$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e0ae0175-f350-4493-ae35-4deb479e034e.roa File: e0ae0175-f350-4493-ae35-4deb479e034e.roa (raw, json) Hash identifier: bbh1CjSXLw1pOcU1brXSPoe8oMPIV/uERm+uxwMO3/g= Subject key identifier: 98:E6:56:76:8F:CE:A2:65:E6:46:F4:76:2C:0A:4B:90:71:EE:CE:17 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 24F411959DB3451E06908B1E331A217B42D5E528 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e0ae0175-f350-4493-ae35-4deb479e034e.roa Signing time: Sat 07 Feb 2026 00:00:26 +0000 ROA not before: Sat 07 Feb 2026 00:00:26 +0000 ROA not after: Fri 08 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da24:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:f4:11:95:9d:b3:45:1e:06:90:8b:1e:33:1a:21:7b:42:d5:e5:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 7 00:00:26 2026 GMT Not After : May 8 23:59:59 2026 GMT Subject: serialNumber=bd0e59ce02949fc8472933db23fbe1bb9b2e636c669bb785afb0f5bbeef1270e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:43:42:10:51:0e:a4:3c:85:11:b4:99:b5:70: a5:22:72:c7:23:16:51:5c:04:03:2e:ab:42:03:0b: 98:84:6e:6d:e4:dd:0e:b6:c2:7d:33:6e:09:9e:58: 73:d2:2b:c7:8f:94:83:44:f9:1f:d9:18:9b:57:69: 2f:6b:59:29:d2:6d:92:f0:ac:d6:05:51:f9:b2:7d: 15:e7:45:d8:36:b0:72:3c:84:3d:34:99:70:12:b9: d2:79:70:44:2e:c6:05:23:b2:ef:62:d8:6c:6b:12: 98:07:7d:c7:22:37:7f:ca:a8:3f:f5:8b:5a:bb:3d: 90:25:70:ad:41:f8:db:78:f6:86:16:bb:ff:33:db: 4a:dd:5a:ce:98:b2:05:d7:66:9d:80:58:39:e6:39: a6:7b:7d:76:d4:24:17:09:ff:93:73:da:33:d6:bf: 25:3c:0c:c8:45:78:13:f8:7a:11:62:29:7a:10:07: 1b:13:a2:47:72:5d:e7:d9:ea:eb:8e:20:1e:33:3c: e6:c5:73:3d:fc:25:ee:1c:f2:cc:14:6c:54:bd:e3: 44:43:69:f6:67:41:75:3b:6e:ff:a2:ed:33:cd:06: 01:d1:1b:4a:46:07:c9:2d:c6:88:51:75:20:36:ba: 69:ad:ee:45:78:d8:82:93:d1:28:8a:f9:3a:b6:60: 1a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E6:56:76:8F:CE:A2:65:E6:46:F4:76:2C:0A:4B:90:71:EE:CE:17 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e0ae0175-f350-4493-ae35-4deb479e034e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da24:8000::/36 Signature Algorithm: sha256WithRSAEncryption 60:2e:a0:50:01:e7:1a:79:d6:08:17:48:e7:fe:1f:25:7c:ad: ff:49:f2:05:88:44:1f:86:9a:b9:5a:94:6a:ae:4a:99:4b:62: 6b:87:4f:f4:38:4a:bb:e6:7b:3b:cc:1c:de:53:16:e8:b6:74: 4b:71:bc:7d:26:1e:a6:4f:d5:28:e1:9a:d3:bb:fe:b0:2c:6d: c2:66:ac:c4:47:35:27:d4:ed:b1:28:04:bb:1d:75:92:db:a1: f8:71:d4:49:bd:95:6e:36:98:3f:21:25:9c:3f:4b:5c:2b:7c: 39:86:9a:fb:89:e1:b2:8f:c4:08:91:58:96:bf:ab:c3:db:52: 22:9d:64:11:e7:24:81:91:ad:f5:b6:f9:12:ab:f5:cd:56:c0: 4b:41:4c:97:dd:df:76:78:05:be:0b:11:d3:d4:c6:97:41:a4: 51:ec:75:09:69:85:3a:ab:cc:76:f6:de:99:53:dd:fe:48:36: ac:f1:09:d8:e1:83:f2:88:5d:1b:b7:1f:b3:39:8e:b4:4a:08: 1d:a4:61:0c:78:1e:5e:ec:37:6a:fb:1c:c7:7a:78:59:65:a9: 9a:17:1e:41:50:fa:7c:81:5e:e2:05:64:02:f5:35:4f:e2:b2: 39:1a:45:2c:6a:c8:18:6e:fe:3e:5f:8d:9e:f6:27:9d:fd:8e: 24:f2:42:08 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUJPQRlZ2zRR4GkIseMxohe0LV5SgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIwNzAwMDAyNloX DTI2MDUwODIzNTk1OVowejFJMEcGA1UEBRNAYmQwZTU5Y2UwMjk0OWZjODQ3Mjkz M2RiMjNmYmUxYmI5YjJlNjM2YzY2OWJiNzg1YWZiMGY1YmJlZWYxMjcwZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60NCEFEOpDyFEbSZtXClInLHIxZR XAQDLqtCAwuYhG5t5N0OtsJ9M24Jnlhz0ivHj5SDRPkf2RibV2kva1kp0m2S8KzW BVH5sn0V50XYNrByPIQ9NJlwErnSeXBELsYFI7LvYthsaxKYB33HIjd/yqg/9Yta uz2QJXCtQfjbePaGFrv/M9tK3VrOmLIF12adgFg55jmme3121CQXCf+Tc9oz1r8l PAzIRXgT+HoRYil6EAcbE6JHcl3n2errjiAeMzzmxXM9/CXuHPLMFGxUveNEQ2n2 Z0F1O27/ou0zzQYB0RtKRgfJLcaIUXUgNrppre5FeNiCk9Eoivk6tmAapQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJjmVnaPzqJl5kb0diwKS5Bx7s4XMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UwYWUwMTc1LWYzNTAtNDQ5My1hZTM1LTRkZWI0NzllMDM0ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaJIAwDQYJKoZIhvcNAQELBQADggEBAGAuoFAB5xp51ggXSOf+ HyV8rf9J8gWIRB+GmrlalGquSplLYmuHT/Q4SrvmezvMHN5TFui2dEtxvH0mHqZP 1SjhmtO7/rAsbcJmrMRHNSfU7bEoBLsddZLbofhx1Em9lW42mD8hJZw/S1wrfDmG mvuJ4bKPxAiRWJa/q8PbUiKdZBHnJIGRrfW2+RKr9c1WwEtBTJfd33Z4Bb4LEdPU xpdBpFHsdQlphTqrzHb23plT3f5INqzxCdjhg/KIXRu3H7M5jrRKCB2kYQx4Hl7s N2r7HMd6eFllqZoXHkFQ+nyBXuIFZAL1NU/isjkaRSxqyBhu/j5fjZ72J539jiTy Qgg= -----END CERTIFICATE-----Generated at Sun Mar 1 22:22:38 2026 by rpki-client