$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eab73591-8941-4fa9-8f61-6dd3bbd7bf83.roa File: eab73591-8941-4fa9-8f61-6dd3bbd7bf83.roa (raw, json) Hash identifier: R/iOyBr6eG/xjU9qlpj6EEy/kZ5bLCf1IuC91F+p59g= Subject key identifier: 3D:2D:FC:D3:0C:94:23:83:EA:80:B9:84:28:32:8A:FF:2A:26:41:D1 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3F612EAF41030BEE416621A61D0C9346476223D1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eab73591-8941-4fa9-8f61-6dd3bbd7bf83.roa Signing time: Wed 11 Feb 2026 00:01:04 +0000 ROA not before: Wed 11 Feb 2026 00:01:04 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:8800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Feb 2026 00:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:61:2e:af:41:03:0b:ee:41:66:21:a6:1d:0c:93:46:47:62:23:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 11 00:01:04 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=7c762407396d4d0bf81395137299174245554590e1a2e1c5b1ef1861c143f289, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fb:c9:34:c9:39:b0:f3:b6:9c:74:51:c5:28: 93:29:d3:f6:cb:ac:4e:83:b1:a8:55:12:f0:1d:fa: 53:ba:07:ef:cb:7f:df:88:83:65:21:21:fa:a3:08: e9:aa:3f:fd:af:be:75:76:73:52:85:cb:05:5b:70: 27:e6:4c:dc:0b:10:b5:53:29:2a:4c:18:19:cf:40: 06:f8:e5:57:92:fd:63:35:ff:bc:f7:3b:0c:15:71: 32:bb:68:90:bd:0d:99:9e:30:85:76:c6:80:db:b5: f0:ac:d0:a6:48:ac:a1:9f:db:a1:33:86:0a:79:29: ab:38:07:14:74:36:61:ab:99:07:53:cf:47:1a:46: 30:15:bd:74:89:b1:4d:99:38:9f:6a:fb:e5:60:ab: 6d:bf:64:15:99:29:f5:a3:7a:29:55:28:ad:fc:f9: 28:22:12:68:3f:86:e8:8b:f5:8b:16:02:9f:22:80: 18:11:52:a5:0e:17:d8:81:fd:3f:a1:f1:0a:de:88: ba:c4:57:ab:dd:5c:86:e5:88:e5:ec:67:62:f7:b6: 95:fb:cf:3c:dd:16:6d:31:26:f7:6c:af:76:1b:ab: df:7e:ac:e0:21:eb:f9:b8:1b:77:27:e9:9d:80:37: 49:24:a0:a6:97:1e:eb:58:69:50:17:4e:50:ca:72: 2a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2D:FC:D3:0C:94:23:83:EA:80:B9:84:28:32:8A:FF:2A:26:41:D1 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eab73591-8941-4fa9-8f61-6dd3bbd7bf83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:8800::/40 Signature Algorithm: sha256WithRSAEncryption a8:26:ee:78:e7:6e:1a:32:71:76:5e:d8:35:25:d8:a2:14:63: f8:33:f4:e5:91:6e:ee:e0:a0:fc:d7:19:bd:f8:7c:9f:0a:6a: 8e:28:d4:a2:42:4a:75:54:33:be:95:85:08:5a:eb:51:af:17: 7c:bc:4e:38:67:ee:2b:a3:69:3f:02:c6:fe:12:98:19:13:95: 31:bd:fe:c2:13:de:f1:dc:be:c7:1d:ee:ef:b5:3b:48:9b:ab: 51:03:dc:37:15:fb:21:d9:ac:15:64:2b:07:3a:9b:03:f2:f0: 13:08:2b:2f:da:c3:82:79:90:4c:3c:c3:63:c3:b4:50:1a:75: be:8a:d4:6a:94:7e:cc:40:b2:cd:aa:ac:90:1d:2f:6a:d9:c9: 4e:7d:21:c9:03:72:60:85:e0:e4:42:8c:0a:d3:bd:9f:a5:bd: 58:7b:dd:60:f6:3c:48:db:d7:9a:13:61:53:bc:fd:54:a5:64: 23:dd:d7:5d:7a:70:1c:3a:e4:ce:e8:4b:4a:84:d7:f8:a0:0d: d5:ba:cc:68:6b:d0:84:ed:f7:3a:ab:c6:05:8f:79:0b:3a:7e: f7:af:c1:8d:9a:56:0e:4a:fd:2e:f9:e8:c3:1c:32:fd:81:9f: d1:27:67:13:6e:3b:82:6b:6f:e6:53:1a:29:b7:e0:f9:31:22: 75:7b:bf:f8 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUP2Eur0EDC+5BZiGmHQyTRkdiI9EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxMTAwMDEwNFoX DTI2MDUxMjIzNTk1OVowejFJMEcGA1UEBRNAN2M3NjI0MDczOTZkNGQwYmY4MTM5 NTEzNzI5OTE3NDI0NTU1NDU5MGUxYTJlMWM1YjFlZjE4NjFjMTQzZjI4OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofvJNMk5sPO2nHRRxSiTKdP2y6xO g7GoVRLwHfpTugfvy3/fiINlISH6owjpqj/9r751dnNShcsFW3An5kzcCxC1Uykq TBgZz0AG+OVXkv1jNf+89zsMFXEyu2iQvQ2ZnjCFdsaA27XwrNCmSKyhn9uhM4YK eSmrOAcUdDZhq5kHU89HGkYwFb10ibFNmTifavvlYKttv2QVmSn1o3opVSit/Pko IhJoP4boi/WLFgKfIoAYEVKlDhfYgf0/ofEK3oi6xFer3VyG5Yjl7Gdi97aV+888 3RZtMSb3bK92G6vffqzgIev5uBt3J+mdgDdJJKCmlx7rWGlQF05QynIqQwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFD0t/NMMlCOD6oC5hCgyiv8qJkHRMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2VhYjczNTkxLTg5NDEtNGZhOS04ZjYxLTZkZDNiYmQ3YmY4My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba6ogwDQYJKoZIhvcNAQELBQADggEBAKgm7njnbhoycXZe2DUl 2KIUY/gz9OWRbu7goPzXGb34fJ8Kao4o1KJCSnVUM76VhQha61GvF3y8Tjhn7iuj aT8Cxv4SmBkTlTG9/sIT3vHcvscd7u+1O0ibq1ED3DcV+yHZrBVkKwc6mwPy8BMI Ky/aw4J5kEw8w2PDtFAadb6K1GqUfsxAss2qrJAdL2rZyU59IckDcmCF4ORCjArT vZ+lvVh73WD2PEjb15oTYVO8/VSlZCPd1116cBw65M7oS0qE1/igDdW6zGhr0ITt 9zqrxgWPeQs6fvevwY2aVg5K/S756MMcMv2Bn9EnZxNuO4Jrb+ZTGim34PkxInV7 v/g= -----END CERTIFICATE-----Generated at Sat Feb 21 16:22:05 2026 by rpki-client