$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fa2ea0cd-d973-4275-9369-5ee22936d9da.roa File: fa2ea0cd-d973-4275-9369-5ee22936d9da.roa (raw, json) Hash identifier: 9nhB0grDwCOAYpgvqWxJ+l4kmiUluevOIGiP9NTkfWc= Subject key identifier: 2B:76:3D:A8:CE:79:54:82:69:F2:B9:17:09:12:A3:E1:47:4F:97:EB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6E0D6CD2AE7607EC706DBAE7E9EAF854C41109C9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fa2ea0cd-d973-4275-9369-5ee22936d9da.roa Signing time: Wed 11 Feb 2026 00:11:06 +0000 ROA not before: Wed 11 Feb 2026 00:11:06 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:0d:6c:d2:ae:76:07:ec:70:6d:ba:e7:e9:ea:f8:54:c4:11:09:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 11 00:11:06 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=85908ad75d2805777f7261f76ea2764f36fdeb4e59abc113234c9feec29a6590, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a6:59:d0:01:4d:d3:3d:4d:f3:bd:b4:1e:9c: 16:7c:8c:57:36:a8:67:21:01:37:cb:83:f9:31:25: 76:48:f8:7c:9b:2a:01:54:97:ec:39:71:4e:88:15: df:59:1a:25:f8:ab:64:9a:b7:e9:86:75:45:cd:79: b4:79:51:44:02:a3:9b:ea:1d:e4:d0:20:98:95:62: 4a:d1:05:02:b7:d8:8f:04:c9:20:e4:79:39:0a:5d: 7e:fa:85:e1:3a:46:1d:25:f2:77:70:83:b3:85:3f: 1a:54:1d:b0:f2:d7:70:aa:70:89:13:63:e4:11:9d: eb:cd:f7:6d:e5:7c:2d:d2:4f:23:82:cd:65:4a:12: c2:72:45:68:c4:45:5d:02:32:74:30:6c:72:90:33: e9:e3:bf:9d:9e:9f:b9:d0:77:6c:0b:5e:db:e1:46: 51:46:ac:23:3d:a1:d2:3b:25:78:82:07:7c:5b:f6: ab:69:e8:56:f3:98:d0:2b:e7:14:2b:b8:23:84:70: f5:49:1c:d3:e7:cf:e7:b1:7d:86:07:aa:39:ea:67: 7a:2e:b9:27:39:f2:00:8d:75:29:fc:f8:72:4b:40: 14:01:4c:6b:49:e3:fc:f7:43:e9:98:4f:47:7a:64: 01:45:6d:2c:49:56:c4:0e:63:f4:13:cb:9c:e3:73: 23:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:76:3D:A8:CE:79:54:82:69:F2:B9:17:09:12:A3:E1:47:4F:97:EB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fa2ea0cd-d973-4275-9369-5ee22936d9da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:1000::/40 Signature Algorithm: sha256WithRSAEncryption 31:7a:2b:2a:e0:da:11:f1:91:2b:d9:9b:a3:99:ca:b9:4f:f8: e4:3f:b4:40:26:c4:74:57:10:bb:61:85:f6:5d:19:97:3a:e0: 2f:2a:64:eb:4d:0f:c7:df:fd:cc:43:c5:79:43:00:c3:06:b6: fc:87:52:75:bf:cb:c4:9e:67:7e:72:0b:3a:fb:84:9c:49:d7: 86:73:2b:bb:c1:e6:6b:b5:86:a3:89:fa:f6:e5:6b:a2:09:98: 88:a5:09:32:c0:1f:f7:37:5f:43:50:e9:0d:e4:75:1f:37:a9: 18:b3:94:c2:2b:0b:b9:75:3a:da:29:db:17:00:3c:59:8e:6d: dc:a9:71:be:b1:5b:34:06:5a:2f:73:77:cf:1a:c9:ec:8d:98: bb:e3:ea:bf:0a:49:02:ae:26:97:bd:d3:8d:4b:0a:47:f4:9e: c0:a3:df:f7:b0:f1:2d:89:ab:6b:01:99:20:2a:f4:c7:ad:d9: df:9b:c4:bd:88:65:2d:b9:3a:fb:67:87:2c:0e:05:c5:3b:c5: 9e:46:c1:0b:a2:29:61:4e:ce:cf:3a:69:e0:24:9c:27:ee:0d: bb:40:9a:a4:9a:8a:85:16:ad:83:46:73:7a:78:b9:c0:d2:44: b1:57:bd:0c:33:b3:23:79:dc:96:e4:ca:1a:fe:25:c7:03:f7: c2:28:e8:f3 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUbg1s0q52B+xwbbrn6er4VMQRCckwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxMTAwMTEwNloX DTI2MDUxMjIzNTk1OVowejFJMEcGA1UEBRNAODU5MDhhZDc1ZDI4MDU3NzdmNzI2 MWY3NmVhMjc2NGYzNmZkZWI0ZTU5YWJjMTEzMjM0YzlmZWVjMjlhNjU5MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaZZ0AFN0z1N8720HpwWfIxXNqhn IQE3y4P5MSV2SPh8myoBVJfsOXFOiBXfWRol+KtkmrfphnVFzXm0eVFEAqOb6h3k 0CCYlWJK0QUCt9iPBMkg5Hk5Cl1++oXhOkYdJfJ3cIOzhT8aVB2w8tdwqnCJE2Pk EZ3rzfdt5Xwt0k8jgs1lShLCckVoxEVdAjJ0MGxykDPp47+dnp+50HdsC17b4UZR RqwjPaHSOyV4ggd8W/araehW85jQK+cUK7gjhHD1SRzT58/nsX2GB6o56md6Lrkn OfIAjXUp/PhyS0AUAUxrSeP890PpmE9HemQBRW0sSVbEDmP0E8uc43MjowIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCt2PajOeVSCafK5FwkSo+FHT5frMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZhMmVhMGNkLWQ5NzMtNDI3NS05MzY5LTVlZTIyOTM2ZDlkYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8xAwDQYJKoZIhvcNAQELBQADggEBADF6Kyrg2hHxkSvZm6OZ yrlP+OQ/tEAmxHRXELthhfZdGZc64C8qZOtND8ff/cxDxXlDAMMGtvyHUnW/y8Se Z35yCzr7hJxJ14ZzK7vB5mu1hqOJ+vbla6IJmIilCTLAH/c3X0NQ6Q3kdR83qRiz lMIrC7l1Otop2xcAPFmObdypcb6xWzQGWi9zd88ayeyNmLvj6r8KSQKuJpe9041L Ckf0nsCj3/ew8S2Jq2sBmSAq9Met2d+bxL2IZS25OvtnhywOBcU7xZ5GwQuiKWFO zs86aeAknCfuDbtAmqSaioUWrYNGc3p4ucDSRLFXvQwzsyN53Jbkyhr+JccD98Io 6PM= -----END CERTIFICATE-----Generated at Sun Mar 1 23:38:04 2026 by rpki-client