$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ea91ba4e-e299-4e42-b461-d03d00c2d51b.roa File: ea91ba4e-e299-4e42-b461-d03d00c2d51b.roa (raw, json) Hash identifier: P/P4JeUFW4Caah4IrIKX/YL2pFPeZktiLGY1qdHTi30= Subject key identifier: 0D:BF:B9:33:8A:99:5A:32:00:ED:81:30:96:0D:F1:6E:4D:8E:17:28 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 51BEBE71F57684A219CB370365D4F84665D23E41 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ea91ba4e-e299-4e42-b461-d03d00c2d51b.roa Signing time: Sat 14 Feb 2026 00:00:33 +0000 ROA not before: Sat 14 Feb 2026 00:00:33 +0000 ROA not after: Fri 15 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:dab9:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:be:be:71:f5:76:84:a2:19:cb:37:03:65:d4:f8:46:65:d2:3e:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 14 00:00:33 2026 GMT Not After : May 15 23:59:59 2026 GMT Subject: serialNumber=bea31f5d7a6c79f88eb7badc8a69a495680cf2c82bdd9d112edb1c212096fd3b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3e:5e:50:d4:2f:8a:22:98:f6:a9:a5:db:87: 2d:bb:b9:fd:28:ae:65:1e:ac:82:85:0e:d8:28:e5: 6d:02:10:15:3e:22:b2:9d:4e:10:e1:93:1a:d1:da: 93:da:d4:a6:bc:27:1a:96:ef:de:33:1b:23:78:6e: 50:6f:a7:e9:50:f9:23:c4:85:a2:53:f4:80:28:7e: af:2d:49:d6:fe:f6:2c:f9:0d:fd:a8:44:db:fe:87: 16:70:a9:7b:41:ff:fe:d1:60:c7:11:60:9e:26:55: bc:ee:79:65:f7:02:66:d0:6d:59:0e:56:58:bb:68: 25:dc:25:f1:7c:08:11:b2:3b:74:1a:41:2a:a9:89: 4a:14:cf:5b:8c:ba:9b:6b:d1:c6:20:f3:a2:7b:2e: 21:74:fa:be:fd:23:12:32:af:d9:70:aa:e7:34:d1: 0d:74:94:b0:80:6c:5b:f2:3c:ec:98:55:20:8c:8f: 48:aa:51:f8:c5:7c:00:b7:18:bf:17:37:65:c4:2e: 70:12:db:ac:40:ac:6a:8f:c1:9c:ba:43:1d:5a:81: 71:24:7f:f5:75:1d:fe:92:84:94:ff:d5:ee:3b:43: 3e:35:3c:40:7b:c0:fc:37:ae:a9:4b:e8:89:db:b6: f3:55:e9:09:1b:a7:fe:bb:60:e6:c9:0d:11:4d:2e: 73:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:BF:B9:33:8A:99:5A:32:00:ED:81:30:96:0D:F1:6E:4D:8E:17:28 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ea91ba4e-e299-4e42-b461-d03d00c2d51b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:800::/40 Signature Algorithm: sha256WithRSAEncryption 48:87:c9:bd:a3:a7:8a:71:c4:74:79:4d:94:fb:72:96:c6:ef: 77:c5:b0:3d:37:a6:0b:10:1f:dd:e4:8f:dc:11:9b:8c:48:66: b1:c2:41:58:81:80:d1:18:b9:fb:cb:64:7c:49:36:07:04:56: 0a:a4:47:6c:ed:26:85:75:cb:5d:73:a5:2d:ef:08:48:38:83: 05:d4:01:4b:68:70:01:fc:52:99:a6:ad:b9:e4:1b:a4:c4:4d: f5:33:ff:f0:58:1b:c8:13:0c:02:00:41:83:43:0a:6f:1d:e6: af:ea:2d:7b:c3:01:83:cc:df:11:36:55:cf:7e:f4:70:26:65: 2a:36:b1:f0:59:cb:2d:a9:25:ea:f8:af:8a:d5:6c:a6:e3:d9: 46:5b:70:d2:e2:c3:dd:0b:ba:59:60:cf:62:c4:d3:91:60:8d: 0b:05:8f:b7:c9:51:b0:f0:d2:5b:80:98:0b:fb:53:eb:38:b2: 92:48:c1:b5:e0:1b:29:45:97:2f:26:e2:7c:d4:68:bb:8c:1b: 42:05:cd:f8:ed:c4:4f:3f:94:6b:25:e3:fe:cc:23:34:cd:ff: 79:46:be:9f:4a:06:f4:49:39:4d:9a:9f:66:73:e0:3e:2b:f1: ee:30:48:a0:b1:7d:1b:fa:73:77:68:80:18:c2:41:a8:9b:7b: 6f:48:37:21 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUUb6+cfV2hKIZyzcDZdT4RmXSPkEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxNDAwMDAzM1oX DTI2MDUxNTIzNTk1OVowejFJMEcGA1UEBRNAYmVhMzFmNWQ3YTZjNzlmODhlYjdi YWRjOGE2OWE0OTU2ODBjZjJjODJiZGQ5ZDExMmVkYjFjMjEyMDk2ZmQzYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2z5eUNQviiKY9qml24ctu7n9KK5l HqyChQ7YKOVtAhAVPiKynU4Q4ZMa0dqT2tSmvCcalu/eMxsjeG5Qb6fpUPkjxIWi U/SAKH6vLUnW/vYs+Q39qETb/ocWcKl7Qf/+0WDHEWCeJlW87nll9wJm0G1ZDlZY u2gl3CXxfAgRsjt0GkEqqYlKFM9bjLqba9HGIPOiey4hdPq+/SMSMq/ZcKrnNNEN dJSwgGxb8jzsmFUgjI9IqlH4xXwAtxi/FzdlxC5wEtusQKxqj8GcukMdWoFxJH/1 dR3+koSU/9XuO0M+NTxAe8D8N66pS+iJ27bzVekJG6f+u2DmyQ0RTS5zNQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFA2/uTOKmVoyAO2BMJYN8W5NjhcoMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2VhOTFiYTRlLWUyOTktNGU0Mi1iNDYxLWQwM2QwMGMyZDUxYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauQgwDQYJKoZIhvcNAQELBQADggEBAEiHyb2jp4pxxHR5TZT7 cpbG73fFsD03pgsQH93kj9wRm4xIZrHCQViBgNEYufvLZHxJNgcEVgqkR2ztJoV1 y11zpS3vCEg4gwXUAUtocAH8UpmmrbnkG6TETfUz//BYG8gTDAIAQYNDCm8d5q/q LXvDAYPM3xE2Vc9+9HAmZSo2sfBZyy2pJer4r4rVbKbj2UZbcNLiw90Lullgz2LE 05FgjQsFj7fJUbDw0luAmAv7U+s4spJIwbXgGylFly8m4nzUaLuMG0IFzfjtxE8/ lGsl4/7MIzTN/3lGvp9KBvRJOU2an2Zz4D4r8e4wSKCxfRv6c3dogBjCQaibe29I NyE= -----END CERTIFICATE-----Generated at Sun Mar 1 23:19:55 2026 by rpki-client