$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/deebf2b8-e915-45af-9266-cecda7c6e2e4.roa File: deebf2b8-e915-45af-9266-cecda7c6e2e4.roa (raw, json) Hash identifier: YPb3ETPvxle10OaI5o805lgeUzM1sAA+TeixeysJNsc= Subject key identifier: C0:79:DB:92:D4:67:91:C1:20:3D:3E:84:9B:74:A4:2D:4A:12:55:DD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 100839C39D1BF496D7F543E7275B51F56E84BDCD Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/deebf2b8-e915-45af-9266-cecda7c6e2e4.roa Signing time: Thu 14 May 2026 00:00:33 +0000 ROA not before: Thu 14 May 2026 00:00:33 +0000 ROA not after: Wed 12 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:08:39:c3:9d:1b:f4:96:d7:f5:43:e7:27:5b:51:f5:6e:84:bd:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 14 00:00:33 2026 GMT Not After : Aug 12 23:59:59 2026 GMT Subject: serialNumber=f03a41a18ee8cf60a7d42a0293187dea0418cb9ada61c99893f0982cf2f866d5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:33:33:13:af:b7:22:6b:5c:5e:c6:a1:1b:2e: af:f9:eb:56:db:f8:ba:05:26:83:14:36:73:85:e6: 3b:05:18:ec:85:7d:f4:ac:3e:d1:c4:c4:b1:1c:53: 3d:4f:c5:13:5f:3e:d3:5b:7d:dc:cf:61:55:34:a5: 27:4b:8c:9c:b6:c6:6a:08:06:1b:f3:9e:13:3b:6d: 24:64:ad:f4:45:d5:4b:5d:41:74:45:77:e2:a9:8c: 03:7e:1b:e1:26:73:60:f9:c0:d3:a7:95:46:3e:ac: 9e:ef:c1:23:f5:df:f8:90:7d:ee:f3:ad:a9:67:a6: d4:92:08:78:2c:07:06:d9:f0:26:8f:29:a6:4c:a6: 27:2d:f5:6e:a3:13:99:e9:46:66:ec:9e:f8:72:38: d3:16:9c:c9:4f:91:d0:43:56:71:6f:ab:40:3e:96: 97:c7:8f:7b:9e:f9:a3:ab:57:2f:99:57:f8:62:76: f0:f6:7e:ec:ea:4d:9f:bc:c8:51:5c:fa:e0:02:52: 9e:79:04:a3:28:ed:f5:c6:42:ac:0f:07:4d:0a:81: 97:08:de:58:a4:09:bf:12:8e:6e:f3:b2:93:84:d8: a2:2f:d5:08:d1:01:4e:f2:38:fb:e5:61:25:b5:4c: 1e:fc:9a:ba:78:20:9f:c6:1c:e7:92:e6:d2:61:9c: 72:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:79:DB:92:D4:67:91:C1:20:3D:3E:84:9B:74:A4:2D:4A:12:55:DD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/deebf2b8-e915-45af-9266-cecda7c6e2e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:800::/40 Signature Algorithm: sha256WithRSAEncryption a3:ea:a1:81:f2:ca:a0:46:8f:f4:bd:2f:2b:b3:0a:82:9d:e1: e7:6f:8b:21:59:51:29:ad:b3:e8:83:8d:9f:c2:1e:09:01:b4: 4b:53:72:c2:c0:33:eb:d3:b1:37:18:3b:30:a8:f3:cf:9e:e8: 76:5d:f9:53:19:a0:ee:89:35:0e:af:b2:30:1a:80:ca:46:07: 41:f7:2d:e5:1d:58:49:18:e5:a3:08:72:70:54:91:be:9c:1e: 9d:d6:a0:df:8a:6b:39:d5:ab:de:3d:28:aa:6d:d8:72:24:5b: c4:81:65:a8:11:69:e1:9c:19:7b:c0:9c:9a:07:c3:4d:ad:b1: ec:19:7a:0c:b3:45:cf:ec:92:f6:d3:24:2b:3a:8c:7d:12:cf: 40:3e:f9:bc:6e:cd:38:25:a6:22:51:fe:a8:62:9e:52:18:b0: 41:04:88:d7:42:cb:1c:0a:7d:31:4a:ed:57:f6:31:d6:f6:16: b2:b7:68:25:7c:c7:5d:41:07:54:bd:15:6a:79:33:0b:e0:29: 28:87:cb:c8:a1:73:ef:1c:3e:29:f0:46:5f:4d:38:48:7f:3d: 03:56:28:99:57:d5:c3:0e:bd:47:ff:bd:64:46:2e:d1:21:dc: 26:af:b8:89:e0:71:b8:6d:54:2f:90:8a:48:8a:1e:44:64:ad: 71:09:25:12 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUEAg5w50b9JbX9UPnJ1tR9W6Evc0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxNDAwMDAzM1oX DTI2MDgxMjIzNTk1OVowejFJMEcGA1UEBRNAZjAzYTQxYTE4ZWU4Y2Y2MGE3ZDQy YTAyOTMxODdkZWEwNDE4Y2I5YWRhNjFjOTk4OTNmMDk4MmNmMmY4NjZkNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzMzE6+3ImtcXsahGy6v+etW2/i6 BSaDFDZzheY7BRjshX30rD7RxMSxHFM9T8UTXz7TW33cz2FVNKUnS4yctsZqCAYb 854TO20kZK30RdVLXUF0RXfiqYwDfhvhJnNg+cDTp5VGPqye78Ej9d/4kH3u862p Z6bUkgh4LAcG2fAmjymmTKYnLfVuoxOZ6UZm7J74cjjTFpzJT5HQQ1Zxb6tAPpaX x497nvmjq1cvmVf4Ynbw9n7s6k2fvMhRXPrgAlKeeQSjKO31xkKsDwdNCoGXCN5Y pAm/Eo5u87KThNiiL9UI0QFO8jj75WEltUwe/Jq6eCCfxhznkubSYZxyyQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMB525LUZ5HBID0+hJt0pC1KElXdMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RlZWJmMmI4LWU5MTUtNDVhZi05MjY2LWNlY2RhN2M2ZTJlNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaOAgwDQYJKoZIhvcNAQELBQADggEBAKPqoYHyyqBGj/S9Lyuz CoKd4edviyFZUSmts+iDjZ/CHgkBtEtTcsLAM+vTsTcYOzCo88+e6HZd+VMZoO6J NQ6vsjAagMpGB0H3LeUdWEkY5aMIcnBUkb6cHp3WoN+KaznVq949KKpt2HIkW8SB ZagRaeGcGXvAnJoHw02tsewZegyzRc/skvbTJCs6jH0Sz0A++bxuzTglpiJR/qhi nlIYsEEEiNdCyxwKfTFK7Vf2Mdb2FrK3aCV8x11BB1S9FWp5MwvgKSiHy8ihc+8c PinwRl9NOEh/PQNWKJlX1cMOvUf/vWRGLtEh3CavuIngcbhtVC+QikiKHkRkrXEJ JRI= -----END CERTIFICATE-----Generated at Sun May 24 12:21:21 2026 by rpki-client