$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ea2c76cc-9ac0-4296-9b7c-4cf1d90a7ec4.roa File: ea2c76cc-9ac0-4296-9b7c-4cf1d90a7ec4.roa (raw, json) Hash identifier: yj/BxsD5HDjALs8J4C4diOfFdFfMiZttboz8Oe7Q7mg= Subject key identifier: 69:4F:F8:A6:AF:E7:00:22:A0:CB:33:FB:71:40:67:4C:8D:85:27:2F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7C61D6F084833DFAE3CF798E464F3BF6AC64CAA3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ea2c76cc-9ac0-4296-9b7c-4cf1d90a7ec4.roa Signing time: Wed 11 Feb 2026 00:10:09 +0000 ROA not before: Wed 11 Feb 2026 00:10:09 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:e080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:61:d6:f0:84:83:3d:fa:e3:cf:79:8e:46:4f:3b:f6:ac:64:ca:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 11 00:10:09 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=14dc93211841444c8e8240a0d5e82b5ca7929be4f515e2c18cfd606ce68d2043, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:eb:9e:19:58:98:89:ae:40:8a:d8:0b:8c:59: f7:28:06:e5:c5:83:29:73:ba:2f:e0:0e:3a:95:03: 14:64:af:15:c7:ce:85:a3:d6:d7:63:ad:2a:a0:b6: aa:4b:ca:17:9a:92:aa:85:4a:03:5b:c9:af:e9:2e: ca:00:6e:cb:cc:e7:7f:e3:e0:f9:24:fb:3a:20:52: f5:40:bd:41:d9:00:b0:ef:39:dc:a6:65:7b:2d:99: 8d:a6:dd:ec:d3:0c:b3:e9:63:da:87:bc:6c:0e:a1: 45:22:18:76:be:81:00:e2:8c:32:c7:63:bc:86:61: ac:a7:62:47:3c:ab:08:a7:ed:7f:5a:07:f2:9f:dc: 63:f0:b5:be:12:55:b7:0a:55:3c:5e:1e:ad:77:2f: 75:1b:c5:bb:a2:09:fb:bf:53:a5:d0:e7:7e:0c:ff: bb:35:d4:98:75:5a:27:61:35:f1:51:8f:d6:04:24: fb:fe:85:41:6e:f8:e9:3d:56:73:5b:ab:08:92:84: 66:31:44:5c:74:18:e6:ca:99:33:5d:b2:bf:9f:08: f4:0f:e8:ee:cd:e8:aa:ed:76:74:0a:7f:26:c2:a9: 7a:93:6a:a0:39:30:69:b5:9c:a5:c8:16:37:12:41: ef:7c:35:87:73:ca:06:8f:0a:04:66:7a:0b:9f:35: 1c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:4F:F8:A6:AF:E7:00:22:A0:CB:33:FB:71:40:67:4C:8D:85:27:2F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ea2c76cc-9ac0-4296-9b7c-4cf1d90a7ec4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:e080::/46 Signature Algorithm: sha256WithRSAEncryption 39:1c:fc:7c:4a:2d:56:5f:55:3f:8b:9a:ff:86:f0:61:c1:22: 8e:3d:96:47:3c:60:f2:3a:f9:e9:6a:6c:af:e5:6c:27:d9:9f: 5d:bd:43:80:b7:8f:8e:ba:f7:ad:7b:7c:c8:a4:02:d3:a3:91: ff:89:f9:fc:df:9e:97:c6:bd:71:b0:6d:53:f3:17:f4:41:b0: ce:ca:3f:f4:57:1e:c2:d0:ec:cb:b6:09:4d:0e:9c:0c:90:eb: d5:01:2a:a0:b2:78:b4:aa:87:2e:2f:bc:48:7e:06:7d:d2:b1: 4c:59:27:67:b5:e3:c6:f8:8a:47:f0:98:6b:b1:b5:40:82:88: 05:f2:72:c6:6e:6e:84:af:f4:fc:ae:40:41:6d:b3:95:44:d1: 4f:a1:5c:9c:7b:82:3c:e5:50:46:05:e0:65:09:51:c0:c2:fa: b1:0b:53:cd:2e:db:98:5d:1a:4c:08:c7:f5:f2:00:46:c0:80: 1c:a3:5d:ea:dd:28:7c:57:d6:f4:9d:8f:3b:ec:36:ff:28:fa: 0f:5d:3b:90:78:97:b0:a0:7e:11:47:1c:50:b7:15:2f:1a:f5: 90:9f:a7:e2:74:fc:f7:1f:97:07:0c:59:fd:89:87:17:49:2d: c0:c9:88:23:a7:af:e8:bb:32:fc:40:1f:d3:c1:30:55:07:20: 4a:d2:4e:42 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUfGHW8ISDPfrjz3mORk879qxkyqMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxMTAwMTAwOVoX DTI2MDUxMjIzNTk1OVowejFJMEcGA1UEBRNAMTRkYzkzMjExODQxNDQ0YzhlODI0 MGEwZDVlODJiNWNhNzkyOWJlNGY1MTVlMmMxOGNmZDYwNmNlNjhkMjA0MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+ueGViYia5AitgLjFn3KAblxYMp c7ov4A46lQMUZK8Vx86Fo9bXY60qoLaqS8oXmpKqhUoDW8mv6S7KAG7LzOd/4+D5 JPs6IFL1QL1B2QCw7zncpmV7LZmNpt3s0wyz6WPah7xsDqFFIhh2voEA4owyx2O8 hmGsp2JHPKsIp+1/Wgfyn9xj8LW+ElW3ClU8Xh6tdy91G8W7ogn7v1Ol0Od+DP+7 NdSYdVonYTXxUY/WBCT7/oVBbvjpPVZzW6sIkoRmMURcdBjmypkzXbK/nwj0D+ju zeiq7XZ0Cn8mwql6k2qgOTBptZylyBY3EkHvfDWHc8oGjwoEZnoLnzUcnQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGlP+Kav5wAioMsz+3FAZ0yNhScvMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2VhMmM3NmNjLTlhYzAtNDI5Ni05YjdjLTRjZjFkOTBhN2VjNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba8+CAMA0GCSqGSIb3DQEBCwUAA4IBAQA5HPx8Si1WX1U/i5r/ hvBhwSKOPZZHPGDyOvnpamyv5Wwn2Z9dvUOAt4+Ouvete3zIpALTo5H/ifn8356X xr1xsG1T8xf0QbDOyj/0Vx7C0OzLtglNDpwMkOvVASqgsni0qocuL7xIfgZ90rFM WSdntePG+IpH8JhrsbVAgogF8nLGbm6Er/T8rkBBbbOVRNFPoVyce4I85VBGBeBl CVHAwvqxC1PNLtuYXRpMCMf18gBGwIAco13q3Sh8V9b0nY877Db/KPoPXTuQeJew oH4RRxxQtxUvGvWQn6fidPz3H5cHDFn9iYcXSS3AyYgjp6/ouzL8QB/TwTBVByBK 0k5C -----END CERTIFICATE-----Generated at Sun Mar 1 21:55:25 2026 by rpki-client