$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d47ce112-c2bb-4af9-8e57-271d2038e059.roa File: d47ce112-c2bb-4af9-8e57-271d2038e059.roa (raw, json) Hash identifier: iUL99przpk2krPjleIxiuS/d0eyWF16V55hZm3i64K4= Subject key identifier: 4A:B5:D2:51:D3:68:4D:A9:E6:30:D4:E7:2A:51:DB:95:A8:43:72:0A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0A20756693011A78C6D780CE093AC9EECEA2DC63 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d47ce112-c2bb-4af9-8e57-271d2038e059.roa Signing time: Sat 14 Feb 2026 00:00:32 +0000 ROA not before: Sat 14 Feb 2026 00:00:32 +0000 ROA not after: Fri 15 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:20:75:66:93:01:1a:78:c6:d7:80:ce:09:3a:c9:ee:ce:a2:dc:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 14 00:00:32 2026 GMT Not After : May 15 23:59:59 2026 GMT Subject: serialNumber=5c0d50659d0e7d10357c6e6abb823dbf65f672a4aa8b820b2168176405085683, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d1:78:32:d8:87:49:c0:34:bb:e1:94:96:b3: 25:01:25:22:58:89:ea:58:97:4f:88:e2:10:cb:04: ee:1c:a9:b7:5b:47:1a:2d:8a:96:a0:ef:f0:b1:9a: 2f:6f:a8:b4:91:4d:a0:f9:71:74:a7:57:e7:89:5c: 91:d8:d7:86:67:75:31:ce:dd:62:57:08:58:01:46: 0b:c5:6d:77:b7:e3:56:30:bf:8b:3a:85:22:2e:9c: 3e:d2:22:f3:06:b2:02:52:0a:c3:c6:39:75:6b:47: 67:4c:1e:7b:82:67:a3:17:ec:7b:ac:35:90:47:cd: 2c:28:05:60:21:78:2e:d1:50:5e:ba:fa:db:6f:3a: 25:56:e4:f3:17:6c:a1:0f:76:e9:0d:03:b6:0d:68: b9:87:d8:e1:9e:4e:6a:0b:35:9e:e8:4a:f9:9e:45: 3a:59:8d:ab:b6:a9:05:66:6b:1c:e1:00:28:03:3b: eb:b9:80:26:29:c0:93:43:bf:ab:7d:23:59:70:bc: 8a:7f:3c:b9:87:6b:96:f0:dd:1e:7f:5c:a6:ea:2c: 42:b5:4e:bf:51:e0:70:6b:53:cb:52:40:d3:4f:2e: 2a:50:21:46:95:be:f3:76:6e:0c:e2:11:02:5e:26: bf:73:94:67:c3:75:9f:e2:75:bc:e1:5c:c5:96:fc: 39:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B5:D2:51:D3:68:4D:A9:E6:30:D4:E7:2A:51:DB:95:A8:43:72:0A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d47ce112-c2bb-4af9-8e57-271d2038e059.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:2800::/40 Signature Algorithm: sha256WithRSAEncryption aa:3c:37:0b:76:34:9f:5b:d5:b9:96:58:3f:82:c6:54:17:31: c9:a0:d8:d1:74:e7:cd:80:e0:85:62:14:af:60:89:ca:7e:71: d8:3c:2e:84:9a:2f:b2:b6:a9:18:aa:cb:f1:11:af:b4:b4:33: 5b:ca:2b:b8:90:f5:53:94:a9:70:4b:9c:2a:69:09:54:ca:be: 00:1a:aa:18:d8:c7:f8:a7:a4:34:81:fc:79:31:8b:c0:8b:21: be:f4:db:cf:9b:08:ea:c1:17:e4:a4:0c:83:af:49:8d:ee:ff: 6a:4e:45:92:a1:78:e2:6f:d6:26:16:32:61:bb:9e:fa:4e:29: 42:0c:78:8e:fa:df:b7:7f:5f:28:ac:0b:cf:be:2a:7f:b7:7a: af:20:84:88:e2:e6:98:42:f9:46:05:ee:a5:a0:2e:b3:bd:1b: 50:f1:32:63:48:21:67:95:6d:04:1b:e0:2c:d5:50:54:4d:24: 3d:54:51:80:43:01:c3:1f:19:0d:02:cb:8e:84:f1:c2:cb:23: 8e:e4:f1:e9:02:42:e0:fc:7f:9f:fc:bd:47:35:63:b3:8a:47: d2:df:e4:2a:a9:a0:9e:f2:64:84:e2:dd:df:fa:c6:3a:2a:05: 63:17:d1:ac:05:56:09:bb:b8:7f:78:9f:5f:3f:ab:92:05:31: 0a:dc:9e:23 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUCiB1ZpMBGnjG14DOCTrJ7s6i3GMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxNDAwMDAzMloX DTI2MDUxNTIzNTk1OVowejFJMEcGA1UEBRNANWMwZDUwNjU5ZDBlN2QxMDM1N2M2 ZTZhYmI4MjNkYmY2NWY2NzJhNGFhOGI4MjBiMjE2ODE3NjQwNTA4NTY4MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tF4MtiHScA0u+GUlrMlASUiWInq WJdPiOIQywTuHKm3W0caLYqWoO/wsZovb6i0kU2g+XF0p1fniVyR2NeGZ3Uxzt1i VwhYAUYLxW13t+NWML+LOoUiLpw+0iLzBrICUgrDxjl1a0dnTB57gmejF+x7rDWQ R80sKAVgIXgu0VBeuvrbbzolVuTzF2yhD3bpDQO2DWi5h9jhnk5qCzWe6Er5nkU6 WY2rtqkFZmsc4QAoAzvruYAmKcCTQ7+rfSNZcLyKfzy5h2uW8N0ef1ym6ixCtU6/ UeBwa1PLUkDTTy4qUCFGlb7zdm4M4hECXia/c5Rnw3Wf4nW84VzFlvw5JwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEq10lHTaE2p5jDU5ypR25WoQ3IKMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q0N2NlMTEyLWMyYmItNGFmOS04ZTU3LTI3MWQyMDM4ZTA1OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9CgwDQYJKoZIhvcNAQELBQADggEBAKo8Nwt2NJ9b1bmWWD+C xlQXMcmg2NF0582A4IViFK9gicp+cdg8LoSaL7K2qRiqy/ERr7S0M1vKK7iQ9VOU qXBLnCppCVTKvgAaqhjYx/inpDSB/Hkxi8CLIb7028+bCOrBF+SkDIOvSY3u/2pO RZKheOJv1iYWMmG7nvpOKUIMeI7637d/XyisC8++Kn+3eq8ghIji5phC+UYF7qWg LrO9G1DxMmNIIWeVbQQb4CzVUFRNJD1UUYBDAcMfGQ0Cy46E8cLLI47k8ekCQuD8 f5/8vUc1Y7OKR9Lf5CqpoJ7yZITi3d/6xjoqBWMX0awFVgm7uH94n18/q5IFMQrc niM= -----END CERTIFICATE-----Generated at Sun Mar 1 21:54:45 2026 by rpki-client