$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fe9e46f2-7ae2-4a38-89eb-91e51e539f45.roa File: fe9e46f2-7ae2-4a38-89eb-91e51e539f45.roa (raw, json) Hash identifier: 3XOF2hGVH9lsoCUD1kG7hlh/E6zezd5pp9MRx+XVCX0= Subject key identifier: BF:CB:9A:63:16:22:E4:01:E2:49:80:98:5D:F5:C1:95:E0:7C:98:DF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7546406A9992236E04AF542A09829F50864385C3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fe9e46f2-7ae2-4a38-89eb-91e51e539f45.roa Signing time: Sun 22 Feb 2026 00:20:46 +0000 ROA not before: Sun 22 Feb 2026 00:20:46 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da17:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:46:40:6a:99:92:23:6e:04:af:54:2a:09:82:9f:50:86:43:85:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 22 00:20:46 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=ca6336e8849e922031bdc3269b315b0cb4f167f580b5592f568f535f6f9ce509, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:88:d4:90:30:cb:94:96:fd:7f:17:fb:d8:dc: 49:8f:f2:47:a4:db:0a:b6:33:c3:31:21:fc:8e:95: 3d:f8:be:e7:b9:8a:24:fc:27:1f:be:6f:92:80:87: 00:51:28:06:67:2c:60:6a:5a:be:7f:2a:f9:56:2c: c2:61:b6:84:69:e4:d8:45:dd:05:b8:3e:57:ed:f8: ef:e3:db:00:30:c3:f7:7b:5e:99:55:21:30:8f:34: fb:93:7d:b4:a9:cb:fe:1d:b9:f5:af:e2:dd:cf:19: fb:ca:ae:15:11:5c:dc:de:11:c7:6d:e4:8c:56:45: 0a:04:ba:81:d9:52:0a:d0:00:7f:7f:ae:f3:09:e5: 1f:90:5f:4d:d9:c3:16:93:66:34:bc:88:de:ba:e4: 1f:23:8b:b6:fa:db:82:e3:40:06:60:0f:e0:bc:d0: 18:7c:19:cf:39:ae:c3:dc:e1:b5:ef:14:50:4c:3a: aa:a9:4a:29:63:5f:26:bc:43:04:aa:49:1c:d9:32: 65:05:27:06:d5:03:a0:78:e2:b5:1a:f8:42:09:a5: 27:b2:c5:07:61:72:f9:1f:47:73:fa:16:65:fd:85: b3:f7:63:dd:0d:b5:f7:e9:6f:68:a4:52:9f:39:62: b0:d9:73:56:3e:5a:ea:eb:fe:d6:16:82:a6:57:e8: 2e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:CB:9A:63:16:22:E4:01:E2:49:80:98:5D:F5:C1:95:E0:7C:98:DF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fe9e46f2-7ae2-4a38-89eb-91e51e539f45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da17:c00::/38 Signature Algorithm: sha256WithRSAEncryption 3c:ce:1e:59:6b:87:3d:c3:3f:3a:34:35:1e:db:72:2d:72:49: 75:a3:f5:f6:5a:6f:78:9e:67:dd:40:79:23:75:de:8c:11:ac: 9d:90:e4:46:8d:84:5a:bb:01:fc:0d:53:12:26:dd:c4:8b:26: 36:f1:00:6b:a9:90:e0:25:b2:7f:96:34:61:d0:e6:78:0c:e7: ad:31:ac:f4:fb:79:5d:df:c4:1b:cd:14:53:82:9d:ba:87:8b: bf:b9:4f:32:7c:47:f4:79:f3:08:10:4d:28:b4:ab:47:41:94: 94:bc:69:30:3c:92:81:61:8e:64:6a:fa:30:9c:0d:f0:cd:8f: 53:85:c9:b4:17:13:67:bc:7d:a8:98:92:14:82:a0:3b:f8:da: e8:e2:d4:4c:f8:2c:18:e9:18:48:90:e1:13:db:39:22:f8:eb: dc:90:d2:2f:3b:3c:07:30:3c:26:32:21:aa:b5:be:a5:7c:dd: 93:91:21:59:db:0e:f6:18:95:1e:be:c1:2f:42:16:32:8a:20: 0c:6b:07:4a:40:21:74:ab:1e:7b:70:5e:68:01:60:f7:06:1f: 3d:4c:86:04:26:ce:46:dd:c5:76:bf:c6:bc:11:c6:e9:ac:81: 98:41:2a:40:8c:f8:9e:3d:b1:5c:f3:b2:cf:0e:07:0d:55:1f: 87:43:d5:3d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUdUZAapmSI24Er1QqCYKfUIZDhcMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMjAwMjA0NloX DTI2MDUyMzIzNTk1OVowejFJMEcGA1UEBRNAY2E2MzM2ZTg4NDllOTIyMDMxYmRj MzI2OWIzMTViMGNiNGYxNjdmNTgwYjU1OTJmNTY4ZjUzNWY2ZjljZTUwOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYjUkDDLlJb9fxf72NxJj/JHpNsK tjPDMSH8jpU9+L7nuYok/Ccfvm+SgIcAUSgGZyxgalq+fyr5VizCYbaEaeTYRd0F uD5X7fjv49sAMMP3e16ZVSEwjzT7k320qcv+Hbn1r+Ldzxn7yq4VEVzc3hHHbeSM VkUKBLqB2VIK0AB/f67zCeUfkF9N2cMWk2Y0vIjeuuQfI4u2+tuC40AGYA/gvNAY fBnPOa7D3OG17xRQTDqqqUopY18mvEMEqkkc2TJlBScG1QOgeOK1GvhCCaUnssUH YXL5H0dz+hZl/YWz92PdDbX36W9opFKfOWKw2XNWPlrq6/7WFoKmV+guxQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFL/LmmMWIuQB4kmAmF31wZXgfJjfMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZlOWU0NmYyLTdhZTItNGEzOC04OWViLTkxZTUxZTUzOWY0NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaFwwwDQYJKoZIhvcNAQELBQADggEBADzOHllrhz3DPzo0NR7b ci1ySXWj9fZab3ieZ91AeSN13owRrJ2Q5EaNhFq7AfwNUxIm3cSLJjbxAGupkOAl sn+WNGHQ5ngM560xrPT7eV3fxBvNFFOCnbqHi7+5TzJ8R/R58wgQTSi0q0dBlJS8 aTA8koFhjmRq+jCcDfDNj1OFybQXE2e8faiYkhSCoDv42uji1Ez4LBjpGEiQ4RPb OSL469yQ0i87PAcwPCYyIaq1vqV83ZORIVnbDvYYlR6+wS9CFjKKIAxrB0pAIXSr HntwXmgBYPcGHz1MhgQmzkbdxXa/xrwRxumsgZhBKkCM+J49sVzzss8OBw1VH4dD 1T0= -----END CERTIFICATE-----Generated at Sun Mar 1 21:55:36 2026 by rpki-client