$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a2514fe3-5779-4174-ba62-2a19e0c7ddf9.roa File: a2514fe3-5779-4174-ba62-2a19e0c7ddf9.roa (raw, json) Hash identifier: qS7GkGCX7XA3gxjM/NFB3dRl/F/oPAal7O/CoPTOgfA= Subject key identifier: 85:85:AC:AC:BD:F1:05:2A:43:51:02:E6:59:62:EF:49:CB:53:D4:98 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7EC83AD2E45DCB1FC13A6EEEEA78D9F2D0B9BA21 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a2514fe3-5779-4174-ba62-2a19e0c7ddf9.roa Signing time: Fri 13 Feb 2026 00:00:39 +0000 ROA not before: Fri 13 Feb 2026 00:00:39 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da21::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Feb 2026 00:10:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:c8:3a:d2:e4:5d:cb:1f:c1:3a:6e:ee:ea:78:d9:f2:d0:b9:ba:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 13 00:00:39 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=24d555e1ead650e18aff976846240eafc1831d87dc48016023daf0ac8e0acf7f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ca:2c:1f:dc:bf:56:fe:63:d1:5e:7b:f1:c3: 01:1a:7e:07:91:6d:09:93:a9:7d:5a:39:66:77:10: 93:97:ed:79:c2:08:97:44:e0:e9:70:6a:9d:f9:d0: 3e:ec:47:f6:bc:1b:b7:6f:56:97:5e:af:a1:bb:62: 1b:24:f7:b0:06:a8:6b:95:d1:40:c3:de:f6:9c:74: db:25:21:2a:bb:1f:69:19:ec:0d:d1:0d:57:eb:54: f7:d2:60:ec:ea:6d:c9:2d:ff:b7:6c:65:83:7e:08: 69:80:96:84:bc:ea:fd:02:05:ec:c4:fb:b7:b4:f1: 9b:5b:5a:11:70:f1:0a:f8:b8:4c:b9:f5:1d:03:e6: fa:c6:89:8f:f7:fc:44:93:61:57:b5:ce:48:bf:88: cf:a3:1f:ad:bc:01:41:b3:91:d4:16:e7:ee:3f:d8: 8a:09:43:cd:04:75:97:74:bf:67:a2:01:fb:08:12: 44:6e:e3:20:02:8f:d0:31:51:d4:96:ae:ae:18:04: cf:97:d3:08:19:bf:d0:5b:2d:35:92:60:4f:1c:5c: 1a:6a:8b:6c:5d:a8:f7:44:ca:b1:2d:d6:e6:c2:a3: a2:8c:5a:01:c8:4f:f1:56:a8:c9:cc:40:61:6e:aa: 96:2b:4c:d5:24:96:41:8d:1a:59:bc:9f:3c:f7:24: 95:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:85:AC:AC:BD:F1:05:2A:43:51:02:E6:59:62:EF:49:CB:53:D4:98 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a2514fe3-5779-4174-ba62-2a19e0c7ddf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da21::/36 Signature Algorithm: sha256WithRSAEncryption 2f:78:44:43:40:15:3d:1d:8f:3e:aa:82:da:bb:10:3b:f1:0c: 7c:6b:c0:2b:21:b0:b3:e0:8d:9c:67:7a:d4:e7:20:1c:85:e7: 80:e9:7c:b8:3f:f5:73:9a:79:00:d0:1e:b0:65:d0:eb:95:60: 85:69:23:38:71:27:d5:2d:2d:65:11:83:36:fb:b2:74:91:0e: f5:eb:99:12:79:67:12:d0:5a:e8:89:72:3d:31:98:28:b0:0e: 6a:20:59:45:7d:cb:3a:dc:0c:14:50:82:17:fd:e3:32:6b:72: 16:3c:dd:60:77:96:3e:d5:bc:12:02:fe:82:ef:1a:13:e1:67: 18:29:49:20:ce:bd:a3:7a:bf:63:d6:25:dd:01:bb:98:e8:cc: 69:b6:11:28:9f:72:4e:50:0f:d4:7a:76:f1:34:59:71:fb:a0: 95:ea:bb:20:6c:71:bc:42:d6:25:6d:d9:25:25:48:cb:69:7d: 3e:f3:fe:69:f8:1b:8f:52:12:df:f4:e7:f6:a0:b5:79:17:9d: 6e:25:c4:ec:1e:81:26:5e:37:e1:e1:23:b6:b9:ca:a9:5b:fc: 32:7c:77:5f:61:88:38:cb:7b:bd:fe:13:ea:dd:f9:ea:5c:7f: 8b:13:ac:34:80:b0:db:53:dd:f4:74:37:f4:73:57:a5:e5:ff: 14:30:b3:70 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUfsg60uRdyx/BOm7u6njZ8tC5uiEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxMzAwMDAzOVoX DTI2MDUxNDIzNTk1OVowejFJMEcGA1UEBRNAMjRkNTU1ZTFlYWQ2NTBlMThhZmY5 NzY4NDYyNDBlYWZjMTgzMWQ4N2RjNDgwMTYwMjNkYWYwYWM4ZTBhY2Y3ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cosH9y/Vv5j0V578cMBGn4HkW0J k6l9WjlmdxCTl+15wgiXRODpcGqd+dA+7Ef2vBu3b1aXXq+hu2IbJPewBqhrldFA w972nHTbJSEqux9pGewN0Q1X61T30mDs6m3JLf+3bGWDfghpgJaEvOr9AgXsxPu3 tPGbW1oRcPEK+LhMufUdA+b6xomP9/xEk2FXtc5Iv4jPox+tvAFBs5HUFufuP9iK CUPNBHWXdL9nogH7CBJEbuMgAo/QMVHUlq6uGATPl9MIGb/QWy01kmBPHFwaaots Xaj3RMqxLdbmwqOijFoByE/xVqjJzEBhbqqWK0zVJJZBjRpZvJ889ySVFQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIWFrKy98QUqQ1EC5lli70nLU9SYMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2EyNTE0ZmUzLTU3NzktNDE3NC1iYTYyLTJhMTllMGM3ZGRmOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaIQAwDQYJKoZIhvcNAQELBQADggEBAC94RENAFT0djz6qgtq7 EDvxDHxrwCshsLPgjZxnetTnIByF54DpfLg/9XOaeQDQHrBl0OuVYIVpIzhxJ9Ut LWURgzb7snSRDvXrmRJ5ZxLQWuiJcj0xmCiwDmogWUV9yzrcDBRQghf94zJrchY8 3WB3lj7VvBIC/oLvGhPhZxgpSSDOvaN6v2PWJd0Bu5jozGm2ESifck5QD9R6dvE0 WXH7oJXquyBscbxC1iVt2SUlSMtpfT7z/mn4G49SEt/05/agtXkXnW4lxOwegSZe N+HhI7a5yqlb/DJ8d19hiDjLe73+E+rd+epcf4sTrDSAsNtT3fR0N/RzV6Xl/xQw s3A= -----END CERTIFICATE-----Generated at Wed Feb 18 04:53:14 2026 by rpki-client