$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/78343754-5d6e-4ded-9b4c-d9d70b6ccac8.roa File: 78343754-5d6e-4ded-9b4c-d9d70b6ccac8.roa (raw, json) Hash identifier: XaSlCzVeWsnXx7szT0HT0CIOu/GUqy+EgihgYIjORLA= Subject key identifier: E7:F5:76:37:1A:4C:99:72:83:2F:73:7B:16:93:D3:B4:73:72:11:8C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 68F99715A912F693F7AA94F4063816A7F5B92E0D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/78343754-5d6e-4ded-9b4c-d9d70b6ccac8.roa Signing time: Fri 13 Feb 2026 00:00:13 +0000 ROA not before: Fri 13 Feb 2026 00:00:13 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf5:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:f9:97:15:a9:12:f6:93:f7:aa:94:f4:06:38:16:a7:f5:b9:2e:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 13 00:00:13 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=746b157ff08d61bb53b1be7c6b76f0eb96719d924640bf43bfdf2e9af2cc3dba, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:00:43:74:1f:e2:98:53:75:7d:f3:45:55:95: 58:3d:fa:c7:14:18:0e:27:f1:12:8e:ba:9c:0d:47: ba:c2:c7:18:f4:80:5a:5e:e3:2a:f1:8a:75:5b:96: 1d:22:c7:4a:c7:97:7f:72:08:6b:dd:3a:d2:e9:44: e3:aa:31:a4:9a:bb:f2:a8:04:7c:34:81:29:37:17: 90:b7:a5:a5:da:4f:cf:bb:73:84:2a:a6:30:43:a9: 1d:dd:06:37:bf:0f:be:0b:1d:cf:97:6c:99:8f:4a: 0a:ef:da:df:42:22:08:40:9f:f0:26:fb:57:ee:c7: ba:31:de:d0:bd:6f:b9:72:3d:f5:af:5f:d2:d4:d5: ab:48:c2:f8:97:a0:36:42:cc:5e:ea:6f:8a:c8:1f: 57:05:b1:54:ef:0a:d6:44:3b:46:51:3a:74:cf:3f: 59:d1:5b:4e:bf:7a:c7:99:3c:d9:3f:f1:1a:1b:c4: 11:68:cf:61:4e:08:a5:c2:74:db:64:b5:67:fb:8b: 39:83:93:76:a5:20:56:71:a2:2a:39:bc:a5:93:14: b5:28:61:f2:90:aa:d2:99:9f:fd:d2:0d:9d:36:32: 12:55:9d:29:bd:12:04:93:48:87:6d:05:81:3a:f9: 58:d3:36:f4:be:03:4a:e1:f3:5b:51:e7:8c:0d:9e: 29:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F5:76:37:1A:4C:99:72:83:2F:73:7B:16:93:D3:B4:73:72:11:8C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/78343754-5d6e-4ded-9b4c-d9d70b6ccac8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf5:9000::/40 Signature Algorithm: sha256WithRSAEncryption c1:1b:23:a3:b2:5a:2c:0e:40:19:fc:83:25:76:db:08:f6:40: bc:98:dc:d4:4d:fe:bc:a4:f8:06:07:7c:7e:cf:5a:bb:68:63: 46:0d:93:fb:fe:f3:d0:09:0f:b8:e2:96:97:72:f2:25:45:4c: 08:ca:9a:33:ad:95:3c:38:0c:6a:87:33:0e:34:18:1c:0a:86: 26:22:06:eb:22:27:54:31:d3:e6:4c:71:a2:00:d9:9e:24:3c: d9:d9:98:bc:59:55:a0:83:80:77:0b:af:d7:83:2d:5b:ad:76: 38:e2:8f:e3:e9:19:f8:58:ce:d2:1e:ca:fe:41:ed:bc:83:26: 4f:f9:74:dc:07:97:0a:cc:6c:d6:35:04:a9:ac:0e:f2:46:1a: 1f:43:b8:c5:9d:a8:d0:79:be:5c:0d:f9:04:29:e4:32:0f:f5: 22:5a:5e:76:07:06:00:d3:43:5f:65:8d:93:80:73:1c:6c:41: f6:22:9a:a4:c7:b7:8e:a8:fa:d1:ff:85:27:34:5d:2c:96:6f: 6d:28:02:12:25:0c:0e:a7:6e:ad:76:ed:08:c3:08:ad:a4:4c: e3:50:cc:76:62:93:4f:3d:56:ce:de:5f:41:71:c6:14:3c:07: 37:e8:a2:89:18:89:29:49:40:f5:b4:43:73:4e:18:c3:23:d1: f1:b6:01:0b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUaPmXFakS9pP3qpT0BjgWp/W5Lg0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxMzAwMDAxM1oX DTI2MDUxNDIzNTk1OVowejFJMEcGA1UEBRNANzQ2YjE1N2ZmMDhkNjFiYjUzYjFi ZTdjNmI3NmYwZWI5NjcxOWQ5MjQ2NDBiZjQzYmZkZjJlOWFmMmNjM2RiYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwBDdB/imFN1ffNFVZVYPfrHFBgO J/ESjrqcDUe6wscY9IBaXuMq8Yp1W5YdIsdKx5d/cghr3TrS6UTjqjGkmrvyqAR8 NIEpNxeQt6Wl2k/Pu3OEKqYwQ6kd3QY3vw++Cx3Pl2yZj0oK79rfQiIIQJ/wJvtX 7se6Md7QvW+5cj31r1/S1NWrSML4l6A2Qsxe6m+KyB9XBbFU7wrWRDtGUTp0zz9Z 0VtOv3rHmTzZP/EaG8QRaM9hTgilwnTbZLVn+4s5g5N2pSBWcaIqObylkxS1KGHy kKrSmZ/90g2dNjISVZ0pvRIEk0iHbQWBOvlY0zb0vgNK4fNbUeeMDZ4pMQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOf1djcaTJlygy9zexaT07RzchGMMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc4MzQzNzU0LTVkNmUtNGRlZC05YjRjLWQ5ZDcwYjZjY2FjOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9ZAwDQYJKoZIhvcNAQELBQADggEBAMEbI6OyWiwOQBn8gyV2 2wj2QLyY3NRN/ryk+AYHfH7PWrtoY0YNk/v+89AJD7jilpdy8iVFTAjKmjOtlTw4 DGqHMw40GBwKhiYiBusiJ1Qx0+ZMcaIA2Z4kPNnZmLxZVaCDgHcLr9eDLVutdjji j+PpGfhYztIeyv5B7byDJk/5dNwHlwrMbNY1BKmsDvJGGh9DuMWdqNB5vlwN+QQp 5DIP9SJaXnYHBgDTQ19ljZOAcxxsQfYimqTHt46o+tH/hSc0XSyWb20oAhIlDA6n bq127QjDCK2kTONQzHZik089Vs7eX0FxxhQ8BzfoookYiSlJQPW0Q3NOGMMj0fG2 AQs= -----END CERTIFICATE-----Generated at Sun Mar 1 22:05:14 2026 by rpki-client