$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c7b1c1ce-ca99-4712-96c8-2e4dc35d25f1.roa File: c7b1c1ce-ca99-4712-96c8-2e4dc35d25f1.roa (raw, json) Hash identifier: /9UOKFMLhCsAyEe+z61zFGuL1D/00XVqQRHLefFVYQc= Subject key identifier: 82:26:C5:61:F8:E9:19:F7:BB:39:32:B0:3A:2F:0A:48:BD:28:66:21 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6DDD979E5CD7C39B64DCBCBD9B1B40691B242277 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c7b1c1ce-ca99-4712-96c8-2e4dc35d25f1.roa Signing time: Tue 17 Feb 2026 00:00:50 +0000 ROA not before: Tue 17 Feb 2026 00:00:50 +0000 ROA not after: Mon 18 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:dd:97:9e:5c:d7:c3:9b:64:dc:bc:bd:9b:1b:40:69:1b:24:22:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 17 00:00:50 2026 GMT Not After : May 18 23:59:59 2026 GMT Subject: serialNumber=315cbe1f29b02055b885cd16bd87dc7b57ec7a9fa21802ba1a6b72c0d2e2f7ee, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:22:8c:71:f4:24:a1:81:8f:f6:2f:b9:a2:ab: 98:a6:68:7d:9b:6d:62:cf:4d:d1:ff:3f:f1:5b:9b: 9e:f6:ac:91:98:29:f3:ad:3a:6d:f4:53:6f:e0:04: d5:52:06:5b:bf:c1:4f:4d:8e:17:86:4a:35:e9:8b: 44:c1:39:c6:66:36:ae:06:ce:9a:9c:3c:22:61:a7: 06:2c:7b:55:d7:82:a6:2c:d5:ba:04:bc:12:43:83: cf:43:c9:74:82:68:bb:f4:29:87:db:5f:fe:3f:ba: 60:e5:b6:93:3d:da:ff:2f:c0:d4:9f:81:85:97:7b: 0a:35:18:91:71:e9:bf:d3:2e:74:a3:df:6e:97:91: 78:fb:fa:6c:0d:b2:fc:ef:c5:2c:95:a5:61:6f:c4: 47:02:39:33:4b:42:b5:e2:15:9d:ee:6f:66:8e:76: 27:55:bf:d1:48:a8:c2:de:e5:e1:0d:6d:f1:cb:f5: 2a:8b:8d:e2:29:51:ef:58:23:59:94:4f:d6:94:0c: 3c:3c:a4:39:95:25:8e:8b:4c:16:4e:37:b9:c4:83: 2c:9d:d9:69:4c:3c:51:3c:6d:17:6a:1f:64:e5:3a: b7:0e:70:c4:27:58:93:04:1d:c3:5a:d7:a2:a1:89: e8:4c:f0:0d:ad:2a:79:62:df:a8:6b:db:a4:af:b8: 69:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:26:C5:61:F8:E9:19:F7:BB:39:32:B0:3A:2F:0A:48:BD:28:66:21 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c7b1c1ce-ca99-4712-96c8-2e4dc35d25f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:a000::/40 Signature Algorithm: sha256WithRSAEncryption a7:fe:bc:20:fc:50:c5:23:31:18:aa:93:4a:87:58:7f:96:90: f3:22:e8:f7:c8:c3:ea:12:cc:06:5e:72:51:ba:6c:cc:6f:8a: cb:3e:d2:3d:5d:e5:93:4a:a2:70:00:65:57:6a:20:6d:c7:49: df:8e:23:51:d6:76:e7:ae:69:06:72:ce:2c:35:9c:ab:9f:ca: 49:6f:41:17:aa:76:79:d8:2d:fb:67:32:68:be:72:38:f5:46: 21:ef:e5:94:87:55:21:94:b3:fe:2e:49:28:d9:4b:c5:b0:92: 7e:6c:29:b2:bb:81:c1:81:cd:39:00:16:f4:8a:ea:84:39:e2: 62:f0:d2:b1:69:54:5e:6a:7d:6a:00:58:93:87:c0:67:b6:21: fb:0f:3b:81:14:15:6b:2c:5c:c9:03:bc:4b:78:66:a8:14:5a: fd:71:1e:49:30:9a:5b:3c:4d:f4:a5:21:0b:10:5a:4c:7f:21: c4:d7:2e:ad:b3:a8:24:8f:a2:15:a6:52:b7:c4:59:98:7e:2b: 47:d2:d3:4d:df:2f:36:e2:df:a8:41:63:50:0d:ba:f1:84:dd: 0a:d7:f0:92:8b:70:66:78:7d:e1:12:26:59:07:f9:26:79:a0: 0c:94:88:8b:7b:e2:42:f9:aa:9d:ce:1b:8d:48:24:43:78:0e: 17:e3:f0:59 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUbd2XnlzXw5tk3Ly9mxtAaRskIncwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxNzAwMDA1MFoX DTI2MDUxODIzNTk1OVowejFJMEcGA1UEBRNAMzE1Y2JlMWYyOWIwMjA1NWI4ODVj ZDE2YmQ4N2RjN2I1N2VjN2E5ZmEyMTgwMmJhMWE2YjcyYzBkMmUyZjdlZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SKMcfQkoYGP9i+5oquYpmh9m21i z03R/z/xW5ue9qyRmCnzrTpt9FNv4ATVUgZbv8FPTY4Xhko16YtEwTnGZjauBs6a nDwiYacGLHtV14KmLNW6BLwSQ4PPQ8l0gmi79CmH21/+P7pg5baTPdr/L8DUn4GF l3sKNRiRcem/0y50o99ul5F4+/psDbL878UslaVhb8RHAjkzS0K14hWd7m9mjnYn Vb/RSKjC3uXhDW3xy/Uqi43iKVHvWCNZlE/WlAw8PKQ5lSWOi0wWTje5xIMsndlp TDxRPG0Xah9k5Tq3DnDEJ1iTBB3DWteioYnoTPANrSp5Yt+oa9ukr7hp2QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIImxWH46Rn3uzkysDovCki9KGYhMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M3YjFjMWNlLWNhOTktNDcxMi05NmM4LTJlNGRjMzVkMjVmMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9KAwDQYJKoZIhvcNAQELBQADggEBAKf+vCD8UMUjMRiqk0qH WH+WkPMi6PfIw+oSzAZeclG6bMxviss+0j1d5ZNKonAAZVdqIG3HSd+OI1HWdueu aQZyziw1nKufyklvQReqdnnYLftnMmi+cjj1RiHv5ZSHVSGUs/4uSSjZS8Wwkn5s KbK7gcGBzTkAFvSK6oQ54mLw0rFpVF5qfWoAWJOHwGe2IfsPO4EUFWssXMkDvEt4 ZqgUWv1xHkkwmls8TfSlIQsQWkx/IcTXLq2zqCSPohWmUrfEWZh+K0fS003fLzbi 36hBY1ANuvGE3QrX8JKLcGZ4feESJlkH+SZ5oAyUiIt74kL5qp3OG41IJEN4Dhfj 8Fk= -----END CERTIFICATE-----Generated at Sun Mar 1 21:56:40 2026 by rpki-client