$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8240f40e-4c9d-4e9c-85a8-efba70430867.roa File: 8240f40e-4c9d-4e9c-85a8-efba70430867.roa (raw, json) Hash identifier: aOIInMnVe9xeKwrrJurLai5uDXPgttHJxSqRDsUWV0g= Subject key identifier: 88:FE:7A:14:1A:56:88:0F:67:07:C1:62:89:99:1B:4E:BE:2D:F3:01 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2320CED7CBAFAD1344BD24EE41D3DF470BA8A071 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8240f40e-4c9d-4e9c-85a8-efba70430867.roa Signing time: Wed 11 Feb 2026 00:10:50 +0000 ROA not before: Wed 11 Feb 2026 00:10:50 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Feb 2026 00:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:20:ce:d7:cb:af:ad:13:44:bd:24:ee:41:d3:df:47:0b:a8:a0:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 11 00:10:50 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=eba6920ddddfc20e8e39e9e9b27a9a1244afeff616797e3ba034458ee0e26a5e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:af:2b:8e:0b:2b:7e:d6:ca:ce:b1:6a:a8:2e: d2:43:5b:1e:e3:ee:b7:f0:06:6d:64:2a:e6:0d:30: 4a:a6:2c:de:91:d1:4c:27:34:76:22:5c:b4:17:7c: 11:75:e2:09:89:8a:b8:7d:6f:21:03:ba:a2:43:45: ac:6f:c4:3a:43:d3:6b:34:a4:48:b0:6a:2c:df:79: 70:f4:36:28:8f:5c:e3:e4:d5:9e:04:48:7d:51:b0: d4:01:d1:60:e7:f1:10:4a:81:28:c3:4d:7f:f1:33: 34:33:cd:ee:07:32:1e:15:ac:a9:24:8c:55:6f:f9: 20:be:c8:15:80:24:7b:c3:29:aa:1b:09:e8:6d:40: 80:c4:19:97:b8:71:79:e3:8c:6c:99:0c:72:23:fa: af:75:f4:7f:23:51:ca:b1:3e:b1:90:8e:56:3f:ef: 5e:c6:d3:1a:f5:ec:03:84:48:95:28:ca:77:ff:d3: 6c:3b:84:07:7f:00:8c:fe:1b:aa:88:7d:0e:74:4c: 1c:ea:8c:f9:f7:e9:b3:1e:4b:a8:0d:9b:16:88:4f: 19:e3:8a:37:01:76:4a:07:5d:2a:a2:f0:cd:09:da: 94:28:c2:39:4c:ee:d3:af:02:39:01:12:f9:c9:e3: 8d:ef:0f:3d:4c:b7:ae:50:24:bc:a5:70:07:91:25: b9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:FE:7A:14:1A:56:88:0F:67:07:C1:62:89:99:1B:4E:BE:2D:F3:01 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8240f40e-4c9d-4e9c-85a8-efba70430867.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:4040::/48 Signature Algorithm: sha256WithRSAEncryption 11:8f:ba:73:f1:74:c1:20:55:0f:1a:1d:1b:4c:0c:74:96:de: 11:38:82:df:4e:e6:4c:51:f4:b5:83:26:bc:d5:61:3f:33:df: e3:d4:9a:9b:43:f8:1f:09:06:de:ec:f1:28:73:b8:f7:86:fc: 53:89:7a:7a:70:61:46:f1:ad:7e:82:d0:2c:e3:c7:57:2e:ec: 9d:b2:47:6c:5b:45:f1:06:ca:15:87:90:78:bb:41:5f:7d:98: 82:62:25:39:34:0f:1e:17:dc:66:50:28:cb:7e:56:01:1f:c9: 92:16:43:d8:cf:5c:f9:18:c5:90:50:50:ba:6c:13:de:78:14: 75:b3:c9:5b:71:fe:23:5c:0a:b6:c4:e5:78:0f:35:d6:85:89: d9:93:2d:d1:30:99:f8:a9:77:44:7b:ac:be:03:49:87:03:d9: d8:a2:ae:c7:ce:cd:70:87:33:d1:05:39:ba:80:e5:24:66:b9: 93:3b:3c:7a:84:e2:1b:0d:c8:ed:cd:9b:45:82:e7:3d:4b:9b: a1:2d:25:15:fa:98:48:ec:d7:36:fb:f3:27:32:66:dc:fc:e7: 9f:93:30:33:c7:8c:12:73:36:fd:8e:7a:e4:b4:1f:a9:48:43: 51:b2:f2:d8:4d:18:ed:cb:e6:d6:7a:a3:24:12:6a:a2:18:5a: 94:38:db:9d -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUIyDO18uvrRNEvSTuQdPfRwuooHEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxMTAwMTA1MFoX DTI2MDUxMjIzNTk1OVowejFJMEcGA1UEBRNAZWJhNjkyMGRkZGRmYzIwZThlMzll OWU5YjI3YTlhMTI0NGFmZWZmNjE2Nzk3ZTNiYTAzNDQ1OGVlMGUyNmE1ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxq8rjgsrftbKzrFqqC7SQ1se4+63 8AZtZCrmDTBKpizekdFMJzR2Ily0F3wRdeIJiYq4fW8hA7qiQ0Wsb8Q6Q9NrNKRI sGos33lw9DYoj1zj5NWeBEh9UbDUAdFg5/EQSoEow01/8TM0M83uBzIeFaypJIxV b/kgvsgVgCR7wymqGwnobUCAxBmXuHF544xsmQxyI/qvdfR/I1HKsT6xkI5WP+9e xtMa9ewDhEiVKMp3/9NsO4QHfwCM/huqiH0OdEwc6oz59+mzHkuoDZsWiE8Z44o3 AXZKB10qovDNCdqUKMI5TO7TrwI5ARL5yeON7w89TLeuUCS8pXAHkSW52QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIj+ehQaVogPZwfBYomZG06+LfMBMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgyNDBmNDBlLTRjOWQtNGU5Yy04NWE4LWVmYmE3MDQzMDg2Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6kBAMA0GCSqGSIb3DQEBCwUAA4IBAQARj7pz8XTBIFUPGh0b TAx0lt4ROILfTuZMUfS1gya81WE/M9/j1JqbQ/gfCQbe7PEoc7j3hvxTiXp6cGFG 8a1+gtAs48dXLuydskdsW0XxBsoVh5B4u0FffZiCYiU5NA8eF9xmUCjLflYBH8mS FkPYz1z5GMWQUFC6bBPeeBR1s8lbcf4jXAq2xOV4DzXWhYnZky3RMJn4qXdEe6y+ A0mHA9nYoq7Hzs1whzPRBTm6gOUkZrmTOzx6hOIbDcjtzZtFguc9S5uhLSUV+phI 7Nc2+/MnMmbc/OefkzAzx4wSczb9jnrktB+pSENRsvLYTRjty+bWeqMkEmqiGFqU ONud -----END CERTIFICATE-----Generated at Sat Feb 21 16:22:05 2026 by rpki-client