$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fef3abf6-f2e0-44e8-a7b3-1c87c9c1d26f.roa File: fef3abf6-f2e0-44e8-a7b3-1c87c9c1d26f.roa (raw, json) Hash identifier: 7WeztXfxqMGAHnGgXqgfQ5T8BrMa79orC427NmSQKOA= Subject key identifier: BD:3D:E4:FD:DE:58:54:3B:DD:AA:FB:A2:25:BC:21:4B:C8:32:AE:23 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 31B3F2BFBA17621E65DC6A580E32EDEEB3D8D1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fef3abf6-f2e0-44e8-a7b3-1c87c9c1d26f.roa Signing time: Sun 22 Feb 2026 00:10:59 +0000 ROA not before: Sun 22 Feb 2026 00:10:59 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:b3:f2:bf:ba:17:62:1e:65:dc:6a:58:0e:32:ed:ee:b3:d8:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 22 00:10:59 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=133d231a6af6977ffa57b63c7450f46a5246125ce6d0091d143067a2a5038ccf, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3b:15:17:e5:74:b6:f2:15:48:db:a3:3c:ab: bd:82:0f:e4:0f:6c:88:e3:da:c8:f9:e9:ce:cc:67: 4e:42:bf:06:7c:8b:b6:f4:5b:cf:2b:86:00:07:45: b2:56:cc:6f:ee:ba:18:04:d7:45:1e:0b:2a:10:7d: c9:54:4f:56:29:bc:90:01:68:cf:25:d1:8a:3d:26: 1a:29:bb:e3:48:f3:4a:2f:8a:f6:34:79:55:0e:97: 45:f8:19:62:ef:6a:f4:bf:68:db:0d:24:e1:66:a9: 9e:84:7a:ce:ba:34:d9:43:55:d4:b4:2d:d9:40:7b: 9b:47:dd:4e:7a:c0:f7:99:79:02:80:b4:95:c4:6b: bc:ed:8e:94:9c:13:20:d2:06:86:ed:cf:e1:4e:55: 27:28:28:5a:e9:d7:ec:a7:bf:23:9d:80:b9:c4:41: bf:51:f7:f0:c4:3b:34:d6:8c:af:a5:aa:28:d1:25: d0:56:c7:75:6b:e5:9e:37:2a:ca:10:ef:61:24:8e: 42:2c:33:f2:10:d2:77:49:ad:7b:b8:47:93:f0:13: df:a1:23:9b:33:bb:41:3b:06:87:d9:20:72:86:e0: ac:f0:e4:9f:50:4c:4b:29:fc:a8:66:bf:c2:de:a2: ac:b3:da:59:09:07:01:bf:6d:46:50:74:5b:29:a9: 58:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:3D:E4:FD:DE:58:54:3B:DD:AA:FB:A2:25:BC:21:4B:C8:32:AE:23 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fef3abf6-f2e0-44e8-a7b3-1c87c9c1d26f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:f000::/40 Signature Algorithm: sha256WithRSAEncryption 58:eb:18:ba:dd:66:2c:9f:56:01:09:3f:b3:f2:de:47:66:bd: 05:ec:fb:7e:c6:11:cb:dd:01:29:10:bc:0b:fc:7c:de:d4:3c: 70:58:d8:21:cc:6e:17:7a:b5:9e:80:db:6f:c2:6f:60:37:4b: db:24:59:66:e6:e8:e4:a7:84:72:ef:90:b0:46:fd:74:c1:55: c7:36:03:cd:1e:21:d6:9c:96:0a:bb:64:54:bb:74:5f:1d:b7: cf:6c:7e:48:df:6c:47:50:33:a2:1c:70:ba:c4:3b:06:7b:e8: 19:02:0f:38:35:16:9e:ee:6c:7e:74:8d:c2:81:28:e4:7c:b2: