$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c8ec6c99-ca91-484d-ab88-05d1d618b206.roa File: c8ec6c99-ca91-484d-ab88-05d1d618b206.roa (raw, json) Hash identifier: opBjxHrPhhsGyY8HNBlWTKAmipnQkmDxlQr9M5n/APQ= Subject key identifier: 2B:73:80:E2:38:92:6C:38:79:2A:B2:9E:C0:FE:0F:AA:6A:DC:5C:22 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 054284BDDD452646B6939987C92A4BD86FDC65FF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c8ec6c99-ca91-484d-ab88-05d1d618b206.roa Signing time: Wed 18 Feb 2026 00:10:04 +0000 ROA not before: Wed 18 Feb 2026 00:10:04 +0000 ROA not after: Tue 19 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:6080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:42:84:bd:dd:45:26:46:b6:93:99:87:c9:2a:4b:d8:6f:dc:65:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 18 00:10:04 2026 GMT Not After : May 19 23:59:59 2026 GMT Subject: serialNumber=6eee94679381c1e49e5bc272be1cf842d307c6dd8bc95079b1b5f1a1ef8ca354, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a7:ac:71:09:fd:f1:30:ef:4d:f0:43:f3:5d: 10:0f:c4:c1:67:6e:2e:10:7f:4a:4e:ff:e2:a9:ce: 4d:c3:d6:95:10:da:4d:68:eb:6a:d6:7c:21:69:fa: fe:67:2d:6a:d0:03:02:96:94:89:f4:be:8d:2c:f0: 10:d1:1d:9f:08:8f:c3:92:b8:da:f3:95:02:e6:62: 27:3c:f3:c4:e2:c9:ef:87:87:55:66:3d:a5:bd:a0: 5b:65:67:29:4c:fb:cf:bf:72:11:6c:ac:25:77:14: 35:71:e6:9e:00:fb:bf:17:8a:b7:22:e5:a5:a5:08: be:b5:94:fb:83:a5:78:9b:e1:b8:1a:f4:38:3b:9f: da:0f:f0:4e:d7:fb:91:f7:f6:df:3f:2c:db:b4:7c: 44:5d:50:88:5f:88:62:e5:0a:d0:ca:d8:12:05:e0: 19:c4:49:c7:ae:9c:21:1b:bf:cc:1d:11:55:c4:9a: 3c:17:9d:20:7c:d8:2e:f0:3b:7e:d9:a0:8f:5a:5b: 9e:97:0b:37:04:97:19:12:a8:ea:24:44:bf:14:df: 8c:d9:88:a0:c1:37:fe:e3:a6:db:43:71:1a:79:53: bf:49:8e:28:82:33:9f:23:d9:d2:4f:12:a3:d4:a0: d8:6d:3e:8e:68:c4:c5:c0:a8:0d:19:78:0a:13:3c: 1c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:73:80:E2:38:92:6C:38:79:2A:B2:9E:C0:FE:0F:AA:6A:DC:5C:22 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c8ec6c99-ca91-484d-ab88-05d1d618b206.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:6080::/48 Signature Algorithm: sha256WithRSAEncryption 08:c8:9f:fd:2a:11:7a:bc:94:0b:2d:4c:70:41:ad:b8:f9:85: 07:fb:cb:c0:54:08:54:eb:04:45:8c:6d:1b:52:1e:00:1d:41: aa:79:24:d1:79:59:53:ee:89:6b:69:1e:23:b5:75:54:ef:9c: e3:c8:33:11:51:99:60:a5:9d:5b:9a:f1:e8:45:48:7a:1f:00: e6:07:5b:73:93:72:c3:0d:27:af:f1:63:66:dd:66:c8:f5:ff: e2:c6:6c:cb:a9:88:89:5f:a8:93:10:a1:2b:75:4d:82:4c:23: 18:33:ea:ec:20:f4:4c:7e:01:23:55:e0:4b:ae:22:65:8e:61: be:6c:1d:54:49:27:8c:20:f3:47:4d:e0:81:a4:e0:4a:38:a2: 09:f8:b1:f1:b7:3c:8f:a8:74:76:ed:8d:f5:76:4e:d7:e3:96: 4a:43:08:8c:4a:b1:6e:32:30:26:40:1b:db:42:fb:0b:91:2f: a2:9e:53:5d:f3:b0:41:85:f7:df:48:62:81:29:e7:53:ee:85: a0:44:d7:12:26:a8:eb:96:01:72:74:23:2a:6c:16:1f:1b:2d: af:cd:19:e9:ff:ad:63:c3:d8:fa:72:5e:02:12:3a:ba:0a:19: 87:cb:41:f7:6a:ea:b7:c7:eb:d9:f1:f4:b4:6a:00:ee:42:0a: 8a:4f:2b:30 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUBUKEvd1FJka2k5mHySpL2G/cZf8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxODAwMTAwNFoX DTI2MDUxOTIzNTk1OVowejFJMEcGA1UEBRNANmVlZTk0Njc5MzgxYzFlNDllNWJj MjcyYmUxY2Y4NDJkMzA3YzZkZDhiYzk1MDc5YjFiNWYxYTFlZjhjYTM1NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKescQn98TDvTfBD810QD8TBZ24u EH9KTv/iqc5Nw9aVENpNaOtq1nwhafr+Zy1q0AMClpSJ9L6NLPAQ0R2fCI/Dkrja 85UC5mInPPPE4snvh4dVZj2lvaBbZWcpTPvPv3IRbKwldxQ1ceaeAPu/F4q3IuWl pQi+tZT7g6V4m+G4GvQ4O5/aD/BO1/uR9/bfPyzbtHxEXVCIX4hi5QrQytgSBeAZ xEnHrpwhG7/MHRFVxJo8F50gfNgu8Dt+2aCPWluelws3BJcZEqjqJES/FN+M2Yig wTf+46bbQ3EaeVO/SY4ogjOfI9nSTxKj1KDYbT6OaMTFwKgNGXgKEzwcwQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCtzgOI4kmw4eSqynsD+D6pq3FwiMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M4ZWM2Yzk5LWNhOTEtNDg0ZC1hYjg4LTA1ZDFkNjE4YjIwNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYWCAMA0GCSqGSIb3DQEBCwUAA4IBAQAIyJ/9KhF6vJQLLUxw Qa24+YUH+8vAVAhU6wRFjG0bUh4AHUGqeSTReVlT7olraR4jtXVU75zjyDMRUZlg pZ1bmvHoRUh6HwDmB1tzk3LDDSev8WNm3WbI9f/ixmzLqYiJX6iTEKErdU2CTCMY M+rsIPRMfgEjVeBLriJljmG+bB1USSeMIPNHTeCBpOBKOKIJ+LHxtzyPqHR27Y31 dk7X45ZKQwiMSrFuMjAmQBvbQvsLkS+inlNd87BBhfffSGKBKedT7oWgRNcSJqjr lgFydCMqbBYfGy2vzRnp/61jw9j6cl4CEjq6ChmHy0H3auq3x+vZ8fS0agDuQgqK Tysw -----END CERTIFICATE-----Generated at Sun Mar 1 21:58:07 2026 by rpki-client