$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf8b7b71-dca2-49ff-944e-38a257b8554f.roa File: bf8b7b71-dca2-49ff-944e-38a257b8554f.roa (raw, json) Hash identifier: YTxuDTaGb37TgMzfS/qxAn1dsEsijVngU3AuuVHjSCU= Subject key identifier: 2F:7B:C0:58:1C:7D:B6:36:25:B9:AB:0C:65:B1:D0:46:06:FE:E6:91 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 40EFB1CE2FD8586FB1F9419325421274FFB84C1F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf8b7b71-dca2-49ff-944e-38a257b8554f.roa Signing time: Fri 20 Feb 2026 00:20:06 +0000 ROA not before: Fri 20 Feb 2026 00:20:06 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:80c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:ef:b1:ce:2f:d8:58:6f:b1:f9:41:93:25:42:12:74:ff:b8:4c:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 20 00:20:06 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=d0639551f3176c568a17f71d224e2a445d00d85d481a158ca4047d58729c39db, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0d:9b:47:9c:d8:09:cc:58:8e:0b:59:54:07: 4b:13:0b:8a:90:20:0b:22:23:2e:b3:a9:af:4c:28: 13:b9:c4:6d:69:ab:64:23:51:49:35:d2:48:1c:c6: 65:21:af:da:d0:73:1f:ba:04:f9:be:db:70:42:99: a7:89:93:22:06:fc:e5:5e:11:06:4f:1e:4e:d5:9d: e8:8a:ae:97:14:cc:8c:e1:d7:07:f8:53:72:93:15: 7c:05:c5:81:68:1f:bc:d3:12:69:05:81:40:77:aa: 22:99:76:c6:c0:73:8d:12:7d:a1:ec:8a:71:08:2a: 3b:27:34:ec:a7:24:00:7b:c9:e3:05:2d:7a:ca:20: 63:53:e2:e2:91:6b:0f:37:3a:f6:a1:c4:22:95:ff: 52:b7:d7:47:2a:b6:51:f8:44:35:4a:af:6f:5e:0e: be:94:9c:79:19:73:9d:e9:7a:b5:5c:52:26:22:14: ff:be:73:71:10:6b:e5:82:2f:ff:20:84:30:ad:c9: bd:09:96:02:19:a9:a5:66:af:26:48:42:48:b9:a7: 1e:88:93:64:49:25:7e:ec:ff:27:25:9d:bf:47:c1: 49:76:15:ac:b9:2d:a9:e4:e6:78:55:81:63:d6:f8: e0:57:12:94:06:96:2b:c7:e8:07:85:a7:43:84:19: 3b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:7B:C0:58:1C:7D:B6:36:25:B9:AB:0C:65:B1:D0:46:06:FE:E6:91 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf8b7b71-dca2-49ff-944e-38a257b8554f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:80c0::/48 Signature Algorithm: sha256WithRSAEncryption 8a:69:19:7d:26:67:54:d9:b3:be:34:94:cb:ce:79:a1:5f:fb: 39:d1:74:bc:6c:14:b5:0d:07:01:41:b0:ec:eb:bd:c6:99:a7: b2:a6:d7:9c:59:43:e5:f9:a8:2d:e0:4b:98:c6:9b:55:5f:68: 2b:62:48:00:41:a5:c6:12:82:fe:ee:7b:fd:a6:9f:8f:a9:45: 5f:cf:c9:ce:ce:ea:10:e5:90:ea:4a:12:c1:85:41:98:fc:96: 8e:6b:e4:52:91:fd:95:a0:86:17:84:24:6a:56:7e:0b:7a:75: d4:ca:e0:68:4e:5c:b1:ba:e8:d1:bb:b8:06:7a:0c:80:b0:4a: 89:f1:bd:44:8c:30:f1:4d:5c:c2:c6:bd:fe:be:74:ce:21:77: 8a:2f:e5:80:21:c0:7b:92:50:22:62:92:73:b1:97:83:ba:22: 0e:4c:2e:34:b8:6e:f4:3c:66:cb:5a:15:1f:65:b7:fb:97:05: 2f:61:1f:43:ce:72:0b:4f:6f:23:23:ee:a6:d8:dc:83:9e:d3: 65:4a:9a:81:50:f8:f6:45:b8:8a:d7:09:63:58:a4:c9:97:ab: 0f:23:0f:9f:32:2b:17:30:4a:37:70:44:89:be:1e:e6:c7:19: 0f:94:67:ea:a9:de:b7:aa:17:54:7e:67:d2:b0:38:7c:bf:03: 48:e0:06:fa -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUQO+xzi/YWG+x+UGTJUISdP+4TB8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMDAwMjAwNloX DTI2MDUyMTIzNTk1OVowejFJMEcGA1UEBRNAZDA2Mzk1NTFmMzE3NmM1NjhhMTdm NzFkMjI0ZTJhNDQ1ZDAwZDg1ZDQ4MWExNThjYTQwNDdkNTg3MjljMzlkYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlw2bR5zYCcxYjgtZVAdLEwuKkCAL IiMus6mvTCgTucRtaatkI1FJNdJIHMZlIa/a0HMfugT5vttwQpmniZMiBvzlXhEG Tx5O1Z3oiq6XFMyM4dcH+FNykxV8BcWBaB+80xJpBYFAd6oimXbGwHONEn2h7Ipx CCo7JzTspyQAe8njBS16yiBjU+LikWsPNzr2ocQilf9St9dHKrZR+EQ1Sq9vXg6+ lJx5GXOd6Xq1XFImIhT/vnNxEGvlgi//IIQwrcm9CZYCGamlZq8mSEJIuaceiJNk SSV+7P8nJZ2/R8FJdhWsuS2p5OZ4VYFj1vjgVxKUBpYrx+gHhadDhBk7uQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFC97wFgcfbY2JbmrDGWx0EYG/uaRMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JmOGI3YjcxLWRjYTItNDlmZi05NDRlLTM4YTI1N2I4NTU0Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaOIDAMA0GCSqGSIb3DQEBCwUAA4IBAQCKaRl9JmdU2bO+NJTL znmhX/s50XS8bBS1DQcBQbDs673GmaeyptecWUPl+agt4EuYxptVX2grYkgAQaXG EoL+7nv9pp+PqUVfz8nOzuoQ5ZDqShLBhUGY/JaOa+RSkf2VoIYXhCRqVn4LenXU yuBoTlyxuujRu7gGegyAsEqJ8b1EjDDxTVzCxr3+vnTOIXeKL+WAIcB7klAiYpJz sZeDuiIOTC40uG70PGbLWhUfZbf7lwUvYR9DznILT28jI+6m2NyDntNlSpqBUPj2 RbiK1wljWKTJl6sPIw+fMisXMEo3cESJvh7mxxkPlGfqqd63qhdUfmfSsDh8vwNI 4Ab6 -----END CERTIFICATE-----Generated at Sun Mar 1 22:04:03 2026 by rpki-client