$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d6a8a8c-5766-4c00-992a-470de2ca86b4.roa File: 9d6a8a8c-5766-4c00-992a-470de2ca86b4.roa (raw, json) Hash identifier: MM/kPluNJIfKd8j5LvH8AKStp6Vt/AJwSdNxdMSfN9U= Subject key identifier: 84:86:79:0A:8F:B7:95:26:7C:C3:FB:94:C9:24:D5:A6:37:E9:C3:A9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4A65E0D65DAC281D69D35E33810F025915C9B7EC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d6a8a8c-5766-4c00-992a-470de2ca86b4.roa Signing time: Tue 17 Feb 2026 00:00:48 +0000 ROA not before: Tue 17 Feb 2026 00:00:48 +0000 ROA not after: Mon 18 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:65:e0:d6:5d:ac:28:1d:69:d3:5e:33:81:0f:02:59:15:c9:b7:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 17 00:00:48 2026 GMT Not After : May 18 23:59:59 2026 GMT Subject: serialNumber=138057f47830bf7539698fe43f1ba1b5cf8d6d120f3da9f211c0226d3a6f2563, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c5:08:b7:32:d2:83:9d:4a:3c:0b:84:4b:f6: 82:f5:77:fe:4f:99:fb:09:f1:d0:8a:f5:af:0f:3d: 76:3c:0d:1f:5f:c4:8f:7c:70:23:cd:2d:dd:c3:06: d1:17:21:ca:de:be:b9:09:23:91:70:8a:3c:a0:fd: e8:23:0b:56:ba:cd:af:bb:66:3a:f0:f5:9e:8c:de: fd:03:f3:3c:63:5f:4f:b0:58:c9:db:17:16:bb:ad: 24:3b:12:9c:5c:29:5b:b1:e7:8b:a9:39:ee:18:1b: ef:d2:aa:a8:91:5d:bc:8f:36:95:c5:57:17:c7:93: 5a:1e:5a:5e:c0:58:93:e7:80:b1:d4:bc:65:18:e0: 74:bd:94:2c:7b:cc:81:4a:e0:13:64:14:e4:99:e0: f0:61:ee:c3:61:c2:72:48:18:8b:f5:1a:f5:ab:df: f5:c2:39:63:59:3e:7d:f1:48:4a:fc:6b:30:f4:f4: 6a:9b:30:85:c5:1e:6d:54:22:34:08:29:59:95:d2: af:5a:54:01:4f:02:00:45:17:82:54:aa:95:5c:2f: d1:66:da:8f:f0:55:40:68:90:64:78:0f:75:bc:f1: 1a:22:79:a1:09:69:ad:0b:98:64:d1:b4:e8:37:fb: 22:32:b5:ef:02:fd:ca:4c:9f:3a:ba:44:78:cb:c2: 27:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:86:79:0A:8F:B7:95:26:7C:C3:FB:94:C9:24:D5:A6:37:E9:C3:A9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d6a8a8c-5766-4c00-992a-470de2ca86b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:8000::/40 Signature Algorithm: sha256WithRSAEncryption 8a:bc:19:1b:6e:1a:22:66:26:ae:62:6a:9e:a3:d2:b5:6c:ac: bb:8f:88:de:1b:0b:63:c8:3a:f7:65:26:57:40:3f:67:67:f3: cc:57:6e:ba:1e:ef:ff:ae:4b:6a:38:e6:17:96:aa:28:60:e3: e4:ca:71:d1:60:a2:53:76:5d:0a:21:a4:c3:3a:95:a9:0c:a2: 5e:6e:6e:fc:22:75:15:9b:52:97:f6:13:af:36:a8:53:fe:b7: 93:d8:a2:eb:d1:86:03:28:41:9b:f6:7a:d2:9c:81:a7:d8:d8: 09:54:22:7d:1a:42:e2:4f:d6:7a:48:84:c4:ca:cb:b1:83:06: e7:ef:3d:03:30:8f:0d:7d:e8:88:9c:b8:55:b9:b5:65:ff:7f: 38:3f:27:85:7d:84:a4:1b:e5:0d:ed:d8:fc:8c:cd:45:1a:35: 95:20:d4:ae:83:4e:2e:10:18:19:1c:65:4c:c6:76:6b:bf:4d: 64:ef:30:80:65:93:a4:27:09:82:b9:db:da:97:33:2e:b8:c6: 3e:20:15:d1:eb:52:1a:e5:40:e2:85:d3:ae:d0:b3:a8:d6:55: e2:f4:50:8d:68:de:1e:d8:65:6e:7f:c7:f5:20:4b:e5:1d:f5: 2a:f2:35:3b:13:ed:c8:10:2e:eb:4c:3f:91:d3:e6:dc:16:e8: 39:b4:d4:5b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUSmXg1l2sKB1p014zgQ8CWRXJt+wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxNzAwMDA0OFoX DTI2MDUxODIzNTk1OVowejFJMEcGA1UEBRNAMTM4MDU3ZjQ3ODMwYmY3NTM5Njk4 ZmU0M2YxYmExYjVjZjhkNmQxMjBmM2RhOWYyMTFjMDIyNmQzYTZmMjU2MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8UItzLSg51KPAuES/aC9Xf+T5n7 CfHQivWvDz12PA0fX8SPfHAjzS3dwwbRFyHK3r65CSORcIo8oP3oIwtWus2vu2Y6 8PWejN79A/M8Y19PsFjJ2xcWu60kOxKcXClbseeLqTnuGBvv0qqokV28jzaVxVcX x5NaHlpewFiT54Cx1LxlGOB0vZQse8yBSuATZBTkmeDwYe7DYcJySBiL9Rr1q9/1 wjljWT598UhK/Gsw9PRqmzCFxR5tVCI0CClZldKvWlQBTwIARReCVKqVXC/RZtqP 8FVAaJBkeA91vPEaInmhCWmtC5hk0bToN/siMrXvAv3KTJ86ukR4y8InGQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFISGeQqPt5UmfMP7lMkk1aY36cOpMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlkNmE4YThjLTU3NjYtNGMwMC05OTJhLTQ3MGRlMmNhODZiNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9oAwDQYJKoZIhvcNAQELBQADggEBAIq8GRtuGiJmJq5iap6j 0rVsrLuPiN4bC2PIOvdlJldAP2dn88xXbroe7/+uS2o45heWqihg4+TKcdFgolN2 XQohpMM6lakMol5ubvwidRWbUpf2E682qFP+t5PYouvRhgMoQZv2etKcgafY2AlU In0aQuJP1npIhMTKy7GDBufvPQMwjw196IicuFW5tWX/fzg/J4V9hKQb5Q3t2PyM zUUaNZUg1K6DTi4QGBkcZUzGdmu/TWTvMIBlk6QnCYK529qXMy64xj4gFdHrUhrl QOKF067Qs6jWVeL0UI1o3h7YZW5/x/UgS+Ud9SryNTsT7cgQLutMP5HT5twW6Dm0 1Fs= -----END CERTIFICATE-----Generated at Sun Mar 1 23:48:43 2026 by rpki-client