$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e3647b30-15b8-4dd3-8527-ddb9634cb404.roa File: e3647b30-15b8-4dd3-8527-ddb9634cb404.roa (raw, json) Hash identifier: tbTB78/d9biZ1xX7JmNN1WGLD4M0HBardMNUMNMviWI= Subject key identifier: 2E:F7:F7:73:9D:6A:86:FB:69:2D:3D:BE:8B:24:4A:B3:8F:A7:68:C0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 42420787D62FE5BE10ADBEDFFD61131FA98D6FA5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e3647b30-15b8-4dd3-8527-ddb9634cb404.roa Signing time: Fri 20 Feb 2026 00:20:05 +0000 ROA not before: Fri 20 Feb 2026 00:20:05 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:c840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:42:07:87:d6:2f:e5:be:10:ad:be:df:fd:61:13:1f:a9:8d:6f:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 20 00:20:05 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=4544787e4e7e7f2f82156014152307be59ed40b6cbf71c0e84e360cbeb3d2801, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a8:61:ca:31:4b:3d:14:89:2b:63:2d:e0:be: 62:10:a2:d4:c8:7d:f3:67:03:16:66:13:c5:72:a1: 35:74:c5:f0:ae:8a:18:db:8b:7b:04:3a:f2:a1:78: 2a:f3:e1:93:97:f6:a6:17:0f:cc:a2:73:98:ea:54: fb:f8:89:f6:72:07:7b:27:42:12:1f:0a:7f:c5:f3: 4a:f9:d0:1a:11:3d:ce:f0:68:78:93:1a:51:e8:ec: 59:24:33:11:c6:ce:7d:6f:02:84:f0:00:d8:91:8f: 01:cd:64:8c:2d:5b:e2:c3:2d:f7:39:91:70:5c:07: 9a:38:e5:58:9b:99:aa:aa:11:ca:82:a0:b6:f1:15: 5b:68:9d:74:90:3d:1c:a6:c6:36:96:29:6a:09:fe: d6:dc:cd:5b:70:fc:c1:e9:b1:68:da:b9:1a:13:79: 89:28:ac:ab:0d:4b:a4:40:aa:65:94:09:1c:24:b9: b6:95:7a:b4:4b:34:cc:af:28:7a:3d:83:cb:d3:f9: 33:08:34:98:54:56:52:f7:e0:9e:75:08:84:35:50: 4f:25:5c:94:54:b0:4c:37:84:f1:2d:e1:47:0c:94: b9:39:c0:eb:6e:df:8d:b8:ab:b8:a2:94:c1:a9:29: b0:c3:8d:0c:38:31:6d:bd:32:a4:34:1d:02:97:27: ed:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F7:F7:73:9D:6A:86:FB:69:2D:3D:BE:8B:24:4A:B3:8F:A7:68:C0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e3647b30-15b8-4dd3-8527-ddb9634cb404.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:c840::/48 Signature Algorithm: sha256WithRSAEncryption 4c:2e:57:35:c9:60:38:58:af:f4:f1:0a:84:1e:48:ff:94:ac: 5f:55:fb:66:29:9b:62:12:2a:cf:f2:9d:69:87:bd:aa:0b:b0: 77:03:ab:c6:46:a1:3d:c9:56:54:31:e5:32:3c:d7:5d:d3:7e: 54:1e:7c:61:fa:f3:c8:ea:99:9a:95:c6:c5:c4:46:5a:d6:69: 96:0c:a8:8d:70:15:a2:11:80:07:5f:cc:35:38:e0:d8:93:c2: 90:46:80:5d:28:52:82:d5:b8:44:d9:49:60:12:e5:06:ee:ec: 39:cd:84:a3:25:13:08:55:ea:d4:1e:bc:d0:42:23:38:7d:72: 4e:51:39:4c:1c:fd:2c:0c:cc:75:cd:95:68:64:fd:7b:34:1d: c1:f1:ee:9a:06:93:11:e3:20:50:2f:83:df:15:7e:46:ab:33: b2:c1:92:18:14:9c:8a:03:d1:d6:a8:42:28:18:74:49:d1:80: 1b:b2:4c:c5:19:52:c5:6b:a6:d3:c2:2d:19:f5:67:b3:cc:7b: d7:bf:97:43:cc:f3:a9:c9:79:51:f4:1a:14:89:4a:c4:41:d9: 0d:88:78:36:db:50:0c:e8:2a:ab:9d:b2:de:9c:e2:c6:38:c4: 63:4c:64:0d:a0:12:ea:00:6a:fa:01:f6:4b:77:c4:aa:bf:0a: 71:fb:2d:06 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUQkIHh9Yv5b4Qrb7f/WETH6mNb6UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMDAwMjAwNVoX DTI2MDUyMTIzNTk1OVowejFJMEcGA1UEBRNANDU0NDc4N2U0ZTdlN2YyZjgyMTU2 MDE0MTUyMzA3YmU1OWVkNDBiNmNiZjcxYzBlODRlMzYwY2JlYjNkMjgwMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArahhyjFLPRSJK2Mt4L5iEKLUyH3z ZwMWZhPFcqE1dMXwrooY24t7BDryoXgq8+GTl/amFw/MonOY6lT7+In2cgd7J0IS Hwp/xfNK+dAaET3O8Gh4kxpR6OxZJDMRxs59bwKE8ADYkY8BzWSMLVviwy33OZFw XAeaOOVYm5mqqhHKgqC28RVbaJ10kD0cpsY2lilqCf7W3M1bcPzB6bFo2rkaE3mJ KKyrDUukQKpllAkcJLm2lXq0SzTMryh6PYPL0/kzCDSYVFZS9+CedQiENVBPJVyU VLBMN4TxLeFHDJS5OcDrbt+NuKu4opTBqSmww40MODFtvTKkNB0ClyftbwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFC7393Odaob7aS09voskSrOPp2jAMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UzNjQ3YjMwLTE1YjgtNGRkMy04NTI3LWRkYjk2MzRjYjQwNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaOMhAMA0GCSqGSIb3DQEBCwUAA4IBAQBMLlc1yWA4WK/08QqE Hkj/lKxfVftmKZtiEirP8p1ph72qC7B3A6vGRqE9yVZUMeUyPNdd035UHnxh+vPI 6pmalcbFxEZa1mmWDKiNcBWiEYAHX8w1OODYk8KQRoBdKFKC1bhE2UlgEuUG7uw5 zYSjJRMIVerUHrzQQiM4fXJOUTlMHP0sDMx1zZVoZP17NB3B8e6aBpMR4yBQL4Pf FX5GqzOywZIYFJyKA9HWqEIoGHRJ0YAbskzFGVLFa6bTwi0Z9WezzHvXv5dDzPOp yXlR9BoUiUrEQdkNiHg221AM6CqrnbLenOLGOMRjTGQNoBLqAGr6AfZLd8Sqvwpx +y0G -----END CERTIFICATE-----Generated at Sun Mar 1 22:10:05 2026 by rpki-client