$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c0d4438c-48d3-4e79-8a64-d15a4521eb7b.roa File: c0d4438c-48d3-4e79-8a64-d15a4521eb7b.roa (raw, json) Hash identifier: zmdXh9mFUCQsQ30p9dpeNo9CKEmClghvdJEm1dnfKoQ= Subject key identifier: 4A:8E:9E:FF:95:68:33:27:5A:D2:8C:50:F2:16:39:97:8A:5F:57:35 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2678802529CB4193D91A16B94434878B692F59E2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c0d4438c-48d3-4e79-8a64-d15a4521eb7b.roa Signing time: Fri 20 Feb 2026 00:30:44 +0000 ROA not before: Fri 20 Feb 2026 00:30:44 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:78:80:25:29:cb:41:93:d9:1a:16:b9:44:34:87:8b:69:2f:59:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 20 00:30:44 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=757b8d06ba4eb218079cf0e50c792de93a55e73e75759d134ea33a35d6494fcd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:a5:45:01:52:8c:9a:42:88:37:d0:e2:f6:d3: 51:f1:c9:7b:94:d1:ab:22:cd:59:ce:31:8e:b2:96: 1a:94:56:3c:7a:62:92:f8:e5:d1:00:be:31:ec:7f: 55:ad:2e:f2:23:f7:51:ac:35:7d:06:da:59:fd:14: 48:8c:a7:b0:14:46:9c:b7:f9:57:e2:d3:e1:67:4f: 3b:36:9c:1b:72:73:24:e7:65:38:fa:63:ea:23:a1: e1:31:ea:84:7d:aa:78:86:c3:4f:7c:c4:bf:35:7e: 36:46:62:fc:33:85:fe:03:78:4b:fc:8e:a5:31:92: 8a:c4:a1:ba:cb:50:0c:65:ed:86:c0:4d:78:83:4c: fb:90:0e:1f:b2:c5:ec:d9:4c:97:3e:56:e5:c7:e8: ea:b3:15:c4:71:10:46:2f:a1:35:05:60:03:b0:86: 37:a6:05:f8:6b:9c:60:e3:3a:51:3d:41:62:d4:48: bb:46:30:ec:ca:94:5b:c0:ef:8b:44:48:59:63:49: 9f:0f:16:68:2e:2f:6d:0b:1c:96:8d:75:eb:0c:7f: 41:c9:60:25:12:0d:65:e2:f8:45:db:74:35:ed:50: 27:04:29:e0:c1:80:aa:ac:2e:02:2e:b6:9d:6e:73: b7:52:14:2f:03:bc:01:4a:60:ca:51:85:35:42:f2: b2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:8E:9E:FF:95:68:33:27:5A:D2:8C:50:F2:16:39:97:8A:5F:57:35 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c0d4438c-48d3-4e79-8a64-d15a4521eb7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:800::/40 Signature Algorithm: sha256WithRSAEncryption 46:69:5b:46:9d:3f:4b:ce:fa:97:8d:2d:9a:3e:2b:a4:eb:ed: 4d:d8:67:a2:aa:46:48:ed:c9:f6:a9:9a:02:8e:b0:55:b4:7a: 79:32:c9:1b:64:8f:f1:0a:f3:c9:f5:1b:06:0b:95:bf:87:28: 62:08:2e:b9:a8:af:5f:d2:12:db:a7:01:5b:a4:c7:ad:45:eb: d7:70:59:2c:d4:d5:9a:96:3d:82:9a:17:13:45:10:7d:ac:ce: f7:d7:15:49:44:bb:50:e3:64:78:d3:06:27:4e:10:9e:1d:27: af:fd:27:7d:a4:39:c5:e8:7c:c7:7c:a3:fb:b3:d8:f6:3d:e3: f6:66:ef:87:16:25:96:4a:fc:7e:6f:b3:15:c8:8b:da:b5:5b: 3b:c2:8f:fa:7d:3c:5a:02:c4:59:10:ca:e9:be:da:8e:fb:11: ae:d5:26:cc:9d:51:92:28:b6:6c:4b:ec:b1:97:ed:0a:9d:8a: fc:e9:f9:9e:dd:f6:1c:ee:a9:4c:58:1a:bc:d1:40:f8:da:03: 19:2d:52:b4:4f:60:cc:b5:8c:24:6b:9d:47:0d:aa:60:43:02: f2:c1:1e:8a:90:81:fa:ae:39:f2:56:35:b9:ee:ce:31:8a:90: e0:60:6a:13:5f:13:b8:69:08:c7:fa:c8:34:4e:85:3b:4f:5f: d6:b5:13:5d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUJniAJSnLQZPZGha5RDSHi2kvWeIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMDAwMzA0NFoX DTI2MDUyMTIzNTk1OVowejFJMEcGA1UEBRNANzU3YjhkMDZiYTRlYjIxODA3OWNm MGU1MGM3OTJkZTkzYTU1ZTczZTc1NzU5ZDEzNGVhMzNhMzVkNjQ5NGZjZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+qVFAVKMmkKIN9Di9tNR8cl7lNGr Is1ZzjGOspYalFY8emKS+OXRAL4x7H9VrS7yI/dRrDV9BtpZ/RRIjKewFEact/lX 4tPhZ087NpwbcnMk52U4+mPqI6HhMeqEfap4hsNPfMS/NX42RmL8M4X+A3hL/I6l MZKKxKG6y1AMZe2GwE14g0z7kA4fssXs2UyXPlblx+jqsxXEcRBGL6E1BWADsIY3 pgX4a5xg4zpRPUFi1Ei7RjDsypRbwO+LREhZY0mfDxZoLi9tCxyWjXXrDH9ByWAl Eg1l4vhF23Q17VAnBCngwYCqrC4CLradbnO3UhQvA7wBSmDKUYU1QvKyAQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEqOnv+VaDMnWtKMUPIWOZeKX1c1MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2MwZDQ0MzhjLTQ4ZDMtNGU3OS04YTY0LWQxNWE0NTIxZWI3Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8ggwDQYJKoZIhvcNAQELBQADggEBAEZpW0adP0vO+peNLZo+ K6Tr7U3YZ6KqRkjtyfapmgKOsFW0enkyyRtkj/EK88n1GwYLlb+HKGIILrmor1/S EtunAVukx61F69dwWSzU1ZqWPYKaFxNFEH2szvfXFUlEu1DjZHjTBidOEJ4dJ6/9 J32kOcXofMd8o/uz2PY94/Zm74cWJZZK/H5vsxXIi9q1WzvCj/p9PFoCxFkQyum+ 2o77Ea7VJsydUZIotmxL7LGX7Qqdivzp+Z7d9hzuqUxYGrzRQPjaAxktUrRPYMy1 jCRrnUcNqmBDAvLBHoqQgfquOfJWNbnuzjGKkOBgahNfE7hpCMf6yDROhTtPX9a1 E10= -----END CERTIFICATE-----Generated at Mon Mar 2 01:32:02 2026 by rpki-client