$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ee15ce65-dc50-4412-8826-22842acc278a.roa File: ee15ce65-dc50-4412-8826-22842acc278a.roa (raw, json) Hash identifier: gL30+OGzQzuc2gd198aL0a8JrAM9KSgvZdVIKyycHxY= Subject key identifier: 15:04:08:09:BF:C7:71:C8:07:F7:40:ED:40:19:59:B0:14:CB:FC:C0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 02478CE455C07D25C6A95810C634DD266700E5D5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ee15ce65-dc50-4412-8826-22842acc278a.roa Signing time: Fri 13 Feb 2026 00:00:10 +0000 ROA not before: Fri 13 Feb 2026 00:00:10 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf5:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:47:8c:e4:55:c0:7d:25:c6:a9:58:10:c6:34:dd:26:67:00:e5:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 13 00:00:10 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=a4ed25066ac026ca688f86505ec9d73cfaf19d769c9fa439bb33144e2efe57d9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:48:b6:6d:d4:5c:7c:7e:d9:9f:81:40:b2:42: dc:c7:89:0c:cf:09:2c:8a:41:ae:47:c7:18:6b:08: e7:f6:0b:77:e8:98:74:2e:47:d0:91:d8:6c:81:31: b8:ce:c7:8e:cc:b0:81:a0:0d:c6:49:e5:a4:55:ad: 4d:21:ec:dc:65:e8:c4:92:f4:a5:3e:e1:4e:4c:41: ee:95:b0:f0:81:c8:b0:67:0b:24:22:c7:09:4f:0a: 01:70:d2:8a:e7:1e:7c:18:26:2b:c9:0d:6c:2b:5e: 9c:8a:71:18:ea:22:2a:b6:3d:68:55:04:fb:d6:5c: d6:b8:b6:ec:ec:89:11:5d:d2:09:79:92:f6:88:08: 54:09:4a:fd:01:5a:f5:89:ce:3d:30:6a:6a:c3:f3: 9b:d5:32:a5:7d:ae:1f:7e:06:9d:92:6e:92:d7:57: 5d:42:7a:32:43:75:7f:ba:9c:16:5d:7e:97:ff:9e: bf:36:7d:38:d5:9b:5d:56:9f:73:e6:ca:41:c0:90: a9:b8:f4:19:ac:09:68:6f:7f:30:f8:37:99:ce:53: 52:68:2e:21:91:fa:ce:85:0f:2b:65:e1:9c:c6:58: 9b:31:76:8b:ab:7e:88:3a:c7:a3:18:3f:9a:52:9f: 6e:e7:96:2d:77:6d:ab:cc:9e:70:4a:5e:cc:34:bb: 9c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:04:08:09:BF:C7:71:C8:07:F7:40:ED:40:19:59:B0:14:CB:FC:C0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ee15ce65-dc50-4412-8826-22842acc278a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf5:f000::/40 Signature Algorithm: sha256WithRSAEncryption 78:58:ce:ce:12:c6:40:3a:d8:61:06:6d:be:54:c3:0b:04:a2: 42:2e:97:7a:c8:93:53:19:ff:ca:07:32:8e:0d:26:59:3a:91: cd:0d:f5:af:9d:02:2a:68:91:31:25:8e:a9:0b:b0:41:62:20: 45:ce:a4:96:48:44:cc:d6:e7:c6:a5:56:84:00:5f:6b:54:ad: 1e:e9:1c:dd:b9:b2:4d:f8:ee:fa:6a:5d:ee:99:71:cc:88:0e: f3:fd:03:c1:b0:20:9a:dd:f9:5f:e6:58:e3:3c:af:a1:6e:48: 79:84:19:61:29:79:9f:b4:58:78:e4:a1:63:fc:b7:f6:41:dd: f9:dc:88:a1:98:9e:97:9d:ee:b7:a5:b0:b4:aa:34:86:4e:06: 7a:4c:03:39:aa:44:34:f8:9f:e9:f0:aa:3c:aa:49:5b:dd:1f: 1d:43:4b:c0:d3:f1:d5:c0:31:19:f4:f9:82:c1:e6:cf:2c:15: 07:e6:99:85:32:41:67:05:e1:d9:a9:8c:b2:b1:8a:8d:b6:89: f4:a1:2a:f2:ea:ad:06:b5:1c:3e:c0:f1:d3:14:6a:ac:a2:c5: c7:bb:6c:b3:23:dd:5d:1e:51:19:49:f6:4f:57:00:93:ee:0e: 2e:37:35:95:90:e9:93:21:3a:3a:ba:41:86:5a:a7:7c:03:ed: b8:7d:29:63 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUAkeM5FXAfSXGqVgQxjTdJmcA5dUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxMzAwMDAxMFoX DTI2MDUxNDIzNTk1OVowejFJMEcGA1UEBRNAYTRlZDI1MDY2YWMwMjZjYTY4OGY4 NjUwNWVjOWQ3M2NmYWYxOWQ3NjljOWZhNDM5YmIzMzE0NGUyZWZlNTdkOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0i2bdRcfH7Zn4FAskLcx4kMzwks ikGuR8cYawjn9gt36Jh0LkfQkdhsgTG4zseOzLCBoA3GSeWkVa1NIezcZejEkvSl PuFOTEHulbDwgciwZwskIscJTwoBcNKK5x58GCYryQ1sK16cinEY6iIqtj1oVQT7 1lzWuLbs7IkRXdIJeZL2iAhUCUr9AVr1ic49MGpqw/Ob1TKlfa4ffgadkm6S11dd QnoyQ3V/upwWXX6X/56/Nn041ZtdVp9z5spBwJCpuPQZrAlob38w+DeZzlNSaC4h kfrOhQ8rZeGcxlibMXaLq36IOsejGD+aUp9u55Ytd22rzJ5wSl7MNLucowIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBUECAm/x3HIB/dA7UAZWbAUy/zAMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2VlMTVjZTY1LWRjNTAtNDQxMi04ODI2LTIyODQyYWNjMjc4YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9fAwDQYJKoZIhvcNAQELBQADggEBAHhYzs4SxkA62GEGbb5U wwsEokIul3rIk1MZ/8oHMo4NJlk6kc0N9a+dAipokTEljqkLsEFiIEXOpJZIRMzW 58alVoQAX2tUrR7pHN25sk347vpqXe6ZccyIDvP9A8GwIJrd+V/mWOM8r6FuSHmE GWEpeZ+0WHjkoWP8t/ZB3fnciKGYnped7relsLSqNIZOBnpMAzmqRDT4n+nwqjyq SVvdHx1DS8DT8dXAMRn0+YLB5s8sFQfmmYUyQWcF4dmpjLKxio22ifShKvLqrQa1 HD7A8dMUaqyixce7bLMj3V0eURlJ9k9XAJPuDi43NZWQ6ZMhOjq6QYZap3wD7bh9 KWM= -----END CERTIFICATE-----Generated at Sun Mar 1 22:24:47 2026 by rpki-client