$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8e53c2d6-e164-4b99-9534-54abd9032e7f.roa File: 8e53c2d6-e164-4b99-9534-54abd9032e7f.roa (raw, json) Hash identifier: MgCFX9ejNtZbQdvwGhw2bCleJZPg2dDWAJEZODubKpg= Subject key identifier: C2:F9:96:65:40:8B:EF:57:FF:C1:77:4B:31:61:32:5B:15:7B:5B:0A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7B1B768B72F59F763AD96E7E7618D42CD0AA9111 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8e53c2d6-e164-4b99-9534-54abd9032e7f.roa Signing time: Sat 21 Feb 2026 00:10:42 +0000 ROA not before: Sat 21 Feb 2026 00:10:42 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:8800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:1b:76:8b:72:f5:9f:76:3a:d9:6e:7e:76:18:d4:2c:d0:aa:91:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 21 00:10:42 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=1bd058fd796c244f4d03161bb062520bea0737d28f6c41bbc7682412b57ab081, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d9:3b:f8:e8:b2:28:b6:59:b6:ba:c6:00:58: ed:dd:98:88:14:43:93:d0:a1:8c:66:ae:bc:ba:44: 7d:f0:9d:c4:35:3c:c2:db:5b:8e:e4:42:07:2d:96: df:27:93:bc:fb:cc:70:0a:5d:a5:7f:11:c9:8e:7f: f8:8b:81:d7:35:32:07:59:e2:7a:76:be:11:05:1a: 45:24:95:92:da:88:d0:31:14:6d:4e:08:8d:65:f0: 8b:b4:8a:ac:65:9c:9b:54:65:48:5e:f1:14:b8:35: 58:31:d6:7a:ee:b1:a5:21:a9:00:57:2b:ed:2d:15: 09:11:94:7a:c2:6a:ee:d5:2c:a2:9d:d9:13:86:97: 27:44:9a:2b:2e:a4:13:a8:5d:46:cd:6f:78:2e:30: 05:9f:9b:19:4d:0c:f0:96:54:8c:d3:61:31:ac:bd: 2e:d1:b2:65:d2:68:39:19:95:e0:82:bf:80:12:b2: 84:56:3d:d9:ae:36:52:f0:57:7f:06:9b:fc:00:8a: 8e:6b:d2:60:f8:94:79:ad:27:ee:7f:c0:f8:f9:2d: 60:e2:7e:50:c3:da:ac:5e:07:da:fe:70:96:6e:a5: 56:6e:02:18:8d:9b:b9:19:ce:8b:05:d2:72:8c:2a: ae:a3:12:9c:3d:2c:19:16:0c:31:0f:e1:55:74:d0: e3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F9:96:65:40:8B:EF:57:FF:C1:77:4B:31:61:32:5B:15:7B:5B:0A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8e53c2d6-e164-4b99-9534-54abd9032e7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:8800::/40 Signature Algorithm: sha256WithRSAEncryption 7e:80:e2:ff:ce:a9:ed:8c:20:25:d3:9f:33:bf:eb:56:46:be: 1e:c8:eb:68:35:53:f1:ff:c1:03:96:a5:1f:45:17:58:80:ce: e5:2d:82:c7:52:02:6b:59:93:cd:6f:ab:42:85:2e:e8:63:ad: 5a:36:e1:bd:8e:58:25:15:c9:be:3d:9c:11:92:94:5a:47:36: 6e:c7:f8:75:76:da:f6:39:4f:74:6c:4d:cf:a7:0a:a7:9e:e7: b8:af:76:fb:ba:2e:ee:ab:57:0e:87:bf:09:50:3b:72:86:ff: 00:c8:d1:45:86:73:8b:cf:e6:8b:cb:8d:72:37:95:6f:44:3d: 45:8d:dd:d0:81:7a:61:90:ae:29:7e:12:33:14:40:bf:a7:98: ac:95:35:89:3d:7d:53:df:0f:7d:98:b1:36:fd:47:ce:10:35: 0e:7e:e7:21:ab:ed:0a:ee:dd:a8:48:d4:d0:d5:6c:46:bc:76: ae:e0:ef:2a:6b:9e:8c:c5:e2:9b:57:87:e6:aa:c3:d9:1e:0f: dd:9e:bf:a7:74:b4:c7:06:f1:c0:4e:cc:5b:c2:03:1e:64:b1: 0a:43:64:71:a3:21:a0:7c:ba:99:99:cd:4a:89:c5:0e:df:00: df:25:f2:9d:ca:2f:81:5a:29:d7:71:02:09:5c:d2:ac:92:f8: e6:0b:62:7b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUext2i3L1n3Y62W5+dhjULNCqkREwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMTAwMTA0MloX DTI2MDUyMjIzNTk1OVowejFJMEcGA1UEBRNAMWJkMDU4ZmQ3OTZjMjQ0ZjRkMDMx NjFiYjA2MjUyMGJlYTA3MzdkMjhmNmM0MWJiYzc2ODI0MTJiNTdhYjA4MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dk7+OiyKLZZtrrGAFjt3ZiIFEOT 0KGMZq68ukR98J3ENTzC21uO5EIHLZbfJ5O8+8xwCl2lfxHJjn/4i4HXNTIHWeJ6 dr4RBRpFJJWS2ojQMRRtTgiNZfCLtIqsZZybVGVIXvEUuDVYMdZ67rGlIakAVyvt LRUJEZR6wmru1SyindkThpcnRJorLqQTqF1GzW94LjAFn5sZTQzwllSM02ExrL0u 0bJl0mg5GZXggr+AErKEVj3ZrjZS8Fd/Bpv8AIqOa9Jg+JR5rSfuf8D4+S1g4n5Q w9qsXgfa/nCWbqVWbgIYjZu5Gc6LBdJyjCquoxKcPSwZFgwxD+FVdNDjLQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFML5lmVAi+9X/8F3SzFhMlsVe1sKMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhlNTNjMmQ2LWUxNjQtNGI5OS05NTM0LTU0YWJkOTAzMmU3Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaYgwDQYJKoZIhvcNAQELBQADggEBAH6A4v/Oqe2MICXTnzO/ 61ZGvh7I62g1U/H/wQOWpR9FF1iAzuUtgsdSAmtZk81vq0KFLuhjrVo24b2OWCUV yb49nBGSlFpHNm7H+HV22vY5T3RsTc+nCqee57ivdvu6Lu6rVw6HvwlQO3KG/wDI 0UWGc4vP5ovLjXI3lW9EPUWN3dCBemGQril+EjMUQL+nmKyVNYk9fVPfD32YsTb9 R84QNQ5+5yGr7Qru3ahI1NDVbEa8dq7g7yprnozF4ptXh+aqw9keD92ev6d0tMcG 8cBOzFvCAx5ksQpDZHGjIaB8upmZzUqJxQ7fAN8l8p3KL4FaKddxAglc0qyS+OYL Yns= -----END CERTIFICATE-----Generated at Sun Mar 1 23:38:29 2026 by rpki-client