnukFffmji Uch+gIh9YIsvIJ5qiU2UkiDWoY5Ff0aPF3tD1LNy7io9CKDts5tNlBBi7EKHNWn9 OM1WPuEfJCPNhcggzCJ2Al5pAqx+J78v9wy3Zz3YywzG8E16rH9yVhU3AEbSt+gr DB0= -----END CERTIFICATE-----Generated at Sun Mar 1 22:10:58 2026 by rpki-client