$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dcee46b7-02d8-40d2-89dc-5f133078c8eb.roa File: dcee46b7-02d8-40d2-89dc-5f133078c8eb.roa (raw, json) Hash identifier: LnjeM1r/3bzB+Z1n9qdLbP+8E4dZQ4XeYXc7dfYIv1E= Subject key identifier: BF:EE:0B:49:DF:0F:60:BE:FC:21:94:AF:A2:4C:3B:A3:FA:93:53:42 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4D97CD153EA08F805600873016CA2BA1BAA1C4CA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dcee46b7-02d8-40d2-89dc-5f133078c8eb.roa Signing time: Fri 22 May 2026 16:54:05 +0000 ROA not before: Fri 22 May 2026 16:54:05 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae8:2080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:97:cd:15:3e:a0:8f:80:56:00:87:30:16:ca:2b:a1:ba:a1:c4:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 22 16:54:05 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=491725d419b1bbbd53ecbc3d22feb7eb6c68d50852948e4313a5dac30cee92ed, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:46:41:5b:4d:d8:fb:14:91:f3:da:fd:f9:5c: f2:ac:dc:5f:9d:4c:40:9e:61:08:68:27:87:73:87: 0d:5b:d9:2d:b2:5d:b6:c9:8a:6f:dd:07:d7:5e:5b: 86:d2:37:22:e3:cd:8f:b0:3b:7d:6a:32:6f:38:21: 31:0d:c1:24:4c:bc:6f:58:bd:28:a5:eb:b1:e1:2d: 49:82:f8:72:95:48:e9:c4:74:58:80:a9:dc:fb:68: e1:ed:17:10:fa:b0:94:41:7d:e4:a9:65:a8:24:4e: 85:b0:18:3c:c2:28:c5:44:35:dd:fe:f5:f7:5a:89: ac:b5:82:ff:61:59:ff:43:0b:15:ef:e7:39:65:08: 74:4a:07:6c:5e:16:b0:3f:02:ee:39:e2:5c:93:90: b8:c8:87:dc:5a:da:81:ad:b1:80:4f:4b:bd:f8:36: 6d:49:e7:58:60:5a:1f:16:c0:48:ea:d8:71:1b:c1: 9b:ca:72:93:07:bd:5a:4a:b9:af:58:86:f1:2c:9e: 59:4e:1f:37:0a:aa:6e:33:e8:4e:1c:c6:86:2f:72: 33:98:9b:8e:11:2c:28:be:5e:17:26:eb:78:b2:5a: 9f:b1:c5:f3:c3:e1:6c:a0:b9:61:a6:e9:46:c5:e2: 72:40:a6:1c:4e:ee:cf:cd:4c:1c:64:67:cb:64:9c: ff:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:EE:0B:49:DF:0F:60:BE:FC:21:94:AF:A2:4C:3B:A3:FA:93:53:42 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dcee46b7-02d8-40d2-89dc-5f133078c8eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae8:2080::/48 Signature Algorithm: sha256WithRSAEncryption b6:b3:a8:94:a0:3a:54:fa:86:87:32:d6:2d:83:8e:e4:70:a5: 2f:78:4f:81:59:7f:51:b7:6e:0a:2b:d1:2a:91:88:29:a7:97: ee:8d:9e:37:00:ad:51:ae:6b:f3:bf:3f:ba:b9:cb:d7:b2:e0: 99:da:e9:e3:8f:49:25:f7:37:70:c4:0d:2a:c9:04:01:50:46: 10:dc:8b:98:0b:a2:71:2d:57:f2:50:51:e4:5d:8a:c8:44:b0: c1:7a:db:16:f3:71:22:e3:71:a7:60:df:1b:6a:1f:f5:f5:31: 44:14:b1:51:53:94:fc:4f:96:00:4f:67:de:fb:0b:ad:1c:09: dc:8f:98:ff:6f:a9:e1:83:bf:e8:c7:cd:85:59:dd:50:ab:e3: 30:98:79:c8:31:30:59:75:c3:b9:f1:22:43:32:bb:40:b4:42: 8d:ab:9e:35:68:24:69:c8:37:ad:68:da:79:c2:57:e0:47:76: 92:c1:40:58:d8:dd:dd:fd:41:e0:eb:99:5c:64:d0:7f:27:9e: 00:36:21:b3:8d:0b:7e:9f:e5:07:c9:cf:36:65:77:0d:c0:80: a2:fc:c0:48:f1:ec:73:7c:d4:b9:a5:b4:8f:46:10:16:c4:be: de:0c:cf:18:6c:d4:70:7c:4b:f6:d8:33:ca:f9:97:48:ec:76: 13:15:6b:3e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUTZfNFT6gj4BWAIcwFsorobqhxMowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUyMjE2NTQwNVoX DTI2MDgyMDIzNTk1OVowejFJMEcGA1UEBRNANDkxNzI1ZDQxOWIxYmJiZDUzZWNi YzNkMjJmZWI3ZWI2YzY4ZDUwODUyOTQ4ZTQzMTNhNWRhYzMwY2VlOTJlZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kZBW03Y+xSR89r9+VzyrNxfnUxA nmEIaCeHc4cNW9ktsl22yYpv3QfXXluG0jci482PsDt9ajJvOCExDcEkTLxvWL0o peux4S1JgvhylUjpxHRYgKnc+2jh7RcQ+rCUQX3kqWWoJE6FsBg8wijFRDXd/vX3 WomstYL/YVn/QwsV7+c5ZQh0SgdsXhawPwLuOeJck5C4yIfcWtqBrbGAT0u9+DZt SedYYFofFsBI6thxG8GbynKTB71aSrmvWIbxLJ5ZTh83CqpuM+hOHMaGL3IzmJuO ESwovl4XJut4slqfscXzw+FsoLlhpulGxeJyQKYcTu7PzUwcZGfLZJz/sQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFL/uC0nfD2C+/CGUr6JMO6P6k1NCMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RjZWU0NmI3LTAyZDgtNDBkMi04OWRjLTVmMTMzMDc4YzhlYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6CCAMA0GCSqGSIb3DQEBCwUAA4IBAQC2s6iUoDpU+oaHMtYt g47kcKUveE+BWX9Rt24KK9EqkYgpp5fujZ43AK1Rrmvzvz+6ucvXsuCZ2unjj0kl 9zdwxA0qyQQBUEYQ3IuYC6JxLVfyUFHkXYrIRLDBetsW83Ei43GnYN8bah/19TFE FLFRU5T8T5YAT2fe+wutHAncj5j/b6nhg7/ox82FWd1Qq+MwmHnIMTBZdcO58SJD MrtAtEKNq541aCRpyDetaNp5wlfgR3aSwUBY2N3d/UHg65lcZNB/J54ANiGzjQt+ n+UHyc82ZXcNwICi/MBI8exzfNS5pbSPRhAWxL7eDM8YbNRwfEv22DPK+ZdI7HYT FWs+ -----END CERTIFICATE-----Generated at Sun May 24 12:18:52 2026 by rpki-client