$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/deebf2b8-e915-45af-9266-cecda7c6e2e4.roa File: deebf2b8-e915-45af-9266-cecda7c6e2e4.roa (raw, json) Hash identifier: 2vsw6Ua3mLg4PKdgMaa8k0ec3E1E2fyyJ877U0jFkPM= Subject key identifier: E8:79:C1:0A:D5:53:89:81:1A:FB:35:05:50:32:C5:36:42:E7:BF:82 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3FC7D817F09137735D136C22E2DA64A18F59AF3E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/deebf2b8-e915-45af-9266-cecda7c6e2e4.roa Signing time: Sun 02 Aug 2026 00:00:13 +0000 ROA not before: Sun 02 Aug 2026 00:00:13 +0000 ROA not after: Sat 31 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:c7:d8:17:f0:91:37:73:5d:13:6c:22:e2:da:64:a1:8f:59:af:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 2 00:00:13 2026 GMT Not After : Oct 31 23:59:59 2026 GMT Subject: serialNumber=1287489c6aef8316c4183e03e7ad5cc23f98ef8153696b982e5381edacd544db, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:63:92:a2:81:69:6d:28:8c:4d:73:6c:89:38: 28:28:db:10:72:24:fa:81:cb:9a:08:b9:a0:5b:da: d7:ea:63:5c:8d:67:9c:39:09:ca:d2:f5:a5:53:a3: 6a:c8:01:8e:9e:5c:a8:fc:58:dd:81:95:07:ac:35: 34:25:50:77:24:c0:6b:67:61:13:8c:eb:53:27:e7: d2:48:2e:9e:2c:49:d1:d2:0b:3d:e4:4b:8a:dd:7e: 87:9f:2d:12:32:32:a3:88:2f:8d:0d:8e:87:ff:33: 28:bf:76:5e:c9:2a:3a:62:b8:e4:15:90:6a:74:0a: 97:5f:5e:c1:9d:60:f3:55:70:8e:74:8b:81:c8:d0: 34:83:18:24:44:f0:03:1a:ab:b6:5c:dc:6e:94:a8: 85:e8:31:db:fb:e8:7a:5f:b2:51:42:25:9c:be:38: 34:b7:9f:b1:35:7a:55:ab:48:86:a2:29:41:7c:ad: b7:64:f1:0f:76:c9:da:58:0b:df:93:cb:5c:a3:42: 6b:98:c9:41:03:bd:12:63:af:9d:9c:25:ec:1d:79: 95:3e:83:60:0a:cf:89:16:f5:6d:19:10:b6:74:6a: 54:24:fc:f9:43:0a:b5:4c:39:a5:1d:90:5d:1b:4b: 5d:8e:27:78:85:19:80:79:16:ab:5b:3a:fd:d3:8f: a6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:79:C1:0A:D5:53:89:81:1A:FB:35:05:50:32:C5:36:42:E7:BF:82 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/deebf2b8-e915-45af-9266-cecda7c6e2e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:800::/40 Signature Algorithm: sha256WithRSAEncryption 34:a5:96:6f:1b:52:3b:b8:0f:71:a2:61:bf:19:65:d6:56:07: 8d:88:76:91:04:af:39:19:b5:dd:a3:25:76:1a:4f:72:8e:20: bb:6f:c9:ab:00:a4:a3:f7:35:5d:67:f7:1f:14:a4:12:e8:8d: e5:62:fa:8e:77:99:a5:ce:18:be:87:6b:81:49:4a:86:4e:11: 81:dd:1a:25:85:05:87:6c:4c:ef:b5:e5:c6:05:0c:df:11:4d: 38:c6:7e:0e:f3:ae:9c:c5:dc:45:fc:21:0c:0c:2a:44:81:31: ad:4d:05:8a:0f:a1:39:f7:d6:62:c6:3f:21:43:be:c5:7f:80: 09:b2:e8:10:f4:35:e2:53:6b:bd:de:5e:cb:e7:fe:78:65:33: a5:f7:bf:3a:16:ca:f0:72:03:cc:bd:0f:b3:48:a7:ff:df:4b: 05:20:51:c3:6a:06:90:49:2e:3d:73:63:bd:ce:fa:bf:16:51: 0b:21:75:58:8c:d9:e1:92:b6:d4:9f:1e:81:8b:b2:62:62:3c: a7:0a:21:2f:96:15:7b:81:5d:ca:0d:f0:48:9e:43:56:cc:93: c8:ff:0f:34:e7:98:54:6c:8a:32:60:19:81:75:c4:6a:03:dd: 16:32:ea:9d:e0:67:e6:06:4d:05:c4:12:31:27:fa:3c:84:e9: 86:b6:fa:fa -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUP8fYF/CRN3NdE2wi4tpkoY9Zrz4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwMjAwMDAxM1oX DTI2MTAzMTIzNTk1OVowejFJMEcGA1UEBRNAMTI4NzQ4OWM2YWVmODMxNmM0MTgz ZTAzZTdhZDVjYzIzZjk4ZWY4MTUzNjk2Yjk4MmU1MzgxZWRhY2Q1NDRkYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GOSooFpbSiMTXNsiTgoKNsQciT6 gcuaCLmgW9rX6mNcjWecOQnK0vWlU6NqyAGOnlyo/FjdgZUHrDU0JVB3JMBrZ2ET jOtTJ+fSSC6eLEnR0gs95EuK3X6Hny0SMjKjiC+NDY6H/zMov3ZeySo6YrjkFZBq dAqXX17BnWDzVXCOdIuByNA0gxgkRPADGqu2XNxulKiF6DHb++h6X7JRQiWcvjg0 t5+xNXpVq0iGoilBfK23ZPEPdsnaWAvfk8tco0JrmMlBA70SY6+dnCXsHXmVPoNg Cs+JFvVtGRC2dGpUJPz5Qwq1TDmlHZBdG0tdjid4hRmAeRarWzr904+mXwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOh5wQrVU4mBGvs1BVAyxTZC57+CMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RlZWJmMmI4LWU5MTUtNDVhZi05MjY2LWNlY2RhN2M2ZTJlNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaOAgwDQYJKoZIhvcNAQELBQADggEBADSllm8bUju4D3GiYb8Z ZdZWB42IdpEErzkZtd2jJXYaT3KOILtvyasApKP3NV1n9x8UpBLojeVi+o53maXO GL6Ha4FJSoZOEYHdGiWFBYdsTO+15cYFDN8RTTjGfg7zrpzF3EX8IQwMKkSBMa1N BYoPoTn31mLGPyFDvsV/gAmy6BD0NeJTa73eXsvn/nhlM6X3vzoWyvByA8y9D7NI p//fSwUgUcNqBpBJLj1zY73O+r8WUQshdViM2eGSttSfHoGLsmJiPKcKIS+WFXuB XcoN8EieQ1bMk8j/DzTnmFRsijJgGYF1xGoD3RYy6p3gZ+YGTQXEEjEn+jyE6Ya2 +vo= -----END CERTIFICATE-----Generated at Wed Aug 26 15:08:12 2026 by rpki-client