$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/85858219-71cc-46f9-9c59-e75c9c1f8098.roa File: 85858219-71cc-46f9-9c59-e75c9c1f8098.roa (raw, json) Hash identifier: CPfdImghI/19zBpjru1q/NpLRHxkuR+/P7tIDdMVZ8A= Subject key identifier: A3:2C:CA:A6:03:92:ED:BA:C5:60:D0:62:60:B7:3B:88:26:23:44:DE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1661BD49708F9D33B52C8C3D3A96B2AE2DD1E5CA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/85858219-71cc-46f9-9c59-e75c9c1f8098.roa Signing time: Fri 20 Feb 2026 00:30:43 +0000 ROA not before: Fri 20 Feb 2026 00:30:43 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:c800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:61:bd:49:70:8f:9d:33:b5:2c:8c:3d:3a:96:b2:ae:2d:d1:e5:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 20 00:30:43 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=3ae81c15ad72d7bb1312c987f1f3c830c4e8fb05253c222a5517be8c3552cc90, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:9b:a9:2e:89:8b:76:d4:37:3c:68:5d:00:a7: 7c:3f:c1:b7:64:41:b0:11:b4:63:e4:c4:a2:e2:6f: 29:3e:33:7f:00:13:e6:8a:0c:b8:5a:03:de:09:5a: 29:21:bf:57:36:73:17:3a:a4:2e:f6:22:34:10:07: 8d:b6:94:67:98:e6:2b:12:7c:ce:c0:80:0f:22:ce: 78:ec:10:f8:55:6e:2a:47:49:53:60:9c:86:f5:df: e1:c5:82:99:2f:08:c1:f0:7c:15:63:9a:86:51:b8: 35:7e:5b:61:75:28:53:ad:ec:7d:fe:78:01:4e:35: 49:bd:da:47:37:71:e2:e6:44:9c:60:64:8d:86:b0: b9:10:d9:dd:d6:8a:9e:40:0f:54:5b:a1:72:4c:88: 68:52:65:c3:0d:9c:cf:0d:c8:f4:1b:85:54:75:4b: d9:68:3c:24:83:2a:2c:40:a5:9a:a3:09:62:77:25: 26:ed:d7:f0:a3:89:0c:0e:4d:b8:46:8e:25:dc:9b: 43:49:f2:82:d5:55:16:36:94:4a:2e:da:94:d5:a9: a0:6f:a8:e8:a3:2a:cd:35:5e:56:76:0b:4d:76:4b: fb:b5:64:fc:d9:8b:bf:cb:ef:15:19:79:2b:df:9b: 9b:b8:b6:fd:7a:63:82:68:00:2f:28:6d:e4:d8:51: 5b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:2C:CA:A6:03:92:ED:BA:C5:60:D0:62:60:B7:3B:88:26:23:44:DE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/85858219-71cc-46f9-9c59-e75c9c1f8098.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:c800::/40 Signature Algorithm: sha256WithRSAEncryption 1b:c6:47:0e:20:20:60:25:a7:9f:17:45:3e:21:eb:63:67:75: 31:0f:1c:1b:6f:53:16:b8:02:e2:27:ed:17:40:f9:3a:95:b8: 93:55:cc:b7:03:f9:ec:0e:cd:68:d9:8c:2e:55:76:e4:ba:45: a3:76:71:37:08:65:8f:7b:2b:14:30:b1:3b:a8:10:df:f2:19: 6a:19:53:5c:55:1f:29:9a:02:91:e0:0e:d0:02:3b:7a:6e:31: ad:66:05:bb:71:0e:3e:d2:42:e3:db:18:67:54:e1:6f:fa:5b: f7:8e:04:73:e1:ae:9d:0c:07:40:ba:02:c6:f8:47:10:28:c6: e0:24:48:e4:5b:0e:92:43:d1:87:38:d6:d8:93:c0:f7:15:07: 11:a4:a1:64:5f:de:ac:6d:03:f9:35:0b:ec:71:00:7f:96:50: a9:ae:55:ab:e4:46:4e:6e:b3:63:72:c4:21:dc:37:d4:3e:56: 4a:fc:e8:b4:f3:83:49:98:64:87:8f:0a:de:c7:5a:a0:0c:24: 4e:23:f7:f1:21:7e:ba:f0:2f:fc:79:b8:68:ce:6d:7a:a9:25: 6a:14:d1:cd:fe:f4:94:10:d2:7a:83:79:25:14:32:22:c3:23: c5:d3:7d:1b:a4:fc:27:11:d9:28:0d:b8:29:25:99:9b:54:58: f1:d3:54:9d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUFmG9SXCPnTO1LIw9Opayri3R5cowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMDAwMzA0M1oX DTI2MDUyMTIzNTk1OVowejFJMEcGA1UEBRNAM2FlODFjMTVhZDcyZDdiYjEzMTJj OTg3ZjFmM2M4MzBjNGU4ZmIwNTI1M2MyMjJhNTUxN2JlOGMzNTUyY2M5MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/JupLomLdtQ3PGhdAKd8P8G3ZEGw EbRj5MSi4m8pPjN/ABPmigy4WgPeCVopIb9XNnMXOqQu9iI0EAeNtpRnmOYrEnzO wIAPIs547BD4VW4qR0lTYJyG9d/hxYKZLwjB8HwVY5qGUbg1flthdShTrex9/ngB TjVJvdpHN3Hi5kScYGSNhrC5ENnd1oqeQA9UW6FyTIhoUmXDDZzPDcj0G4VUdUvZ aDwkgyosQKWaowlidyUm7dfwo4kMDk24Ro4l3JtDSfKC1VUWNpRKLtqU1amgb6jo oyrNNV5WdgtNdkv7tWT82Yu/y+8VGXkr35ubuLb9emOCaAAvKG3k2FFb8wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKMsyqYDku26xWDQYmC3O4gmI0TeMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg1ODU4MjE5LTcxY2MtNDZmOS05YzU5LWU3NWM5YzFmODA5OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaAMgwDQYJKoZIhvcNAQELBQADggEBABvGRw4gIGAlp58XRT4h 62NndTEPHBtvUxa4AuIn7RdA+TqVuJNVzLcD+ewOzWjZjC5VduS6RaN2cTcIZY97 KxQwsTuoEN/yGWoZU1xVHymaApHgDtACO3puMa1mBbtxDj7SQuPbGGdU4W/6W/eO BHPhrp0MB0C6Asb4RxAoxuAkSORbDpJD0Yc41tiTwPcVBxGkoWRf3qxtA/k1C+xx AH+WUKmuVavkRk5us2NyxCHcN9Q+Vkr86LTzg0mYZIePCt7HWqAMJE4j9/Ehfrrw L/x5uGjObXqpJWoU0c3+9JQQ0nqDeSUUMiLDI8XTfRuk/CcR2SgNuCklmZtUWPHT VJ0= -----END CERTIFICATE-----Generated at Sun Mar 1 22:17:11 2026 by rpki-client