$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ddd84904-3c7b-443c-8bda-81864bb08de1.roa File: ddd84904-3c7b-443c-8bda-81864bb08de1.roa (raw, json) Hash identifier: SiSCbydUlDYouRXfOBV1nzdKawPs90xVVEh7DI7hkZM= Subject key identifier: 2B:FA:6A:B3:65:99:0A:CF:13:B8:55:89:FA:F1:B0:81:28:36:10:83 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2D5CEBEDF3015F6B2113D2A45F6C5C9714366883 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ddd84904-3c7b-443c-8bda-81864bb08de1.roa Signing time: Sat 14 Feb 2026 00:00:07 +0000 ROA not before: Sat 14 Feb 2026 00:00:07 +0000 ROA not after: Fri 15 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab9:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:5c:eb:ed:f3:01:5f:6b:21:13:d2:a4:5f:6c:5c:97:14:36:68:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 14 00:00:07 2026 GMT Not After : May 15 23:59:59 2026 GMT Subject: serialNumber=6a390d8e68d8663c37a14662d06d21acceb9180272ee5691f7accafdb6fe4d69, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:93:8d:e9:36:f2:4d:32:40:b7:3d:67:25:e7: 3d:fe:2f:df:ba:c1:24:f9:e5:8a:0a:90:60:36:1a: d3:67:fe:f9:8e:d2:da:d5:9a:5c:3a:b6:c8:40:f7: 1e:ad:8b:0a:fa:88:37:39:65:9f:e5:a5:3c:ad:0c: 03:70:63:83:b9:94:5c:dd:dd:2f:63:b4:6d:27:12: 81:7c:96:0a:ab:47:ea:28:e8:45:8d:0d:33:fb:d1: 5f:1e:9a:20:34:72:48:ae:53:7c:15:03:a7:3c:ca: aa:4b:ed:54:67:60:7d:35:b4:de:7e:7c:55:a8:52: 00:ef:c8:95:1c:fb:f0:0c:2b:f2:21:ad:9d:c8:68: d4:c0:73:2e:72:7e:0d:19:52:39:a6:d3:14:e1:1a: 4d:cb:62:52:ed:43:ca:bd:3b:5c:c3:a2:86:42:21: e9:f3:8f:9d:ff:74:e6:f7:da:59:8b:7c:33:df:89: fb:b9:14:e3:97:6f:c4:c8:19:05:4a:e3:bb:b5:18: cb:e9:c0:92:b7:79:4d:2a:d6:4c:6c:11:be:7d:aa: 3d:14:7e:63:aa:df:39:c9:14:25:d7:32:57:ae:37: 02:63:90:97:18:6b:32:a3:32:d6:4b:3d:08:ea:ec: 4d:32:67:2a:32:bf:2c:18:67:f0:66:31:9f:48:d4: 3c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:FA:6A:B3:65:99:0A:CF:13:B8:55:89:FA:F1:B0:81:28:36:10:83 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ddd84904-3c7b-443c-8bda-81864bb08de1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:4800::/40 Signature Algorithm: sha256WithRSAEncryption a0:25:8d:73:d1:0e:f1:96:46:10:ec:ee:a1:85:cf:82:0a:f9: e4:45:3a:51:08:37:52:5a:ad:52:6b:5d:c3:83:b5:54:bc:a5: af:18:6c:04:b8:23:61:de:f9:7f:f6:61:be:a2:32:04:f2:15: 69:d0:1c:cf:e1:fe:54:df:1b:d6:4d:c5:50:0a:23:80:b9:e3: 59:a7:22:96:9a:87:a3:cf:f8:e1:53:09:36:c9:22:27:c6:a4: 83:b7:8c:84:91:e1:d1:17:ed:fb:84:9a:79:d4:66:37:fa:ab: ff:50:1f:18:5b:6c:74:d4:e7:2a:9c:2d:13:3f:59:20:15:3a: b4:99:d6:bb:01:43:d9:3e:d1:b7:f5:84:19:c4:4b:79:dd:8a: 36:0e:bf:2e:2a:2f:bc:ce:93:f0:36:d6:66:41:15:ec:55:8f: c9:29:4b:15:e7:42:cd:5e:e4:0f:eb:38:bf:26:16:a6:6f:35: 1d:12:80:d8:d7:1c:d1:7c:34:9c:35:d1:55:6a:13:d7:7d:51: 56:2d:b7:3b:6f:24:51:62:3d:cc:ba:be:c4:27:e4:02:45:33: 15:c6:fb:00:76:1c:aa:04:eb:80:62:6e:b1:f0:6e:f1:d8:a2: 94:75:92:bd:0f:8e:b0:23:ba:46:ab:28:74:09:b7:6d:36:5b: 26:d7:23:0f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIULVzr7fMBX2shE9KkX2xclxQ2aIMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxNDAwMDAwN1oX DTI2MDUxNTIzNTk1OVowejFJMEcGA1UEBRNANmEzOTBkOGU2OGQ4NjYzYzM3YTE0 NjYyZDA2ZDIxYWNjZWI5MTgwMjcyZWU1NjkxZjdhY2NhZmRiNmZlNGQ2OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZON6TbyTTJAtz1nJec9/i/fusEk +eWKCpBgNhrTZ/75jtLa1ZpcOrbIQPcerYsK+og3OWWf5aU8rQwDcGODuZRc3d0v Y7RtJxKBfJYKq0fqKOhFjQ0z+9FfHpogNHJIrlN8FQOnPMqqS+1UZ2B9NbTefnxV qFIA78iVHPvwDCvyIa2dyGjUwHMucn4NGVI5ptMU4RpNy2JS7UPKvTtcw6KGQiHp 84+d/3Tm99pZi3wz34n7uRTjl2/EyBkFSuO7tRjL6cCSt3lNKtZMbBG+fao9FH5j qt85yRQl1zJXrjcCY5CXGGsyozLWSz0I6uxNMmcqMr8sGGfwZjGfSNQ8yQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCv6arNlmQrPE7hVifrxsIEoNhCDMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RkZDg0OTA0LTNjN2ItNDQzYy04YmRhLTgxODY0YmIwOGRlMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauUgwDQYJKoZIhvcNAQELBQADggEBAKAljXPRDvGWRhDs7qGF z4IK+eRFOlEIN1JarVJrXcODtVS8pa8YbAS4I2He+X/2Yb6iMgTyFWnQHM/h/lTf G9ZNxVAKI4C541mnIpaah6PP+OFTCTbJIifGpIO3jISR4dEX7fuEmnnUZjf6q/9Q HxhbbHTU5yqcLRM/WSAVOrSZ1rsBQ9k+0bf1hBnES3ndijYOvy4qL7zOk/A21mZB FexVj8kpSxXnQs1e5A/rOL8mFqZvNR0SgNjXHNF8NJw10VVqE9d9UVYttztvJFFi Pcy6vsQn5AJFMxXG+wB2HKoE64BibrHwbvHYopR1kr0PjrAjukarKHQJt202WybX Iw8= -----END CERTIFICATE-----Generated at Sun Mar 1 22:07:25 2026 by rpki-client