$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/be1922bc-9d75-4e8d-ba39-8044d8bf734b.roa File: be1922bc-9d75-4e8d-ba39-8044d8bf734b.roa (raw, json) Hash identifier: hhQ6C2oVYSwp5a1GypvEXRV8MdOPh7VN+aBK4YuJ3bc= Subject key identifier: A4:1D:05:C7:F8:BB:28:72:45:93:9D:22:1A:D8:4A:3B:5A:E0:99:C4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 61500AC6FD553DD116A942A323A009F26A4BD4E8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/be1922bc-9d75-4e8d-ba39-8044d8bf734b.roa Signing time: Sat 14 Feb 2026 00:00:30 +0000 ROA not before: Sat 14 Feb 2026 00:00:30 +0000 ROA not after: Fri 15 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:50:0a:c6:fd:55:3d:d1:16:a9:42:a3:23:a0:09:f2:6a:4b:d4:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 14 00:00:30 2026 GMT Not After : May 15 23:59:59 2026 GMT Subject: serialNumber=caaa3bb9b98fe8388b283b4a58f46474532a05d0e52ad6f8ca7a38f9fda01af2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:5d:5c:10:5c:da:b6:04:3c:fb:ec:35:c1:81: 78:3f:1a:8b:70:ca:79:f8:c9:4d:ad:02:4c:09:1e: 4a:e3:43:7b:79:ba:8e:4f:dc:74:cb:02:1d:07:65: 59:f3:34:8c:14:1f:6c:93:a9:8c:65:70:eb:6a:1a: 29:00:11:7f:82:6f:8c:dc:33:cf:c2:63:2a:76:d2: 34:82:2e:41:83:7f:cd:a1:71:af:b7:aa:00:08:ed: ea:77:6f:d4:6a:b0:fe:b0:fd:b5:c3:6e:14:45:73: 22:6a:aa:f9:ab:2f:73:75:21:b2:f5:4d:6a:8a:6c: 6b:60:33:6f:02:00:7a:39:96:9f:9c:63:a5:ba:57: 20:1e:9c:81:a0:cf:99:f3:05:ae:37:48:c9:e0:b2: a1:8f:72:3e:12:62:9d:87:11:1b:fe:59:63:64:78: ef:19:e4:ad:a4:1c:57:31:76:5f:d2:0b:2b:ad:dc: ae:5b:1d:03:c2:19:4d:82:cf:7b:1d:a7:e0:4e:a1: 92:52:28:2d:39:34:bd:ab:d7:24:96:06:cb:0b:2f: 92:9c:fa:de:9f:2c:f4:75:52:0e:89:f7:3b:80:11: c4:d9:c7:e6:ea:fa:a3:c4:a5:e2:bc:02:1e:ee:93: 1c:7d:37:bc:ed:08:00:ea:47:9b:78:e9:89:95:3a: 85:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:1D:05:C7:F8:BB:28:72:45:93:9D:22:1A:D8:4A:3B:5A:E0:99:C4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/be1922bc-9d75-4e8d-ba39-8044d8bf734b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:b000::/40 Signature Algorithm: sha256WithRSAEncryption 47:f5:c3:86:9f:52:25:49:8f:63:78:31:f0:7e:92:97:c6:e7: 2e:46:1c:5f:82:a7:17:56:20:e9:93:93:a7:89:7c:e5:8e:94: 57:12:5d:d0:2b:69:25:16:eb:4a:53:05:34:a8:02:54:42:84: 59:9e:da:6e:d6:28:87:cd:34:ed:93:5c:65:a7:b3:ac:8a:00: 91:fb:ca:d5:05:a2:d5:22:17:19:b8:2e:92:17:49:69:42:fd: e5:c9:bb:79:c5:13:95:6d:0a:5e:7b:7f:80:ad:e3:88:cc:c2: cb:81:e7:04:62:8a:28:13:48:90:a6:f2:e4:e7:b1:b3:8d:e4: 44:e8:e3:85:10:45:b8:91:9c:34:59:a1:1a:59:bd:76:7c:c4: 1c:12:29:16:ef:aa:a7:60:f7:37:8f:5b:f3:7a:de:65:de:e1: 65:a2:f6:e6:56:bd:af:d3:04:52:2d:d7:41:95:fe:ee:ec:77: f6:33:bf:ae:39:0d:ad:bb:ac:98:fc:fc:17:24:8d:50:16:df: f5:80:80:c7:94:ea:8c:93:51:f3:1a:8f:11:d5:70:ba:e9:d4: bb:9b:9b:82:fe:56:8e:10:b1:3f:b1:8c:20:6e:6d:23:80:e9: be:c3:50:91:39:bd:ff:15:01:1f:6f:ca:0c:c5:a0:37:da:36: 11:ac:0f:a3 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUYVAKxv1VPdEWqUKjI6AJ8mpL1OgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxNDAwMDAzMFoX DTI2MDUxNTIzNTk1OVowejFJMEcGA1UEBRNAY2FhYTNiYjliOThmZTgzODhiMjgz YjRhNThmNDY0NzQ1MzJhMDVkMGU1MmFkNmY4Y2E3YTM4ZjlmZGEwMWFmMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5V1cEFzatgQ8++w1wYF4PxqLcMp5 +MlNrQJMCR5K40N7ebqOT9x0ywIdB2VZ8zSMFB9sk6mMZXDrahopABF/gm+M3DPP wmMqdtI0gi5Bg3/NoXGvt6oACO3qd2/UarD+sP21w24URXMiaqr5qy9zdSGy9U1q imxrYDNvAgB6OZafnGOlulcgHpyBoM+Z8wWuN0jJ4LKhj3I+EmKdhxEb/lljZHjv GeStpBxXMXZf0gsrrdyuWx0DwhlNgs97HafgTqGSUigtOTS9q9cklgbLCy+SnPre nyz0dVIOifc7gBHE2cfm6vqjxKXivAIe7pMcfTe87QgA6kebeOmJlTqF4QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKQdBcf4uyhyRZOdIhrYSjta4JnEMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JlMTkyMmJjLTlkNzUtNGU4ZC1iYTM5LTgwNDRkOGJmNzM0Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9LAwDQYJKoZIhvcNAQELBQADggEBAEf1w4afUiVJj2N4MfB+ kpfG5y5GHF+CpxdWIOmTk6eJfOWOlFcSXdAraSUW60pTBTSoAlRChFme2m7WKIfN NO2TXGWns6yKAJH7ytUFotUiFxm4LpIXSWlC/eXJu3nFE5VtCl57f4Ct44jMwsuB 5wRiiigTSJCm8uTnsbON5ETo44UQRbiRnDRZoRpZvXZ8xBwSKRbvqqdg9zePW/N6 3mXe4WWi9uZWva/TBFIt10GV/u7sd/Yzv645Da27rJj8/BckjVAW3/WAgMeU6oyT UfMajxHVcLrp1Lubm4L+Vo4QsT+xjCBubSOA6b7DUJE5vf8VAR9vygzFoDfaNhGs D6M= -----END CERTIFICATE-----Generated at Sun Mar 1 21:55:31 2026 by rpki-client