$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/73ac717a-3223-47af-8335-7edd5eec49cc.roa File: 73ac717a-3223-47af-8335-7edd5eec49cc.roa (raw, json) Hash identifier: bgNKPfBJqxUou+J0AlmUaFHDPz+dr1ZdcrK/PT9g5Ks= Subject key identifier: 4F:15:40:48:D2:E0:CC:4D:9D:FF:22:4B:BB:F6:89:F9:6C:D6:66:47 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 14A92FF8D3FA70FA0F8314922BD16F6933F92650 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/73ac717a-3223-47af-8335-7edd5eec49cc.roa Signing time: Fri 06 Feb 2026 00:00:33 +0000 ROA not before: Fri 06 Feb 2026 00:00:33 +0000 ROA not after: Thu 07 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da68:4040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Feb 2026 00:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:a9:2f:f8:d3:fa:70:fa:0f:83:14:92:2b:d1:6f:69:33:f9:26:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 6 00:00:33 2026 GMT Not After : May 7 23:59:59 2026 GMT Subject: serialNumber=20dec79a7d65472673eae95313cc9173111bd2a6bee776cc9f4299b0ed340d3e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:89:25:d1:b3:3d:6d:c9:ff:23:8b:c6:31:b2: c1:71:7d:3b:15:92:72:d9:70:9b:8c:84:61:81:18: a1:45:5a:f9:8a:e0:ee:5f:6c:8b:0a:78:ba:67:f3: 04:67:4e:e8:d6:b2:f1:70:60:67:b6:8d:89:09:58: 8b:74:db:10:b8:87:28:a1:d6:71:35:8e:0a:d0:78: e5:e1:84:83:6d:0e:b1:fe:d5:19:30:49:3f:d3:08: 42:82:e4:d3:67:68:59:fb:e4:0e:ee:b2:4e:ab:83: 84:06:9e:db:d5:90:0d:70:15:25:5b:f9:9b:83:e1: b1:89:db:8e:89:85:a0:9e:35:26:88:57:8e:6c:9d: ad:10:63:7d:24:a4:5e:e5:81:0a:64:89:a5:3e:d0: e5:b8:ef:a2:66:5d:bf:dd:47:df:06:a5:84:b6:ff: 91:8d:ea:bf:02:e6:84:4d:0c:63:85:6d:12:81:e4: 05:8b:f1:db:c2:d7:9b:c5:c7:d4:50:de:e5:8d:fd: df:be:e5:0c:83:0a:b8:5b:56:8e:24:f5:c2:87:8d: 27:e1:ef:7d:0e:1d:05:89:9c:05:37:4a:c3:b9:eb: cc:f2:f6:f1:7d:0d:ac:15:b4:0b:31:45:59:fd:87: 08:2c:80:0a:57:f1:0c:06:60:e6:5b:d7:fa:7c:36: e2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:15:40:48:D2:E0:CC:4D:9D:FF:22:4B:BB:F6:89:F9:6C:D6:66:47 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/73ac717a-3223-47af-8335-7edd5eec49cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da68:4040::/46 Signature Algorithm: sha256WithRSAEncryption 22:1e:1c:b7:26:da:82:8e:f3:a1:7c:89:50:4c:f6:a5:ce:ce: b4:b7:f6:38:71:15:64:af:f7:2d:3d:40:b8:c1:5b:cc:74:c0: 20:3c:f0:5c:b0:de:92:ea:76:a3:91:78:44:ed:80:d8:e5:46: f0:a1:22:8f:36:86:d9:04:ef:b4:b8:b5:d2:58:40:fa:98:57: 34:01:a3:2f:e1:7d:cd:18:35:b3:5a:f6:89:83:04:af:3e:52: 8c:be:96:3e:c4:51:49:f8:9b:c1:15:9d:33:1c:75:c1:a4:d3: af:22:bd:cc:bc:ee:e7:3a:e3:bd:75:c2:da:b7:62:41:aa:24: b9:03:0d:c0:7c:1b:21:2f:fb:c1:4e:f9:fe:6c:78:04:64:f0: 66:a5:a4:f1:bf:b6:50:c7:77:51:9f:bf:80:a5:d4:cf:8f:3e: 33:25:49:6e:db:a3:71:1b:d0:99:f2:38:20:b6:66:88:f1:74: 33:c4:e4:06:9b:2e:2a:39:83:ce:18:4a:38:47:91:b9:72:1e: 6e:de:21:00:b3:89:95:1d:14:f7:61:bc:a8:cd:32:66:22:fd: cc:3b:d6:a9:7a:9e:eb:19:5f:0f:72:66:96:f6:6e:3b:e4:ce: 88:89:8b:d8:9a:e4:d3:06:55:06:80:5c:7c:2a:7b:ce:66:3f: b3:e9:68:57 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUFKkv+NP6cPoPgxSSK9FvaTP5JlAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIwNjAwMDAzM1oX DTI2MDUwNzIzNTk1OVowejFJMEcGA1UEBRNAMjBkZWM3OWE3ZDY1NDcyNjczZWFl OTUzMTNjYzkxNzMxMTFiZDJhNmJlZTc3NmNjOWY0Mjk5YjBlZDM0MGQzZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4kl0bM9bcn/I4vGMbLBcX07FZJy 2XCbjIRhgRihRVr5iuDuX2yLCni6Z/MEZ07o1rLxcGBnto2JCViLdNsQuIcoodZx NY4K0Hjl4YSDbQ6x/tUZMEk/0whCguTTZ2hZ++QO7rJOq4OEBp7b1ZANcBUlW/mb g+GxiduOiYWgnjUmiFeObJ2tEGN9JKRe5YEKZImlPtDluO+iZl2/3UffBqWEtv+R jeq/AuaETQxjhW0SgeQFi/HbwtebxcfUUN7ljf3fvuUMgwq4W1aOJPXCh40n4e99 Dh0FiZwFN0rDuevM8vbxfQ2sFbQLMUVZ/YcILIAKV/EMBmDmW9f6fDbiDwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFE8VQEjS4MxNnf8iS7v2ifls1mZHMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzczYWM3MTdhLTMyMjMtNDdhZi04MzM1LTdlZGQ1ZWVjNDljYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaEBAMA0GCSqGSIb3DQEBCwUAA4IBAQAiHhy3JtqCjvOhfIlQ TPalzs60t/Y4cRVkr/ctPUC4wVvMdMAgPPBcsN6S6najkXhE7YDY5UbwoSKPNobZ BO+0uLXSWED6mFc0AaMv4X3NGDWzWvaJgwSvPlKMvpY+xFFJ+JvBFZ0zHHXBpNOv Ir3MvO7nOuO9dcLat2JBqiS5Aw3AfBshL/vBTvn+bHgEZPBmpaTxv7ZQx3dRn7+A pdTPjz4zJUlu26NxG9CZ8jggtmaI8XQzxOQGmy4qOYPOGEo4R5G5ch5u3iEAs4mV HRT3YbyozTJmIv3MO9apep7rGV8PcmaW9m475M6IiYvYmuTTBlUGgFx8KnvOZj+z 6WhX -----END CERTIFICATE-----Generated at Sat Feb 21 16:23:06 2026 by rpki-client