$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dd2c2945-d487-4697-92e0-60bea4ebc9ee.roa File: dd2c2945-d487-4697-92e0-60bea4ebc9ee.roa (raw, json) Hash identifier: YFMa0DVQxIl5CqJEX7CMC+/FhNh/bD4WDFsI1FccEdM= Subject key identifier: C8:AA:A2:4C:10:8D:1E:B6:DE:2F:D7:B6:D4:F2:06:56:6A:3B:47:45 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4394A04AB9C31ED9339039CB468AAC47E5783479 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dd2c2945-d487-4697-92e0-60bea4ebc9ee.roa Signing time: Wed 11 Feb 2026 00:10:50 +0000 ROA not before: Wed 11 Feb 2026 00:10:50 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:8840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Feb 2026 00:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:94:a0:4a:b9:c3:1e:d9:33:90:39:cb:46:8a:ac:47:e5:78:34:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 11 00:10:50 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=da22317eafc4f19b3ec78d11fb31fdb91620269073802adf486cd15725e90ee7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f0:a3:9e:08:a6:f8:38:4d:8f:1b:a9:9e:09: 9f:30:fc:94:59:d8:73:42:69:25:b5:ee:14:bd:6c: 41:21:59:46:c5:98:05:54:55:3b:ad:7e:9e:7c:80: 96:00:5c:09:53:40:06:ca:4b:29:ea:ac:7a:91:54: d8:f7:50:63:5b:5e:ac:3a:93:0f:5a:06:c4:ae:d8: cf:29:5e:14:08:0d:b2:e1:21:32:97:fa:f8:6a:52: 51:22:a8:00:37:d2:b4:92:eb:1d:e4:87:33:37:71: e3:0b:46:00:6b:4b:d7:d2:66:0b:36:3a:14:d6:42: af:45:57:eb:d5:a6:d6:0f:64:8f:ed:ef:ee:87:15: 07:c8:72:59:33:6c:57:6f:2b:3a:e4:fc:2c:9c:3f: b2:21:31:de:da:fc:01:19:60:9b:46:42:09:2b:51: 9b:69:92:c1:51:ed:52:6b:cc:02:7f:4b:41:58:b2: 67:37:21:af:a0:41:4a:37:0b:ae:07:0e:48:3d:9a: da:71:79:c2:b7:f3:8d:96:27:7b:9e:8b:97:ae:28: a0:05:26:51:b0:9d:c2:2b:cc:23:a5:df:6d:02:19: fc:69:3f:df:c3:20:5d:9f:3d:f3:f1:04:a1:0d:f4: ff:0f:76:0d:30:d2:33:48:f0:f2:dd:c0:45:27:44: e3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:AA:A2:4C:10:8D:1E:B6:DE:2F:D7:B6:D4:F2:06:56:6A:3B:47:45 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dd2c2945-d487-4697-92e0-60bea4ebc9ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:8840::/48 Signature Algorithm: sha256WithRSAEncryption 5c:b2:07:06:34:89:1c:89:ef:c3:25:23:3f:90:33:f5:06:f5: 3c:0e:33:aa:6f:ac:71:db:62:1b:95:2b:52:f6:4d:cb:28:7a: 3e:0d:b7:a4:f1:1a:ed:c8:91:02:b4:e5:63:4c:c8:5c:61:ff: 6c:0d:c3:17:ee:69:40:57:dc:a7:95:f7:bd:18:b0:51:95:2d: b7:f3:0d:e6:22:66:04:18:38:52:ca:2d:3d:23:63:5f:39:3c: 53:12:fb:02:c2:ce:29:d3:63:f8:4e:62:31:73:52:10:95:c8: 64:ed:36:e5:ac:0b:ae:0f:33:cb:6e:51:0e:91:8d:d1:79:8b: 36:0b:b0:cc:70:e2:a9:04:8e:df:63:ee:60:6a:ab:67:7c:e3: 5a:70:ef:31:8a:84:94:8c:7c:64:9c:2d:70:77:0b:82:02:41: e9:21:df:88:e7:0d:d8:4a:62:0c:45:c5:b5:37:6f:f9:2f:3d: 98:2b:9e:4a:a3:85:2c:58:15:b9:70:65:ca:9c:cc:68:5e:1a: ea:4c:67:2a:ea:4c:17:24:9d:f4:8e:59:09:1c:9d:18:a1:28: 76:cf:5d:77:ec:32:74:a5:50:6a:92:9f:6d:07:48:6f:35:d3: ae:92:e0:29:75:6a:02:59:43:af:06:13:0e:b0:2d:56:05:7a: 42:ed:79:e3 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUQ5SgSrnDHtkzkDnLRoqsR+V4NHkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxMTAwMTA1MFoX DTI2MDUxMjIzNTk1OVowejFJMEcGA1UEBRNAZGEyMjMxN2VhZmM0ZjE5YjNlYzc4 ZDExZmIzMWZkYjkxNjIwMjY5MDczODAyYWRmNDg2Y2QxNTcyNWU5MGVlNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/Cjngim+DhNjxupngmfMPyUWdhz Qmklte4UvWxBIVlGxZgFVFU7rX6efICWAFwJU0AGyksp6qx6kVTY91BjW16sOpMP WgbErtjPKV4UCA2y4SEyl/r4alJRIqgAN9K0kusd5IczN3HjC0YAa0vX0mYLNjoU 1kKvRVfr1abWD2SP7e/uhxUHyHJZM2xXbys65PwsnD+yITHe2vwBGWCbRkIJK1Gb aZLBUe1Sa8wCf0tBWLJnNyGvoEFKNwuuBw5IPZracXnCt/ONlid7nouXriigBSZR sJ3CK8wjpd9tAhn8aT/fwyBdnz3z8QShDfT/D3YNMNIzSPDy3cBFJ0TjZQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMiqokwQjR623i/XttTyBlZqO0dFMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RkMmMyOTQ1LWQ0ODctNDY5Ny05MmUwLTYwYmVhNGViYzllZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6ohAMA0GCSqGSIb3DQEBCwUAA4IBAQBcsgcGNIkcie/DJSM/ kDP1BvU8DjOqb6xx22IblStS9k3LKHo+Dbek8RrtyJECtOVjTMhcYf9sDcMX7mlA V9ynlfe9GLBRlS238w3mImYEGDhSyi09I2NfOTxTEvsCws4p02P4TmIxc1IQlchk 7TblrAuuDzPLblEOkY3ReYs2C7DMcOKpBI7fY+5gaqtnfONacO8xioSUjHxknC1w dwuCAkHpId+I5w3YSmIMRcW1N2/5Lz2YK55Ko4UsWBW5cGXKnMxoXhrqTGcq6kwX JJ30jlkJHJ0YoSh2z1137DJ0pVBqkp9tB0hvNdOukuApdWoCWUOvBhMOsC1WBXpC 7Xnj -----END CERTIFICATE-----Generated at Sat Feb 21 16:22:26 2026 by rpki-client