$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f79388ce-7d40-4e2d-99a2-f64918866a6d.roa File: f79388ce-7d40-4e2d-99a2-f64918866a6d.roa (raw, json) Hash identifier: +mE6y7GN6qQVgf4DB5Kdmb4VZLHYpQ/z8Jf+lUKAjjs= Subject key identifier: 45:78:22:D1:ED:4D:36:33:4B:70:7C:9A:4C:91:61:66:95:F3:3E:00 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2C761D46AB3E49A444BF9E4277B29B812F7701C6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f79388ce-7d40-4e2d-99a2-f64918866a6d.roa Signing time: Sat 28 Feb 2026 00:00:04 +0000 ROA not before: Sat 28 Feb 2026 00:00:04 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daef:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:76:1d:46:ab:3e:49:a4:44:bf:9e:42:77:b2:9b:81:2f:77:01:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 28 00:00:04 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=a088a0beadde44e2b39caa4bbc2766b28bf709ac47435825e588c18f1a0c18c7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c5:03:aa:4c:4a:be:54:6d:8e:38:99:34:b4: ee:a2:84:0b:33:3a:63:09:3e:b1:0c:e7:c4:f6:c5: a2:1b:c6:b8:6c:7c:a2:62:95:b1:89:82:cf:70:a0: a3:ad:c5:15:ad:ed:c2:5b:c7:30:04:8e:1f:a8:24: bb:af:2c:ff:4a:27:d3:61:62:cb:ad:d7:7b:91:42: 3d:b5:dd:47:2f:65:39:fb:0a:73:29:89:44:54:b5: 85:cc:a4:94:2b:1c:bd:76:09:44:d4:b1:53:5e:52: bf:b3:11:41:2f:0c:f7:e9:e4:03:33:e9:af:7b:31: 67:c0:33:5b:1f:20:63:dc:0d:c4:b9:93:d6:6a:05: 93:f3:2c:1a:0b:1e:9f:80:7b:73:f2:c8:05:e5:a3: 26:78:d3:25:12:04:6d:5f:b1:60:b6:ea:47:b4:9c: df:62:e0:b5:a4:66:9a:a7:91:9b:75:a4:58:fe:ad: 67:e5:df:1f:01:d1:27:74:4e:88:fe:f0:8f:2f:b2: 5f:cc:06:3d:d0:52:b7:36:b3:3c:59:00:79:95:13: 8c:75:29:cf:4d:9d:fb:61:01:ee:17:38:fc:ee:71: db:95:8b:38:4f:e9:fc:6f:8b:a7:4d:57:e3:83:1c: d2:33:3e:b4:fd:43:a3:5a:5f:6b:a3:60:22:32:5f: c1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:78:22:D1:ED:4D:36:33:4B:70:7C:9A:4C:91:61:66:95:F3:3E:00 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f79388ce-7d40-4e2d-99a2-f64918866a6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:7000::/40 Signature Algorithm: sha256WithRSAEncryption 0b:2e:76:2c:67:bd:7e:86:18:90:d2:1f:ff:35:28:aa:5a:13: e8:7c:e6:ce:be:9f:88:94:11:51:ca:2a:4d:c5:04:cc:44:9f: 65:42:be:d0:4a:11:70:a1:10:25:f4:b5:9a:58:88:ab:3f:91: fa:ac:a3:c2:dc:d7:f8:6a:33:d4:fe:ae:e5:a5:f9:a3:67:ad: f6:35:7a:29:17:88:f8:61:56:7c:22:94:f3:8b:2a:20:00:7c: 24:28:96:a3:c0:00:87:2a:8f:9a:51:7f:64:35:34:e5:58:70: fe:ed:71:41:43:58:af:f3:4d:e6:b2:85:c3:c4:af:1c:dd:7e: 2f:89:d4:40:5e:5c:39:f8:54:77:04:fa:c2:a8:1d:03:2e:89: d9:64:aa:63:3f:10:3e:23:08:42:42:2f:93:66:01:90:bb:70: 6b:aa:20:09:6c:aa:02:c7:33:4f:f6:49:e1:a8:1b:92:61:17: 98:dd:79:aa:f6:94:9c:84:84:af:77:f4:b3:e3:27:a7:62:bd: e4:47:1f:fc:15:63:d6:f9:1a:40:aa:25:3f:e7:ad:c8:26:15: 51:0b:46:38:22:09:0f:a5:dd:8a:92:1e:e6:40:87:3f:cc:83: ff:11:d5:37:10:eb:03:24:a6:f1:41:08:8e:e1:75:bb:34:ba: 38:a1:05:a6 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIULHYdRqs+SaREv55Cd7KbgS93AcYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyODAwMDAwNFoX DTI2MDUyOTIzNTk1OVowejFJMEcGA1UEBRNAYTA4OGEwYmVhZGRlNDRlMmIzOWNh YTRiYmMyNzY2YjI4YmY3MDlhYzQ3NDM1ODI1ZTU4OGMxOGYxYTBjMThjNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcUDqkxKvlRtjjiZNLTuooQLMzpj CT6xDOfE9sWiG8a4bHyiYpWxiYLPcKCjrcUVre3CW8cwBI4fqCS7ryz/SifTYWLL rdd7kUI9td1HL2U5+wpzKYlEVLWFzKSUKxy9dglE1LFTXlK/sxFBLwz36eQDM+mv ezFnwDNbHyBj3A3EuZPWagWT8ywaCx6fgHtz8sgF5aMmeNMlEgRtX7FgtupHtJzf YuC1pGaap5GbdaRY/q1n5d8fAdEndE6I/vCPL7JfzAY90FK3NrM8WQB5lROMdSnP TZ37YQHuFzj87nHblYs4T+n8b4unTVfjgxzSMz60/UOjWl9ro2AiMl/B7QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEV4ItHtTTYzS3B8mkyRYWaV8z4AMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y3OTM4OGNlLTdkNDAtNGUyZC05OWEyLWY2NDkxODg2NmE2ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba73AwDQYJKoZIhvcNAQELBQADggEBAAsudixnvX6GGJDSH/81 KKpaE+h85s6+n4iUEVHKKk3FBMxEn2VCvtBKEXChECX0tZpYiKs/kfqso8Lc1/hq M9T+ruWl+aNnrfY1eikXiPhhVnwilPOLKiAAfCQolqPAAIcqj5pRf2Q1NOVYcP7t cUFDWK/zTeayhcPErxzdfi+J1EBeXDn4VHcE+sKoHQMuidlkqmM/ED4jCEJCL5Nm AZC7cGuqIAlsqgLHM0/2SeGoG5JhF5jdear2lJyEhK939LPjJ6diveRHH/wVY9b5 GkCqJT/nrcgmFVELRjgiCQ+l3YqSHuZAhz/Mg/8R1TcQ6wMkpvFBCI7hdbs0ujih BaY= -----END CERTIFICATE-----Generated at Mon Mar 2 03:24:27 2026 by rpki-client