$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eec7ad5e-f656-4ebc-8be2-c3a42fd003c8.roa File: eec7ad5e-f656-4ebc-8be2-c3a42fd003c8.roa (raw, json) Hash identifier: W1f1IlcMAhD3J6J4V/SRoE/aziTjXNpa/DiwIN7RE7Q= Subject key identifier: 41:29:47:FD:AE:17:38:7E:AB:6F:16:05:4B:6D:C4:58:64:B2:C6:0B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3D13787996FF6284B3D6D55DC811A73161F19EC6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eec7ad5e-f656-4ebc-8be2-c3a42fd003c8.roa Signing time: Sun 22 Feb 2026 00:10:57 +0000 ROA not before: Sun 22 Feb 2026 00:10:57 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da36:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:13:78:79:96:ff:62:84:b3:d6:d5:5d:c8:11:a7:31:61:f1:9e:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 22 00:10:57 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=3029ab9fa4a88bd64eecb4ff50cbc3af352bd2c8f0951bc2ed595be5ecd1622a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5e:54:fc:86:57:9e:1d:a9:bb:45:0f:bb:66: a5:55:f7:2a:28:8a:f3:4d:05:65:b1:8b:2c:ff:43: 93:60:4d:90:2b:47:f3:64:93:2d:03:c1:b8:c4:c8: 03:00:2c:aa:40:38:55:75:76:20:73:66:cc:f5:75: 50:05:dc:b7:64:81:97:f4:35:52:20:40:dd:d7:c5: c5:3d:d8:1e:b1:d3:3e:c2:0e:e0:3e:32:6c:d6:18: b5:ae:13:b1:25:81:cb:07:f7:ac:0e:c3:17:f2:fd: 32:98:17:bc:cb:6e:55:46:2f:bb:b9:2c:b9:46:3b: f8:44:bb:4a:90:5c:21:78:68:7c:c9:12:cb:94:da: e4:99:6d:aa:58:c4:74:ae:e1:f5:70:01:18:90:67: 17:53:61:01:cb:33:cf:e6:a7:b5:a7:fd:2f:bb:05: 85:ba:fb:bc:04:0f:6e:0e:b4:6c:ba:be:a6:68:e8: e3:1a:7d:1c:74:e2:4a:5e:09:3b:6f:ac:d2:09:2c: 15:31:89:4f:d2:48:65:59:98:f6:b3:3b:22:63:17: f3:9b:d3:a9:13:d0:90:93:6a:00:a3:c3:ec:57:53: a0:d3:64:e7:08:49:ff:df:29:ed:21:b7:b6:49:ea: 11:6f:d7:a2:6c:f7:2f:7c:b2:f4:2f:a2:67:07:62: 07:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:29:47:FD:AE:17:38:7E:AB:6F:16:05:4B:6D:C4:58:64:B2:C6:0B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eec7ad5e-f656-4ebc-8be2-c3a42fd003c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da36:800::/40 Signature Algorithm: sha256WithRSAEncryption a4:fb:71:03:ec:c2:41:e3:85:d7:e6:15:9f:3e:0a:0c:e6:a5: f7:05:ec:f1:c9:fc:a0:59:3c:58:d7:b0:ff:d3:76:ec:fe:bc: f3:4b:d7:63:18:2d:06:95:ff:2e:ad:19:f3:57:78:75:10:35: c1:c0:9b:a2:af:c5:b1:67:5a:43:ff:c7:7a:bb:33:f4:38:4f: 79:d4:b6:90:05:29:eb:5b:a5:d4:04:74:23:10:73:65:43:95: 72:47:62:c6:6e:0c:41:9d:92:de:c1:c4:37:55:9d:7a:6f:04: dd:00:b9:88:d7:11:15:12:77:80:81:09:3b:f7:b2:61:47:4f: d4:5b:f5:ad:3b:8b:ab:e1:ca:43:53:93:e7:f1:7f:33:e0:43: f1:56:3a:9e:41:fb:81:f9:6e:d5:b3:43:64:6a:65:4e:81:88: ab:0f:a0:57:76:6f:ed:07:e6:9a:c1:a6:ef:85:31:71:c6:6c: f7:88:ab:e0:32:22:f3:62:3f:cb:42:e7:77:6e:cd:01:8b:7e: 07:7d:47:5d:c4:ce:81:88:f8:0f:24:7b:26:19:e4:3c:cb:40: ff:22:0e:ab:9f:9f:5f:77:91:d9:ed:90:3b:36:9d:b7:14:3e: 8e:db:fd:6c:a4:0c:77:42:c4:a7:74:ab:05:de:67:83:ae:20: cc:01:bc:c9 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUPRN4eZb/YoSz1tVdyBGnMWHxnsYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMjAwMTA1N1oX DTI2MDUyMzIzNTk1OVowejFJMEcGA1UEBRNAMzAyOWFiOWZhNGE4OGJkNjRlZWNi NGZmNTBjYmMzYWYzNTJiZDJjOGYwOTUxYmMyZWQ1OTViZTVlY2QxNjIyYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl5U/IZXnh2pu0UPu2alVfcqKIrz TQVlsYss/0OTYE2QK0fzZJMtA8G4xMgDACyqQDhVdXYgc2bM9XVQBdy3ZIGX9DVS IEDd18XFPdgesdM+wg7gPjJs1hi1rhOxJYHLB/esDsMX8v0ymBe8y25VRi+7uSy5 Rjv4RLtKkFwheGh8yRLLlNrkmW2qWMR0ruH1cAEYkGcXU2EByzPP5qe1p/0vuwWF uvu8BA9uDrRsur6maOjjGn0cdOJKXgk7b6zSCSwVMYlP0khlWZj2szsiYxfzm9Op E9CQk2oAo8PsV1Og02TnCEn/3yntIbe2SeoRb9eibPcvfLL0L6JnB2IHpQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEEpR/2uFzh+q28WBUttxFhkssYLMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2VlYzdhZDVlLWY2NTYtNGViYy04YmUyLWMzYTQyZmQwMDNjOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaNggwDQYJKoZIhvcNAQELBQADggEBAKT7cQPswkHjhdfmFZ8+ CgzmpfcF7PHJ/KBZPFjXsP/Tduz+vPNL12MYLQaV/y6tGfNXeHUQNcHAm6KvxbFn WkP/x3q7M/Q4T3nUtpAFKetbpdQEdCMQc2VDlXJHYsZuDEGdkt7BxDdVnXpvBN0A uYjXERUSd4CBCTv3smFHT9Rb9a07i6vhykNTk+fxfzPgQ/FWOp5B+4H5btWzQ2Rq ZU6BiKsPoFd2b+0H5prBpu+FMXHGbPeIq+AyIvNiP8tC53duzQGLfgd9R13EzoGI +A8keyYZ5DzLQP8iDqufn193kdntkDs2nbcUPo7b/WykDHdCxKd0qwXeZ4OuIMwB vMk= -----END CERTIFICATE-----Generated at Sun Mar 1 21:56:21 2026 by rpki-client