$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ad80375d-e709-447c-8867-372df16e6e62.roa File: ad80375d-e709-447c-8867-372df16e6e62.roa (raw, json) Hash identifier: NvZvkCg3+GNlPupulokG+ToAsLGyD0/AhGSWJe68o2g= Subject key identifier: 48:14:A2:43:D4:78:F6:8F:8C:CB:24:54:11:C2:64:CD:B4:C1:B4:40 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3AA7544136AE40E280C0AA671676CF865076701E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ad80375d-e709-447c-8867-372df16e6e62.roa Signing time: Sat 21 Feb 2026 00:00:35 +0000 ROA not before: Sat 21 Feb 2026 00:00:35 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:a7:54:41:36:ae:40:e2:80:c0:aa:67:16:76:cf:86:50:76:70:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 21 00:00:35 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=c877ae13745d7d1c0bb0a1b6848ae5b4154a6a1743ff240e96c55bce5bd60092, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c8:3f:fb:dd:72:6f:6e:25:d4:bd:98:2e:2b: 53:ad:e3:03:2c:d7:e8:31:cb:b1:8b:32:db:0a:a1: 70:c3:5f:45:5d:c6:c9:3f:6f:64:f3:ac:79:5d:91: e0:ea:b2:9e:c6:6a:dd:8a:e8:e2:ac:84:97:80:2f: 44:4e:6a:1f:2e:51:33:54:29:e1:43:cf:0d:5c:5b: 1b:af:01:c1:e5:e0:51:53:a2:49:11:0e:43:ce:53: c8:a3:52:8d:ee:a9:d0:ba:f0:ac:8c:b6:b9:3c:5f: 17:fd:18:9a:a2:34:c6:24:8e:01:72:28:5d:38:c8: bc:36:6b:36:4e:42:7c:c2:68:d4:1f:40:fe:d0:0f: ac:7a:00:87:c7:c4:28:a7:ea:52:57:0b:11:55:31: 23:d9:7c:a9:5a:6c:38:b2:e7:70:a0:4b:ce:47:32: e9:15:9b:1b:a4:4f:70:58:87:8f:fb:05:29:bc:2c: 08:99:91:b2:d2:a6:18:31:f5:2d:ff:f3:47:f2:0e: f9:65:bf:46:2c:d7:fd:e7:bf:d2:09:8e:f9:64:bc: 7c:0b:52:7f:c5:4f:97:b3:06:3b:ed:e3:d5:39:52: 10:29:a5:4d:b9:2a:92:7b:a3:ae:43:75:20:e2:ed: a1:19:ba:b8:90:92:8c:85:95:02:85:96:87:fb:7b: b7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:14:A2:43:D4:78:F6:8F:8C:CB:24:54:11:C2:64:CD:B4:C1:B4:40 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ad80375d-e709-447c-8867-372df16e6e62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:8000::/40 Signature Algorithm: sha256WithRSAEncryption 1f:10:f8:46:24:0b:26:31:f1:f7:6f:7e:78:5c:3c:1f:2d:95: 89:ff:6e:27:e2:1f:41:41:3d:3b:14:73:a1:54:a7:2f:16:ea: 3b:7a:22:7b:a6:1b:05:2d:f7:75:6e:fb:7f:ec:46:95:8d:8a: ec:24:5d:a0:10:c5:b4:34:5e:c6:35:de:ed:b0:2a:cb:52:b7: b8:cd:54:82:e6:e7:ca:6e:fe:b9:54:04:6a:da:fc:ad:df:c8: 9f:4d:66:13:6a:7d:53:27:fd:82:9f:1c:cd:3f:23:06:8b:6e: 76:c0:fc:66:20:f6:85:fe:07:9d:90:8d:68:b8:b0:cd:42:4a: ac:ce:24:48:f4:9c:b1:bb:b2:ff:96:5a:b5:8b:0b:0f:c6:7c: 6d:44:22:a4:2d:7e:71:a8:70:39:76:29:f1:f6:59:e4:fc:ff: 2b:97:cf:33:08:fd:80:f2:a9:5d:39:25:45:cd:97:a0:38:61: 67:05:40:1f:3e:65:be:7d:e3:f9:a5:3b:f8:9a:99:12:68:05: fe:f3:3a:6e:4e:d6:8b:a4:53:70:6e:16:53:cf:9f:59:e1:ae: c0:d7:ad:ba:55:e1:d9:28:79:36:26:47:14:61:5f:67:eb:16: 1b:01:9c:97:dc:64:28:a1:5c:73:08:db:5b:80:aa:87:03:9c: 9a:3e:16:f3 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUOqdUQTauQOKAwKpnFnbPhlB2cB4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMTAwMDAzNVoX DTI2MDUyMjIzNTk1OVowejFJMEcGA1UEBRNAYzg3N2FlMTM3NDVkN2QxYzBiYjBh MWI2ODQ4YWU1YjQxNTRhNmExNzQzZmYyNDBlOTZjNTViY2U1YmQ2MDA5MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8g/+91yb24l1L2YLitTreMDLNfo McuxizLbCqFww19FXcbJP29k86x5XZHg6rKexmrdiujirISXgC9ETmofLlEzVCnh Q88NXFsbrwHB5eBRU6JJEQ5DzlPIo1KN7qnQuvCsjLa5PF8X/RiaojTGJI4Bcihd OMi8Nms2TkJ8wmjUH0D+0A+segCHx8Qop+pSVwsRVTEj2XypWmw4sudwoEvORzLp FZsbpE9wWIeP+wUpvCwImZGy0qYYMfUt//NH8g75Zb9GLNf957/SCY75ZLx8C1J/ xU+XswY77ePVOVIQKaVNuSqSe6OuQ3Ug4u2hGbq4kJKMhZUChZaH+3u3UwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEgUokPUePaPjMskVBHCZM20wbRAMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FkODAzNzVkLWU3MDktNDQ3Yy04ODY3LTM3MmRmMTZlNmU2Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaAIAwDQYJKoZIhvcNAQELBQADggEBAB8Q+EYkCyYx8fdvfnhc PB8tlYn/bifiH0FBPTsUc6FUpy8W6jt6InumGwUt93Vu+3/sRpWNiuwkXaAQxbQ0 XsY13u2wKstSt7jNVILm58pu/rlUBGra/K3fyJ9NZhNqfVMn/YKfHM0/IwaLbnbA /GYg9oX+B52QjWi4sM1CSqzOJEj0nLG7sv+WWrWLCw/GfG1EIqQtfnGocDl2KfH2 WeT8/yuXzzMI/YDyqV05JUXNl6A4YWcFQB8+Zb594/mlO/iamRJoBf7zOm5O1ouk U3BuFlPPn1nhrsDXrbpV4dkoeTYmRxRhX2frFhsBnJfcZCihXHMI21uAqocDnJo+ FvM= -----END CERTIFICATE-----Generated at Mon Mar 2 03:22:05 2026 by rpki-client