$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8de41395-91b5-4f4c-8d06-884bef8997ec.roa File: 8de41395-91b5-4f4c-8d06-884bef8997ec.roa (raw, json) Hash identifier: wf0MoU3dH9b5+lkYL/ca7Av6M2yZlaymUkWHKg9G/AI= Subject key identifier: 8A:11:41:E4:95:66:86:54:85:F3:6A:2A:D8:8B:65:3E:78:DE:AC:96 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 56BB5E09DED0920C015A6586C33A64D8FD4557D7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8de41395-91b5-4f4c-8d06-884bef8997ec.roa Signing time: Sat 28 Feb 2026 00:00:07 +0000 ROA not before: Sat 28 Feb 2026 00:00:07 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daef:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:bb:5e:09:de:d0:92:0c:01:5a:65:86:c3:3a:64:d8:fd:45:57:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 28 00:00:07 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=6884473171cdf75c6fd4fb632954d610b6b49bc80603c1d4052777dd3561faad, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9f:93:61:d0:b7:cf:aa:64:01:56:b8:a6:56: 03:88:f5:47:fd:61:b1:9b:85:09:1d:81:14:72:df: 9a:85:97:4b:dc:e1:60:d5:3a:8f:91:4f:99:80:d7: 9f:49:e7:22:93:7f:96:3c:14:c0:f0:a0:19:c7:f3: 6e:f5:bf:0e:b8:74:36:77:27:37:7a:e9:44:0f:c9: 65:30:13:da:6b:0c:3c:70:8c:d3:04:69:86:2b:8c: da:d8:c9:3b:04:b8:51:fb:ea:7b:53:18:72:90:69: 04:af:4c:bd:07:6d:3c:9c:88:dc:23:a4:ef:e6:18: f8:5d:90:68:56:e9:52:83:1e:76:b1:18:6f:f4:b6: cd:73:d9:4f:cf:f7:75:52:d8:d6:7b:3e:1b:68:22: 27:4b:1d:6c:b1:8a:a6:49:0b:d4:8e:e0:50:c9:5d: 0b:7e:53:c6:e1:8e:be:68:7e:85:b1:3b:d1:89:a0: 8d:f9:ce:8d:e2:24:47:b3:1f:3e:03:b0:64:d2:ee: 74:20:9b:45:9e:3e:cb:75:a1:8b:ec:90:96:43:fa: bc:36:14:fc:ac:60:3f:41:ad:da:1b:2a:02:e5:8e: 6b:d5:1f:89:0e:0d:f9:1c:18:b7:90:15:4c:ac:fe: e8:1f:38:5a:b8:4a:ab:0d:a3:8c:08:4a:0f:2a:60: 20:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:11:41:E4:95:66:86:54:85:F3:6A:2A:D8:8B:65:3E:78:DE:AC:96 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8de41395-91b5-4f4c-8d06-884bef8997ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:6000::/40 Signature Algorithm: sha256WithRSAEncryption 7b:c2:cb:2b:38:b5:02:1d:a8:30:34:f1:6b:82:04:98:6e:70: 63:da:1a:73:53:8d:95:99:dc:a4:3b:37:c9:eb:d4:7d:9d:e9: 76:bf:ef:75:d0:d9:45:81:c4:c1:ee:1f:d5:ba:8b:34:2b:78: c2:bc:6b:f0:0f:d2:d3:ad:8f:26:65:27:02:0f:9d:e5:db:e7: 0e:cb:5f:62:31:72:be:cb:f4:99:04:cf:60:66:35:63:cd:da: 60:95:0a:a8:45:cc:7f:10:25:35:0e:e1:85:03:45:3e:b0:4b: 0e:f0:8e:77:7b:3b:ed:17:c7:42:d3:09:74:60:2a:5f:19:42: e5:3d:24:d7:c2:34:a5:5f:de:65:7f:17:62:f4:5d:3a:82:38: 07:69:06:a3:35:3a:88:9b:74:28:1f:a2:7e:02:bf:14:f2:1b: f0:51:6e:26:b1:c6:67:a0:d7:22:49:b8:f0:7d:63:c8:be:99: ac:e2:13:f5:d0:09:ff:d0:e7:65:a4:55:38:ef:a8:65:46:76: 8b:a1:0d:34:da:38:9c:32:09:35:ac:76:7f:56:a3:1f:ac:c7: 9a:43:ff:36:e7:a4:90:5e:81:6b:90:b4:f8:fd:c4:a6:0f:6c: d7:8f:1f:17:83:a7:de:c8:b3:7e:5e:62:78:ba:b3:35:1d:2f: 5a:ad:80:47 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUVrteCd7QkgwBWmWGwzpk2P1FV9cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyODAwMDAwN1oX DTI2MDUyOTIzNTk1OVowejFJMEcGA1UEBRNANjg4NDQ3MzE3MWNkZjc1YzZmZDRm YjYzMjk1NGQ2MTBiNmI0OWJjODA2MDNjMWQ0MDUyNzc3ZGQzNTYxZmFhZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyp+TYdC3z6pkAVa4plYDiPVH/WGx m4UJHYEUct+ahZdL3OFg1TqPkU+ZgNefSecik3+WPBTA8KAZx/Nu9b8OuHQ2dyc3 eulED8llMBPaaww8cIzTBGmGK4za2Mk7BLhR++p7UxhykGkEr0y9B208nIjcI6Tv 5hj4XZBoVulSgx52sRhv9LbNc9lPz/d1UtjWez4baCInSx1ssYqmSQvUjuBQyV0L flPG4Y6+aH6FsTvRiaCN+c6N4iRHsx8+A7Bk0u50IJtFnj7LdaGL7JCWQ/q8NhT8 rGA/Qa3aGyoC5Y5r1R+JDg35HBi3kBVMrP7oHzhauEqrDaOMCEoPKmAg7wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIoRQeSVZoZUhfNqKtiLZT543qyWMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhkZTQxMzk1LTkxYjUtNGY0Yy04ZDA2LTg4NGJlZjg5OTdlYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba72AwDQYJKoZIhvcNAQELBQADggEBAHvCyys4tQIdqDA08WuC BJhucGPaGnNTjZWZ3KQ7N8nr1H2d6Xa/73XQ2UWBxMHuH9W6izQreMK8a/AP0tOt jyZlJwIPneXb5w7LX2Ixcr7L9JkEz2BmNWPN2mCVCqhFzH8QJTUO4YUDRT6wSw7w jnd7O+0Xx0LTCXRgKl8ZQuU9JNfCNKVf3mV/F2L0XTqCOAdpBqM1OoibdCgfon4C vxTyG/BRbiaxxmeg1yJJuPB9Y8i+maziE/XQCf/Q52WkVTjvqGVGdouhDTTaOJwy CTWsdn9Wox+sx5pD/zbnpJBegWuQtPj9xKYPbNePHxeDp97Is35eYni6szUdL1qt gEc= -----END CERTIFICATE-----Generated at Sun Mar 1 22:03:25 2026 by rpki-client