$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9e03c58f-b311-4557-ad93-f231e6efb4de.roa File: 9e03c58f-b311-4557-ad93-f231e6efb4de.roa (raw, json) Hash identifier: kXg5BIhEZ6zG6C1QevhRIO56hRcrGBwItg7JTFzo9Ik= Subject key identifier: 4B:8D:C0:D8:09:F7:4A:57:41:A1:31:3C:DF:95:46:61:77:86:D7:CF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 784C3534FA9E55AEFBD24CC114A88758BEE76994 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9e03c58f-b311-4557-ad93-f231e6efb4de.roa Signing time: Sat 21 Feb 2026 00:11:03 +0000 ROA not before: Sat 21 Feb 2026 00:11:03 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:4c:35:34:fa:9e:55:ae:fb:d2:4c:c1:14:a8:87:58:be:e7:69:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 21 00:11:03 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=ab27fca19f0f68e8439d3667c4fae493c6c0fcb79ad078ec3df7fa1440081dd5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0a:14:ca:a8:3a:b4:d6:ba:c9:21:a6:e4:5d: 6c:bc:28:4d:8b:7c:dc:0b:4a:10:a5:84:7e:43:ad: e3:ef:fa:28:5d:da:74:ab:7c:ff:a5:05:19:74:9c: 70:4c:34:82:a3:fc:9e:6a:62:60:8a:60:65:7b:05: 22:51:e1:d6:bb:31:29:39:f4:56:d9:5b:b3:9c:aa: 88:b6:f9:15:39:75:71:4d:25:28:f2:94:68:8c:d3: 3c:b0:3a:5d:93:23:8c:7c:a6:e8:67:e7:2f:bf:75: 0c:f7:d4:7b:d6:53:89:76:eb:44:47:d6:8e:ec:ec: c1:6a:b8:1b:91:52:fc:51:95:2c:da:6a:99:8b:e0: 41:88:a5:c4:86:9b:4b:85:bb:63:74:22:01:0a:34: 4b:ac:27:dd:4f:29:a4:ec:4b:2a:d6:d3:b9:2b:3a: de:49:54:db:c7:53:e2:e2:a7:4d:a1:a5:39:07:92: a9:6a:a9:80:0f:29:88:8c:97:d8:96:b8:97:e3:21: 51:14:2d:fc:99:29:f9:9b:30:73:55:3c:a4:c5:e1: 02:bd:f1:42:7a:4f:48:bf:7a:5c:4b:38:b1:c9:b2: 27:b5:e4:01:7f:26:ee:87:ad:2e:3d:1e:c5:12:3b: 7c:8f:61:ec:cf:bc:6d:6f:b4:a2:fd:24:98:c7:cc: 16:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:8D:C0:D8:09:F7:4A:57:41:A1:31:3C:DF:95:46:61:77:86:D7:CF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9e03c58f-b311-4557-ad93-f231e6efb4de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:f000::/40 Signature Algorithm: sha256WithRSAEncryption 81:ec:c5:f1:26:4b:c7:db:d9:82:84:c9:39:23:ee:1a:a9:69: 31:e3:be:9c:8c:cc:46:df:c9:24:3e:57:1f:54:5f:9f:16:be: 49:3d:97:ba:61:e6:3d:6a:5b:09:c7:8b:f9:f8:74:98:38:8a: fe:41:bc:75:60:b9:f3:fe:5b:45:b2:4b:b0:44:e7:bb:13:10: ab:77:45:9b:2e:ed:20:f7:38:42:4d:29:f3:cf:50:be:16:59: ee:34:1a:a6:c2:6f:65:25:59:08:91:79:52:c1:63:0d:91:f5: 67:2e:a6:16:47:91:ca:ea:c5:98:5d:77:a4:b8:92:20:c4:c8: d8:b5:c0:2c:51:16:c6:cd:9b:2b:a4:ce:2e:32:c2:1c:a2:e2: fc:df:d4:e8:d7:b8:32:22:d4:22:b4:b6:0f:8d:3d:22:69:a4: d6:70:af:bd:ed:b4:2c:a2:90:86:de:ca:29:47:6a:df:ae:30: 1f:f3:43:b2:28:33:e2:33:e0:da:27:85:aa:26:d5:71:cd:f6: be:29:d3:ef:66:46:ba:70:12:a0:b8:0c:78:9b:1d:e1:25:36: ce:1a:79:d7:01:43:cd:fd:c5:d6:df:04:a6:84:df:01:9a:ad: ff:bc:b8:05:fa:b1:97:3c:67:b9:fe:7a:30:77:7d:6f:d2:2c: 3f:3a:83:1e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUeEw1NPqeVa770kzBFKiHWL7naZQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMTAwMTEwM1oX DTI2MDUyMjIzNTk1OVowejFJMEcGA1UEBRNAYWIyN2ZjYTE5ZjBmNjhlODQzOWQz NjY3YzRmYWU0OTNjNmMwZmNiNzlhZDA3OGVjM2RmN2ZhMTQ0MDA4MWRkNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQoUyqg6tNa6ySGm5F1svChNi3zc C0oQpYR+Q63j7/ooXdp0q3z/pQUZdJxwTDSCo/yeamJgimBlewUiUeHWuzEpOfRW 2VuznKqItvkVOXVxTSUo8pRojNM8sDpdkyOMfKboZ+cvv3UM99R71lOJdutER9aO 7OzBargbkVL8UZUs2mqZi+BBiKXEhptLhbtjdCIBCjRLrCfdTymk7Esq1tO5Kzre SVTbx1Pi4qdNoaU5B5KpaqmADymIjJfYlriX4yFRFC38mSn5mzBzVTykxeECvfFC ek9Iv3pcSzixybInteQBfybuh60uPR7FEjt8j2Hsz7xtb7Si/SSYx8wW7wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEuNwNgJ90pXQaExPN+VRmF3htfPMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzllMDNjNThmLWIzMTEtNDU1Ny1hZDkzLWYyMzFlNmVmYjRkZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaafAwDQYJKoZIhvcNAQELBQADggEBAIHsxfEmS8fb2YKEyTkj 7hqpaTHjvpyMzEbfySQ+Vx9UX58Wvkk9l7ph5j1qWwnHi/n4dJg4iv5BvHVgufP+ W0WyS7BE57sTEKt3RZsu7SD3OEJNKfPPUL4WWe40GqbCb2UlWQiReVLBYw2R9Wcu phZHkcrqxZhdd6S4kiDEyNi1wCxRFsbNmyukzi4ywhyi4vzf1OjXuDIi1CK0tg+N PSJppNZwr73ttCyikIbeyilHat+uMB/zQ7IoM+Iz4Nonhaom1XHN9r4p0+9mRrpw EqC4DHibHeElNs4aedcBQ839xdbfBKaE3wGarf+8uAX6sZc8Z7n+ejB3fW/SLD86 gx4= -----END CERTIFICATE-----Generated at Sun Mar 1 22:23:35 2026 by rpki-client