$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d5b91d5b-b6a3-493c-bfc6-0a607202d3b7.roa File: d5b91d5b-b6a3-493c-bfc6-0a607202d3b7.roa (raw, json) Hash identifier: 4PY3gle77Rne07cv+EyLOHSOYvA3dqakKVBX29jFZhQ= Subject key identifier: C1:3A:04:02:9F:42:1D:11:82:AA:92:C3:AC:42:62:50:4A:07:CE:50 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5A634CC4D87A58B399B77196B2AE866C0DD6F657 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d5b91d5b-b6a3-493c-bfc6-0a607202d3b7.roa Signing time: Wed 11 Feb 2026 00:00:38 +0000 ROA not before: Wed 11 Feb 2026 00:00:38 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:48c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:63:4c:c4:d8:7a:58:b3:99:b7:71:96:b2:ae:86:6c:0d:d6:f6:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 11 00:00:38 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=99d6ffb3d684e130681a6ca6c7885c91486547b1dada97a8b7021216443b8553, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c8:58:ee:19:c2:4a:87:a1:f9:aa:13:39:fd: 90:a1:13:b5:e8:29:9f:cd:c3:e1:4b:43:57:25:18: a3:ab:43:21:ef:f7:41:d8:15:81:fb:4a:25:e2:bf: fb:75:2e:f0:96:1e:e2:fd:25:4c:72:15:a0:38:1f: 2a:b1:66:b9:7e:57:91:78:bf:78:66:3f:35:e6:38: 01:b3:81:4e:02:f6:8c:97:f2:68:8d:7b:c4:cc:73: 88:b8:80:5f:67:70:35:97:72:a5:d4:e2:fb:8c:d4: 99:eb:a3:ab:76:cf:8d:18:70:69:b8:47:78:96:47: f5:be:4f:92:65:0c:66:b4:a0:52:af:1f:3c:90:11: 25:ad:62:60:c1:7b:8d:c6:e9:fc:39:26:d1:49:9f: f6:11:26:6f:66:52:88:14:58:09:95:7c:f8:a9:e9: 09:0d:14:0c:4b:21:4f:03:0f:69:45:c7:d1:78:99: 82:65:bc:50:3f:0d:5c:df:ec:c6:7f:c7:66:43:82: 42:d2:c4:f8:98:b4:f5:65:75:c8:18:2a:f9:10:ef: 66:55:71:1c:d6:94:2d:b1:a7:0c:1a:64:a0:76:9d: db:c8:7e:d3:ab:5e:23:1e:e5:f3:cd:90:0b:29:27: 4c:55:d3:f7:22:e1:04:0b:d1:15:fb:b0:63:4a:b0: dc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:3A:04:02:9F:42:1D:11:82:AA:92:C3:AC:42:62:50:4A:07:CE:50 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d5b91d5b-b6a3-493c-bfc6-0a607202d3b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:48c0::/46 Signature Algorithm: sha256WithRSAEncryption 5d:4c:94:1e:69:e2:7f:08:fa:62:3a:dc:23:e3:6b:49:e3:28: e5:cc:cd:92:2a:6b:7d:18:fc:a3:df:35:9b:89:bb:f8:30:a0: 5b:f6:7d:a1:08:22:9c:48:2d:5b:d0:07:ef:d0:4c:0b:3d:20: c0:80:ed:7b:a3:5e:48:1e:0b:14:3a:cc:4d:18:db:15:ab:de: 61:5f:58:a6:fc:a6:f0:cc:c3:ad:67:41:4c:df:49:55:f7:ec: ed:8b:7a:4a:00:77:e1:dc:db:b0:9d:89:c9:11:6d:40:8a:d6: 16:7c:2c:86:86:69:48:47:d9:9c:f1:7d:5e:1f:dd:5c:59:96: bc:b5:fa:49:29:fc:8a:28:2a:e7:4e:c7:c0:e9:0f:03:9d:ac: ef:9a:b8:db:d1:0b:b1:27:1b:00:8a:42:de:b4:4b:d6:08:65: 8d:3f:41:02:8c:9d:06:64:04:4d:e1:b7:f1:12:51:d0:09:c2: 85:d1:d2:0b:10:77:77:9d:fb:a4:86:ca:1f:67:8c:b0:8c:19: 7e:b4:e9:1a:41:7a:46:83:04:4f:f4:24:bc:4b:17:56:02:af: 7e:a5:53:80:ba:63:59:f0:7b:d9:a4:1e:c1:cb:44:ab:3b:46: f5:50:04:2b:e1:9e:ac:3b:f7:dc:33:88:b3:26:e9:73:a9:27: e6:65:e9:b6 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUWmNMxNh6WLOZt3GWsq6GbA3W9lcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxMTAwMDAzOFoX DTI2MDUxMjIzNTk1OVowejFJMEcGA1UEBRNAOTlkNmZmYjNkNjg0ZTEzMDY4MWE2 Y2E2Yzc4ODVjOTE0ODY1NDdiMWRhZGE5N2E4YjcwMjEyMTY0NDNiODU1MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8hY7hnCSoeh+aoTOf2QoRO16Cmf zcPhS0NXJRijq0Mh7/dB2BWB+0ol4r/7dS7wlh7i/SVMchWgOB8qsWa5fleReL94 Zj815jgBs4FOAvaMl/JojXvEzHOIuIBfZ3A1l3Kl1OL7jNSZ66Ords+NGHBpuEd4 lkf1vk+SZQxmtKBSrx88kBElrWJgwXuNxun8OSbRSZ/2ESZvZlKIFFgJlXz4qekJ DRQMSyFPAw9pRcfReJmCZbxQPw1c3+zGf8dmQ4JC0sT4mLT1ZXXIGCr5EO9mVXEc 1pQtsacMGmSgdp3byH7Tq14jHuXzzZALKSdMVdP3IuEEC9EV+7BjSrDcYwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFME6BAKfQh0RgqqSw6xCYlBKB85QMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q1YjkxZDViLWI2YTMtNDkzYy1iZmM2LTBhNjA3MjAyZDNiNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba80jAMA0GCSqGSIb3DQEBCwUAA4IBAQBdTJQeaeJ/CPpiOtwj 42tJ4yjlzM2SKmt9GPyj3zWbibv4MKBb9n2hCCKcSC1b0Afv0EwLPSDAgO17o15I HgsUOsxNGNsVq95hX1im/KbwzMOtZ0FM30lV9+zti3pKAHfh3NuwnYnJEW1AitYW fCyGhmlIR9mc8X1eH91cWZa8tfpJKfyKKCrnTsfA6Q8Dnazvmrjb0QuxJxsAikLe tEvWCGWNP0ECjJ0GZARN4bfxElHQCcKF0dILEHd3nfukhsofZ4ywjBl+tOkaQXpG gwRP9CS8SxdWAq9+pVOAumNZ8HvZpB7By0SrO0b1UAQr4Z6sO/fcM4izJulzqSfm Zem2 -----END CERTIFICATE-----Generated at Mon Mar 2 05:16:43 2026 by rpki-client