$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e3f46d7a-1a65-481b-80ff-a3a9036a5e8e.roa File: e3f46d7a-1a65-481b-80ff-a3a9036a5e8e.roa (raw, json) Hash identifier: NdA1SyrknvMS1e70vNJRfkkkwILFHAHeL9XHNRCeqkw= Subject key identifier: 1F:22:58:A1:B9:58:E1:7B:89:28:AE:8C:BD:58:E1:41:91:C8:FA:CA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 68766E4211B91061DC7B22A3E088D489864A72E1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e3f46d7a-1a65-481b-80ff-a3a9036a5e8e.roa Signing time: Fri 20 Feb 2026 00:00:14 +0000 ROA not before: Fri 20 Feb 2026 00:00:14 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:c000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:76:6e:42:11:b9:10:61:dc:7b:22:a3:e0:88:d4:89:86:4a:72:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 20 00:00:14 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=ea30c27b8a402d7b9a127e2358ed12530b151cd7f579f0f2c0952dcf32826713, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b6:b9:b9:a4:f8:db:d8:10:29:5e:da:ed:04: 78:d1:9e:47:50:d7:ec:cc:15:ff:f1:85:c4:08:1f: 24:0c:be:14:90:c6:8b:ec:1b:33:16:8c:38:04:8c: f1:c7:11:ab:02:05:0d:05:f7:1e:7f:9c:c9:30:95: c1:d5:be:80:30:0f:ba:36:7a:f2:cd:79:26:98:82: 09:5b:de:b6:bb:21:80:35:3c:64:54:b3:2d:dd:22: f9:bc:5a:5d:83:1e:18:be:bc:63:2e:4c:1f:ad:55: ce:d5:25:ff:10:44:24:39:ed:a0:c5:59:12:35:64: bf:e1:80:01:1f:cd:de:b5:50:c1:e1:c3:3b:93:3e: 04:01:83:f4:e0:0c:d8:cf:bf:be:7c:70:fd:93:21: 50:12:a3:24:84:76:0d:37:7e:97:f1:6a:71:ef:24: 54:27:d2:b2:1c:3d:1f:59:56:2c:f7:1b:df:2a:62: 99:4e:4c:38:89:3b:86:6b:0b:d1:3e:bd:a8:30:cf: 1c:b6:df:e4:76:a0:c4:30:b3:54:f1:2d:24:63:c1: c0:b1:07:af:3c:03:35:a0:b0:44:db:e4:ac:bf:83: 4c:94:0d:3d:be:1b:e0:fe:0c:1b:e9:83:37:ef:ba: 81:78:c9:4c:2b:57:3e:d2:60:55:5f:de:0d:ba:d7: 81:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:22:58:A1:B9:58:E1:7B:89:28:AE:8C:BD:58:E1:41:91:C8:FA:CA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e3f46d7a-1a65-481b-80ff-a3a9036a5e8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:c000::/40 Signature Algorithm: sha256WithRSAEncryption a7:ec:2b:24:6f:35:9a:d4:9f:b5:a0:e5:7d:94:62:af:cf:d8: 2e:46:6c:16:52:b6:dd:21:3c:0d:79:57:ae:ec:77:c8:79:2f: 61:2d:ef:c6:a9:ba:37:af:5a:2a:35:93:b9:9c:c1:df:66:7d: a0:25:d2:2f:34:d1:63:3a:41:79:53:42:1d:a0:4b:98:58:7e: d0:7e:5f:8c:4b:fa:05:b7:31:d3:0d:4c:55:be:aa:e5:ae:1d: 59:a0:aa:ab:aa:70:c1:64:83:96:81:aa:b5:0c:d7:c3:be:44: 79:6a:6d:8d:7b:8e:bc:6a:bf:19:ba:e4:15:a1:20:0a:70:42: 90:fe:25:d7:3c:4c:c4:64:3a:79:21:f8:53:52:d0:44:de:b2: e1:7c:f5:c1:4f:f3:6f:f8:37:97:a4:4d:02:67:a8:69:2b:07: d6:c3:2b:e4:1c:9a:8e:74:1e:69:be:3b:1f:24:39:a9:ab:dd: 56:5f:e6:df:d2:05:32:9c:54:eb:d4:11:dd:9a:6a:51:12:e5: 5c:6a:0a:11:af:a2:3c:c5:23:50:12:4d:30:df:bb:7d:56:69: 81:18:79:09:09:6d:cd:ba:db:02:49:0d:fa:aa:02:d7:60:61: 0c:f1:3e:4f:69:31:3c:af:be:cc:4e:0a:dc:0b:47:c8:62:9d: ec:bb:02:d1 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUaHZuQhG5EGHceyKj4IjUiYZKcuEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMDAwMDAxNFoX DTI2MDUyMTIzNTk1OVowejFJMEcGA1UEBRNAZWEzMGMyN2I4YTQwMmQ3YjlhMTI3 ZTIzNThlZDEyNTMwYjE1MWNkN2Y1NzlmMGYyYzA5NTJkY2YzMjgyNjcxMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLa5uaT429gQKV7a7QR40Z5HUNfs zBX/8YXECB8kDL4UkMaL7BszFow4BIzxxxGrAgUNBfcef5zJMJXB1b6AMA+6Nnry zXkmmIIJW962uyGANTxkVLMt3SL5vFpdgx4YvrxjLkwfrVXO1SX/EEQkOe2gxVkS NWS/4YABH83etVDB4cM7kz4EAYP04AzYz7++fHD9kyFQEqMkhHYNN36X8Wpx7yRU J9KyHD0fWVYs9xvfKmKZTkw4iTuGawvRPr2oMM8ctt/kdqDEMLNU8S0kY8HAsQev PAM1oLBE2+Ssv4NMlA09vhvg/gwb6YM377qBeMlMK1c+0mBVX94NuteBTQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFB8iWKG5WOF7iSiujL1Y4UGRyPrKMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UzZjQ2ZDdhLTFhNjUtNDgxYi04MGZmLWEzYTkwMzZhNWU4ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYcAwDQYJKoZIhvcNAQELBQADggEBAKfsKyRvNZrUn7Wg5X2U Yq/P2C5GbBZStt0hPA15V67sd8h5L2Et78apujevWio1k7mcwd9mfaAl0i800WM6 QXlTQh2gS5hYftB+X4xL+gW3MdMNTFW+quWuHVmgqquqcMFkg5aBqrUM18O+RHlq bY17jrxqvxm65BWhIApwQpD+Jdc8TMRkOnkh+FNS0ETesuF89cFP82/4N5ekTQJn qGkrB9bDK+Qcmo50Hmm+Ox8kOamr3VZf5t/SBTKcVOvUEd2aalES5VxqChGvojzF I1ASTTDfu31WaYEYeQkJbc262wJJDfqqAtdgYQzxPk9pMTyvvsxOCtwLR8hiney7 AtE= -----END CERTIFICATE-----Generated at Mon Mar 2 01:35:41 2026 by rpki-client