$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/996429fb-4fb5-4437-9fbd-29531436e253.roa File: 996429fb-4fb5-4437-9fbd-29531436e253.roa (raw, json) Hash identifier: Wkkt5iFNZkz4shFOruEkHmtxhlbP+ZCjQh5oy8A0mO4= Subject key identifier: E6:96:CC:77:E3:23:6F:75:33:59:57:D7:1C:24:73:55:CB:87:65:FA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2B574B71B4EC1CB0846EAC330B3BE0FE667A40D7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/996429fb-4fb5-4437-9fbd-29531436e253.roa Signing time: Sun 22 Feb 2026 00:00:37 +0000 ROA not before: Sun 22 Feb 2026 00:00:37 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab9:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:57:4b:71:b4:ec:1c:b0:84:6e:ac:33:0b:3b:e0:fe:66:7a:40:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 22 00:00:37 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=4cd426363f37887faa16238b160d90efdcea1913bbabb03d609978a4eec8653b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a0:28:75:b8:f8:fb:7e:f5:81:cb:a8:e8:3c: 53:1a:e3:f8:fa:3a:4f:27:cd:69:2c:1e:15:fb:0b: eb:b0:fb:8f:dc:8d:df:b0:e8:e5:0d:b5:6f:a5:cd: df:31:3a:d3:7a:59:42:7f:d2:4b:9a:b0:5c:79:d7: 23:70:02:d7:2f:85:97:ab:86:10:0a:c5:34:9d:45: c6:d5:4f:50:48:16:3d:56:02:9c:4a:02:f5:ba:98: 4e:a7:de:b7:cd:0a:62:b2:f7:5d:1b:56:ac:67:05: 08:1e:11:3b:f1:e5:b4:9c:50:0e:06:36:30:f9:7b: 4c:f2:f1:8c:89:c4:1d:f3:33:ae:af:6d:f3:ed:2c: fb:a4:52:4e:a4:47:0c:1b:ee:d5:7d:ed:15:02:13: 79:5b:c1:e5:c6:cd:98:e0:59:dd:a5:b2:c8:a2:cb: 7c:db:70:ee:a1:46:0a:2b:d7:2a:9f:ee:60:d5:e4: 6c:e9:96:34:5b:31:68:67:7e:a8:5e:b7:ce:e2:ed: 63:de:f7:2f:4c:d4:31:66:06:2d:d2:e7:88:11:b0: 69:12:d0:00:fc:73:28:e0:b0:30:5d:1a:f8:f1:21: 09:07:ef:07:1d:23:1e:21:3f:f3:95:6c:2b:2c:c0: 73:fc:5e:97:9a:aa:09:ba:49:1f:82:a9:4a:c9:69: e8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:96:CC:77:E3:23:6F:75:33:59:57:D7:1C:24:73:55:CB:87:65:FA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/996429fb-4fb5-4437-9fbd-29531436e253.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:c000::/40 Signature Algorithm: sha256WithRSAEncryption 63:c9:82:14:cf:17:e5:b3:1c:d3:8f:4e:de:28:32:b2:fa:6a: 3e:90:7a:fe:27:3e:90:f4:af:f8:f5:e0:e4:36:e3:7c:21:85: 70:a0:54:21:b7:55:02:1b:5a:73:46:27:c4:f7:33:fc:cf:76: 4f:5f:9e:14:72:45:48:dc:17:4a:a6:4b:a2:96:27:dc:fc:bf: ac:b4:e9:1f:53:5f:7f:d1:0f:76:ba:09:70:0d:70:32:54:03: 48:58:c0:4c:df:63:ed:6e:f2:54:1e:c7:34:95:ba:18:35:e4: 36:b2:f2:ff:e8:29:c7:65:1a:a1:cb:82:1a:ed:c2:91:a2:d3: fe:04:eb:c9:4f:53:b1:e2:0e:3a:5e:df:88:67:af:47:d0:fc: 5a:7e:8f:a0:66:50:2f:b6:43:1c:d4:3e:45:5b:f1:c0:ad:bb: 7e:a0:df:39:ca:8e:51:8b:f2:0c:d4:c3:aa:fd:0c:e5:12:fe: 78:6b:99:c6:0c:6a:1c:9b:3e:d6:4d:22:1e:d1:af:24:11:5c: 5e:c0:e4:10:f4:97:34:f5:ba:51:4c:e1:17:6d:98:8b:ef:6e: 12:8d:29:d3:95:e3:44:74:84:e7:e2:c4:11:7d:cc:20:67:7d: b9:4b:c1:df:de:48:5b:cb:5b:d3:05:43:f3:ac:7d:34:75:55: 19:43:53:49 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUK1dLcbTsHLCEbqwzCzvg/mZ6QNcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMjAwMDAzN1oX DTI2MDUyMzIzNTk1OVowejFJMEcGA1UEBRNANGNkNDI2MzYzZjM3ODg3ZmFhMTYy MzhiMTYwZDkwZWZkY2VhMTkxM2JiYWJiMDNkNjA5OTc4YTRlZWM4NjUzYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKAodbj4+371gcuo6DxTGuP4+jpP J81pLB4V+wvrsPuP3I3fsOjlDbVvpc3fMTrTellCf9JLmrBcedcjcALXL4WXq4YQ CsU0nUXG1U9QSBY9VgKcSgL1uphOp963zQpisvddG1asZwUIHhE78eW0nFAOBjYw +XtM8vGMicQd8zOur23z7Sz7pFJOpEcMG+7Vfe0VAhN5W8Hlxs2Y4FndpbLIost8 23DuoUYKK9cqn+5g1eRs6ZY0WzFoZ36oXrfO4u1j3vcvTNQxZgYt0ueIEbBpEtAA /HMo4LAwXRr48SEJB+8HHSMeIT/zlWwrLMBz/F6XmqoJukkfgqlKyWnoXwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOaWzHfjI291M1lX1xwkc1XLh2X6MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk5NjQyOWZiLTRmYjUtNDQzNy05ZmJkLTI5NTMxNDM2ZTI1My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaucAwDQYJKoZIhvcNAQELBQADggEBAGPJghTPF+WzHNOPTt4o MrL6aj6Qev4nPpD0r/j14OQ243whhXCgVCG3VQIbWnNGJ8T3M/zPdk9fnhRyRUjc F0qmS6KWJ9z8v6y06R9TX3/RD3a6CXANcDJUA0hYwEzfY+1u8lQexzSVuhg15Day 8v/oKcdlGqHLghrtwpGi0/4E68lPU7HiDjpe34hnr0fQ/Fp+j6BmUC+2QxzUPkVb 8cCtu36g3znKjlGL8gzUw6r9DOUS/nhrmcYMahybPtZNIh7RryQRXF7A5BD0lzT1 ulFM4RdtmIvvbhKNKdOV40R0hOfixBF9zCBnfblLwd/eSFvLW9MFQ/OsfTR1VRlD U0k= -----END CERTIFICATE-----Generated at Sun Mar 1 22:07:51 2026 by rpki-client