$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e69d97aa-b68a-4fc2-846c-38f589c4786e.roa File: e69d97aa-b68a-4fc2-846c-38f589c4786e.roa (raw, json) Hash identifier: Fyi34EEHwKTuBXL4UNw6eYuoU3HJ87RwCmxu0ngzwkk= Subject key identifier: BA:81:88:4B:31:52:45:BD:1F:2A:46:15:0D:C1:44:8B:CE:A9:2B:DD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7B5350ED02A42CFD8C1DA9D35A6FA77CB4AE0C58 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e69d97aa-b68a-4fc2-846c-38f589c4786e.roa Signing time: Fri 20 Feb 2026 00:10:57 +0000 ROA not before: Fri 20 Feb 2026 00:10:57 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:7040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:53:50:ed:02:a4:2c:fd:8c:1d:a9:d3:5a:6f:a7:7c:b4:ae:0c:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 20 00:10:57 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=78cd9a224d07f63bbc51595cb54886f66127d1f1016ed6fa939cb1501afca366, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:6c:3f:ba:39:5c:e6:ed:e7:25:97:22:95:d5: 4a:7d:31:b6:8a:7f:1b:88:4f:6b:5b:a7:64:b2:c1: a2:ca:61:c4:9d:3e:1c:a9:68:26:80:5c:84:50:2b: 2e:2f:9a:9d:a0:a8:68:02:ff:3f:ca:c8:1e:9e:bc: b5:30:f1:fe:ab:00:f8:fa:f8:67:d0:62:f2:39:ef: 96:17:83:a0:e0:0f:be:32:1c:e8:55:b2:2b:fe:49: cd:f2:21:9d:ac:05:a6:34:13:64:90:95:cf:2c:c6: d0:0d:7b:87:fb:a6:af:4f:95:bf:bd:1f:bd:94:a5: e1:2f:13:ed:33:ab:f5:4a:a7:6f:1d:7b:af:90:15: 73:9c:19:31:97:db:62:98:d1:da:f4:1c:86:b0:91: 45:bc:88:22:64:d3:49:38:4c:a5:2b:1a:99:91:32: 09:88:67:8b:67:dd:ce:77:e3:11:5b:ad:c5:3b:92: 6b:5d:2a:0b:d0:77:fa:fa:ee:5c:a7:c3:b0:bd:e2: d0:68:08:1f:52:02:58:b6:62:9a:cb:b0:8d:e7:c7: 37:6c:87:11:1e:79:0f:a5:bf:8d:b6:18:44:7e:d9: ba:13:ec:3f:85:cc:82:c6:e6:ce:9a:b2:d8:13:3c: 88:e5:df:c7:55:3c:01:ff:d7:36:46:5e:2f:55:6f: ff:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:81:88:4B:31:52:45:BD:1F:2A:46:15:0D:C1:44:8B:CE:A9:2B:DD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e69d97aa-b68a-4fc2-846c-38f589c4786e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:7040::/48 Signature Algorithm: sha256WithRSAEncryption 21:43:85:65:f3:26:71:54:f5:13:de:ee:e8:50:44:bf:7b:f3: 40:d0:c0:94:2d:7f:1d:cd:40:28:60:fb:db:ee:4e:13:e4:4a: aa:88:0f:b1:25:95:8d:ea:c3:3d:09:45:ea:8c:a3:27:9d:9d: 07:f0:92:9e:6f:a2:0b:b0:27:01:8b:dc:66:fe:36:99:ff:7d: ea:8f:47:70:b6:e0:10:a6:ca:27:b3:1d:70:45:d1:84:e4:53: 3f:ab:93:6b:53:61:10:2b:ed:c4:0b:36:9c:75:70:15:db:cb: e7:e8:dd:bc:d7:39:81:e6:0c:b2:d4:86:8b:0f:35:5b:1b:7d: 1f:be:41:9d:94:dd:ef:3e:48:1b:d3:d3:90:36:9e:d5:00:11: 3c:dd:b0:6a:24:42:0d:aa:ab:bd:7c:69:4d:0e:2f:ba:05:f0: 79:5c:23:e5:62:3b:08:da:34:49:99:09:c4:d4:d9:bd:e8:b1: de:07:70:f2:bf:05:7e:c5:5b:b9:bc:70:5a:70:16:c5:d7:de: 11:4d:e7:f9:1d:c7:7c:82:52:c4:cb:5e:d1:5b:0f:98:75:6e: 74:d1:46:68:4e:0a:1f:08:91:7b:08:ed:ca:65:28:c2:ef:46: b4:3b:15:c9:80:e6:f6:76:69:62:c6:e3:f0:1b:64:df:8e:84: 6f:ff:6e:ed -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUe1NQ7QKkLP2MHanTWm+nfLSuDFgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMDAwMTA1N1oX DTI2MDUyMTIzNTk1OVowejFJMEcGA1UEBRNANzhjZDlhMjI0ZDA3ZjYzYmJjNTE1 OTVjYjU0ODg2ZjY2MTI3ZDFmMTAxNmVkNmZhOTM5Y2IxNTAxYWZjYTM2NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmw/ujlc5u3nJZcildVKfTG2in8b iE9rW6dkssGiymHEnT4cqWgmgFyEUCsuL5qdoKhoAv8/ysgenry1MPH+qwD4+vhn 0GLyOe+WF4Og4A++MhzoVbIr/knN8iGdrAWmNBNkkJXPLMbQDXuH+6avT5W/vR+9 lKXhLxPtM6v1SqdvHXuvkBVznBkxl9timNHa9ByGsJFFvIgiZNNJOEylKxqZkTIJ iGeLZ93Od+MRW63FO5JrXSoL0Hf6+u5cp8OwveLQaAgfUgJYtmKay7CN58c3bIcR HnkPpb+NthhEftm6E+w/hcyCxubOmrLYEzyI5d/HVTwB/9c2Rl4vVW///QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLqBiEsxUkW9HypGFQ3BRIvOqSvdMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2U2OWQ5N2FhLWI2OGEtNGZjMi04NDZjLTM4ZjU4OWM0Nzg2ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYXBAMA0GCSqGSIb3DQEBCwUAA4IBAQAhQ4Vl8yZxVPUT3u7o UES/e/NA0MCULX8dzUAoYPvb7k4T5EqqiA+xJZWN6sM9CUXqjKMnnZ0H8JKeb6IL sCcBi9xm/jaZ/33qj0dwtuAQpsonsx1wRdGE5FM/q5NrU2EQK+3ECzacdXAV28vn 6N281zmB5gyy1IaLDzVbG30fvkGdlN3vPkgb09OQNp7VABE83bBqJEINqqu9fGlN Di+6BfB5XCPlYjsI2jRJmQnE1Nm96LHeB3DyvwV+xVu5vHBacBbF194RTef5Hcd8 glLEy17RWw+YdW500UZoTgofCJF7CO3KZSjC70a0OxXJgOb2dmlixuPwG2TfjoRv /27t -----END CERTIFICATE-----Generated at Sun Mar 1 23:40:50 2026 by rpki-client