$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e5b22d77-3182-4224-8e47-32ca7c3d3373.roa File: e5b22d77-3182-4224-8e47-32ca7c3d3373.roa (raw, json) Hash identifier: wOxOIiGxznkQHKHuJIBLOuSeKGJqSbSMGimCaBK1pxs= Subject key identifier: DA:B2:DF:61:DB:18:6D:45:D7:60:46:C4:35:C8:46:FB:B2:49:B7:F3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 76FA5DC6DC6ED55EC11C638B59112975ECF5EF05 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e5b22d77-3182-4224-8e47-32ca7c3d3373.roa Signing time: Fri 20 Feb 2026 00:10:25 +0000 ROA not before: Fri 20 Feb 2026 00:10:25 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:f0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:fa:5d:c6:dc:6e:d5:5e:c1:1c:63:8b:59:11:29:75:ec:f5:ef:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 20 00:10:25 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=41bed58ab02f9aab92757484db2e033b71d4c7dc18874b647d347317691b43a7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:06:78:18:a7:db:2a:71:e0:b1:1d:d2:7b:5b: 24:d5:02:fb:4f:a3:57:1e:c5:24:f4:49:0e:0d:c9: a7:60:9f:46:4e:1c:0e:5b:a4:fb:85:32:fb:e9:49: 94:19:75:6a:b7:78:03:95:39:3c:f4:c9:bb:9b:32: dd:0f:eb:9b:ab:5d:23:97:0d:b3:f0:53:54:cd:e1: d5:a1:db:5b:af:82:1e:45:77:10:74:b5:21:70:9c: 68:84:76:2e:b3:e4:de:ed:64:07:d2:64:7c:40:e0: 39:42:f3:e8:36:8f:3c:b2:9b:e8:ce:6c:b1:98:72: f8:e7:eb:1a:33:5b:09:2f:b8:84:0b:58:cd:cb:1b: ff:11:53:5f:fc:dd:64:9f:d5:7c:3c:6c:fb:7f:7d: 28:f1:06:8b:a2:32:fe:cf:8b:29:5d:01:0c:96:f5: 7f:bb:5a:ce:fb:75:74:26:f4:9e:5a:97:30:97:43: 75:28:a4:cf:fe:86:a9:e0:2e:74:4e:a8:40:6c:2c: 41:91:d2:22:3b:92:3b:10:93:07:4d:1f:8d:bf:e8: 74:45:d0:ba:80:92:21:4a:20:b0:3e:60:7c:7f:0c: dd:89:14:7b:82:4a:75:68:44:eb:86:08:b8:5d:28: 8e:01:e9:16:00:ea:58:b3:7e:67:b4:48:c2:24:9e: 2c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B2:DF:61:DB:18:6D:45:D7:60:46:C4:35:C8:46:FB:B2:49:B7:F3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e5b22d77-3182-4224-8e47-32ca7c3d3373.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:f0c0::/48 Signature Algorithm: sha256WithRSAEncryption 37:a7:ec:b7:ad:0c:ed:3f:ff:6d:23:ee:ce:9e:48:7b:26:a6: be:94:4f:d3:be:b4:98:3f:76:26:49:1c:93:47:9b:2c:a3:09: 5b:b1:47:dc:7d:44:17:4d:07:6c:ee:74:c8:89:1b:15:30:ad: 6b:ae:78:92:05:38:69:d3:0d:c9:7e:8d:f7:99:20:eb:c2:3e: 43:48:b7:bd:70:c0:fc:d1:2b:c7:0e:e5:25:ea:18:ce:f2:4e: 7a:38:c8:d0:f7:40:1e:85:50:f2:72:3f:66:74:ed:52:f1:20: 9c:7c:d3:14:f9:30:7b:ee:52:90:c8:8d:37:ba:2f:f9:ce:42: c1:ee:67:7b:bb:d4:df:c0:4d:73:57:d6:0c:58:a4:5d:a3:c6: 7d:5b:26:83:24:63:50:10:11:bc:f2:46:88:ee:7a:bf:e5:c8: 5d:c1:51:8b:7f:92:19:2b:65:4a:2a:d2:1e:0c:c9:80:6a:91: 50:0e:b8:e9:f4:aa:84:1b:33:25:3c:9e:b5:74:f2:1c:f9:88: ac:52:fa:9e:ff:1a:a1:67:c1:aa:31:36:e6:15:a8:1e:87:2f: c8:c0:fc:d8:49:8e:51:22:8a:6e:43:75:39:54:64:9f:84:d7: 79:ae:28:9a:9c:00:c4:a0:72:e2:15:7e:62:b1:fd:b0:41:d6: eb:5b:80:8c -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUdvpdxtxu1V7BHGOLWREpdez17wUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMDAwMTAyNVoX DTI2MDUyMTIzNTk1OVowejFJMEcGA1UEBRNANDFiZWQ1OGFiMDJmOWFhYjkyNzU3 NDg0ZGIyZTAzM2I3MWQ0YzdkYzE4ODc0YjY0N2QzNDczMTc2OTFiNDNhNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QZ4GKfbKnHgsR3Se1sk1QL7T6NX HsUk9EkODcmnYJ9GThwOW6T7hTL76UmUGXVqt3gDlTk89Mm7mzLdD+ubq10jlw2z 8FNUzeHVodtbr4IeRXcQdLUhcJxohHYus+Te7WQH0mR8QOA5QvPoNo88spvozmyx mHL45+saM1sJL7iEC1jNyxv/EVNf/N1kn9V8PGz7f30o8QaLojL+z4spXQEMlvV/ u1rO+3V0JvSeWpcwl0N1KKTP/oap4C50TqhAbCxBkdIiO5I7EJMHTR+Nv+h0RdC6 gJIhSiCwPmB8fwzdiRR7gkp1aETrhgi4XSiOAekWAOpYs35ntEjCJJ4sKQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNqy32HbGG1F12BGxDXIRvuySbfzMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2U1YjIyZDc3LTMxODItNDIyNC04ZTQ3LTMyY2E3YzNkMzM3My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8vDAMA0GCSqGSIb3DQEBCwUAA4IBAQA3p+y3rQztP/9tI+7O nkh7Jqa+lE/TvrSYP3YmSRyTR5ssowlbsUfcfUQXTQds7nTIiRsVMK1rrniSBThp 0w3Jfo33mSDrwj5DSLe9cMD80SvHDuUl6hjO8k56OMjQ90AehVDycj9mdO1S8SCc fNMU+TB77lKQyI03ui/5zkLB7md7u9TfwE1zV9YMWKRdo8Z9WyaDJGNQEBG88kaI 7nq/5chdwVGLf5IZK2VKKtIeDMmAapFQDrjp9KqEGzMlPJ61dPIc+YisUvqe/xqh Z8GqMTbmFagehy/IwPzYSY5RIopuQ3U5VGSfhNd5riianADEoHLiFX5isf2wQdbr W4CM -----END CERTIFICATE-----Generated at Mon Mar 2 01:43:11 2026 by rpki-client