$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5561a100-f53b-41ce-811d-3f370c91a3c3.roa File: 5561a100-f53b-41ce-811d-3f370c91a3c3.roa (raw, json) Hash identifier: 3FMetdimk7AWMQrYwx3f7Rd/y5AzIAHXdwQvaBx+8b8= Subject key identifier: 46:5C:4C:2C:BD:74:92:16:C9:90:FD:D7:92:22:58:00:0C:5F:08:38 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 01AC5430D7B6E043A8DFDD78FCED1B061279E467 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5561a100-f53b-41ce-811d-3f370c91a3c3.roa Signing time: Wed 11 Feb 2026 00:20:13 +0000 ROA not before: Wed 11 Feb 2026 00:20:13 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Feb 2026 00:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:ac:54:30:d7:b6:e0:43:a8:df:dd:78:fc:ed:1b:06:12:79:e4:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 11 00:20:13 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=34ecec9afd1d8eb8f2db511424df62157de1def2e807fa5f0a48d5976c69440d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:38:2c:97:23:b2:07:8e:0c:fa:f3:8d:71:c8: 0c:a0:91:87:84:03:cc:2b:56:32:ee:77:fe:fb:04: 3c:e5:7d:2c:f7:c5:0e:77:f1:73:06:42:ab:44:81: 4d:64:b4:8a:92:e3:04:71:7d:87:0c:41:fd:3c:2d: 65:f1:9d:31:a4:12:a6:c4:f3:b5:be:3d:59:79:bf: f4:20:fa:70:71:49:fa:65:c1:14:a8:c2:d3:b0:f3: 24:a8:28:1d:a2:4f:13:73:5b:2b:1e:84:30:96:ca: 7d:93:1d:7a:d8:9c:18:ba:da:72:6e:9c:a0:d7:5a: 9c:48:8b:81:7e:62:70:36:86:97:03:75:85:7d:d7: 07:63:7b:e2:fa:a3:38:e2:60:96:44:32:16:ae:4f: b6:cc:27:ac:d2:fe:83:95:ad:13:d1:1d:7d:cf:3d: cd:03:53:fa:4e:25:5a:7f:64:ef:8a:84:00:f5:19: 35:d6:b0:53:02:db:c8:df:90:14:de:93:1a:e6:69: c8:67:b6:cd:8f:80:72:a9:ca:35:03:90:70:b7:c7: 10:32:cf:ff:27:44:56:e4:ff:15:44:50:4b:97:4e: 81:28:72:63:b0:a6:2b:7d:dc:e9:21:f8:f6:fe:b5: 3f:33:7e:a4:98:cd:af:3e:ca:c5:1f:05:87:34:f5: 16:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:5C:4C:2C:BD:74:92:16:C9:90:FD:D7:92:22:58:00:0C:5F:08:38 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5561a100-f53b-41ce-811d-3f370c91a3c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:8c0::/48 Signature Algorithm: sha256WithRSAEncryption 74:a6:61:92:86:92:5b:bc:07:0a:ad:42:25:2e:79:b1:37:d8: 22:12:ac:a8:24:a3:e0:12:b3:6e:7c:7c:80:37:be:98:bf:c3: 33:d9:a6:47:ae:a3:45:99:dc:31:5e:6d:b4:11:fa:d7:a8:20: b4:a3:95:8a:e7:fc:ed:0a:b0:6d:f3:cb:f2:41:35:aa:be:0b: 17:4b:0c:fe:30:31:1b:04:c9:86:26:a1:45:b7:c0:d8:33:07: 8e:dd:2e:8a:96:72:c8:ca:47:ba:c8:f3:e0:c2:57:e6:c8:14: e5:fd:6c:d6:e6:df:b8:8b:a2:8d:8c:a5:81:3b:91:b2:c9:8e: 3e:4a:2b:09:47:c6:b2:91:11:29:f8:e2:20:05:53:1e:3d:74: 3e:96:0b:78:df:6c:f7:99:24:56:c5:8b:fe:c8:f6:bc:9c:31: f8:10:96:46:30:aa:1b:5c:9f:3d:64:05:82:74:65:a2:35:7c: 6a:c9:b7:c2:3b:55:54:c0:55:20:6c:72:c1:ac:af:c2:d9:8c: ce:78:b6:80:b9:91:37:94:e9:10:15:7b:98:5a:f5:fb:3a:27: 0c:d0:74:9a:07:60:28:b8:f2:fb:5a:6c:0c:be:0b:0b:af:a4: 30:22:ce:48:9b:ef:a8:95:07:e5:2c:d1:d3:d9:01:21:d6:9b: 64:03:4c:51 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUAaxUMNe24EOo3914/O0bBhJ55GcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxMTAwMjAxM1oX DTI2MDUxMjIzNTk1OVowejFJMEcGA1UEBRNAMzRlY2VjOWFmZDFkOGViOGYyZGI1 MTE0MjRkZjYyMTU3ZGUxZGVmMmU4MDdmYTVmMGE0OGQ1OTc2YzY5NDQwZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzgslyOyB44M+vONccgMoJGHhAPM K1Yy7nf++wQ85X0s98UOd/FzBkKrRIFNZLSKkuMEcX2HDEH9PC1l8Z0xpBKmxPO1 vj1Zeb/0IPpwcUn6ZcEUqMLTsPMkqCgdok8Tc1srHoQwlsp9kx162JwYutpybpyg 11qcSIuBfmJwNoaXA3WFfdcHY3vi+qM44mCWRDIWrk+2zCes0v6Dla0T0R19zz3N A1P6TiVaf2TvioQA9Rk11rBTAtvI35AU3pMa5mnIZ7bNj4Byqco1A5Bwt8cQMs// J0RW5P8VRFBLl06BKHJjsKYrfdzpIfj2/rU/M36kmM2vPsrFHwWHNPUWtwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEZcTCy9dJIWyZD915IiWAAMXwg4MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU1NjFhMTAwLWY1M2ItNDFjZS04MTFkLTNmMzcwYzkxYTNjMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6gjAMA0GCSqGSIb3DQEBCwUAA4IBAQB0pmGShpJbvAcKrUIl LnmxN9giEqyoJKPgErNufHyAN76Yv8Mz2aZHrqNFmdwxXm20EfrXqCC0o5WK5/zt CrBt88vyQTWqvgsXSwz+MDEbBMmGJqFFt8DYMweO3S6KlnLIyke6yPPgwlfmyBTl /WzW5t+4i6KNjKWBO5GyyY4+SisJR8aykREp+OIgBVMePXQ+lgt432z3mSRWxYv+ yPa8nDH4EJZGMKobXJ89ZAWCdGWiNXxqybfCO1VUwFUgbHLBrK/C2YzOeLaAuZE3 lOkQFXuYWvX7OicM0HSaB2AouPL7WmwMvgsLr6QwIs5Im++olQflLNHT2QEh1ptk A0xR -----END CERTIFICATE-----Generated at Sat Feb 21 16:25:14 2026 by rpki-client