$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a7ca9837-1d67-452f-8fea-80250f36d360.roa File: a7ca9837-1d67-452f-8fea-80250f36d360.roa (raw, json) Hash identifier: NE++RCjfpH8vwTjH3xkKfWQyFnzlElnBO9VpPoGv+vA= Subject key identifier: F6:E1:CE:28:7E:67:51:E3:40:20:97:DF:AF:FA:95:C7:BA:83:97:8F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0F42CE64D43CCFCE6B6BC00B894E5461EDA3E0B3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a7ca9837-1d67-452f-8fea-80250f36d360.roa Signing time: Sun 22 Feb 2026 00:20:48 +0000 ROA not before: Sun 22 Feb 2026 00:20:48 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf8:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:42:ce:64:d4:3c:cf:ce:6b:6b:c0:0b:89:4e:54:61:ed:a3:e0:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 22 00:20:48 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=ea8540cc653b472e79ca0a991c8be686702e38ca848d30ab26b36e4a677a9bf8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fe:fe:29:bb:dc:c9:09:5c:7a:15:28:d2:4a: 32:15:aa:17:85:33:24:31:8c:38:bf:18:80:bb:ae: b1:8c:a4:96:77:b0:aa:ec:60:e1:2a:cf:c6:5e:3e: 56:d8:f8:8e:2b:b2:e5:03:e3:93:e4:d8:f8:ed:c3: 8d:e7:a5:3e:70:dc:fe:3f:31:f2:45:cf:d4:85:d9: 95:2d:0b:b2:a5:e6:11:8f:10:b7:eb:4c:21:c0:36: 5d:af:ce:22:86:80:00:af:78:0a:ad:3f:0c:10:79: f6:a8:18:f4:a6:84:18:59:c0:f1:c0:d2:71:bc:e5: a8:af:64:ee:35:48:1a:3a:9e:a7:e2:0d:de:73:1d: f1:db:02:7f:65:64:da:8d:a9:52:60:a1:c4:60:05: 95:77:f0:df:9e:92:0e:32:6c:a2:cb:ae:11:03:ff: b5:f3:62:14:68:62:e9:a2:99:18:d8:85:2f:7c:da: 68:21:1c:5f:04:f7:ed:61:a4:f2:3e:b5:ec:84:51: d6:18:d0:e8:ab:0e:30:3f:0b:ac:76:de:8a:00:2b: 32:3c:e6:1e:7e:dc:81:15:eb:39:0e:c0:b3:44:e8: a0:54:7a:56:74:15:16:b2:96:58:2c:43:4b:2c:7b: cd:0d:ec:f9:c4:b4:6b:d4:7a:65:ec:39:26:18:a6: a3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E1:CE:28:7E:67:51:E3:40:20:97:DF:AF:FA:95:C7:BA:83:97:8F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a7ca9837-1d67-452f-8fea-80250f36d360.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf8:1000::/40 Signature Algorithm: sha256WithRSAEncryption 6a:d1:ac:e9:08:b1:83:d1:62:76:f4:5e:64:c4:92:b1:0e:8e: ce:b9:0b:a9:b2:b5:9a:25:bc:eb:ad:23:89:50:9f:be:22:70: 31:8d:16:c8:9f:9f:2a:1b:f4:34:18:d7:36:83:0e:c4:0b:e7: 15:41:1a:07:db:b1:5e:3d:7d:be:c5:4d:f8:07:c9:0d:80:f7: 6a:43:ba:75:18:7f:e0:76:7a:80:92:8b:69:3e:26:56:0f:10: 9e:54:29:58:a2:97:a4:53:bd:3e:64:96:26:9e:6c:0d:97:76: 51:c7:ef:9b:de:b7:8e:25:51:ec:63:ae:5a:12:1b:04:34:5b: 07:d0:9e:c4:e4:cc:24:3f:bf:85:73:4f:94:6b:68:52:cc:d7: 74:11:70:55:30:42:56:db:31:ef:35:a2:f8:e1:aa:62:a6:e6: ea:2b:67:a3:08:2d:ea:20:e3:cc:cc:59:1f:1e:4d:d5:36:76: fd:a6:47:a6:3e:66:fe:eb:a1:e2:bc:77:78:c0:45:77:db:6c: 0f:03:52:a6:9c:84:d6:81:ca:b3:00:12:9b:61:3a:31:97:30: 17:42:7f:27:c7:15:b1:55:c1:e1:79:98:32:17:71:3f:ec:a2: c4:6c:7d:c4:4e:8d:9a:38:9e:57:31:e3:a3:d3:d7:66:09:db: f6:56:d1:a3 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUD0LOZNQ8z85ra8ALiU5UYe2j4LMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMjAwMjA0OFoX DTI2MDUyMzIzNTk1OVowejFJMEcGA1UEBRNAZWE4NTQwY2M2NTNiNDcyZTc5Y2Ew YTk5MWM4YmU2ODY3MDJlMzhjYTg0OGQzMGFiMjZiMzZlNGE2NzdhOWJmODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/7+KbvcyQlcehUo0koyFaoXhTMk MYw4vxiAu66xjKSWd7Cq7GDhKs/GXj5W2PiOK7LlA+OT5Nj47cON56U+cNz+PzHy Rc/UhdmVLQuypeYRjxC360whwDZdr84ihoAAr3gKrT8MEHn2qBj0poQYWcDxwNJx vOWor2TuNUgaOp6n4g3ecx3x2wJ/ZWTajalSYKHEYAWVd/DfnpIOMmyiy64RA/+1 82IUaGLpopkY2IUvfNpoIRxfBPftYaTyPrXshFHWGNDoqw4wPwusdt6KACsyPOYe ftyBFes5DsCzROigVHpWdBUWspZYLENLLHvNDez5xLRr1Hpl7DkmGKaj4QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPbhzih+Z1HjQCCX36/6lce6g5ePMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E3Y2E5ODM3LTFkNjctNDUyZi04ZmVhLTgwMjUwZjM2ZDM2MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+BAwDQYJKoZIhvcNAQELBQADggEBAGrRrOkIsYPRYnb0XmTE krEOjs65C6mytZolvOutI4lQn74icDGNFsifnyob9DQY1zaDDsQL5xVBGgfbsV49 fb7FTfgHyQ2A92pDunUYf+B2eoCSi2k+JlYPEJ5UKViil6RTvT5kliaebA2XdlHH 75vet44lUexjrloSGwQ0WwfQnsTkzCQ/v4VzT5RraFLM13QRcFUwQlbbMe81ovjh qmKm5uorZ6MILeog48zMWR8eTdU2dv2mR6Y+Zv7roeK8d3jARXfbbA8DUqachNaB yrMAEpthOjGXMBdCfyfHFbFVweF5mDIXcT/sosRsfcROjZo4nlcx46PT12YJ2/ZW 0aM= -----END CERTIFICATE-----Generated at Sun Mar 1 22:05:09 2026 by rpki-client