$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b148abe3-0284-4eae-805f-b83c0f2291f5.roa File: b148abe3-0284-4eae-805f-b83c0f2291f5.roa (raw, json) Hash identifier: VcWxUXOcj5f8eSNfFMBN/AFEsg7dIjUfF4ok9VE4HBs= Subject key identifier: BC:5A:CC:A0:A6:19:49:E9:AB:26:F7:83:96:AA:91:19:59:24:EB:83 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5C7C5F53F0000EAE87BC9E578A14A2D003CF2A70 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b148abe3-0284-4eae-805f-b83c0f2291f5.roa Signing time: Sat 28 Feb 2026 00:00:43 +0000 ROA not before: Sat 28 Feb 2026 00:00:43 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daef:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:7c:5f:53:f0:00:0e:ae:87:bc:9e:57:8a:14:a2:d0:03:cf:2a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 28 00:00:43 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=31086b7bcecff91e75a876ce05aa5e4eff1c72135f8f01d9820e2b303bac7318, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:88:c9:06:05:f2:7c:22:1f:06:33:d9:be:3b: 8c:2f:05:d9:0b:86:d1:fd:d2:b6:71:68:d5:84:c3: 1a:9e:35:fe:0d:55:08:b3:2a:c1:22:d6:6b:34:f3: b0:27:bb:85:71:0f:b3:92:54:6f:49:6d:cf:e8:0c: 4f:de:58:fc:01:95:6a:8f:05:b8:7a:93:94:cf:22: fc:0e:07:eb:88:a5:de:11:a8:a5:b4:ec:66:9b:1d: 9d:05:99:a7:78:76:ef:f7:e3:bf:30:f5:ab:5b:78: 0d:1b:f0:01:aa:fe:5f:b9:6c:db:bd:81:00:e4:8e: 48:5b:70:9a:11:54:b0:36:2e:68:07:ef:7c:ec:2b: c3:a2:d6:b5:6f:2b:8e:5f:0b:aa:bb:de:62:51:13: 3a:a5:27:58:ee:0e:ed:e0:a9:2b:6c:71:dc:92:02: 0a:66:e2:f3:9b:fd:cf:69:bc:61:fe:a5:d3:39:ed: c4:87:36:3f:a9:a6:98:8a:62:23:7b:d8:1b:5d:3d: 3f:67:d3:1a:49:91:6a:e2:ec:29:29:a1:cc:6d:cc: 0e:88:36:1e:e7:cf:03:c8:2f:bc:1e:90:09:11:e7: eb:07:c8:83:7d:04:ca:5b:fb:55:f1:72:28:ad:c9: 86:b9:fc:29:cc:4d:9e:e8:b6:bf:9d:f3:29:1a:a4: 1d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:5A:CC:A0:A6:19:49:E9:AB:26:F7:83:96:AA:91:19:59:24:EB:83 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b148abe3-0284-4eae-805f-b83c0f2291f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:2000::/40 Signature Algorithm: sha256WithRSAEncryption a6:83:2a:64:a6:28:ba:4f:cd:6d:3d:b4:f9:d0:d4:38:92:2f: a1:66:59:93:c6:fb:5a:9b:ff:97:a8:2f:15:ca:bd:50:e5:1c: 51:86:eb:ad:b2:42:85:84:b7:2d:4b:81:cc:b9:94:3e:5f:33: 6f:0e:cc:5e:46:d1:2f:21:b7:ea:07:38:d7:1a:f7:c3:d1:e7: 39:36:98:d2:e6:4b:16:21:28:bd:c6:86:88:04:83:53:e8:1d: 19:15:4d:28:5b:40:37:0d:6d:ee:f2:e9:4f:48:d1:c0:c7:5b: ff:b0:d6:ce:04:0f:60:bc:b4:62:da:71:7a:73:e1:92:83:06: 13:b5:9b:54:0a:f4:fc:8a:d9:d4:dd:c6:12:b3:58:70:06:6a: ff:08:8b:c9:e1:df:8e:65:02:4a:7c:43:d3:5c:09:0f:07:f6: 82:71:9b:73:9e:89:c4:ef:4b:79:ab:2e:69:a8:bc:44:19:05: 66:98:ec:c6:59:b1:23:d9:8e:22:42:0e:f6:81:31:e5:22:e1: c0:23:e2:2b:43:1c:30:ee:12:c3:1b:17:b3:26:1e:d8:c5:42: b5:a6:25:e2:27:3d:13:37:26:ac:35:7b:6a:e3:56:51:4f:7b: f5:7d:b0:a8:e5:71:04:2b:08:45:5b:8d:9d:e5:7a:df:7e:8c: 15:ca:ca:3e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUXHxfU/AADq6HvJ5XihSi0APPKnAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyODAwMDA0M1oX DTI2MDUyOTIzNTk1OVowejFJMEcGA1UEBRNAMzEwODZiN2JjZWNmZjkxZTc1YTg3 NmNlMDVhYTVlNGVmZjFjNzIxMzVmOGYwMWQ5ODIwZTJiMzAzYmFjNzMxODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoojJBgXyfCIfBjPZvjuMLwXZC4bR /dK2cWjVhMManjX+DVUIsyrBItZrNPOwJ7uFcQ+zklRvSW3P6AxP3lj8AZVqjwW4 epOUzyL8DgfriKXeEailtOxmmx2dBZmneHbv9+O/MPWrW3gNG/ABqv5fuWzbvYEA 5I5IW3CaEVSwNi5oB+987CvDota1byuOXwuqu95iURM6pSdY7g7t4KkrbHHckgIK ZuLzm/3Pabxh/qXTOe3EhzY/qaaYimIje9gbXT0/Z9MaSZFq4uwpKaHMbcwOiDYe 588DyC+8HpAJEefrB8iDfQTKW/tV8XIorcmGufwpzE2e6La/nfMpGqQdWwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLxazKCmGUnpqyb3g5aqkRlZJOuDMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IxNDhhYmUzLTAyODQtNGVhZS04MDVmLWI4M2MwZjIyOTFmNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7yAwDQYJKoZIhvcNAQELBQADggEBAKaDKmSmKLpPzW09tPnQ 1DiSL6FmWZPG+1qb/5eoLxXKvVDlHFGG662yQoWEty1Lgcy5lD5fM28OzF5G0S8h t+oHONca98PR5zk2mNLmSxYhKL3GhogEg1PoHRkVTShbQDcNbe7y6U9I0cDHW/+w 1s4ED2C8tGLacXpz4ZKDBhO1m1QK9PyK2dTdxhKzWHAGav8Ii8nh345lAkp8Q9Nc CQ8H9oJxm3OeicTvS3mrLmmovEQZBWaY7MZZsSPZjiJCDvaBMeUi4cAj4itDHDDu EsMbF7MmHtjFQrWmJeInPRM3Jqw1e2rjVlFPe/V9sKjlcQQrCEVbjZ3let9+jBXK yj4= -----END CERTIFICATE-----Generated at Mon Mar 2 15:49:45 2026 by rpki-client