$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dcee46b7-02d8-40d2-89dc-5f133078c8eb.roa File: dcee46b7-02d8-40d2-89dc-5f133078c8eb.roa (raw, json) Hash identifier: Mxq/VeuBjDwJ8JKSwaqdiaOyFHZZGFIXPtE6K+KNMPQ= Subject key identifier: DE:86:E6:72:E4:6D:39:A8:90:64:D5:86:DC:F9:49:E0:00:6C:60:B0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5FCC082E84C29EBA90D63263CE245D7CC7EA2838 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dcee46b7-02d8-40d2-89dc-5f133078c8eb.roa Signing time: Mon 10 Aug 2026 00:01:06 +0000 ROA not before: Mon 10 Aug 2026 00:01:06 +0000 ROA not after: Sun 08 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae8:2080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:cc:08:2e:84:c2:9e:ba:90:d6:32:63:ce:24:5d:7c:c7:ea:28:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 10 00:01:06 2026 GMT Not After : Nov 8 23:59:59 2026 GMT Subject: serialNumber=f5f307adab2c5c606dfa6c1074435f7783d8ba687af6e3feb6f1ea1a84881d3a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3b:c1:50:5b:1c:fe:dc:47:59:e1:0c:cc:e7: 5c:d2:71:b9:07:80:d7:9d:e7:9f:09:f8:6d:43:6d: a9:bd:2d:7a:d5:ce:fd:4f:98:8a:68:04:74:32:81: ad:ca:ed:21:4c:bf:7f:fd:b1:14:1a:12:93:a4:2b: 63:72:6f:6e:76:7c:43:8e:c8:24:8c:0d:bd:c9:2d: 05:ab:8d:14:00:7f:ce:ab:58:f9:2a:d7:d4:64:f1: 3c:18:59:56:22:66:e4:74:3d:24:78:94:5e:02:5f: 43:d7:57:f9:32:83:f1:d2:28:a1:8d:72:46:46:74: df:4c:3d:e6:ad:fb:c8:81:ee:69:16:03:74:34:58: 8b:54:5d:03:04:35:69:4a:ff:2c:e0:2c:91:9a:74: 42:c0:0d:a7:da:a9:62:2d:bd:b3:4d:89:f9:71:79: f2:03:72:0d:88:33:d3:b3:03:a5:8c:44:ce:c3:ed: 32:a8:ea:67:ba:64:f4:17:24:d0:19:61:e8:f3:f9: 0d:d5:7a:ac:43:7b:98:a3:8e:27:11:d5:07:ab:c9: a9:fc:9f:2d:9d:5a:b4:ad:cd:82:24:22:83:a2:5e: 07:75:5f:87:12:99:6a:3c:de:e9:af:52:59:2c:dc: 2e:27:a5:62:b5:56:11:c6:c3:07:f8:70:8f:7e:07: a2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:86:E6:72:E4:6D:39:A8:90:64:D5:86:DC:F9:49:E0:00:6C:60:B0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dcee46b7-02d8-40d2-89dc-5f133078c8eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae8:2080::/48 Signature Algorithm: sha256WithRSAEncryption 12:43:94:b1:ed:91:83:c3:bf:e8:3b:29:f1:41:6e:79:15:67: be:ca:1f:d3:47:9b:0f:f0:44:ef:6c:a7:67:12:b3:66:49:61: 8a:b7:dc:44:8b:01:05:44:5e:9e:db:be:c2:71:2b:13:61:6a: ec:56:4a:98:e1:ae:06:23:cc:40:a0:a8:5e:55:e1:04:a8:91: 23:62:5c:39:3b:1f:05:ae:b4:8a:fb:86:ff:62:6e:88:23:b7: 22:80:56:8d:82:63:fd:04:31:f0:78:27:1f:98:4a:9d:3b:0f: 10:cc:64:e1:31:bb:aa:8e:04:48:62:11:6f:db:50:26:1f:a6: 09:df:52:93:d5:85:27:c7:cd:40:48:68:e5:a5:43:36:6c:93: a0:20:2c:64:d2:eb:ea:13:b1:a9:27:62:69:58:61:4c:e3:f1: d1:28:23:76:96:3a:c5:47:32:17:1e:54:4d:46:9d:fb:c7:31: 25:44:ec:ff:76:c9:05:d7:a4:7c:72:01:99:cd:4f:ec:05:74: 3b:08:6a:11:44:aa:f6:cf:1f:8f:43:17:38:1a:25:0f:ef:0f: c9:7a:e1:59:59:75:f3:ee:33:84:ce:b0:b6:fd:b7:fb:55:1f: a5:b5:bd:4b:cc:4c:df:6f:28:9e:5e:dd:a2:81:87:3d:a3:a8: 3b:ad:d3:5b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUX8wILoTCnrqQ1jJjziRdfMfqKDgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgxMDAwMDEwNloX DTI2MTEwODIzNTk1OVowejFJMEcGA1UEBRNAZjVmMzA3YWRhYjJjNWM2MDZkZmE2 YzEwNzQ0MzVmNzc4M2Q4YmE2ODdhZjZlM2ZlYjZmMWVhMWE4NDg4MWQzYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTvBUFsc/txHWeEMzOdc0nG5B4DX neefCfhtQ22pvS161c79T5iKaAR0MoGtyu0hTL9//bEUGhKTpCtjcm9udnxDjsgk jA29yS0Fq40UAH/Oq1j5KtfUZPE8GFlWImbkdD0keJReAl9D11f5MoPx0iihjXJG RnTfTD3mrfvIge5pFgN0NFiLVF0DBDVpSv8s4CyRmnRCwA2n2qliLb2zTYn5cXny A3INiDPTswOljETOw+0yqOpnumT0FyTQGWHo8/kN1XqsQ3uYo44nEdUHq8mp/J8t nVq0rc2CJCKDol4HdV+HEplqPN7pr1JZLNwuJ6VitVYRxsMH+HCPfgeiXwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFN6G5nLkbTmokGTVhtz5SeAAbGCwMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RjZWU0NmI3LTAyZDgtNDBkMi04OWRjLTVmMTMzMDc4YzhlYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6CCAMA0GCSqGSIb3DQEBCwUAA4IBAQASQ5Sx7ZGDw7/oOynx QW55FWe+yh/TR5sP8ETvbKdnErNmSWGKt9xEiwEFRF6e277CcSsTYWrsVkqY4a4G I8xAoKheVeEEqJEjYlw5Ox8FrrSK+4b/Ym6II7cigFaNgmP9BDHweCcfmEqdOw8Q zGThMbuqjgRIYhFv21AmH6YJ31KT1YUnx81ASGjlpUM2bJOgICxk0uvqE7GpJ2Jp WGFM4/HRKCN2ljrFRzIXHlRNRp37xzElROz/dskF16R8cgGZzU/sBXQ7CGoRRKr2 zx+PQxc4GiUP7w/JeuFZWXXz7jOEzrC2/bf7VR+ltb1LzEzfbyieXt2igYc9o6g7 rdNb -----END CERTIFICATE-----Generated at Wed Aug 26 16:08:26 2026 by rpki-client