$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2b4bb7eb-114e-42ab-bce7-b04bca08f0f5.roa File: 2b4bb7eb-114e-42ab-bce7-b04bca08f0f5.roa (raw, json) Hash identifier: 4Gy2vaoIw862TAcornpJPVswY2zQVz29ip88FvADpQk= Subject key identifier: FF:14:9B:58:4F:EF:07:90:DC:26:5D:F0:B0:39:3B:6E:7D:68:70:2F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 571AD3EB5F5B98E610390BBCB424944E7DAE6313 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2b4bb7eb-114e-42ab-bce7-b04bca08f0f5.roa Signing time: Wed 11 Feb 2026 00:00:04 +0000 ROA not before: Wed 11 Feb 2026 00:00:04 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Feb 2026 00:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:1a:d3:eb:5f:5b:98:e6:10:39:0b:bc:b4:24:94:4e:7d:ae:63:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 11 00:00:04 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=d3d1bae6454976dccd7c37f5a0fe067ea470fa926c78623ecbf1eb412233d8f0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f2:cd:67:a2:12:4e:d5:f8:c1:3b:59:3b:28: 99:31:a3:99:2d:e6:1f:7c:1b:c7:12:e1:49:5a:0f: 6a:9c:a1:5d:5f:5f:8e:b2:bf:60:f5:62:13:27:05: 20:54:7c:67:be:7c:1a:20:c6:10:02:a1:04:b6:1e: 7f:a8:9d:f6:6d:55:41:a5:58:c1:fe:9e:9d:d4:c3: 1a:4b:16:cb:d2:44:d4:58:3f:83:fd:53:ce:13:5d: 4a:7f:16:3c:6c:a8:58:1f:8d:0c:df:e5:4d:e4:78: ab:5b:08:34:a4:08:eb:1c:9f:14:eb:4c:e9:97:1c: 19:ae:7a:bf:0e:9f:32:06:03:58:39:3a:68:31:d5: 28:03:99:49:90:22:ab:0e:56:ea:7c:a0:df:3e:5e: 54:f5:a5:55:8c:26:33:06:25:9e:25:bd:74:49:95: a5:bc:ee:b7:8b:34:ee:09:9e:b4:5d:a5:23:70:aa: d2:65:55:f6:a1:f4:0a:97:94:c7:03:7a:7e:ad:0e: 99:41:d0:bd:9b:a6:66:e2:db:60:ce:0b:bc:c3:29: 7c:0f:21:3a:96:35:28:85:7f:0f:ed:37:48:1a:59: 11:00:df:00:f2:ae:ac:ae:00:45:33:18:df:f8:16: d1:18:9c:84:15:0b:6a:31:c7:1f:8a:94:d1:f8:dc: 8d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:14:9B:58:4F:EF:07:90:DC:26:5D:F0:B0:39:3B:6E:7D:68:70:2F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2b4bb7eb-114e-42ab-bce7-b04bca08f0f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:2000::/40 Signature Algorithm: sha256WithRSAEncryption 51:31:c0:0a:be:fd:97:cc:46:15:56:64:16:88:b5:30:8d:60: 19:64:2e:c6:d5:f4:52:b2:ba:f2:ab:fe:f6:0c:54:8e:77:03: 19:f0:cc:e7:a5:b6:6e:90:77:03:b2:52:a5:43:27:62:d0:2e: 98:11:42:01:de:7a:92:7d:5f:24:f0:0d:24:0b:8e:86:97:59: ed:52:26:d0:51:e4:1c:5e:6b:99:88:42:91:4d:29:8a:c7:c9: d7:a7:ff:be:8b:58:e4:33:72:4f:fd:2f:6f:78:1d:25:5b:e0: 82:32:b0:27:f2:9a:ab:74:50:fc:d7:98:fc:e0:c0:a2:88:e4: 3f:44:76:62:d4:dd:b4:75:21:04:aa:03:9a:f7:df:00:59:d7: 34:35:63:db:cf:3f:c8:95:db:e8:d4:51:3b:5f:fe:9b:29:48: 8d:47:50:19:f7:63:50:8b:b0:a1:f2:96:1a:42:c1:4a:16:d1: 55:5a:f7:fe:b2:c9:ec:0d:ec:16:7d:cb:73:51:24:31:f2:4a: 0c:3d:b2:71:63:72:3f:7f:da:ee:30:56:40:18:a8:76:ba:02: 8a:53:0b:4a:f7:c6:9e:1a:ec:97:d8:38:1a:86:1a:72:16:c3: ac:36:57:41:26:c5:36:0a:04:48:0b:b3:09:14:fb:b6:db:e9: 56:17:6f:32 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUVxrT619bmOYQOQu8tCSUTn2uYxMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxMTAwMDAwNFoX DTI2MDUxMjIzNTk1OVowejFJMEcGA1UEBRNAZDNkMWJhZTY0NTQ5NzZkY2NkN2Mz N2Y1YTBmZTA2N2VhNDcwZmE5MjZjNzg2MjNlY2JmMWViNDEyMjMzZDhmMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvLNZ6ISTtX4wTtZOyiZMaOZLeYf fBvHEuFJWg9qnKFdX1+Osr9g9WITJwUgVHxnvnwaIMYQAqEEth5/qJ32bVVBpVjB /p6d1MMaSxbL0kTUWD+D/VPOE11KfxY8bKhYH40M3+VN5HirWwg0pAjrHJ8U60zp lxwZrnq/Dp8yBgNYOTpoMdUoA5lJkCKrDlbqfKDfPl5U9aVVjCYzBiWeJb10SZWl vO63izTuCZ60XaUjcKrSZVX2ofQKl5THA3p+rQ6ZQdC9m6Zm4ttgzgu8wyl8DyE6 ljUohX8P7TdIGlkRAN8A8q6srgBFMxjf+BbRGJyEFQtqMccfipTR+NyNqwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFP8Um1hP7weQ3CZd8LA5O259aHAvMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJiNGJiN2ViLTExNGUtNDJhYi1iY2U3LWIwNGJjYTA4ZjBmNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba6iAwDQYJKoZIhvcNAQELBQADggEBAFExwAq+/ZfMRhVWZBaI tTCNYBlkLsbV9FKyuvKr/vYMVI53AxnwzOeltm6QdwOyUqVDJ2LQLpgRQgHeepJ9 XyTwDSQLjoaXWe1SJtBR5Bxea5mIQpFNKYrHyden/76LWOQzck/9L294HSVb4IIy sCfymqt0UPzXmPzgwKKI5D9EdmLU3bR1IQSqA5r33wBZ1zQ1Y9vPP8iV2+jUUTtf /pspSI1HUBn3Y1CLsKHylhpCwUoW0VVa9/6yyewN7BZ9y3NRJDHySgw9snFjcj9/ 2u4wVkAYqHa6AopTC0r3xp4a7JfYOBqGGnIWw6w2V0EmxTYKBEgLswkU+7bb6VYX bzI= -----END CERTIFICATE-----Generated at Sat Feb 21 16:21:59 2026 by rpki-client