$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b716d6d0-0e74-471f-a802-3f22bceeaa5c.roa File: b716d6d0-0e74-471f-a802-3f22bceeaa5c.roa (raw, json) Hash identifier: 8IVX3LuXu9Wq7+avqbMTtUDBiDdzXFNGEKHuypeKY4Y= Subject key identifier: 70:36:5B:13:F6:0B:08:14:53:64:AA:31:2A:AA:66:62:F3:D9:B4:DE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5BF91A497662FF6FFD1E8488FDCA0635F4F86F7D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b716d6d0-0e74-471f-a802-3f22bceeaa5c.roa Signing time: Fri 20 Feb 2026 00:20:08 +0000 ROA not before: Fri 20 Feb 2026 00:20:08 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:8040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:f9:1a:49:76:62:ff:6f:fd:1e:84:88:fd:ca:06:35:f4:f8:6f:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 20 00:20:08 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=f434fa4a169327a99a2a9fb37888015ebda797ee0c9f3478011396ab53d3dd71, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:96:6d:0b:13:09:f8:1d:fc:03:ba:4f:94:3c: 64:dd:f2:98:f1:58:e1:89:b8:e9:c3:c1:cb:34:f2: 47:19:e2:f3:d2:55:bc:c0:9d:ef:e1:1f:fe:b0:4e: 10:a8:c5:ec:01:fc:53:dc:05:f9:12:f0:83:37:5f: 67:d2:d5:1a:18:6c:06:2f:73:d8:7d:ec:3a:eb:86: 4a:ab:dc:e5:0d:76:34:66:83:03:c4:a6:15:ca:c8: b5:a5:cb:ef:9a:16:67:a5:d6:2e:30:8b:f2:4f:42: 85:fc:31:9c:39:dc:c4:cc:18:35:d3:0e:5e:95:63: 8b:2f:c1:0a:68:85:bd:fa:34:1f:e8:54:b6:14:86: c9:df:ae:6d:11:a3:61:5c:44:9d:f2:c3:6a:1a:62: 4b:5b:be:1d:65:99:54:0e:04:59:0f:1f:34:31:ab: b1:6f:85:81:91:c3:70:40:7e:ea:f6:cb:fc:45:cd: 5e:6a:66:29:ef:18:90:ad:9c:0f:90:d0:8a:f9:80: b4:5f:92:eb:a7:8e:1f:c5:6a:cb:bc:94:fe:ee:24: 6f:a8:e0:a6:69:9b:94:fe:7e:a2:eb:f2:07:10:31: c8:bd:e8:4f:d8:81:53:12:55:b9:cd:6a:dc:b8:15: 3d:9f:28:7a:07:e5:e2:15:fa:07:9c:a5:5e:5b:ba: 50:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:36:5B:13:F6:0B:08:14:53:64:AA:31:2A:AA:66:62:F3:D9:B4:DE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b716d6d0-0e74-471f-a802-3f22bceeaa5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:8040::/48 Signature Algorithm: sha256WithRSAEncryption 00:b2:26:06:83:d0:08:d2:21:ea:50:44:33:6a:07:d3:c0:88: 4b:de:04:26:86:77:fd:17:bf:e5:6c:13:fe:e3:99:17:5e:6b: 33:81:92:d1:8a:f7:32:84:df:12:0b:26:cb:bd:e8:1b:a5:b2: da:22:65:b6:82:14:eb:15:4b:71:e6:31:8a:b5:20:16:06:ca: fb:d6:32:24:8a:26:aa:41:52:c3:8c:a9:44:42:f9:88:71:dd: 8c:69:15:27:53:ca:1e:98:6c:c3:51:57:82:41:02:a0:88:fc: 21:dd:b4:65:83:82:dd:4f:4c:5e:96:75:88:29:e2:50:a5:80: b3:47:cf:b3:8d:e8:32:01:4a:ee:af:71:76:63:f6:c8:ea:4e: 4e:99:f0:ed:ad:b1:16:f6:ba:81:30:14:60:0c:77:86:44:7e: 28:66:e5:76:2a:63:fd:bf:28:93:49:e5:6e:a7:d4:3d:40:51: 70:7f:62:10:cc:bf:a7:41:8f:22:a0:4e:dc:4b:da:c9:81:60: e5:5e:60:a1:29:ad:37:55:a8:cc:06:e9:26:5d:73:a5:04:9e: db:00:d8:e4:ad:94:7e:72:f4:9b:9a:5a:07:18:26:ff:15:0c: 15:dd:a6:af:9c:bd:89:f0:32:92:75:f3:b2:2d:54:33:16:fa: c4:cf:15:fb -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUW/kaSXZi/2/9HoSI/coGNfT4b30wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMDAwMjAwOFoX DTI2MDUyMTIzNTk1OVowejFJMEcGA1UEBRNAZjQzNGZhNGExNjkzMjdhOTlhMmE5 ZmIzNzg4ODAxNWViZGE3OTdlZTBjOWYzNDc4MDExMzk2YWI1M2QzZGQ3MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJZtCxMJ+B38A7pPlDxk3fKY8Vjh ibjpw8HLNPJHGeLz0lW8wJ3v4R/+sE4QqMXsAfxT3AX5EvCDN19n0tUaGGwGL3PY few664ZKq9zlDXY0ZoMDxKYVysi1pcvvmhZnpdYuMIvyT0KF/DGcOdzEzBg10w5e lWOLL8EKaIW9+jQf6FS2FIbJ365tEaNhXESd8sNqGmJLW74dZZlUDgRZDx80Maux b4WBkcNwQH7q9sv8Rc1eamYp7xiQrZwPkNCK+YC0X5Lrp44fxWrLvJT+7iRvqOCm aZuU/n6i6/IHEDHIvehP2IFTElW5zWrcuBU9nyh6B+XiFfoHnKVeW7pQ4wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHA2WxP2CwgUU2SqMSqqZmLz2bTeMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I3MTZkNmQwLTBlNzQtNDcxZi1hODAyLTNmMjJiY2VlYWE1Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaOIBAMA0GCSqGSIb3DQEBCwUAA4IBAQAAsiYGg9AI0iHqUEQz agfTwIhL3gQmhnf9F7/lbBP+45kXXmszgZLRivcyhN8SCybLvegbpbLaImW2ghTr FUtx5jGKtSAWBsr71jIkiiaqQVLDjKlEQvmIcd2MaRUnU8oemGzDUVeCQQKgiPwh 3bRlg4LdT0xelnWIKeJQpYCzR8+zjegyAUrur3F2Y/bI6k5OmfDtrbEW9rqBMBRg DHeGRH4oZuV2KmP9vyiTSeVup9Q9QFFwf2IQzL+nQY8ioE7cS9rJgWDlXmChKa03 VajMBukmXXOlBJ7bANjkrZR+cvSbmloHGCb/FQwV3aavnL2J8DKSdfOyLVQzFvrE zxX7 -----END CERTIFICATE-----Generated at Mon Mar 2 05:15:45 2026 by rpki-client