$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c97fd121-51cc-4711-a755-0eefb435ec81.roa File: c97fd121-51cc-4711-a755-0eefb435ec81.roa (raw, json) Hash identifier: T/VgqqY6QRlgHu8ekYXu0Gq57N6ZENRcfRTeztuP7uQ= Subject key identifier: 87:D2:42:D3:89:A4:2F:B9:B3:10:3A:D6:CF:DA:EA:7E:B9:CB:17:BD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5C30820810C7BF990AA178A94CDCC8D7DEF97468 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c97fd121-51cc-4711-a755-0eefb435ec81.roa Signing time: Tue 17 Feb 2026 00:00:45 +0000 ROA not before: Tue 17 Feb 2026 00:00:45 +0000 ROA not after: Mon 18 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:30:82:08:10:c7:bf:99:0a:a1:78:a9:4c:dc:c8:d7:de:f9:74:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 17 00:00:45 2026 GMT Not After : May 18 23:59:59 2026 GMT Subject: serialNumber=ec36135900b123204c59a5b9d02b05a547b4e823f45fcf70baa1c687f648dee7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:39:c5:ec:a1:db:ce:3d:aa:86:9e:ec:d3:1e: 0c:df:0a:0e:7f:3b:93:3c:7c:a6:ea:32:ba:eb:03: 18:1a:07:a5:31:e2:9b:da:b5:9f:52:6e:8b:85:05: 54:20:c8:3c:76:cf:35:f6:a0:c5:33:fd:4c:20:68: 21:4c:2e:59:0e:b4:d2:45:18:94:95:af:a8:66:d5: 50:60:5a:a7:de:c7:21:f8:92:40:93:4f:ef:bd:fb: 2b:b7:98:f9:6d:03:e7:c6:fa:cd:57:d8:22:a4:45: 5b:b2:9f:fa:0e:96:bc:3d:13:cf:63:79:41:eb:bd: 8f:f9:bc:44:54:a5:e6:73:77:5c:6c:9b:8e:07:5f: 1c:39:9d:b1:2b:aa:1f:01:46:f6:27:1d:0f:69:78: 23:b1:46:ed:cc:97:04:63:3d:bf:e1:4f:e3:95:64: 86:5e:64:b0:4d:5b:df:bf:96:e1:a8:fd:91:88:7a: e2:a5:b6:9f:6e:53:8a:a0:32:8d:a1:05:72:15:cb: e1:c5:5b:67:66:82:0c:e5:0e:06:bc:ee:ae:5a:65: 90:d6:16:dd:10:3b:ca:55:7c:33:26:22:70:f1:41: 07:48:e1:70:ea:08:bd:b4:ce:5a:46:4f:a3:a3:d6: 3b:70:ba:51:a2:2f:25:42:eb:9f:98:30:7c:84:cd: fd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D2:42:D3:89:A4:2F:B9:B3:10:3A:D6:CF:DA:EA:7E:B9:CB:17:BD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c97fd121-51cc-4711-a755-0eefb435ec81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:800::/40 Signature Algorithm: sha256WithRSAEncryption 14:98:9a:d6:b2:64:0d:74:b0:56:c0:ff:c3:d5:b6:6c:c4:98: fb:c9:65:19:bb:0b:14:14:24:dd:d9:c2:02:a1:8b:d5:73:1d: 82:95:1f:a9:3e:98:ea:40:70:2f:4a:ad:99:94:8d:b7:67:a6: 2e:43:a8:bb:4c:e7:78:d3:1d:c0:45:7c:b5:7a:e3:51:2c:92: 80:84:1d:fb:5e:31:75:4c:23:f1:67:90:9a:a6:a2:10:11:df: e2:8e:fe:48:d5:5d:c7:44:28:3d:ae:40:fe:20:d3:5d:ed:71: 6e:4f:77:a1:08:76:3d:68:45:9d:e4:f9:8e:db:c1:9c:34:09: a7:a3:58:90:19:c1:91:70:10:be:45:9b:74:7c:b4:ec:db:d6: 5d:fc:a2:77:90:8b:a4:0a:ca:e0:04:bc:cd:31:8a:ed:c6:e1: 24:79:92:96:d0:11:56:09:d2:4c:1d:c3:54:0b:7e:35:6a:bd: 64:f8:25:b5:bc:26:1c:a5:80:dd:8d:d8:ec:71:d9:76:47:1d: 24:ef:94:fb:73:bb:9c:83:b5:7f:d0:61:c6:69:64:e3:54:7a: 92:e6:fc:d0:d3:a7:de:1d:73:d8:fd:83:13:15:67:91:7c:37: e0:a3:a8:ee:86:6a:81:91:be:e7:6a:72:ad:49:ce:0e:3d:2e: 96:87:a7:93 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUXDCCCBDHv5kKoXipTNzI1975dGgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxNzAwMDA0NVoX DTI2MDUxODIzNTk1OVowejFJMEcGA1UEBRNAZWMzNjEzNTkwMGIxMjMyMDRjNTlh NWI5ZDAyYjA1YTU0N2I0ZTgyM2Y0NWZjZjcwYmFhMWM2ODdmNjQ4ZGVlNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkznF7KHbzj2qhp7s0x4M3woOfzuT PHym6jK66wMYGgelMeKb2rWfUm6LhQVUIMg8ds819qDFM/1MIGghTC5ZDrTSRRiU la+oZtVQYFqn3sch+JJAk0/vvfsrt5j5bQPnxvrNV9gipEVbsp/6Dpa8PRPPY3lB 672P+bxEVKXmc3dcbJuOB18cOZ2xK6ofAUb2Jx0PaXgjsUbtzJcEYz2/4U/jlWSG XmSwTVvfv5bhqP2RiHripbafblOKoDKNoQVyFcvhxVtnZoIM5Q4GvO6uWmWQ1hbd EDvKVXwzJiJw8UEHSOFw6gi9tM5aRk+jo9Y7cLpRoi8lQuufmDB8hM39mwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIfSQtOJpC+5sxA61s/a6n65yxe9MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M5N2ZkMTIxLTUxY2MtNDcxMS1hNzU1LTBlZWZiNDM1ZWM4MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9ggwDQYJKoZIhvcNAQELBQADggEBABSYmtayZA10sFbA/8PV tmzEmPvJZRm7CxQUJN3ZwgKhi9VzHYKVH6k+mOpAcC9KrZmUjbdnpi5DqLtM53jT HcBFfLV641EskoCEHfteMXVMI/FnkJqmohAR3+KO/kjVXcdEKD2uQP4g013tcW5P d6EIdj1oRZ3k+Y7bwZw0CaejWJAZwZFwEL5Fm3R8tOzb1l38oneQi6QKyuAEvM0x iu3G4SR5kpbQEVYJ0kwdw1QLfjVqvWT4JbW8JhylgN2N2Oxx2XZHHSTvlPtzu5yD tX/QYcZpZONUepLm/NDTp94dc9j9gxMVZ5F8N+CjqO6GaoGRvudqcq1Jzg49LpaH p5M= -----END CERTIFICATE-----Generated at Sun Mar 1 22:10:36 2026 by rpki-client