$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d8ebfb4d-f771-4efb-821c-cd11d5a24a47.roa File: d8ebfb4d-f771-4efb-821c-cd11d5a24a47.roa (raw, json) Hash identifier: FlV2OrJPQYsRQ71A2MpzPwyp9V/S8WvtDsx2iuhi+iY= Subject key identifier: 70:FD:84:04:04:D1:8D:B3:56:15:66:5A:02:38:EA:D3:3B:E1:53:8E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5B9FD8DF53FCF5A727F433D7B2FB0A956AB63D39 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d8ebfb4d-f771-4efb-821c-cd11d5a24a47.roa Signing time: Wed 18 Feb 2026 00:01:34 +0000 ROA not before: Wed 18 Feb 2026 00:01:34 +0000 ROA not after: Tue 19 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:c080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:9f:d8:df:53:fc:f5:a7:27:f4:33:d7:b2:fb:0a:95:6a:b6:3d:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 18 00:01:34 2026 GMT Not After : May 19 23:59:59 2026 GMT Subject: serialNumber=35bdfd964fb504cf20afe43d27ece74639d0fe2be908eda82ac97ddb89a1ca99, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:cd:bf:48:d8:8f:13:a6:43:26:42:9a:ed:69: 86:67:a3:55:d7:d9:01:7a:5e:f3:bc:04:51:f2:d6: 65:75:0b:06:82:43:3e:72:6f:f4:bd:42:11:74:a1: ab:34:83:36:9e:1b:4c:c0:c4:3d:78:49:51:10:5f: 61:b0:8e:30:92:ec:18:f7:3e:fc:c6:3a:e8:04:7c: 88:89:12:23:11:e1:3d:5b:e5:c0:e8:66:24:af:af: 9b:dd:9e:c3:85:2b:2a:cd:13:24:30:35:87:7c:21: 95:ea:c4:7f:4b:bc:c6:b7:11:7b:ba:43:8c:fb:38: b8:76:48:39:2a:8a:20:db:1b:22:8e:7a:d6:dc:4c: 6f:5e:f5:22:a4:17:4d:a4:20:a3:58:c8:40:8d:07: b5:4d:a4:58:73:39:70:cd:ec:91:9a:5b:70:33:e8: e2:a1:bc:a5:1f:d2:e6:30:cb:58:16:25:86:7d:fb: 2b:a4:dd:5e:34:4f:8c:61:ee:a2:70:8b:b5:0f:e0: 8b:d1:bd:35:93:c5:52:d9:08:30:7c:be:e8:90:96: 5b:b4:a2:8f:73:c1:3e:a3:27:62:50:44:82:08:20: a5:c4:c3:86:1f:c5:29:2e:83:52:e8:6f:3c:4a:ac: 92:fb:3c:b2:a5:19:20:d7:12:5e:d8:97:79:38:5c: 56:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:FD:84:04:04:D1:8D:B3:56:15:66:5A:02:38:EA:D3:3B:E1:53:8E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d8ebfb4d-f771-4efb-821c-cd11d5a24a47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:c080::/48 Signature Algorithm: sha256WithRSAEncryption 9b:61:2c:4c:dd:69:7f:5a:4c:3c:ae:c5:a8:cb:cb:d9:45:57: ac:95:34:d7:40:2a:b6:01:4c:69:43:01:ac:42:3c:dc:70:da: 37:30:24:e2:6b:d4:fe:13:da:7a:c9:10:0b:33:4d:04:8e:54: 8d:71:94:97:4c:4b:76:d8:57:45:38:08:dd:f3:4c:9f:03:d0: 38:4c:3c:e0:18:36:7b:b1:1b:1a:37:21:e9:fe:e3:38:bc:8a: 0e:2a:1b:94:d3:b8:35:d5:cc:d7:f4:ca:a1:a7:22:d6:84:79: 58:fa:ec:e1:f9:40:b8:05:ca:8b:c9:7f:7f:b4:01:53:cf:71: b3:44:b0:73:94:43:c3:3d:a0:56:6d:87:72:25:94:93:e3:64: 23:8f:fc:20:c6:3a:e4:f3:9c:6a:af:ac:d5:a8:aa:ba:55:1e: 71:42:bb:3e:ec:78:a3:91:96:4d:3b:6c:da:8e:2a:bf:80:e5: b5:ac:ff:16:4c:08:d8:bd:e6:72:83:05:cf:f5:6c:b4:e7:6d: 7a:de:b0:52:bb:4f:30:9e:93:31:a0:a1:21:74:be:2f:f9:4e: 06:53:df:24:10:dd:32:47:5a:4b:ae:a2:d3:9e:b8:97:c0:f7: 16:a5:e5:c8:cd:b6:29:60:ad:42:66:88:13:f7:ab:9a:54:43: 03:b8:25:04 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUW5/Y31P89acn9DPXsvsKlWq2PTkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxODAwMDEzNFoX DTI2MDUxOTIzNTk1OVowejFJMEcGA1UEBRNAMzViZGZkOTY0ZmI1MDRjZjIwYWZl NDNkMjdlY2U3NDYzOWQwZmUyYmU5MDhlZGE4MmFjOTdkZGI4OWExY2E5OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7c2/SNiPE6ZDJkKa7WmGZ6NV19kB el7zvARR8tZldQsGgkM+cm/0vUIRdKGrNIM2nhtMwMQ9eElREF9hsI4wkuwY9z78 xjroBHyIiRIjEeE9W+XA6GYkr6+b3Z7DhSsqzRMkMDWHfCGV6sR/S7zGtxF7ukOM +zi4dkg5Koog2xsijnrW3ExvXvUipBdNpCCjWMhAjQe1TaRYczlwzeyRmltwM+ji obylH9LmMMtYFiWGffsrpN1eNE+MYe6icIu1D+CL0b01k8VS2QgwfL7okJZbtKKP c8E+oydiUESCCCClxMOGH8UpLoNS6G88SqyS+zyypRkg1xJe2Jd5OFxWdwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHD9hAQE0Y2zVhVmWgI46tM74VOOMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q4ZWJmYjRkLWY3NzEtNGVmYi04MjFjLWNkMTFkNWEyNGE0Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYcCAMA0GCSqGSIb3DQEBCwUAA4IBAQCbYSxM3Wl/Wkw8rsWo y8vZRVeslTTXQCq2AUxpQwGsQjzccNo3MCTia9T+E9p6yRALM00EjlSNcZSXTEt2 2FdFOAjd80yfA9A4TDzgGDZ7sRsaNyHp/uM4vIoOKhuU07g11czX9MqhpyLWhHlY +uzh+UC4BcqLyX9/tAFTz3GzRLBzlEPDPaBWbYdyJZST42Qjj/wgxjrk85xqr6zV qKq6VR5xQrs+7HijkZZNO2zajiq/gOW1rP8WTAjYveZygwXP9Wy052163rBSu08w npMxoKEhdL4v+U4GU98kEN0yR1pLrqLTnriXwPcWpeXIzbYpYK1CZogT96uaVEMD uCUE -----END CERTIFICATE-----Generated at Sun Mar 1 23:54:13 2026 by rpki-client