$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/92a734ef-a252-48bc-a799-25426b153989.roa File: 92a734ef-a252-48bc-a799-25426b153989.roa (raw, json) Hash identifier: 9WDUY5hS+jJuCfY7hDZhM5ZLQF02/eKIef2m+NzZxQ8= Subject key identifier: 19:20:65:B3:3B:A8:60:11:83:27:46:12:81:D2:53:D9:97:30:30:14 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1E6E451AF0CD024D1F57D98C088AB3CC1C888B6A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/92a734ef-a252-48bc-a799-25426b153989.roa Signing time: Fri 20 Feb 2026 00:00:14 +0000 ROA not before: Fri 20 Feb 2026 00:00:14 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:f000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:6e:45:1a:f0:cd:02:4d:1f:57:d9:8c:08:8a:b3:cc:1c:88:8b:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 20 00:00:14 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=7bc312546452bb418d56986f7d7ff1c1161de736b566cfd4416772ef8c56c59f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:96:77:e3:67:71:b2:6c:46:e2:ab:3c:ff:a5: 27:6e:c1:5e:7b:d6:c0:c6:94:f4:c7:07:1c:b4:2b: 0d:52:48:75:4c:0f:04:29:58:e0:01:ae:54:fa:4b: 8e:81:f4:c7:02:63:12:f6:77:f5:e9:21:13:28:26: 59:47:35:54:2a:7c:83:8c:3b:2c:ea:fc:3f:f7:97: ed:7c:5b:86:31:c6:ed:db:b0:19:e8:fc:00:75:9f: 1a:f4:51:b0:96:49:8c:45:66:e8:58:e9:76:a3:15: 16:e8:b4:3e:fd:91:5e:77:e1:6e:0b:a8:9f:81:20: 25:82:a0:96:19:7e:be:02:49:b9:de:f9:8f:bd:2a: f3:a5:cc:94:08:8c:3f:4f:ce:02:c6:f9:68:5f:54: fa:37:bc:76:e0:99:27:69:ec:8a:fb:ce:4e:aa:be: b0:07:22:a2:b8:99:ef:ac:c1:d5:12:ae:ee:03:08: a2:52:a3:16:d0:4f:ed:1d:84:75:a1:e8:da:60:72: dd:e1:7c:d1:e8:fd:95:a8:77:fa:63:ce:5e:5a:e9: 53:bc:e0:93:d5:78:03:e7:87:f5:14:6b:b4:7d:5f: f5:46:f6:82:2c:af:47:47:ca:72:42:3b:11:d9:e6: c9:c2:4b:ef:da:d1:84:e3:36:81:14:19:2b:41:3b: 5d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:20:65:B3:3B:A8:60:11:83:27:46:12:81:D2:53:D9:97:30:30:14 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/92a734ef-a252-48bc-a799-25426b153989.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:f000::/40 Signature Algorithm: sha256WithRSAEncryption cb:1f:a9:bb:94:de:8d:de:af:07:02:a4:8c:b8:80:a7:14:68: 90:b5:d2:32:04:9d:56:a9:57:2d:50:30:16:66:b1:f2:26:c1: ab:10:8a:62:d8:ef:ec:ee:0c:24:b3:d2:ea:fe:ac:19:61:a9: 8e:91:2d:da:6d:ec:ee:1f:59:4d:41:b9:f7:87:9e:ca:29:72: 2a:52:d5:e7:53:91:a3:f1:62:ca:cf:4f:04:0c:58:d1:e0:fc: 05:fb:f7:5c:06:28:d5:b0:76:b3:ca:c9:96:33:1f:35:e4:37: 9e:fd:07:23:fe:91:3d:ee:dd:80:2d:1d:20:21:c5:78:12:49: 65:66:5e:6e:13:0d:04:2a:3f:25:68:21:30:84:9a:83:01:35: 53:35:e2:9d:9c:6a:f9:ca:b7:e7:68:39:e3:0c:d0:6f:c2:89: f1:3f:e1:de:22:58:f8:62:b4:f8:41:ce:24:f5:99:35:17:36: ee:aa:90:48:43:2d:3a:d1:82:0e:dd:b0:7a:d8:cc:84:a8:e7: a7:db:08:2e:1d:26:2f:83:68:ff:7c:b4:3f:de:ce:de:96:27: 51:f2:a1:9a:a0:da:a0:30:d1:dc:e4:b7:e3:90:63:50:d7:04: ed:fd:24:c9:64:1b:d0:54:12:12:3a:bf:bc:c2:d5:ff:19:2f: 4d:fe:cf:e6 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUHm5FGvDNAk0fV9mMCIqzzByIi2owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMDAwMDAxNFoX DTI2MDUyMTIzNTk1OVowejFJMEcGA1UEBRNAN2JjMzEyNTQ2NDUyYmI0MThkNTY5 ODZmN2Q3ZmYxYzExNjFkZTczNmI1NjZjZmQ0NDE2NzcyZWY4YzU2YzU5ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZZ342dxsmxG4qs8/6UnbsFee9bA xpT0xwcctCsNUkh1TA8EKVjgAa5U+kuOgfTHAmMS9nf16SETKCZZRzVUKnyDjDss 6vw/95ftfFuGMcbt27AZ6PwAdZ8a9FGwlkmMRWboWOl2oxUW6LQ+/ZFed+FuC6if gSAlgqCWGX6+Akm53vmPvSrzpcyUCIw/T84CxvloX1T6N7x24JknaeyK+85Oqr6w ByKiuJnvrMHVEq7uAwiiUqMW0E/tHYR1oejaYHLd4XzR6P2VqHf6Y85eWulTvOCT 1XgD54f1FGu0fV/1RvaCLK9HR8pyQjsR2ebJwkvv2tGE4zaBFBkrQTtdUwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBkgZbM7qGARgydGEoHSU9mXMDAUMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkyYTczNGVmLWEyNTItNDhiYy1hNzk5LTI1NDI2YjE1Mzk4OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYfAwDQYJKoZIhvcNAQELBQADggEBAMsfqbuU3o3erwcCpIy4 gKcUaJC10jIEnVapVy1QMBZmsfImwasQimLY7+zuDCSz0ur+rBlhqY6RLdpt7O4f WU1BufeHnsopcipS1edTkaPxYsrPTwQMWNHg/AX791wGKNWwdrPKyZYzHzXkN579 ByP+kT3u3YAtHSAhxXgSSWVmXm4TDQQqPyVoITCEmoMBNVM14p2cavnKt+doOeMM 0G/CifE/4d4iWPhitPhBziT1mTUXNu6qkEhDLTrRgg7dsHrYzISo56fbCC4dJi+D aP98tD/ezt6WJ1HyoZqg2qAw0dzkt+OQY1DXBO39JMlkG9BUEhI6v7zC1f8ZL03+ z+Y= -----END CERTIFICATE-----Generated at Mon Mar 2 00:06:49 2026 by rpki-client