bf:3f:65:90:bc:6c:f5:7c:79:37:a7:67:77:f7:37:a9:1a:1f: 92:93:82:d6:72:21:3e:33:45:95:52:98:8f:11:14:52:72:34: 88:1a:99:16:d2:75:de:b4:9b:83:ef:3d:f8:de:e7:b0:1b:58: ae:9b:75:c4:f8:6e:d9:04:0d:68:a3:59:c6:cf:b2:eb:a9:40: bd:ac:e9:99:94:ab:8e:31:68:50:13:15:4a:25:77:07:b9:c5: 8e:28:6d:7a:37:ae:91:5b:c6:70:98:a5:6e:3c:cd:97:9d:28: d5:8d:c3:c8:73:24:61:c7:84:f8:4a:5b:9f:bb:60:f0:88:cf: 4e:cb:8e:4b -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgITMbPyv7oXYh5l3GpYDjLt7rPY0TANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTFGNjM1RjAwMDAxMTAvBgNVBAUTKDQwNzY4MjU1MjRE MkM2NkQyRTEwNDM2RkU2NUU5M0U4QzFCRDRBMzcwHhcNMjYwMjIyMDAxMDU5WhcN MjYwNTIzMjM1OTU5WjB6MUkwRwYDVQQFE0AxMzNkMjMxYTZhZjY5NzdmZmE1N2I2 M2M3NDUwZjQ2YTUyNDYxMjVjZTZkMDA5MWQxNDMwNjdhMmE1MDM4Y2NmMS0wKwYD VQQDEyRjMGJmMGZlOC03MTdjLTRmNzItOWI0NS1jOWM1MTkxMzJhODEwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiOxUX5XS28hVI26M8q72CD+QPbIjj 2sj56c7MZ05CvwZ8i7b0W88rhgAHRbJWzG/uuhgE10UeCyoQfclUT1YpvJABaM8l 0Yo9Jhopu+NI80ovivY0eVUOl0X4GWLvavS/aNsNJOFmqZ6Ees66NNlDVdS0LdlA e5tH3U56wPeZeQKAtJXEa7ztjpScEyDSBobtz+FOVScoKFrp1+ynvyOdgLnEQb9R 9/DEOzTWjK+lqijRJdBWx3Vr5Z43KsoQ72EkjkIsM/IQ0ndJrXu4R5PwE9+hI5sz u0E7BofZIHKG4Kzw5J9QTEsp/Khmv8Leoqyz2lkJBwG/bUZQdFspqVgLAgMBAAGj ggJKMIICRjAdBgNVHQ4EFgQUvT3k/d5YVDvdqvuiJbwhS8gyriMwHwYDVR0jBBgw FoAUQHaCVSTSxm0uEENv5l6T6MG9SjcwDgYDVR0PAQH/BAQDAgeAMH4GCCsGAQUF BwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBv c2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL1FIYUNWU1RT eG0wdUVFTnY1bDZUNk1HOVNqYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1MGJlYzkyNjEv ZmVmM2FiZjYtZjJlMC00NGU4LWE3YjMtMWM4N2M5YzFkMjZmLnJvYTCBlQYDVR0f BIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFt YXpvbmF3cy5jb20vdm9sdW1lLzA4YzJmMjY0LTIzZjktNDlmYi05ZDQzLWY4YjUw YmVjOTI2MS83YmExNzg2My1hNjEzLTQxOTctOWVkNS1iZWRhNmE4OTg2OWYuY3Js MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgAkBto48DANBgkqhkiG9w0BAQsFAAOCAQEAWOsYut1mLJ9WAQk/s/Le R2a9Bez7fsYRy90BKRC8C/x83tQ8cFjYIcxuF3q1noDbb8JvYDdL2yRZZubo5KeE cu+QsEb9dMFVxzYDzR4h1pyWCrtkVLt0Xx23z2x+SN9sR1AzohxwusQ7BnvoGQIP ODUWnu5sfnSNwoEo5Hyyvz9lkLxs9Xx5N6dnd/c3qRofkpOC1nIhPjNFlVKYjxEU UnI0iBqZFtJ13rSbg+89+N7nsBtYrpt1xPhu2QQNaKNZxs+y66lAvazpmZSrjjFo UBMVSiV3B7nFjihtejeukVvGcJilbjzNl50o1Y3DyHMkYceE+Epbn7tg8IjPTsuO Sw== -----END CERTIFICATE-----Generated at Sun Mar 1 22:13:30 2026 by rpki-client