$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d929729c-c013-4024-ad4e-4b7ddbd3ca1d.roa File: d929729c-c013-4024-ad4e-4b7ddbd3ca1d.roa (raw, json) Hash identifier: AvxZ56E91WA6TWvh9qtJhnlDCbOs6/mElqBbO5m0IOw= Subject key identifier: A2:AD:6F:DB:5F:42:4F:D4:82:68:0C:2D:7F:DC:44:26:DC:BD:F3:88 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 777D423CEEA7189EF66968567CE845B062CE2B19 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d929729c-c013-4024-ad4e-4b7ddbd3ca1d.roa Signing time: Sat 21 Feb 2026 00:00:06 +0000 ROA not before: Sat 21 Feb 2026 00:00:06 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:7000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:7d:42:3c:ee:a7:18:9e:f6:69:68:56:7c:e8:45:b0:62:ce:2b:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 21 00:00:06 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=f1faa34f7d8b4a18f318eb868f23476d31fc883200a6517863b71e309baa15e5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:06:1b:55:38:d9:36:ef:7e:cc:b3:2c:fe:ef: 8e:d1:dd:e2:95:be:87:73:c7:f4:2d:09:0a:21:43: a2:e4:f0:e6:86:35:6b:ba:32:39:34:da:0b:f7:59: 8b:43:e9:42:90:a5:52:3b:62:d4:0f:b5:2f:ab:8e: 37:1c:37:5b:df:a0:95:4b:6e:ca:7c:d7:27:b8:f1: fd:69:38:fa:4a:58:77:26:a6:53:20:34:3e:d0:77: 5a:59:62:98:5a:6c:5b:35:b6:e7:e4:b2:52:62:69: b7:a8:87:9e:fd:e5:9d:7d:91:79:15:fa:06:70:b2: a3:12:dd:a0:c4:5c:cc:62:f2:49:f8:03:c1:34:a4: 70:55:91:dd:80:2c:2b:fe:51:a4:73:fe:23:cc:d4: 87:4f:c3:32:f9:96:d1:e7:3f:3e:e3:32:99:73:79: c3:3c:51:6a:37:79:df:3b:79:6b:98:f8:45:70:4d: 41:1e:e6:14:4c:94:1a:c7:fa:38:c8:c4:33:9c:51: 79:8c:71:f7:69:a3:b6:23:8e:f0:6b:5c:36:3e:32: c9:5d:14:17:90:70:bf:3f:c6:76:af:38:6b:94:aa: 0e:52:db:75:2f:a3:c5:5a:5c:e2:78:f1:04:6f:85: bc:91:ea:66:c1:80:4b:a1:d0:d0:3d:aa:0f:17:25: 89:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:AD:6F:DB:5F:42:4F:D4:82:68:0C:2D:7F:DC:44:26:DC:BD:F3:88 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d929729c-c013-4024-ad4e-4b7ddbd3ca1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:7000::/40 Signature Algorithm: sha256WithRSAEncryption 72:6d:c7:37:c1:71:64:28:cc:b1:68:ca:82:5d:b5:23:dd:c2: 91:fe:1a:3e:57:2b:05:6f:ca:78:c9:f4:ff:80:12:53:42:07: ff:dc:19:dc:cd:9c:73:bb:f7:eb:4e:7b:c4:86:a2:6a:9a:d4: 04:ff:71:6c:a5:e0:79:c1:47:81:22:f7:4d:7c:f7:2d:57:a0: 73:6e:5a:17:ae:d6:97:0e:6c:01:f2:72:2f:77:68:e2:fb:af: 21:bf:28:48:38:b8:1b:81:ba:3f:1a:c8:bc:31:ba:26:85:fe: 97:13:7d:a1:fa:75:f6:ea:e0:75:c6:91:d2:db:71:f0:70:91: 75:f5:d5:4e:ad:76:47:e6:5b:35:d5:e5:ae:57:6f:ed:b9:9c: a8:00:ca:08:78:e2:0a:be:48:cf:4d:83:54:b4:81:71:f5:34: 71:c0:82:96:eb:0e:fa:64:b6:13:73:c5:cf:b8:0d:75:63:dd: b3:b1:d9:2d:52:b1:bd:24:34:62:ac:7e:fa:c6:2c:28:fd:95: ac:ff:14:5b:86:34:c2:0b:24:f0:64:c6:b8:8d:ff:07:4a:8c: 2f:4a:8a:0a:cb:84:f3:72:b1:17:d4:59:3b:55:69:fe:d2:e1: 09:99:cc:0d:2b:38:68:5f:0f:db:c0:15:99:20:03:d5:b3:2f: c7:ee:7e:9d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUd31CPO6nGJ72aWhWfOhFsGLOKxkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMTAwMDAwNloX DTI2MDUyMjIzNTk1OVowejFJMEcGA1UEBRNAZjFmYWEzNGY3ZDhiNGExOGYzMThl Yjg2OGYyMzQ3NmQzMWZjODgzMjAwYTY1MTc4NjNiNzFlMzA5YmFhMTVlNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QYbVTjZNu9+zLMs/u+O0d3ilb6H c8f0LQkKIUOi5PDmhjVrujI5NNoL91mLQ+lCkKVSO2LUD7Uvq443HDdb36CVS27K fNcnuPH9aTj6Slh3JqZTIDQ+0HdaWWKYWmxbNbbn5LJSYmm3qIee/eWdfZF5FfoG cLKjEt2gxFzMYvJJ+APBNKRwVZHdgCwr/lGkc/4jzNSHT8My+ZbR5z8+4zKZc3nD PFFqN3nfO3lrmPhFcE1BHuYUTJQax/o4yMQznFF5jHH3aaO2I47wa1w2PjLJXRQX kHC/P8Z2rzhrlKoOUtt1L6PFWlziePEEb4W8kepmwYBLodDQPaoPFyWJ+wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKKtb9tfQk/UgmgMLX/cRCbcvfOIMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q5Mjk3MjljLWMwMTMtNDAyNC1hZDRlLTRiN2RkYmQzY2ExZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8nAwDQYJKoZIhvcNAQELBQADggEBAHJtxzfBcWQozLFoyoJd tSPdwpH+Gj5XKwVvynjJ9P+AElNCB//cGdzNnHO79+tOe8SGomqa1AT/cWyl4HnB R4Ei90189y1XoHNuWheu1pcObAHyci93aOL7ryG/KEg4uBuBuj8ayLwxuiaF/pcT faH6dfbq4HXGkdLbcfBwkXX11U6tdkfmWzXV5a5Xb+25nKgAygh44gq+SM9Ng1S0 gXH1NHHAgpbrDvpkthNzxc+4DXVj3bOx2S1Ssb0kNGKsfvrGLCj9laz/FFuGNMIL JPBkxriN/wdKjC9KigrLhPNysRfUWTtVaf7S4QmZzA0rOGhfD9vAFZkgA9WzL8fu fp0= -----END CERTIFICATE-----Generated at Sun Mar 1 21:52:56 2026 by rpki-client