$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f5b57beb-03dd-43a8-9a06-07f3f16a3f41.roa File: f5b57beb-03dd-43a8-9a06-07f3f16a3f41.roa (raw, json) Hash identifier: 2CjyzAPucQK0m1hSpz5IVASxnppKQeuQey9U7yuULO0= Subject key identifier: 30:1F:6C:04:AE:E7:01:EA:F3:32:77:8D:EA:4D:FC:F6:1C:E6:61:3E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1034616E546BC5FF09AA5D9460EC9ACF265834C9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f5b57beb-03dd-43a8-9a06-07f3f16a3f41.roa Signing time: Tue 24 Feb 2026 00:00:08 +0000 ROA not before: Tue 24 Feb 2026 00:00:08 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafa:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:34:61:6e:54:6b:c5:ff:09:aa:5d:94:60:ec:9a:cf:26:58:34:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 24 00:00:08 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=a178e969f2d1cf45e66c63138ed74bcec1b2589b631a4ba1f41fe4b95fbe185c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:16:10:1a:97:a8:c4:77:30:c6:bc:83:30:cf: a4:87:90:82:90:71:e4:1c:49:43:ed:8c:5e:77:bf: ff:0a:08:8a:d2:40:58:4c:08:3c:ae:f6:62:ed:35: d0:f8:91:f7:ed:56:e6:e0:ba:ca:9b:0c:e9:08:f2: 54:91:9a:a4:37:91:df:dc:84:89:a9:e9:0c:ce:68: f4:50:e5:bf:e1:16:47:3f:de:aa:69:bf:3c:5d:0d: ca:10:d5:38:d6:9b:14:75:c0:a7:f3:31:74:92:4a: 8e:35:e7:2d:4a:44:ac:72:c2:aa:a1:69:f2:cf:21: 6a:4a:44:1a:5a:8d:49:b0:a3:91:e0:dc:11:0e:d7: 26:4d:fd:62:17:77:4d:98:c9:4f:0d:04:83:1a:97: b2:2b:a7:b6:ad:b7:ec:b5:8e:0e:58:d9:42:3b:9d: 57:5c:3a:64:78:16:4d:45:d5:4b:5f:5a:79:01:a1: 76:70:0f:9a:5c:9e:36:da:a1:88:76:49:1b:49:51: 34:3d:a9:43:54:f4:c7:bc:0b:63:ba:8e:ce:57:b2: 72:29:38:e4:98:12:e7:65:ea:55:6a:cb:a1:95:9a: 39:ae:ec:59:0e:1d:96:d3:fb:ed:7c:03:d0:f4:e3: b8:8e:5d:ff:f2:b9:1c:a9:54:a5:5a:7c:49:f0:36: 47:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:1F:6C:04:AE:E7:01:EA:F3:32:77:8D:EA:4D:FC:F6:1C:E6:61:3E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f5b57beb-03dd-43a8-9a06-07f3f16a3f41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafa:8000::/40 Signature Algorithm: sha256WithRSAEncryption 3d:5a:35:a3:80:16:f4:b9:43:75:53:d9:63:9e:18:00:ac:81: 83:13:1f:69:ca:f3:f5:51:eb:8b:20:44:c4:8d:65:6c:a4:d5: f8:06:c5:97:34:ff:21:57:80:fe:c4:e9:c3:01:e4:0f:ea:fb: 34:c4:f2:cb:b9:36:69:64:ee:07:21:01:2f:01:7f:ec:f3:85: ce:ca:95:ea:58:8e:d5:89:4d:a8:9e:29:7b:7b:4b:8a:c0:f9: bc:34:3b:80:80:a0:f3:33:4e:31:52:c6:b3:30:75:68:ff:ef: 69:4a:a2:fb:98:60:1d:83:67:c3:b0:cc:4a:d6:58:e6:cb:6b: 1e:67:c0:98:26:c2:99:24:36:c4:a9:f7:95:87:79:3b:2a:d9: 48:45:69:bc:92:ce:a8:66:77:03:b7:23:b5:97:2c:16:ca:96: af:25:b1:40:62:8c:c8:ae:ff:69:ca:68:87:85:95:3b:aa:4b: f8:29:f2:0c:07:85:da:36:21:39:ba:4f:3a:97:2b:e0:e0:40: 2a:95:dd:83:95:c5:b4:fc:3e:ce:6d:ab:65:09:4e:82:d5:23: 99:28:88:7b:85:76:cf:27:45:05:69:be:c0:e6:82:7e:eb:13: 7d:f6:54:67:d1:b1:45:7b:78:40:c2:86:77:36:3c:6e:a4:bd: ed:aa:5a:e3 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUEDRhblRrxf8Jql2UYOyazyZYNMkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyNDAwMDAwOFoX DTI2MDUyNTIzNTk1OVowejFJMEcGA1UEBRNAYTE3OGU5NjlmMmQxY2Y0NWU2NmM2 MzEzOGVkNzRiY2VjMWIyNTg5YjYzMWE0YmExZjQxZmU0Yjk1ZmJlMTg1YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhYQGpeoxHcwxryDMM+kh5CCkHHk HElD7Yxed7//CgiK0kBYTAg8rvZi7TXQ+JH37Vbm4LrKmwzpCPJUkZqkN5Hf3ISJ qekMzmj0UOW/4RZHP96qab88XQ3KENU41psUdcCn8zF0kkqONectSkSscsKqoWny zyFqSkQaWo1JsKOR4NwRDtcmTf1iF3dNmMlPDQSDGpeyK6e2rbfstY4OWNlCO51X XDpkeBZNRdVLX1p5AaF2cA+aXJ422qGIdkkbSVE0PalDVPTHvAtjuo7OV7JyKTjk mBLnZepVasuhlZo5ruxZDh2W0/vtfAPQ9OO4jl3/8rkcqVSlWnxJ8DZHTwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDAfbASu5wHq8zJ3jepN/PYc5mE+MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y1YjU3YmViLTAzZGQtNDNhOC05YTA2LTA3ZjNmMTZhM2Y0MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+oAwDQYJKoZIhvcNAQELBQADggEBAD1aNaOAFvS5Q3VT2WOe GACsgYMTH2nK8/VR64sgRMSNZWyk1fgGxZc0/yFXgP7E6cMB5A/q+zTE8su5Nmlk 7gchAS8Bf+zzhc7KlepYjtWJTaieKXt7S4rA+bw0O4CAoPMzTjFSxrMwdWj/72lK ovuYYB2DZ8OwzErWWObLax5nwJgmwpkkNsSp95WHeTsq2UhFabySzqhmdwO3I7WX LBbKlq8lsUBijMiu/2nKaIeFlTuqS/gp8gwHhdo2ITm6TzqXK+DgQCqV3YOVxbT8 Ps5tq2UJToLVI5koiHuFds8nRQVpvsDmgn7rE332VGfRsUV7eEDChnc2PG6kve2q WuM= -----END CERTIFICATE-----Generated at Mon Mar 2 05:16:21 2026 by rpki-client