$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d5fd65b7-7b6d-44c2-b189-8290e9cab2c0.roa File: d5fd65b7-7b6d-44c2-b189-8290e9cab2c0.roa (raw, json) Hash identifier: o7+NTmjle21nvrjYhch55u8qlvmKJlhHnWfYrXBWcJg= Subject key identifier: 7C:D6:8F:47:16:5F:F0:81:70:3C:35:34:CC:A3:C3:31:87:11:92:BC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 56D0F98539959677C989630B7352B3C8BC1595C6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d5fd65b7-7b6d-44c2-b189-8290e9cab2c0.roa Signing time: Sat 14 Feb 2026 00:00:55 +0000 ROA not before: Sat 14 Feb 2026 00:00:55 +0000 ROA not after: Fri 15 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daf4:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:d0:f9:85:39:95:96:77:c9:89:63:0b:73:52:b3:c8:bc:15:95:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 14 00:00:55 2026 GMT Not After : May 15 23:59:59 2026 GMT Subject: serialNumber=c9b8d26ba9e2a4ebe22b8abb81115b5a045c9d3e4289aaa80e1c681e7dcf2d84, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f9:95:bd:52:78:2c:28:85:cb:26:ab:22:95: a4:c2:47:54:39:0c:d8:31:b7:19:70:4c:e4:7c:6e: a8:8f:0f:19:bb:90:a1:3b:94:43:f5:6d:c2:a2:1c: 18:ee:70:78:62:c3:55:5a:4d:d7:e4:34:ed:fd:3d: 3b:08:84:d7:9e:ee:bf:f3:5b:6f:f2:83:51:a2:b8: 89:0e:5e:08:8f:05:c7:a9:15:14:81:3c:60:a1:3b: 8c:c3:7f:98:5d:37:2b:76:56:96:5d:54:60:8d:e5: c3:9e:2c:40:30:21:a2:dd:d7:bd:d8:43:99:b5:8d: d7:6a:e2:b4:52:a8:e5:52:e5:2a:df:07:9e:6e:ea: 73:6e:e9:d7:29:94:5f:6e:b7:8d:02:a4:eb:6b:11: 5e:79:9a:cd:d2:c0:8f:e5:fb:3f:10:e1:49:f3:a7: 86:29:11:6d:ff:87:75:d9:dc:c7:4c:67:ee:40:ad: 5a:a7:9c:44:fd:04:22:e4:5b:01:7f:3e:5b:c4:e6: ca:f9:96:ec:74:96:d7:96:e6:fa:5b:f3:ef:81:ca: ac:3e:39:d9:1d:73:fc:8f:dc:b6:3e:33:f0:ac:c6: f1:08:4c:b0:07:9b:00:7a:b8:1b:ab:9f:9f:61:49: f6:fa:96:f6:ba:33:60:22:47:f2:0a:63:3d:2b:e6: 7f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D6:8F:47:16:5F:F0:81:70:3C:35:34:CC:A3:C3:31:87:11:92:BC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d5fd65b7-7b6d-44c2-b189-8290e9cab2c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:7000::/40 Signature Algorithm: sha256WithRSAEncryption 6c:c5:ef:ea:dc:72:c8:58:d2:d2:ad:b9:dc:6c:ef:aa:64:b1: 78:b5:c0:3d:6e:a5:3d:f8:91:e8:53:22:80:e2:19:f6:b5:1b: b7:07:83:0f:7f:7b:bc:e3:9e:c2:4c:d4:ce:f5:9a:e4:b4:08: e8:ec:0b:31:21:11:5a:98:9f:68:6d:ee:2a:fb:bd:6c:20:7f: 49:fd:12:55:a0:bd:6d:61:cb:f4:d5:7f:99:4a:4d:a1:a6:2a: 29:f7:7f:a5:dd:6a:86:9e:68:77:4c:19:6d:6f:74:66:a0:cf: b2:67:7f:7b:f6:e2:5b:83:c7:59:df:81:e0:c1:0a:a1:28:55: 94:27:0f:46:30:5e:ba:df:b8:7d:c4:c1:00:bb:0c:a2:f3:94: af:53:8f:55:31:2a:86:80:ea:6f:48:cc:4f:94:db:91:90:a4: 65:cd:11:71:3b:79:b4:04:a5:fd:b0:54:c5:40:9c:da:77:8d: 60:f7:ec:79:da:df:6c:d1:99:69:d5:f7:b1:eb:71:9b:11:76: 1e:ac:cb:b1:ea:2f:ff:9c:87:82:3c:33:5c:c3:bf:42:84:a0: e7:2e:94:48:fb:35:db:ac:0b:7c:89:f1:1d:0d:bb:f4:4d:81: 33:1b:21:14:ae:e5:b1:46:e3:c9:60:bd:5b:c5:70:75:69:55: 01:28:97:8d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUVtD5hTmVlnfJiWMLc1KzyLwVlcYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxNDAwMDA1NVoX DTI2MDUxNTIzNTk1OVowejFJMEcGA1UEBRNAYzliOGQyNmJhOWUyYTRlYmUyMmI4 YWJiODExMTViNWEwNDVjOWQzZTQyODlhYWE4MGUxYzY4MWU3ZGNmMmQ4NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPmVvVJ4LCiFyyarIpWkwkdUOQzY MbcZcEzkfG6ojw8Zu5ChO5RD9W3CohwY7nB4YsNVWk3X5DTt/T07CITXnu6/81tv 8oNRoriJDl4IjwXHqRUUgTxgoTuMw3+YXTcrdlaWXVRgjeXDnixAMCGi3de92EOZ tY3XauK0UqjlUuUq3weebupzbunXKZRfbreNAqTraxFeeZrN0sCP5fs/EOFJ86eG KRFt/4d12dzHTGfuQK1ap5xE/QQi5FsBfz5bxObK+ZbsdJbXlub6W/PvgcqsPjnZ HXP8j9y2PjPwrMbxCEywB5sAergbq5+fYUn2+pb2ujNgIkfyCmM9K+Z/GwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHzWj0cWX/CBcDw1NMyjwzGHEZK8MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q1ZmQ2NWI3LTdiNmQtNDRjMi1iMTg5LTgyOTBlOWNhYjJjMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9HAwDQYJKoZIhvcNAQELBQADggEBAGzF7+rccshY0tKtudxs 76pksXi1wD1upT34kehTIoDiGfa1G7cHgw9/e7zjnsJM1M71muS0COjsCzEhEVqY n2ht7ir7vWwgf0n9ElWgvW1hy/TVf5lKTaGmKin3f6XdaoaeaHdMGW1vdGagz7Jn f3v24luDx1nfgeDBCqEoVZQnD0YwXrrfuH3EwQC7DKLzlK9Tj1UxKoaA6m9IzE+U 25GQpGXNEXE7ebQEpf2wVMVAnNp3jWD37Hna32zRmWnV97HrcZsRdh6sy7HqL/+c h4I8M1zDv0KEoOculEj7NdusC3yJ8R0Nu/RNgTMbIRSu5bFG48lgvVvFcHVpVQEo l40= -----END CERTIFICATE-----Generated at Sun Mar 1 21:55:52 2026 by rpki-client