$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d1cdca51-ca0d-46a5-92ae-54bbb0018b92.roa File: d1cdca51-ca0d-46a5-92ae-54bbb0018b92.roa (raw, json) Hash identifier: eje1FuMhP3fPqr4q7stIhOb7Ielrw193pyugXrmJ/ak= Subject key identifier: 75:01:30:08:B0:1E:07:3D:87:51:85:7A:F9:1C:F5:E7:18:E3:7A:1F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0A3A7993950BF8BA88A2428E4E4703E436B8CA01 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d1cdca51-ca0d-46a5-92ae-54bbb0018b92.roa Signing time: Sat 21 Feb 2026 00:01:07 +0000 ROA not before: Sat 21 Feb 2026 00:01:07 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:3a:79:93:95:0b:f8:ba:88:a2:42:8e:4e:47:03:e4:36:b8:ca:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 21 00:01:07 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=feee3bf36fc38b82f59c4df5fec524deae9cb523ff80c409594a52303bea7cb5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d0:73:03:56:ed:60:fd:d2:4f:a2:25:eb:f1: 9c:4b:7a:1e:1b:8b:09:68:c6:44:9c:6d:9e:3e:94: 09:56:30:83:d2:53:e0:19:9a:32:a3:45:d6:98:90: 12:f0:f2:de:8b:45:e1:21:31:59:6e:9d:cb:c1:3e: ec:63:46:e1:3e:90:8e:10:70:05:5f:1e:04:91:29: 8a:82:ee:1e:b5:ae:33:a6:d4:62:61:40:ec:0d:59: 73:3e:0c:ec:54:6f:83:dd:c0:83:bd:87:fa:96:75: ae:98:5d:6a:5d:73:38:bb:55:a4:a0:18:34:a2:32: 7b:66:76:0a:23:c7:54:7c:00:3e:48:79:31:3a:20: 2a:73:32:04:53:74:a4:e2:f3:fe:31:c7:69:15:bb: 8a:34:ed:60:44:3a:7b:fd:80:cb:19:7e:74:e6:e8: 34:ff:fb:2f:41:af:c3:27:b4:00:a4:22:5b:fd:f8: 00:b8:a2:18:b5:97:59:8e:40:fb:e9:a8:80:64:71: 5a:cd:6c:be:1d:cd:1b:3a:22:cb:1a:48:7f:96:bc: 49:b3:b7:5a:f2:ca:b9:fe:91:2d:61:99:ba:03:b0: 42:c5:27:e1:6f:d4:c4:92:c8:f2:5b:88:d8:9d:c6: 5c:ec:3b:69:b2:37:3a:db:83:d0:84:0d:71:eb:39: af:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:01:30:08:B0:1E:07:3D:87:51:85:7A:F9:1C:F5:E7:18:E3:7A:1F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d1cdca51-ca0d-46a5-92ae-54bbb0018b92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:4000::/40 Signature Algorithm: sha256WithRSAEncryption ad:30:15:eb:53:0c:40:50:87:99:44:3e:0f:10:e5:31:f7:0b: 8c:a6:3b:b3:02:49:e4:8f:45:f9:7b:78:fd:a7:7b:20:5a:5a: 51:8a:ab:ff:ca:47:9b:c6:41:c3:4f:33:91:e7:fb:55:fd:3a: 81:c6:06:0a:1e:35:15:08:19:73:70:23:b4:6b:8f:1e:4d:f8: 96:aa:a0:25:7e:23:34:f8:12:14:db:b5:f8:47:98:32:b7:39: 59:a0:32:31:7c:df:87:a4:0d:63:f9:52:71:b7:b4:df:29:89: 1e:54:22:12:82:46:59:fb:bb:fa:20:8b:f1:25:34:6a:8f:d8: be:bd:74:d3:aa:88:c7:c6:c7:7a:c4:a5:eb:e2:f8:fe:14:59: ef:71:fc:82:5d:96:31:eb:42:74:5e:7c:99:71:f2:0b:f4:e2: 34:2c:f3:c9:c6:85:64:37:3a:07:5a:6f:86:95:a0:ef:be:2e: 2f:15:b3:2a:21:9e:74:d7:28:a6:6f:a0:a2:4c:96:d3:60:87: a3:da:63:77:30:9e:74:ce:1f:84:00:ec:62:62:14:b2:27:4f: 46:39:ca:af:52:4e:de:46:3b:6c:ba:ac:99:1a:4b:ab:51:f8: 7c:39:b8:54:5d:6a:88:df:a4:d9:96:f0:23:0f:6f:bd:8c:05: 3d:f2:44:15 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUCjp5k5UL+LqIokKOTkcD5Da4ygEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMTAwMDEwN1oX DTI2MDUyMjIzNTk1OVowejFJMEcGA1UEBRNAZmVlZTNiZjM2ZmMzOGI4MmY1OWM0 ZGY1ZmVjNTI0ZGVhZTljYjUyM2ZmODBjNDA5NTk0YTUyMzAzYmVhN2NiNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdBzA1btYP3ST6Il6/GcS3oeG4sJ aMZEnG2ePpQJVjCD0lPgGZoyo0XWmJAS8PLei0XhITFZbp3LwT7sY0bhPpCOEHAF Xx4EkSmKgu4eta4zptRiYUDsDVlzPgzsVG+D3cCDvYf6lnWumF1qXXM4u1WkoBg0 ojJ7ZnYKI8dUfAA+SHkxOiAqczIEU3Sk4vP+McdpFbuKNO1gRDp7/YDLGX505ug0 //svQa/DJ7QApCJb/fgAuKIYtZdZjkD76aiAZHFazWy+Hc0bOiLLGkh/lrxJs7da 8sq5/pEtYZm6A7BCxSfhb9TEksjyW4jYncZc7Dtpsjc624PQhA1x6zmvhQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHUBMAiwHgc9h1GFevkc9ecY43ofMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2QxY2RjYTUxLWNhMGQtNDZhNS05MmFlLTU0YmJiMDAxOGI5Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+0AwDQYJKoZIhvcNAQELBQADggEBAK0wFetTDEBQh5lEPg8Q 5TH3C4ymO7MCSeSPRfl7eP2neyBaWlGKq//KR5vGQcNPM5Hn+1X9OoHGBgoeNRUI GXNwI7Rrjx5N+JaqoCV+IzT4EhTbtfhHmDK3OVmgMjF834ekDWP5UnG3tN8piR5U IhKCRln7u/ogi/ElNGqP2L69dNOqiMfGx3rEpevi+P4UWe9x/IJdljHrQnRefJlx 8gv04jQs88nGhWQ3Ogdab4aVoO++Li8VsyohnnTXKKZvoKJMltNgh6PaY3cwnnTO H4QA7GJiFLInT0Y5yq9STt5GO2y6rJkaS6tR+Hw5uFRdaojfpNmW8CMPb72MBT3y RBU= -----END CERTIFICATE-----Generated at Sun Mar 1 21:55:11 2026 by rpki-client