$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e1b0f734-4dd5-4d6b-b560-204025a1b2ef.roa File: e1b0f734-4dd5-4d6b-b560-204025a1b2ef.roa (raw, json) Hash identifier: Dc4YRtumlSgPQybLxtek2TQUwtyEmbfYqAb40SC0Ux0= Subject key identifier: 88:C6:BF:03:06:3B:6C:04:76:E5:29:D1:03:14:36:8A:0B:9D:DB:2A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 703B9DAAA0860A4F308426222A3A51E88D4B855D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e1b0f734-4dd5-4d6b-b560-204025a1b2ef.roa Signing time: Wed 18 Feb 2026 00:01:11 +0000 ROA not before: Wed 18 Feb 2026 00:01:11 +0000 ROA not after: Tue 19 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:b080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:3b:9d:aa:a0:86:0a:4f:30:84:26:22:2a:3a:51:e8:8d:4b:85:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 18 00:01:11 2026 GMT Not After : May 19 23:59:59 2026 GMT Subject: serialNumber=bafec28d7b94cff6250749438be97802d58051f3fa14db13187d5988563edf63, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:44:b8:b7:12:a6:00:dc:45:d7:6b:12:a9:90: 4f:fa:51:fa:a9:a2:6d:ee:30:70:2f:9b:cd:ed:53: de:85:73:9e:88:4e:e7:67:1c:6c:44:65:7d:8b:24: a5:c5:f1:f5:f7:d7:32:ae:43:6e:74:80:df:9d:88: ff:3e:93:da:ae:63:84:a9:e2:3d:c7:5a:6a:9f:71: 89:e4:7b:e3:ad:66:3d:45:3d:65:9f:aa:f8:5b:a4: d0:8c:d8:d3:66:99:c1:ef:b4:1a:d1:42:00:46:8c: 8b:15:a3:32:d4:2f:1a:eb:cf:aa:96:98:f9:71:bf: f9:85:b6:a3:67:9d:6c:f1:3d:ee:f6:46:c6:f9:83: e1:a7:ae:13:b6:b9:86:20:3a:0c:4a:13:19:53:ab: d5:02:24:a7:3f:be:3e:44:27:fb:54:3e:c7:d5:8b: 0c:52:0c:15:01:77:89:1d:2e:88:bc:61:cc:71:48: df:81:be:fc:43:6f:6b:d2:f8:76:32:41:41:f8:1e: d8:fc:04:76:6a:7d:df:db:5c:15:c4:2f:81:82:96: f8:99:0e:7f:2d:a3:d0:2b:f4:99:2e:13:df:a7:51: 2f:6a:55:a4:03:7a:30:96:ea:8b:0e:9d:fd:86:be: 04:87:e1:40:37:c4:a4:91:73:d6:43:fb:de:b4:1a: b5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C6:BF:03:06:3B:6C:04:76:E5:29:D1:03:14:36:8A:0B:9D:DB:2A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e1b0f734-4dd5-4d6b-b560-204025a1b2ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:b080::/48 Signature Algorithm: sha256WithRSAEncryption 2e:36:c5:5d:19:af:6e:08:2f:8b:b0:0b:60:fd:e8:f0:06:a7: 5b:69:4b:30:4f:18:c5:c5:64:85:6a:2c:a3:59:b0:9d:6c:27: 6c:c1:c4:d6:46:41:e5:70:76:60:6d:21:84:66:5b:60:3f:69: 40:97:3e:b8:6c:94:5b:a3:d8:5f:85:0f:0c:b3:8d:92:5f:0c: a8:9c:df:64:be:2e:c6:12:52:a2:2c:76:e2:02:6e:39:3d:55: 87:da:87:22:fb:b0:f8:cf:2d:14:35:db:21:88:a3:96:31:c0: f2:a9:2b:cd:31:aa:9b:1a:c8:ed:77:cd:2e:da:88:e6:f8:4f: 62:a8:4a:77:c7:50:e1:9d:68:bd:fb:f9:c3:0e:34:63:83:55: 36:43:f1:5d:a1:64:1a:3f:76:25:81:7c:fd:29:2d:8d:41:1a: 72:3a:ae:6e:4c:24:3c:6a:7a:b6:21:b7:a7:5d:e3:18:93:17: 64:1c:ab:d7:48:19:80:27:ad:1d:ec:10:4f:6d:84:1f:d2:87: b6:b7:65:a1:70:e5:16:70:47:0b:da:97:4e:93:32:2d:df:f4: 98:23:c0:ad:11:27:6e:b2:98:a2:c3:a8:75:97:c5:dd:e9:86: 64:bb:df:03:ff:b9:05:bf:8d:33:46:90:32:b3:2b:ab:72:ae: bf:47:3b:4f -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUcDudqqCGCk8whCYiKjpR6I1LhV0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxODAwMDExMVoX DTI2MDUxOTIzNTk1OVowejFJMEcGA1UEBRNAYmFmZWMyOGQ3Yjk0Y2ZmNjI1MDc0 OTQzOGJlOTc4MDJkNTgwNTFmM2ZhMTRkYjEzMTg3ZDU5ODg1NjNlZGY2MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0S4txKmANxF12sSqZBP+lH6qaJt 7jBwL5vN7VPehXOeiE7nZxxsRGV9iySlxfH199cyrkNudIDfnYj/PpParmOEqeI9 x1pqn3GJ5HvjrWY9RT1ln6r4W6TQjNjTZpnB77Qa0UIARoyLFaMy1C8a68+qlpj5 cb/5hbajZ51s8T3u9kbG+YPhp64TtrmGIDoMShMZU6vVAiSnP74+RCf7VD7H1YsM UgwVAXeJHS6IvGHMcUjfgb78Q29r0vh2MkFB+B7Y/AR2an3f21wVxC+Bgpb4mQ5/ LaPQK/SZLhPfp1EvalWkA3owluqLDp39hr4Eh+FAN8SkkXPWQ/vetBq1lQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIjGvwMGO2wEduUp0QMUNooLndsqMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UxYjBmNzM0LTRkZDUtNGQ2Yi1iNTYwLTIwNDAyNWExYjJlZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8rCAMA0GCSqGSIb3DQEBCwUAA4IBAQAuNsVdGa9uCC+LsAtg /ejwBqdbaUswTxjFxWSFaiyjWbCdbCdswcTWRkHlcHZgbSGEZltgP2lAlz64bJRb o9hfhQ8Ms42SXwyonN9kvi7GElKiLHbiAm45PVWH2oci+7D4zy0UNdshiKOWMcDy qSvNMaqbGsjtd80u2ojm+E9iqEp3x1DhnWi9+/nDDjRjg1U2Q/FdoWQaP3YlgXz9 KS2NQRpyOq5uTCQ8anq2IbenXeMYkxdkHKvXSBmAJ60d7BBPbYQf0oe2t2WhcOUW cEcL2pdOkzIt3/SYI8CtESduspiiw6h1l8Xd6YZku98D/7kFv40zRpAysyurcq6/ RztP -----END CERTIFICATE-----Generated at Sun Mar 1 22:04:56 2026 by rpki-client