$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e87ceef5-41fe-4acd-bca2-376839210693.roa File: e87ceef5-41fe-4acd-bca2-376839210693.roa (raw, json) Hash identifier: 28OdOp5AGIgxARd6n1Xygn3pagsV92kaxZnwfnWAcEU= Subject key identifier: 5B:43:C5:51:F6:8A:85:7F:40:80:C3:94:51:6C:6E:8F:E3:6A:5C:8E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 35EB986C9D0CD4ACEB8659AD1E389269516AB06E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e87ceef5-41fe-4acd-bca2-376839210693.roa Signing time: Wed 11 Feb 2026 00:01:01 +0000 ROA not before: Wed 11 Feb 2026 00:01:01 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:6040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:eb:98:6c:9d:0c:d4:ac:eb:86:59:ad:1e:38:92:69:51:6a:b0:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 11 00:01:01 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=2b3d36617037c2c35f27d36aaa5b5ba540dcf7f8b565ab015794237511a0cc05, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:66:b8:e2:18:10:15:79:9b:ba:f6:8c:37:9a: f8:98:15:f3:4f:30:17:e4:5d:71:5f:9d:54:28:25: 6e:92:c5:30:dc:c1:0d:68:2d:2e:b0:13:46:13:c5: 8a:80:3d:06:6e:11:25:e3:9b:99:ea:a9:80:f2:f0: 62:c0:89:61:99:09:8e:15:48:18:b2:35:fb:a1:fe: cb:66:85:d5:63:c1:9f:77:ef:02:b4:f3:03:32:0b: 19:4d:3e:c7:44:6b:a4:46:af:00:1d:83:ae:cf:57: 54:11:0c:24:35:bc:0b:1a:b3:fe:28:98:95:50:60: df:a3:6a:69:77:79:b9:ad:c5:0c:69:71:a9:c1:61: 21:da:2c:a6:c6:7d:96:b1:32:c6:1d:a1:46:d9:5c: fa:56:81:a6:af:88:d1:03:6a:63:d6:58:70:21:81: c2:a8:3d:b4:a0:2e:27:ef:72:8e:d3:15:80:c5:d1: 95:01:11:e5:49:66:de:f8:c1:50:61:b5:37:28:c7: 6f:97:1a:90:16:20:2b:6a:77:f4:9e:a7:d1:a2:42: 9c:5b:64:08:b4:7e:29:18:5b:b8:89:12:5d:6d:ea: 86:d6:3b:1b:bb:6e:c5:fb:a7:27:14:69:d1:9c:d6: 8d:b0:bf:ad:62:57:55:07:62:6f:6d:05:42:58:6a: 00:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:43:C5:51:F6:8A:85:7F:40:80:C3:94:51:6C:6E:8F:E3:6A:5C:8E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e87ceef5-41fe-4acd-bca2-376839210693.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:6040::/48 Signature Algorithm: sha256WithRSAEncryption 14:6f:38:b2:76:5e:41:41:f7:17:34:c2:39:3d:74:4c:14:49: 91:2e:97:d8:83:d4:f6:bd:91:a9:f6:b8:96:74:a3:93:2d:f3: 7c:17:18:4a:a0:2a:30:43:26:c5:7b:4f:e3:21:8d:db:e1:e0: 5e:5f:d8:a1:f7:8a:ab:4c:33:b3:73:75:03:0e:f9:76:8d:c1: 88:ed:27:64:54:03:bc:b8:9b:41:9d:49:8f:c7:f0:8b:23:b7: 2b:cd:da:06:e6:08:9a:d6:8c:78:cd:ea:22:22:6d:80:fe:a5: 06:86:e6:31:40:72:42:b7:92:20:e5:02:9e:64:a3:0d:ec:c2: 69:96:9f:c9:4d:04:ae:98:d6:29:a0:86:cb:39:2e:8f:f6:19: 29:db:41:c7:90:c4:c4:68:b3:df:5b:8f:5b:19:31:99:38:4c: be:3e:12:b7:5b:7a:68:1f:09:04:b6:e3:0e:d5:e0:8f:e0:03: 84:12:f7:59:24:bf:40:92:26:d0:f4:bf:87:d8:d8:76:a6:83: 6e:c7:41:59:91:ee:9b:11:1c:ba:c2:c4:70:73:3f:7f:cf:f2: d0:3a:e1:b6:ba:62:69:c0:73:26:8b:6c:ed:10:79:63:81:0c: d2:92:e4:55:34:c1:31:ae:1b:f9:06:36:82:5a:39:91:67:9a: d6:e8:56:d0 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUNeuYbJ0M1KzrhlmtHjiSaVFqsG4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxMTAwMDEwMVoX DTI2MDUxMjIzNTk1OVowejFJMEcGA1UEBRNAMmIzZDM2NjE3MDM3YzJjMzVmMjdk MzZhYWE1YjViYTU0MGRjZjdmOGI1NjVhYjAxNTc5NDIzNzUxMWEwY2MwNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvma44hgQFXmbuvaMN5r4mBXzTzAX 5F1xX51UKCVuksUw3MENaC0usBNGE8WKgD0GbhEl45uZ6qmA8vBiwIlhmQmOFUgY sjX7of7LZoXVY8Gfd+8CtPMDMgsZTT7HRGukRq8AHYOuz1dUEQwkNbwLGrP+KJiV UGDfo2ppd3m5rcUMaXGpwWEh2iymxn2WsTLGHaFG2Vz6VoGmr4jRA2pj1lhwIYHC qD20oC4n73KO0xWAxdGVARHlSWbe+MFQYbU3KMdvlxqQFiAranf0nqfRokKcW2QI tH4pGFu4iRJdbeqG1jsbu27F+6cnFGnRnNaNsL+tYldVB2JvbQVCWGoAWwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFtDxVH2ioV/QIDDlFFsbo/jalyOMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2U4N2NlZWY1LTQxZmUtNGFjZC1iY2EyLTM3NjgzOTIxMDY5My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6mBAMA0GCSqGSIb3DQEBCwUAA4IBAQAUbziydl5BQfcXNMI5 PXRMFEmRLpfYg9T2vZGp9riWdKOTLfN8FxhKoCowQybFe0/jIY3b4eBeX9ih94qr TDOzc3UDDvl2jcGI7SdkVAO8uJtBnUmPx/CLI7crzdoG5gia1ox4zeoiIm2A/qUG huYxQHJCt5Ig5QKeZKMN7MJplp/JTQSumNYpoIbLOS6P9hkp20HHkMTEaLPfW49b GTGZOEy+PhK3W3poHwkEtuMO1eCP4AOEEvdZJL9AkibQ9L+H2Nh2poNux0FZke6b ERy6wsRwcz9/z/LQOuG2umJpwHMmi2ztEHljgQzSkuRVNMExrhv5BjaCWjmRZ5rW 6FbQ -----END CERTIFICATE-----Generated at Sun Mar 1 21:57:08 2026 by rpki-client