$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/81ad1b0a-6cf3-4e1e-9269-1278b1e9a286.roa File: 81ad1b0a-6cf3-4e1e-9269-1278b1e9a286.roa (raw, json) Hash identifier: CopszsL/4S1LbCh76UqX/3HW8fSZC01eYr8IVRhMXSs= Subject key identifier: 99:56:06:20:08:60:EB:FB:26:93:8D:B5:15:C8:FD:42:85:70:23:63 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 384D80CAF8066BD0073D214BF4EDE46E1C3480A3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/81ad1b0a-6cf3-4e1e-9269-1278b1e9a286.roa Signing time: Sat 21 Feb 2026 00:00:50 +0000 ROA not before: Sat 21 Feb 2026 00:00:50 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daec:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:4d:80:ca:f8:06:6b:d0:07:3d:21:4b:f4:ed:e4:6e:1c:34:80:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 21 00:00:50 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=7baccd915bc0988f2d5f5208cd7d91b73325d2bb5dff7e6d136e206cc79fa94b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8b:3d:bb:39:d6:0b:3c:03:63:cb:73:c6:12: 18:e2:b9:1c:f2:39:01:45:b6:c3:a3:3b:a9:9a:36: 02:d6:3b:2a:03:e6:64:3f:e0:b0:22:e1:b6:9a:6a: fa:06:6a:2c:56:06:9d:c1:59:5b:42:fa:f5:8f:5f: d2:0f:01:c4:75:b4:f3:7a:6d:c9:00:26:03:53:62: 31:06:61:47:f6:70:c1:6a:2a:66:09:59:f5:4d:75: 6f:45:09:fb:00:99:2c:14:bf:53:f3:cf:64:00:28: 3d:83:e7:65:f0:e8:8c:a7:19:40:1a:f7:02:8d:a0: ac:19:7a:fe:c5:13:18:86:8b:50:df:bd:71:c2:f4: a8:e0:44:a8:0f:1d:d1:a3:d9:22:6c:b0:20:a5:e0: c1:ac:eb:94:87:05:00:61:7f:80:89:e7:2a:f5:e6: 69:9a:ff:46:5c:fd:08:60:5d:7d:92:fe:9f:a5:f4: 52:24:a9:b4:af:c5:11:73:57:5a:69:6b:e2:f3:83: 66:8c:a3:9a:5b:76:06:4e:6b:50:bc:51:9a:fc:a2: 89:9f:78:52:8f:12:3e:cd:89:b4:34:ec:9b:36:de: 04:8f:da:b3:60:f2:b6:c9:ed:67:c3:07:c9:06:fd: cf:2e:a7:4c:79:17:7f:1c:d9:e3:6f:30:79:cb:51: 55:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:56:06:20:08:60:EB:FB:26:93:8D:B5:15:C8:FD:42:85:70:23:63 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/81ad1b0a-6cf3-4e1e-9269-1278b1e9a286.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daec:c000::/48 Signature Algorithm: sha256WithRSAEncryption 10:6f:c1:e6:93:71:8e:f0:24:5d:42:a5:d2:ed:1a:78:42:a0: 0d:bc:67:0b:02:67:d3:2f:d2:d8:bb:26:17:fe:30:9b:9d:45: 34:7d:7a:41:48:78:b2:81:c8:3e:47:0e:64:75:8f:12:cd:9b: 7d:5a:df:4c:e0:f9:d4:20:e6:b8:7a:95:a7:db:ac:49:72:67: d0:50:11:4a:ee:77:4a:2f:bb:02:19:e1:42:68:e8:06:fd:79: f4:88:2b:28:2f:05:25:07:f6:d7:74:26:8c:6e:8d:8f:11:79: ee:e4:3f:3c:6b:a7:f9:7f:57:bf:bd:d9:f5:9a:ac:ed:e8:fe: 38:21:5e:23:b4:5f:33:42:1f:9d:28:d6:aa:c4:67:b0:38:34: d2:03:32:f4:64:40:57:0b:48:19:c8:8d:3e:30:ae:22:8d:5a: f5:a8:7f:db:d9:fb:3b:8f:5b:ef:33:2a:c6:33:a2:b8:2c:e7: 68:85:68:e1:f9:17:18:1d:a1:93:fb:63:a3:07:52:3d:74:56: c1:29:0b:08:8d:8b:83:08:03:fb:e2:f3:33:41:b3:f5:6e:78: 4b:49:90:b0:8e:0b:9f:7c:6f:bd:ce:a1:42:28:7c:c5:45:e9: 45:e0:bc:ce:0d:80:f1:9e:f2:d4:ec:70:20:d7:59:df:6f:91: be:87:ba:cf -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUOE2AyvgGa9AHPSFL9O3kbhw0gKMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMTAwMDA1MFoX DTI2MDUyMjIzNTk1OVowejFJMEcGA1UEBRNAN2JhY2NkOTE1YmMwOTg4ZjJkNWY1 MjA4Y2Q3ZDkxYjczMzI1ZDJiYjVkZmY3ZTZkMTM2ZTIwNmNjNzlmYTk0YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYs9uznWCzwDY8tzxhIY4rkc8jkB RbbDozupmjYC1jsqA+ZkP+CwIuG2mmr6BmosVgadwVlbQvr1j1/SDwHEdbTzem3J ACYDU2IxBmFH9nDBaipmCVn1TXVvRQn7AJksFL9T889kACg9g+dl8OiMpxlAGvcC jaCsGXr+xRMYhotQ371xwvSo4ESoDx3Ro9kibLAgpeDBrOuUhwUAYX+Aiecq9eZp mv9GXP0IYF19kv6fpfRSJKm0r8URc1daaWvi84NmjKOaW3YGTmtQvFGa/KKJn3hS jxI+zYm0NOybNt4Ej9qzYPK2ye1nwwfJBv3PLqdMeRd/HNnjbzB5y1FVCQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJlWBiAIYOv7JpONtRXI/UKFcCNjMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgxYWQxYjBhLTZjZjMtNGUxZS05MjY5LTEyNzhiMWU5YTI4Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba7MAAMA0GCSqGSIb3DQEBCwUAA4IBAQAQb8Hmk3GO8CRdQqXS 7Rp4QqANvGcLAmfTL9LYuyYX/jCbnUU0fXpBSHiygcg+Rw5kdY8SzZt9Wt9M4PnU IOa4epWn26xJcmfQUBFK7ndKL7sCGeFCaOgG/Xn0iCsoLwUlB/bXdCaMbo2PEXnu 5D88a6f5f1e/vdn1mqzt6P44IV4jtF8zQh+dKNaqxGewODTSAzL0ZEBXC0gZyI0+ MK4ijVr1qH/b2fs7j1vvMyrGM6K4LOdohWjh+RcYHaGT+2OjB1I9dFbBKQsIjYuD CAP74vMzQbP1bnhLSZCwjguffG+9zqFCKHzFRelF4LzODYDxnvLU7HAg11nfb5G+ h7rP -----END CERTIFICATE-----Generated at Sun Mar 1 22:04:29 2026 by rpki-client