$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c6ac1a0f-d49c-46c6-8787-267094ee9f47.roa File: c6ac1a0f-d49c-46c6-8787-267094ee9f47.roa (raw, json) Hash identifier: p0irKE08i3mDKdLsCGdvBSreiQPT15UTiZvEYsy5KF0= Subject key identifier: D4:31:64:ED:9E:BB:6E:5E:33:EA:D7:49:59:21:93:1A:C5:25:68:C4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3B68ECE10E4FD769F504E04EC61CF506CADB4B04 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c6ac1a0f-d49c-46c6-8787-267094ee9f47.roa Signing time: Sun 22 Feb 2026 00:30:29 +0000 ROA not before: Sun 22 Feb 2026 00:30:29 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:68:ec:e1:0e:4f:d7:69:f5:04:e0:4e:c6:1c:f5:06:ca:db:4b:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 22 00:30:29 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=3dabafc7200d8e4680191d0791dd93929635af9aecc7693580a7c0ac78533f19, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fd:1f:5a:52:89:e0:9f:e1:85:61:11:fe:23: 35:83:2f:45:6e:c9:7e:a5:75:06:2f:91:dc:57:f7: 63:cc:db:0d:6e:fe:bb:38:e0:80:6d:c8:55:23:4e: fd:69:92:45:75:3b:75:3e:ca:8f:0e:f3:19:ea:03: 25:41:de:47:ba:a5:38:1f:10:f5:19:a8:b2:d3:67: f4:8d:4f:64:b0:2c:2e:d2:63:be:00:4f:52:a0:28: 41:c3:a5:70:84:5e:26:d3:6e:dd:ea:4e:0c:ba:27: 3a:45:51:6b:dd:28:a4:ae:bd:15:9f:ea:3a:b2:58: b8:2e:44:d1:c8:a2:0a:06:db:39:3f:f1:02:e2:99: fd:8d:d3:5c:cf:64:ab:a1:c8:d6:43:4e:a1:3c:46: 4c:8e:26:24:30:77:3f:97:88:de:f8:e8:c7:6b:61: ff:ff:84:1e:5d:4c:0b:52:d9:78:0a:21:e1:28:ff: ab:15:a6:c5:2a:e4:a3:c9:7a:41:87:df:1a:1d:1d: 32:e2:a7:8a:c5:9e:69:dd:ac:6c:3a:6a:2a:9f:24: 64:06:9d:20:2a:13:45:93:67:6c:8e:f2:05:49:54: dc:95:ca:b5:04:1c:36:bb:dc:e7:7e:28:2b:21:3e: e6:26:f7:84:51:44:1c:4e:eb:3a:88:a3:85:3e:2b: f1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:31:64:ED:9E:BB:6E:5E:33:EA:D7:49:59:21:93:1A:C5:25:68:C4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c6ac1a0f-d49c-46c6-8787-267094ee9f47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:6000::/40 Signature Algorithm: sha256WithRSAEncryption 2e:ab:ab:b9:80:be:04:58:0d:52:ba:8d:ab:53:ae:03:11:9d: eb:12:1e:22:84:7d:3d:54:03:0d:b1:7f:76:7d:6e:b6:3e:5a: 43:29:cb:21:52:ac:37:ef:3b:20:72:8b:9e:80:5e:57:9c:45: f4:c6:ec:f8:c7:85:e0:9d:a3:c3:2d:d9:6e:5f:cc:b9:4c:69: da:88:30:a2:cd:5d:5c:82:51:d3:f1:71:a1:d8:dc:ea:d6:ac: 84:ed:23:fc:aa:0f:59:80:e0:79:2a:93:53:03:2c:ae:55:b7: ce:7c:dc:2b:e9:c3:fc:9c:99:0c:a6:0c:a2:02:ee:47:0d:92: 97:19:70:92:1f:e1:cd:43:33:c3:81:36:46:ea:55:38:dc:4f: 67:7f:6c:d0:c6:60:b2:07:98:75:e7:44:b2:01:ba:69:8f:56: d9:f5:44:42:9a:15:93:41:a8:f2:0b:1c:bd:a0:15:d3:7b:03: b1:8e:9a:18:13:be:12:d5:2d:42:fb:aa:78:fa:2b:f0:cc:9b: 9c:03:36:19:7f:1f:db:bd:d9:a8:5c:dd:65:30:86:00:37:8e: 16:48:22:da:49:f1:72:40:5a:07:d9:80:3a:3c:77:43:bf:ff: 79:fa:b0:22:f6:f5:00:84:7d:6d:fc:bc:be:7c:df:3c:87:25: 66:54:ba:de -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUO2js4Q5P12n1BOBOxhz1BsrbSwQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMjAwMzAyOVoX DTI2MDUyMzIzNTk1OVowejFJMEcGA1UEBRNAM2RhYmFmYzcyMDBkOGU0NjgwMTkx ZDA3OTFkZDkzOTI5NjM1YWY5YWVjYzc2OTM1ODBhN2MwYWM3ODUzM2YxOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf0fWlKJ4J/hhWER/iM1gy9Fbsl+ pXUGL5HcV/djzNsNbv67OOCAbchVI079aZJFdTt1PsqPDvMZ6gMlQd5HuqU4HxD1 Gaiy02f0jU9ksCwu0mO+AE9SoChBw6VwhF4m027d6k4Muic6RVFr3Sikrr0Vn+o6 sli4LkTRyKIKBts5P/EC4pn9jdNcz2SrocjWQ06hPEZMjiYkMHc/l4je+OjHa2H/ /4QeXUwLUtl4CiHhKP+rFabFKuSjyXpBh98aHR0y4qeKxZ5p3axsOmoqnyRkBp0g KhNFk2dsjvIFSVTclcq1BBw2u9znfigrIT7mJveEUUQcTus6iKOFPivxXwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNQxZO2eu25eM+rXSVkhkxrFJWjEMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M2YWMxYTBmLWQ0OWMtNDZjNi04Nzg3LTI2NzA5NGVlOWY0Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaOGAwDQYJKoZIhvcNAQELBQADggEBAC6rq7mAvgRYDVK6jatT rgMRnesSHiKEfT1UAw2xf3Z9brY+WkMpyyFSrDfvOyByi56AXlecRfTG7PjHheCd o8Mt2W5fzLlMadqIMKLNXVyCUdPxcaHY3OrWrITtI/yqD1mA4Hkqk1MDLK5Vt858 3Cvpw/ycmQymDKIC7kcNkpcZcJIf4c1DM8OBNkbqVTjcT2d/bNDGYLIHmHXnRLIB ummPVtn1REKaFZNBqPILHL2gFdN7A7GOmhgTvhLVLUL7qnj6K/DMm5wDNhl/H9u9 2ahc3WUwhgA3jhZIItpJ8XJAWgfZgDo8d0O//3n6sCL29QCEfW38vL583zyHJWZU ut4= -----END CERTIFICATE-----Generated at Sun Mar 1 23:54:53 2026 by rpki-client