$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b334fca2-b2bc-4db5-956c-e3ff8d975b51.roa File: b334fca2-b2bc-4db5-956c-e3ff8d975b51.roa (raw, json) Hash identifier: enLSTvqMVT9QiHBVV1a1m5DUuNC6nDgfCFZ++fSy9L4= Subject key identifier: 47:78:59:C1:10:F8:88:CA:FB:19:E2:49:59:64:F3:5F:CB:EA:13:34 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4DE953C439D90827417222BD836D999B82D0AED7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b334fca2-b2bc-4db5-956c-e3ff8d975b51.roa Signing time: Wed 18 Feb 2026 00:00:42 +0000 ROA not before: Wed 18 Feb 2026 00:00:42 +0000 ROA not after: Tue 19 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:4840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:e9:53:c4:39:d9:08:27:41:72:22:bd:83:6d:99:9b:82:d0:ae:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 18 00:00:42 2026 GMT Not After : May 19 23:59:59 2026 GMT Subject: serialNumber=f43e034e6539159fcece0971ae3867423165b184dc1158d82032bddf6e947361, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bc:0e:ec:af:27:77:74:d7:2f:a2:c0:b8:2a: 28:c8:bb:4a:16:1c:8a:9c:b3:75:15:c9:8c:06:86: 95:49:3e:f7:97:0a:d0:80:e3:f5:7d:1b:ca:75:ec: a9:af:81:1d:4e:3c:5d:42:74:14:1d:55:d2:d7:da: d9:0a:0f:c4:bc:ba:7b:0e:a1:a6:0b:2f:83:43:54: f4:e3:05:b7:44:ec:2c:8d:1e:53:e1:87:cf:81:dc: c8:6a:2e:5b:79:cd:f8:5a:85:d8:97:e3:bd:67:79: 4c:6f:dc:33:49:fb:a9:f3:18:bc:8c:99:68:58:b6: 13:59:dd:26:58:15:e6:7d:e6:16:fc:fb:8b:71:d7: 4b:68:47:85:25:f4:89:29:1f:4d:59:dc:9a:ed:84: 36:ae:02:48:cd:98:99:3f:6b:55:d3:f8:33:36:1d: 96:3f:61:de:5d:10:f9:09:bc:27:08:0a:dd:9b:8e: 2a:b3:fd:0b:c1:7a:1e:5a:22:fa:84:d6:d6:7f:3b: e6:51:eb:91:33:74:35:3d:3b:6d:27:bd:55:32:5d: 2f:44:c8:f3:83:8d:26:01:68:d7:70:3c:ee:bc:2c: 14:be:b3:9b:5f:ef:ad:be:36:47:33:21:16:d2:dc: 91:c8:40:3a:eb:2f:84:c2:3b:e2:29:b7:f8:fd:9a: 5f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:78:59:C1:10:F8:88:CA:FB:19:E2:49:59:64:F3:5F:CB:EA:13:34 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b334fca2-b2bc-4db5-956c-e3ff8d975b51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:4840::/48 Signature Algorithm: sha256WithRSAEncryption b8:16:23:24:b6:f0:a1:0c:1f:e4:ad:31:31:07:aa:9a:7f:b3: bc:2a:9b:74:4c:60:02:98:7d:e3:fa:37:cf:22:3b:d3:3a:5d: 63:2d:9f:2b:a1:6d:b6:d4:70:b5:cb:e7:c7:c6:90:4a:e2:4e: 60:c5:a4:f5:75:ac:39:47:61:ee:1c:1e:e9:f0:95:14:c8:b3: 6b:bc:48:df:93:d7:81:cd:b6:70:ca:4d:a0:fa:26:61:e1:5a: 42:42:2b:e3:1f:b6:84:46:82:c6:8b:36:cb:bd:f9:21:22:55: 9e:0c:07:94:44:54:41:e6:82:18:18:6b:f1:71:f4:9b:e0:91: 66:67:da:c3:88:52:ec:10:de:2c:ba:64:0d:2a:26:fe:de:a4: 6e:d3:ab:7a:ff:5b:9b:d7:40:8f:e2:b2:4b:59:5c:b1:f1:7a: 74:1d:fc:af:43:99:0c:b9:62:d2:c6:32:02:26:7f:b7:0c:c7: fb:e6:ee:75:a5:dc:d0:40:49:ad:0d:0a:bd:45:b8:6d:24:12: b9:15:ed:2d:21:96:86:a4:c5:77:97:10:74:ef:84:d8:75:a9: 4e:98:e9:1d:62:a7:14:ad:cb:74:ae:cf:2f:73:5e:21:c4:f2: cc:af:c0:e2:f0:16:d6:f1:46:39:b5:b0:cf:24:e6:bd:8c:1f: d5:b2:61:b8 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUTelTxDnZCCdBciK9g22Zm4LQrtcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxODAwMDA0MloX DTI2MDUxOTIzNTk1OVowejFJMEcGA1UEBRNAZjQzZTAzNGU2NTM5MTU5ZmNlY2Uw OTcxYWUzODY3NDIzMTY1YjE4NGRjMTE1OGQ4MjAzMmJkZGY2ZTk0NzM2MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLwO7K8nd3TXL6LAuCooyLtKFhyK nLN1FcmMBoaVST73lwrQgOP1fRvKdeypr4EdTjxdQnQUHVXS19rZCg/EvLp7DqGm Cy+DQ1T04wW3ROwsjR5T4YfPgdzIai5bec34WoXYl+O9Z3lMb9wzSfup8xi8jJlo WLYTWd0mWBXmfeYW/PuLcddLaEeFJfSJKR9NWdya7YQ2rgJIzZiZP2tV0/gzNh2W P2HeXRD5CbwnCArdm44qs/0LwXoeWiL6hNbWfzvmUeuRM3Q1PTttJ71VMl0vRMjz g40mAWjXcDzuvCwUvrObX++tvjZHMyEW0tyRyEA66y+EwjviKbf4/ZpfUwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEd4WcEQ+IjK+xniSVlk81/L6hM0MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IzMzRmY2EyLWIyYmMtNGRiNS05NTZjLWUzZmY4ZDk3NWI1MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8khAMA0GCSqGSIb3DQEBCwUAA4IBAQC4FiMktvChDB/krTEx B6qaf7O8Kpt0TGACmH3j+jfPIjvTOl1jLZ8roW221HC1y+fHxpBK4k5gxaT1daw5 R2HuHB7p8JUUyLNrvEjfk9eBzbZwyk2g+iZh4VpCQivjH7aERoLGizbLvfkhIlWe DAeURFRB5oIYGGvxcfSb4JFmZ9rDiFLsEN4sumQNKib+3qRu06t6/1ub10CP4rJL WVyx8Xp0HfyvQ5kMuWLSxjICJn+3DMf75u51pdzQQEmtDQq9RbhtJBK5Fe0tIZaG pMV3lxB074TYdalOmOkdYqcUrct0rs8vc14hxPLMr8Di8BbW8UY5tbDPJOa9jB/V smG4 -----END CERTIFICATE-----Generated at Mon Mar 2 04:50:59 2026 by rpki-client