$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ded77c95-8bb7-45e4-8c99-28037f7d90fb.roa File: ded77c95-8bb7-45e4-8c99-28037f7d90fb.roa (raw, json) Hash identifier: O8G4TRvyW5sa+3aIggztaLq6ttSdc4ee2S6uhujbh+w= Subject key identifier: BC:26:32:5B:69:7B:25:9B:E5:DC:9E:2B:BA:09:D7:3B:E2:92:89:F4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 22AE831EF5E095EFB47BFC61AE91326E2E52662E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ded77c95-8bb7-45e4-8c99-28037f7d90fb.roa Signing time: Thu 26 Feb 2026 00:00:09 +0000 ROA not before: Thu 26 Feb 2026 00:00:09 +0000 ROA not after: Wed 27 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daed:8800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:ae:83:1e:f5:e0:95:ef:b4:7b:fc:61:ae:91:32:6e:2e:52:66:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 26 00:00:09 2026 GMT Not After : May 27 23:59:59 2026 GMT Subject: serialNumber=a2543c54c4613f50e47d563bf26d9423f4fbc4b5d845d7004e8d3d5bab1d120b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:66:f7:04:f5:cc:27:c1:8d:56:81:ea:f3:75: 97:50:9a:27:66:22:f4:36:83:55:fb:86:48:c2:b5: 67:84:0b:ce:ac:ae:2c:7f:b5:60:60:44:fb:34:d3: 9e:3b:3e:47:ea:9c:b1:7f:fb:7a:1a:33:65:9b:65: 69:b1:82:89:15:e3:fc:df:07:e1:44:98:8b:3d:fa: 55:6f:a6:a6:99:69:e6:e1:24:4e:56:ff:eb:de:66: 7c:5e:8a:f5:01:3e:af:6d:49:60:bf:39:7a:af:96: 1d:fa:13:50:69:b9:21:d2:82:09:e5:b6:98:65:51: 1c:30:60:53:ce:27:b8:bd:58:12:90:0a:6a:cb:40: dc:20:4f:fd:a0:77:8c:98:03:d7:07:8a:ae:98:25: c5:3a:63:7f:47:81:b6:77:ae:14:dd:30:64:d1:87: 2b:1e:b2:3e:83:c1:6c:5c:fe:ba:94:27:df:68:b5: e9:c4:5e:6d:e0:4a:93:0b:a2:8c:b9:a4:9d:96:09: 27:ba:e8:5a:c5:14:60:af:f3:20:c1:58:dd:53:4c: 95:14:86:71:18:6d:35:f7:ed:39:2f:1f:0e:1a:1d: 1e:4a:3f:ad:b5:12:bb:a2:8f:23:09:ec:53:49:17: 0e:ec:de:ec:1d:21:d2:4c:7f:35:1c:ff:4b:ec:ab: a2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:26:32:5B:69:7B:25:9B:E5:DC:9E:2B:BA:09:D7:3B:E2:92:89:F4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ded77c95-8bb7-45e4-8c99-28037f7d90fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daed:8800::/40 Signature Algorithm: sha256WithRSAEncryption 10:4e:d6:72:a9:dd:5e:9a:0d:c8:2e:9e:e6:34:b0:19:53:66: 9d:c4:e9:43:36:21:95:65:fc:c4:c4:ba:25:2e:5f:bd:87:8d: 05:6c:49:78:e4:e8:cf:34:05:70:81:0c:f4:f6:c6:9d:81:11: f5:7e:14:3b:5f:ce:3f:c5:02:f4:3e:d8:55:d1:77:67:35:2a: db:2d:50:9d:c6:50:5c:ce:96:60:27:5e:ec:4b:52:fd:72:58: 1e:e9:54:3b:9c:9b:0d:30:2f:c4:a7:3b:47:91:13:8b:1b:25: f8:6f:7a:4f:c0:4b:bc:e7:1a:81:78:52:91:6b:e3:fe:7b:38: 15:0c:98:cb:a7:95:a7:d1:a0:c3:1f:e6:01:45:7a:8d:e8:41: cd:29:36:f1:90:34:89:79:ee:a4:0b:ae:df:06:90:e2:48:a3: 6d:a7:07:d9:c1:9e:ed:6d:41:4f:0e:0b:5d:1f:4a:dd:6b:3c: 8e:bf:48:d2:f8:27:64:fd:75:69:a0:3e:64:0c:b8:4a:c0:0a: de:ef:86:1e:2d:16:43:b1:43:cc:33:af:27:8d:8b:9c:96:95: 89:c5:e7:9c:24:05:ae:21:5e:6e:8f:7f:cd:7e:93:c1:c8:07: 97:25:04:bc:68:f4:f8:89:56:59:4f:1b:09:67:67:b8:74:6a: 84:1e:ac:28 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUIq6DHvXgle+0e/xhrpEybi5SZi4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyNjAwMDAwOVoX DTI2MDUyNzIzNTk1OVowejFJMEcGA1UEBRNAYTI1NDNjNTRjNDYxM2Y1MGU0N2Q1 NjNiZjI2ZDk0MjNmNGZiYzRiNWQ4NDVkNzAwNGU4ZDNkNWJhYjFkMTIwYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Wb3BPXMJ8GNVoHq83WXUJonZiL0 NoNV+4ZIwrVnhAvOrK4sf7VgYET7NNOeOz5H6pyxf/t6GjNlm2VpsYKJFeP83wfh RJiLPfpVb6ammWnm4SROVv/r3mZ8Xor1AT6vbUlgvzl6r5Yd+hNQabkh0oIJ5baY ZVEcMGBTzie4vVgSkApqy0DcIE/9oHeMmAPXB4qumCXFOmN/R4G2d64U3TBk0Ycr HrI+g8FsXP66lCffaLXpxF5t4EqTC6KMuaSdlgknuuhaxRRgr/MgwVjdU0yVFIZx GG019+05Lx8OGh0eSj+ttRK7oo8jCexTSRcO7N7sHSHSTH81HP9L7KuitQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLwmMltpeyWb5dyeK7oJ1zvikon0MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RlZDc3Yzk1LThiYjctNDVlNC04Yzk5LTI4MDM3ZjdkOTBmYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7YgwDQYJKoZIhvcNAQELBQADggEBABBO1nKp3V6aDcgunuY0 sBlTZp3E6UM2IZVl/MTEuiUuX72HjQVsSXjk6M80BXCBDPT2xp2BEfV+FDtfzj/F AvQ+2FXRd2c1KtstUJ3GUFzOlmAnXuxLUv1yWB7pVDucmw0wL8SnO0eRE4sbJfhv ek/AS7znGoF4UpFr4/57OBUMmMunlafRoMMf5gFFeo3oQc0pNvGQNIl57qQLrt8G kOJIo22nB9nBnu1tQU8OC10fSt1rPI6/SNL4J2T9dWmgPmQMuErACt7vhh4tFkOx Q8wzryeNi5yWlYnF55wkBa4hXm6Pf81+k8HIB5clBLxo9PiJVllPGwlnZ7h0aoQe rCg= -----END CERTIFICATE-----Generated at Sun Mar 1 23:47:11 2026 by rpki-client