$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/98bbbcef-0217-4c51-a717-7af30c63be28.roa File: 98bbbcef-0217-4c51-a717-7af30c63be28.roa (raw, json) Hash identifier: 9qEaZFICNspQZom6tJ79j1XXu/kQnxA13eOLXrStiLg= Subject key identifier: 99:B0:5C:B5:80:EC:9B:23:1F:09:85:68:33:D2:57:25:39:EE:58:74 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 23D41DADA7B4C02918DA54EF00603A02CD046CD3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/98bbbcef-0217-4c51-a717-7af30c63be28.roa Signing time: Wed 11 Feb 2026 00:01:01 +0000 ROA not before: Wed 11 Feb 2026 00:01:01 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf8:8800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:d4:1d:ad:a7:b4:c0:29:18:da:54:ef:00:60:3a:02:cd:04:6c:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 11 00:01:01 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=1411280a94451fb2189817565ea8f2df396600b22b61b0f94c521f8e0954127c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3b:4d:0b:c1:47:90:0d:6d:21:06:8b:1f:bb: d8:2b:ca:13:85:d4:7b:5d:bc:ed:e6:7c:f6:e6:42: 1e:11:b4:69:02:37:9e:92:4f:33:e7:a0:38:8c:3a: 99:b8:47:e8:be:95:84:df:72:57:44:b2:99:fe:fe: c7:a9:78:1e:8d:a8:ce:8e:78:2b:21:e3:54:ad:3f: 11:72:ff:63:c2:03:3f:0a:f8:78:52:9e:7f:04:64: 7c:92:7f:25:8e:48:ec:55:bb:27:e2:2f:49:86:84: b3:15:5a:4c:b1:7a:00:ae:04:2f:ca:19:25:58:80: c0:db:a8:85:4e:aa:c2:71:e7:f4:0f:d7:bc:9e:8b: bc:28:75:1b:dd:8c:1e:d1:ea:ee:eb:1a:e2:39:88: fa:6c:49:15:96:42:73:ee:dc:24:74:02:e6:a9:25: 87:0e:db:4a:6d:44:e8:48:ab:f5:2f:dc:d9:6b:da: fd:66:18:f4:59:88:c8:9e:0e:77:41:64:92:c1:c0: 1c:40:83:8d:8e:7a:1b:dc:94:52:4c:d7:ea:b2:15: 35:ae:2b:a0:62:a7:15:27:a3:f2:bc:95:7d:a0:5f: 0e:e4:d2:d5:b9:b4:d3:8a:4c:a9:ed:cb:53:17:f2: 9a:ee:8a:e5:09:e1:85:e3:f6:c8:14:3b:e5:a8:f9: 7f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B0:5C:B5:80:EC:9B:23:1F:09:85:68:33:D2:57:25:39:EE:58:74 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/98bbbcef-0217-4c51-a717-7af30c63be28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf8:8800::/40 Signature Algorithm: sha256WithRSAEncryption 67:bd:d8:dc:e8:42:80:98:85:59:fa:99:e3:f7:0b:ab:40:93: ef:59:2f:c0:68:0a:91:45:8b:c9:58:fb:73:fd:a1:15:4a:63: 1b:fe:d1:fe:12:4a:6b:9d:2b:2d:d1:a5:cb:a2:29:42:23:36: 66:0e:51:c4:c8:c3:3b:62:31:5f:bf:c6:f1:9e:67:c7:d2:85: d4:b1:10:c3:00:61:e9:88:dd:5a:9d:5a:f7:1e:08:39:d0:a9: aa:83:de:85:c6:16:1b:2f:c6:ba:46:c1:4b:bc:b5:3c:04:ce: bb:45:2d:32:65:1c:66:d2:76:53:de:51:e3:e9:b4:ae:94:8a: de:c8:85:c4:a7:58:43:65:d0:69:6b:28:b7:3c:fa:98:be:35: cd:6a:36:b1:26:a3:4c:eb:68:83:a4:f3:bf:53:28:12:c7:41: 80:92:c7:55:1c:36:df:0f:52:90:12:a3:3f:1c:55:e2:42:cc: 49:19:88:23:34:3b:66:24:bc:77:26:f1:f3:39:ab:59:60:12: 7a:c8:c5:49:8c:55:e9:b0:66:65:c0:b2:7c:b2:03:01:31:ca: ca:ce:04:0e:07:3d:68:39:a0:a4:b5:49:d9:8d:f4:5c:6e:fc: d3:27:3b:04:50:07:ec:aa:fe:b1:a9:ae:cb:9c:7b:1b:c1:ee: 4d:67:37:f1 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUI9Qdrae0wCkY2lTvAGA6As0EbNMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxMTAwMDEwMVoX DTI2MDUxMjIzNTk1OVowejFJMEcGA1UEBRNAMTQxMTI4MGE5NDQ1MWZiMjE4OTgx NzU2NWVhOGYyZGYzOTY2MDBiMjJiNjFiMGY5NGM1MjFmOGUwOTU0MTI3YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTtNC8FHkA1tIQaLH7vYK8oThdR7 Xbzt5nz25kIeEbRpAjeekk8z56A4jDqZuEfovpWE33JXRLKZ/v7HqXgejajOjngr IeNUrT8Rcv9jwgM/Cvh4Up5/BGR8kn8ljkjsVbsn4i9JhoSzFVpMsXoArgQvyhkl WIDA26iFTqrCcef0D9e8nou8KHUb3Ywe0eru6xriOYj6bEkVlkJz7twkdALmqSWH DttKbUToSKv1L9zZa9r9Zhj0WYjIng53QWSSwcAcQIONjnob3JRSTNfqshU1riug YqcVJ6PyvJV9oF8O5NLVubTTikyp7ctTF/Ka7orlCeGF4/bIFDvlqPl/uQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJmwXLWA7JsjHwmFaDPSVyU57lh0MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk4YmJiY2VmLTAyMTctNGM1MS1hNzE3LTdhZjMwYzYzYmUyOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+IgwDQYJKoZIhvcNAQELBQADggEBAGe92NzoQoCYhVn6meP3 C6tAk+9ZL8BoCpFFi8lY+3P9oRVKYxv+0f4SSmudKy3RpcuiKUIjNmYOUcTIwzti MV+/xvGeZ8fShdSxEMMAYemI3VqdWvceCDnQqaqD3oXGFhsvxrpGwUu8tTwEzrtF LTJlHGbSdlPeUePptK6Uit7IhcSnWENl0GlrKLc8+pi+Nc1qNrEmo0zraIOk879T KBLHQYCSx1UcNt8PUpASoz8cVeJCzEkZiCM0O2YkvHcm8fM5q1lgEnrIxUmMVemw ZmXAsnyyAwExysrOBA4HPWg5oKS1SdmN9Fxu/NMnOwRQB+yq/rGprsucexvB7k1n N/E= -----END CERTIFICATE-----Generated at Sun Mar 1 23:53:14 2026 by rpki-client