$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d33fb258-4c78-4848-a4fe-7a4ed9edb0bd.roa File: d33fb258-4c78-4848-a4fe-7a4ed9edb0bd.roa (raw, json) Hash identifier: 8KYGAWBoWSmr4ZrvIG/aq4yGhr4XpCe1I7Tznsl5lW4= Subject key identifier: 6C:4E:59:92:D0:A9:16:BA:20:3E:AF:91:3F:40:A7:A5:97:76:1E:24 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0B9FBED699364D568A33AADD8901C674B4899901 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d33fb258-4c78-4848-a4fe-7a4ed9edb0bd.roa Signing time: Wed 11 Feb 2026 00:10:31 +0000 ROA not before: Wed 11 Feb 2026 00:10:31 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:2880::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:9f:be:d6:99:36:4d:56:8a:33:aa:dd:89:01:c6:74:b4:89:99:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 11 00:10:31 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=a1f86f5e47a11507047027fce9c814ae6de53517c8e7f3dfeb3528bfd02859bb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3a:ba:80:e0:f8:2a:1a:f6:75:4f:13:a8:be: e4:10:d6:33:c0:13:cc:f2:44:c3:88:2d:44:5e:2b: ae:0f:71:f3:e9:35:8c:a5:b5:35:9e:86:dd:aa:7e: 4d:48:a9:b1:ac:a5:fe:ba:8c:f4:45:03:64:4f:5d: 0a:50:6a:99:d4:fc:c3:82:43:bb:24:b3:9d:f1:77: ab:ba:4d:53:96:33:9a:bc:8d:b0:79:55:d3:d7:a7: 80:5b:ea:48:25:d1:bf:27:73:f2:0a:db:f1:dc:99: c4:8d:3a:ac:f0:ac:de:e5:f6:dc:42:87:82:84:ae: 79:25:4b:d3:51:d3:56:c0:05:f8:7b:77:8d:5d:c1: 43:3a:ae:61:59:22:08:07:e4:de:45:a1:8a:b3:10: 1a:a5:f7:86:6d:17:71:6b:81:eb:46:61:3b:a5:bb: 3d:47:c8:f0:13:2b:90:01:28:c6:d5:d9:7f:b2:c0: c6:2d:71:50:6b:d8:f1:e2:54:e9:31:bc:8e:2c:d8: 71:0d:ca:ec:18:21:59:9c:4b:27:99:ad:54:ec:ca: 89:0a:7e:fb:7d:80:65:e5:c9:4e:4a:e2:8f:cb:58: 1e:00:c0:c7:c7:27:7c:5e:5d:3c:d1:3f:50:7e:a6: 68:a8:4f:e2:d2:37:2b:c4:51:4a:20:da:37:24:9a: 46:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:4E:59:92:D0:A9:16:BA:20:3E:AF:91:3F:40:A7:A5:97:76:1E:24 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d33fb258-4c78-4848-a4fe-7a4ed9edb0bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:2880::/46 Signature Algorithm: sha256WithRSAEncryption be:96:a7:33:5f:6a:19:02:0f:7a:3a:15:51:bf:ba:c7:be:51: a2:3a:44:89:91:3d:ff:73:02:a7:d1:57:47:2d:3b:eb:27:73: 95:58:45:1a:bb:2c:5b:b5:b3:a6:e9:48:5c:98:33:9f:5a:bf: 44:13:df:68:ee:59:f4:ed:e4:7e:f0:f1:42:73:ba:39:1f:a3: 2f:b0:b9:bb:c7:7b:e1:70:af:bc:50:15:23:73:90:58:d1:b8: 42:82:2d:32:1b:4c:3c:23:dd:48:d2:a2:89:fc:96:5a:98:91: bf:11:14:8f:8a:b6:9a:1e:49:95:9a:95:c7:fc:2a:97:b9:f7: 14:41:15:99:31:28:2a:96:c0:0e:60:46:d3:63:c5:22:01:cf: c2:e2:1e:80:33:d5:8e:48:f9:7d:ff:8a:03:be:35:d1:63:98: f5:4c:84:99:aa:2c:16:a7:b0:ae:53:45:bb:ea:13:f7:9e:d7: e7:d4:f5:ec:75:fd:64:dc:f1:ab:e5:2a:34:29:2f:16:99:99: fc:55:8d:83:2f:d2:40:42:9e:75:8b:bb:de:80:40:66:f9:c9: 15:14:e3:59:eb:97:77:4d:3b:8b:ec:d9:26:c8:f6:a8:4c:55: 0b:8a:98:8f:18:fb:4e:d7:06:6e:74:fb:e9:5f:4c:84:e2:bc: f4:d9:75:5e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUC5++1pk2TVaKM6rdiQHGdLSJmQEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxMTAwMTAzMVoX DTI2MDUxMjIzNTk1OVowejFJMEcGA1UEBRNAYTFmODZmNWU0N2ExMTUwNzA0NzAy N2ZjZTljODE0YWU2ZGU1MzUxN2M4ZTdmM2RmZWIzNTI4YmZkMDI4NTliYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjq6gOD4Khr2dU8TqL7kENYzwBPM 8kTDiC1EXiuuD3Hz6TWMpbU1nobdqn5NSKmxrKX+uoz0RQNkT10KUGqZ1PzDgkO7 JLOd8Xeruk1TljOavI2weVXT16eAW+pIJdG/J3PyCtvx3JnEjTqs8Kze5fbcQoeC hK55JUvTUdNWwAX4e3eNXcFDOq5hWSIIB+TeRaGKsxAapfeGbRdxa4HrRmE7pbs9 R8jwEyuQASjG1dl/ssDGLXFQa9jx4lTpMbyOLNhxDcrsGCFZnEsnma1U7MqJCn77 fYBl5clOSuKPy1geAMDHxyd8Xl080T9QfqZoqE/i0jcrxFFKINo3JJpGTwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGxOWZLQqRa6ID6vkT9Ap6WXdh4kMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2QzM2ZiMjU4LTRjNzgtNDg0OC1hNGZlLTdhNGVkOWVkYjBiZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba8yiAMA0GCSqGSIb3DQEBCwUAA4IBAQC+lqczX2oZAg96OhVR v7rHvlGiOkSJkT3/cwKn0VdHLTvrJ3OVWEUauyxbtbOm6UhcmDOfWr9EE99o7ln0 7eR+8PFCc7o5H6MvsLm7x3vhcK+8UBUjc5BY0bhCgi0yG0w8I91I0qKJ/JZamJG/ ERSPiraaHkmVmpXH/CqXufcUQRWZMSgqlsAOYEbTY8UiAc/C4h6AM9WOSPl9/4oD vjXRY5j1TISZqiwWp7CuU0W76hP3ntfn1PXsdf1k3PGr5So0KS8WmZn8VY2DL9JA Qp51i7vegEBm+ckVFONZ65d3TTuL7NkmyPaoTFULipiPGPtO1wZudPvpX0yE4rz0 2XVe -----END CERTIFICATE-----Generated at Sun Mar 1 21:57:44 2026 by rpki-client