$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ce872d5d-3e27-4b93-a991-60685bf7305f.roa File: ce872d5d-3e27-4b93-a991-60685bf7305f.roa (raw, json) Hash identifier: 81w5yzwxwBCI3TrRdC/JlsRcpWLvKk7FtCQvsc1HEDI= Subject key identifier: 5F:3E:C7:1D:BC:57:F6:E2:E9:D1:94:23:84:3C:85:D8:BE:DD:3C:7E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4394838C9A76E97D5100A7B58AE7C3BDF4055268 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ce872d5d-3e27-4b93-a991-60685bf7305f.roa Signing time: Wed 11 Feb 2026 00:11:04 +0000 ROA not before: Wed 11 Feb 2026 00:11:04 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:94:83:8c:9a:76:e9:7d:51:00:a7:b5:8a:e7:c3:bd:f4:05:52:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 11 00:11:04 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=8584df63d6760cb666af4a2dfce8b6b0bf821787812f19fdebe36db50d1c0872, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:43:cd:e3:bd:61:1e:b4:2e:67:b0:08:61:89: 75:2c:6a:b4:21:a8:df:04:3e:f5:74:b3:c4:b9:5e: f5:13:d6:eb:99:52:14:9a:93:73:de:38:ff:c0:02: 09:0e:75:b3:aa:2a:bf:0d:90:ed:82:8b:1b:b1:0a: 67:88:4e:97:4c:03:72:87:42:58:a7:df:2a:8d:11: 69:37:92:c1:7a:72:ff:46:ae:b4:0b:23:e7:c7:94: 59:49:c4:1a:d5:0c:f8:21:c8:6c:7b:04:f5:5a:99: 44:84:9a:37:1d:4b:01:6e:a6:7f:37:b8:90:bc:b3: 81:6d:b0:97:26:c4:12:ce:b6:2f:52:7c:ed:ab:ad: 89:b8:81:db:36:80:49:f5:2d:a6:94:db:e8:df:fa: 8f:a5:b3:06:4c:6e:2b:e9:93:0d:08:69:09:dc:65: 03:99:28:32:d6:b9:e5:f4:58:e5:1a:a2:7f:68:fb: 97:30:42:8c:8c:22:3d:f2:38:77:11:27:b1:74:04: e3:f1:b2:ba:b6:1e:6b:1e:47:8e:d5:82:2f:f9:8e: 16:01:f0:96:a1:8a:68:74:91:6a:70:fa:a7:43:06: 60:70:63:57:68:b5:53:c8:9e:a5:5c:28:e3:49:d3: e1:ee:54:6b:25:1b:3d:6b:b8:f2:75:8b:f6:21:cd: 34:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:3E:C7:1D:BC:57:F6:E2:E9:D1:94:23:84:3C:85:D8:BE:DD:3C:7E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ce872d5d-3e27-4b93-a991-60685bf7305f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:e000::/40 Signature Algorithm: sha256WithRSAEncryption 14:34:80:70:e9:69:03:1b:b6:9b:5a:cc:dd:a6:64:56:93:57: a2:e4:d7:44:36:e7:b6:8f:c4:1a:b3:04:38:6a:a6:78:11:b5: 8e:a1:ef:5a:46:39:79:c0:84:4f:24:63:c9:34:93:96:13:1e: 4b:17:20:0b:07:bf:f7:2f:3c:aa:49:b0:6f:40:61:0c:2f:09: 09:c0:42:51:8d:a3:ac:d3:ee:5a:96:75:78:8b:db:13:a6:7d: b3:18:39:65:bd:ce:9b:5f:6d:9f:14:74:0c:a5:89:a7:ab:21: 37:5e:26:56:c5:f0:28:0c:90:a0:7a:59:5c:37:ca:16:9c:f8: e3:04:40:55:69:00:ca:21:2c:ec:7c:86:b8:83:cc:71:95:5e: 7b:88:b7:96:49:e8:cf:04:bb:9e:7e:d7:c0:c7:bb:a9:74:cd: 4c:0a:0e:37:1f:f6:00:cd:6a:61:f6:82:d9:c7:82:54:4a:af: a8:03:94:63:4c:87:f6:48:e6:29:ac:7c:76:77:68:bc:f8:ea: f6:56:23:9f:4b:bf:4d:14:1d:a8:c3:05:97:ba:02:b2:8b:18: 71:70:e2:0e:1a:45:df:09:69:e8:bf:09:0c:90:1d:9e:90:1e: 37:77:f0:43:31:b2:d7:55:63:78:6d:76:bb:de:4a:09:14:86: 64:85:cc:e4 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQ5SDjJp26X1RAKe1iufDvfQFUmgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxMTAwMTEwNFoX DTI2MDUxMjIzNTk1OVowejFJMEcGA1UEBRNAODU4NGRmNjNkNjc2MGNiNjY2YWY0 YTJkZmNlOGI2YjBiZjgyMTc4NzgxMmYxOWZkZWJlMzZkYjUwZDFjMDg3MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0PN471hHrQuZ7AIYYl1LGq0Iajf BD71dLPEuV71E9brmVIUmpNz3jj/wAIJDnWzqiq/DZDtgosbsQpniE6XTANyh0JY p98qjRFpN5LBenL/Rq60CyPnx5RZScQa1Qz4IchsewT1WplEhJo3HUsBbqZ/N7iQ vLOBbbCXJsQSzrYvUnztq62JuIHbNoBJ9S2mlNvo3/qPpbMGTG4r6ZMNCGkJ3GUD mSgy1rnl9FjlGqJ/aPuXMEKMjCI98jh3ESexdATj8bK6th5rHkeO1YIv+Y4WAfCW oYpodJFqcPqnQwZgcGNXaLVTyJ6lXCjjSdPh7lRrJRs9a7jydYv2Ic006QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFF8+xx28V/bi6dGUI4Q8hdi+3Tx+MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2NlODcyZDVkLTNlMjctNGI5My1hOTkxLTYwNjg1YmY3MzA1Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba6uAwDQYJKoZIhvcNAQELBQADggEBABQ0gHDpaQMbtptazN2m ZFaTV6Lk10Q257aPxBqzBDhqpngRtY6h71pGOXnAhE8kY8k0k5YTHksXIAsHv/cv PKpJsG9AYQwvCQnAQlGNo6zT7lqWdXiL2xOmfbMYOWW9zptfbZ8UdAyliaerITde JlbF8CgMkKB6WVw3yhac+OMEQFVpAMohLOx8hriDzHGVXnuIt5ZJ6M8Eu55+18DH u6l0zUwKDjcf9gDNamH2gtnHglRKr6gDlGNMh/ZI5imsfHZ3aLz46vZWI59Lv00U HajDBZe6ArKLGHFw4g4aRd8Jaei/CQyQHZ6QHjd38EMxstdVY3htdrveSgkUhmSF zOQ= -----END CERTIFICATE-----Generated at Sun Mar 1 22:14:01 2026 by rpki-client