$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d3bae790-01d7-4b6e-a0f0-9305bcbd4a37.roa File: d3bae790-01d7-4b6e-a0f0-9305bcbd4a37.roa (raw, json) Hash identifier: 0se19tmGih6uxksDWjUSfN7owQYQJdGq/mvnb0IVlyw= Subject key identifier: C2:63:45:FA:E6:A7:4C:6D:2B:02:FE:57:F1:78:20:E1:2C:6B:70:ED Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5C056CB6F5844C1639BF548674F41574F803988C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d3bae790-01d7-4b6e-a0f0-9305bcbd4a37.roa Signing time: Sat 21 Feb 2026 00:10:48 +0000 ROA not before: Sat 21 Feb 2026 00:10:48 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:05:6c:b6:f5:84:4c:16:39:bf:54:86:74:f4:15:74:f8:03:98:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 21 00:10:48 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=8bad3a62b11e865480c5893800fa172ab1561511548c90a807e7f6f39da9e2d6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ac:19:1a:f6:d9:83:e6:e9:12:66:50:35:13: 11:52:d4:37:87:0c:d9:2e:17:d8:dc:7c:23:5f:89: f0:84:9f:66:ee:58:1b:e7:f5:ad:13:85:54:d4:dc: cd:9e:75:bf:54:dc:0c:90:a5:7c:a2:b8:13:f8:12: 43:0d:b2:3d:7e:88:a8:a0:5b:de:59:92:a0:42:64: c1:d1:d0:18:0f:9c:68:2f:fd:6f:ea:e8:05:88:58: 44:ec:a2:c9:81:83:a9:c4:03:f7:53:88:86:0f:a2: ca:aa:44:d2:cf:e4:c5:d8:0e:61:48:c7:c3:63:e8: 36:58:44:60:21:f7:63:cc:18:37:31:d5:4a:a2:86: e5:fb:89:1b:5e:4b:4b:1a:fe:4e:b9:d8:d9:a5:b8: ed:c7:64:aa:c6:65:15:31:dd:d7:fc:ca:b6:85:87: e7:36:71:96:9c:ae:ad:d0:34:f3:18:14:0f:dc:16: 70:ec:39:58:cd:81:5d:ed:c3:18:fb:19:de:3e:20: 10:ae:4f:e4:da:78:c6:ee:10:b4:d1:16:c7:3a:39: 75:cb:44:12:57:bd:66:2e:0e:71:3a:77:93:e6:e9: 23:bb:7b:3d:9f:ab:56:54:cc:c6:05:2b:1e:fd:23: 7d:ee:cd:ce:45:91:b8:4f:c0:4e:66:38:07:db:8d: 68:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:63:45:FA:E6:A7:4C:6D:2B:02:FE:57:F1:78:20:E1:2C:6B:70:ED X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d3bae790-01d7-4b6e-a0f0-9305bcbd4a37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:4000::/40 Signature Algorithm: sha256WithRSAEncryption a9:08:9e:e5:28:ce:df:4d:b7:d7:b7:91:62:1a:17:07:11:02: 07:e7:f7:bf:c2:cb:34:d5:f6:35:85:1f:06:dd:8f:9d:88:b8: b4:93:eb:75:de:1f:50:28:5b:ce:91:51:84:52:7e:20:b1:50: 2a:fc:09:57:13:ab:f7:25:e2:8a:b2:01:c5:83:46:b8:5a:d4: 31:ac:ac:5a:ae:c6:52:4f:fa:2b:6e:aa:bd:db:ca:22:0d:bc: b1:0f:a6:01:ba:a5:ae:05:6b:69:5e:09:1b:63:1c:59:36:fa: 55:26:90:81:e4:40:23:fb:46:7f:89:ae:9d:f0:a8:c6:79:50: 65:c1:57:ff:60:fa:1f:f2:24:b8:10:60:47:7f:f6:ca:33:c5: b9:f4:8d:b1:19:0f:ad:67:d0:4a:5f:97:75:81:46:bf:78:b1: b3:f5:94:4c:8a:3d:ba:71:25:e0:2e:c1:c5:a0:5e:f6:27:76: 06:62:60:18:c7:7c:de:1e:93:a7:d5:2a:15:f9:50:fc:ea:91: 2e:24:0b:c4:d1:ac:d7:19:89:6d:30:4f:b7:47:2b:f9:bf:b8: f7:16:81:7d:98:ba:ae:d8:7d:9c:f5:40:35:3b:00:bd:d5:2d: be:3b:6e:2b:d7:5b:16:df:50:2c:86:21:f4:06:89:53:7b:a4: 7c:5f:08:02 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUXAVstvWETBY5v1SGdPQVdPgDmIwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMTAwMTA0OFoX DTI2MDUyMjIzNTk1OVowejFJMEcGA1UEBRNAOGJhZDNhNjJiMTFlODY1NDgwYzU4 OTM4MDBmYTE3MmFiMTU2MTUxMTU0OGM5MGE4MDdlN2Y2ZjM5ZGE5ZTJkNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKwZGvbZg+bpEmZQNRMRUtQ3hwzZ LhfY3HwjX4nwhJ9m7lgb5/WtE4VU1NzNnnW/VNwMkKV8orgT+BJDDbI9foiooFve WZKgQmTB0dAYD5xoL/1v6ugFiFhE7KLJgYOpxAP3U4iGD6LKqkTSz+TF2A5hSMfD Y+g2WERgIfdjzBg3MdVKoobl+4kbXktLGv5OudjZpbjtx2SqxmUVMd3X/Mq2hYfn NnGWnK6t0DTzGBQP3BZw7DlYzYFd7cMY+xnePiAQrk/k2njG7hC00RbHOjl1y0QS V71mLg5xOneT5ukju3s9n6tWVMzGBSse/SN97s3ORZG4T8BOZjgH241otwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMJjRfrmp0xtKwL+V/F4IOEsa3DtMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2QzYmFlNzkwLTAxZDctNGI2ZS1hMGYwLTkzMDViY2JkNGEzNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaAEAwDQYJKoZIhvcNAQELBQADggEBAKkInuUozt9Nt9e3kWIa FwcRAgfn97/CyzTV9jWFHwbdj52IuLST63XeH1AoW86RUYRSfiCxUCr8CVcTq/cl 4oqyAcWDRrha1DGsrFquxlJP+ituqr3byiINvLEPpgG6pa4Fa2leCRtjHFk2+lUm kIHkQCP7Rn+Jrp3wqMZ5UGXBV/9g+h/yJLgQYEd/9sozxbn0jbEZD61n0Epfl3WB Rr94sbP1lEyKPbpxJeAuwcWgXvYndgZiYBjHfN4ek6fVKhX5UPzqkS4kC8TRrNcZ iW0wT7dHK/m/uPcWgX2Yuq7YfZz1QDU7AL3VLb47bivXWxbfUCyGIfQGiVN7pHxf CAI= -----END CERTIFICATE-----Generated at Mon Mar 2 08:50:30 2026 by rpki-client