$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e762903c-ed87-4cd6-af8f-90ac5c482df2.roa File: e762903c-ed87-4cd6-af8f-90ac5c482df2.roa (raw, json) Hash identifier: wEcIimlVUj2wpcCePIizWoHVpikdZdibUQF042V3+U8= Subject key identifier: BD:C6:BA:2D:AF:60:CB:00:C4:6C:4E:BC:E4:52:6B:58:CF:75:5C:F2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 019561F5B8CFA7A57B6BB84B5DE511D49DAA9E71 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e762903c-ed87-4cd6-af8f-90ac5c482df2.roa Signing time: Fri 20 Feb 2026 00:20:52 +0000 ROA not before: Fri 20 Feb 2026 00:20:52 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:61:f5:b8:cf:a7:a5:7b:6b:b8:4b:5d:e5:11:d4:9d:aa:9e:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 20 00:20:52 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=9e7743292ba9ba53592b80cafa59e04129b8629cc084746d23a7a2851e3a01cc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2d:46:11:b9:93:0f:e9:84:c2:41:eb:7e:34: e7:22:60:92:b7:a3:2b:ca:2a:50:a7:43:6e:21:b5: ad:77:a5:6b:8f:4d:ea:bc:6c:79:14:68:29:10:a0: 5f:ba:cc:fd:15:86:6d:20:65:56:76:ec:9b:e6:48: a2:2d:ce:93:a7:f8:34:b7:2c:0e:87:02:35:61:a5: c5:f3:67:1c:c3:64:b6:ad:c6:fb:98:b9:3b:5b:2f: 49:9e:f9:d6:b9:24:f8:b2:74:98:2e:7a:c4:82:ff: 18:e2:63:8e:4c:97:ed:bc:46:e1:97:89:f1:99:a9: 03:96:5f:6f:0e:20:31:59:c3:a7:89:c5:43:7f:d1: 68:bb:29:23:8a:b5:fc:24:55:22:80:75:9e:70:9c: cd:81:7d:63:fe:07:a5:1a:8b:8e:a7:41:8f:d0:99: f0:9f:81:b8:b0:ff:3f:07:26:e9:53:95:e9:fa:58: c4:a3:86:ce:fa:b9:64:f5:3a:b5:29:15:c6:e1:61: fe:28:01:f6:dd:2e:f3:37:bd:b1:9d:8b:d7:b3:60: 8a:32:da:e6:63:a6:14:b6:95:8a:53:c1:0c:28:dd: 70:c4:65:14:bc:f5:29:ac:1e:01:19:58:bf:bb:cc: d7:11:b6:98:c7:6f:d7:4e:93:88:18:57:2f:7d:b9: 00:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C6:BA:2D:AF:60:CB:00:C4:6C:4E:BC:E4:52:6B:58:CF:75:5C:F2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e762903c-ed87-4cd6-af8f-90ac5c482df2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:8c0::/48 Signature Algorithm: sha256WithRSAEncryption 3e:e4:ac:56:69:d9:af:a8:90:26:44:8b:6f:d6:56:a5:d6:1c: 99:c7:fa:d9:fd:ec:4b:82:68:d3:c5:23:ae:ab:7b:61:c9:4f: 90:ba:4f:b8:34:00:5e:e8:4a:e8:43:6b:4a:6d:fa:b8:55:7f: f3:92:3a:c7:39:10:e5:19:30:bf:f0:ab:98:e0:ee:ec:dc:50: 25:9b:60:65:03:30:70:1a:b6:b5:d3:92:c0:a6:70:98:00:4e: b3:c3:fa:d4:52:66:49:c3:41:9c:52:48:7a:fa:98:04:7a:4e: 78:30:ec:f1:82:bf:a7:a5:62:af:84:42:72:f1:0d:76:72:31: 2f:1a:6d:a4:33:4e:71:0f:67:1b:ba:cc:04:3a:a7:fa:a5:a5: ed:f9:eb:34:a6:a0:68:6d:74:6c:58:e8:6c:d5:b4:64:3c:5b: 4d:1b:3a:e0:b5:70:ac:05:5c:5d:1d:b4:0e:01:ed:dc:cb:3f: b5:4e:9b:77:23:93:6b:cc:1a:5b:1e:b1:12:5e:91:5a:c2:51: ba:de:c3:80:5f:ec:00:93:ab:83:86:55:f8:04:42:c4:51:26: 3e:9b:08:03:0e:05:9e:cf:63:3f:12:d0:fd:34:55:c4:1b:b4: 21:4e:fb:7a:34:a7:61:12:9d:8e:db:95:2c:ba:67:a4:01:a8: aa:33:39:f3 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUAZVh9bjPp6V7a7hLXeUR1J2qnnEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMDAwMjA1MloX DTI2MDUyMTIzNTk1OVowejFJMEcGA1UEBRNAOWU3NzQzMjkyYmE5YmE1MzU5MmI4 MGNhZmE1OWUwNDEyOWI4NjI5Y2MwODQ3NDZkMjNhN2EyODUxZTNhMDFjYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS1GEbmTD+mEwkHrfjTnImCSt6Mr yipQp0NuIbWtd6Vrj03qvGx5FGgpEKBfusz9FYZtIGVWduyb5kiiLc6Tp/g0tywO hwI1YaXF82ccw2S2rcb7mLk7Wy9JnvnWuST4snSYLnrEgv8Y4mOOTJftvEbhl4nx makDll9vDiAxWcOnicVDf9FouykjirX8JFUigHWecJzNgX1j/gelGouOp0GP0Jnw n4G4sP8/BybpU5Xp+ljEo4bO+rlk9Tq1KRXG4WH+KAH23S7zN72xnYvXs2CKMtrm Y6YUtpWKU8EMKN1wxGUUvPUprB4BGVi/u8zXEbaYx2/XTpOIGFcvfbkAAQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFL3Gui2vYMsAxGxOvORSa1jPdVzyMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2U3NjI5MDNjLWVkODctNGNkNi1hZjhmLTkwYWM1YzQ4MmRmMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAAjAMA0GCSqGSIb3DQEBCwUAA4IBAQA+5KxWadmvqJAmRItv 1lal1hyZx/rZ/exLgmjTxSOuq3thyU+Quk+4NABe6EroQ2tKbfq4VX/zkjrHORDl GTC/8KuY4O7s3FAlm2BlAzBwGra105LApnCYAE6zw/rUUmZJw0GcUkh6+pgEek54 MOzxgr+npWKvhEJy8Q12cjEvGm2kM05xD2cbuswEOqf6paXt+es0pqBobXRsWOhs 1bRkPFtNGzrgtXCsBVxdHbQOAe3cyz+1Tpt3I5NrzBpbHrESXpFawlG63sOAX+wA k6uDhlX4BELEUSY+mwgDDgWez2M/EtD9NFXEG7QhTvt6NKdhEp2O25UsumekAaiq Mznz -----END CERTIFICATE-----Generated at Sun Mar 1 22:02:04 2026 by rpki-client