$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/deebf2b8-e915-45af-9266-cecda7c6e2e4.roa File: deebf2b8-e915-45af-9266-cecda7c6e2e4.roa (raw, json) Hash identifier: iGda8VofPUm/b/42l2qxZ45RLIe/BhEU/T9cnV1WLl0= Subject key identifier: 77:F5:82:63:A8:EE:9D:1C:28:4B:6B:9A:5C:22:6F:74:93:2C:A2:42 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 45AA17B3648887400878404DCA7539C78BD6EC5E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/deebf2b8-e915-45af-9266-cecda7c6e2e4.roa Signing time: Mon 23 Feb 2026 00:00:26 +0000 ROA not before: Mon 23 Feb 2026 00:00:26 +0000 ROA not after: Sun 24 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:aa:17:b3:64:88:87:40:08:78:40:4d:ca:75:39:c7:8b:d6:ec:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 23 00:00:26 2026 GMT Not After : May 24 23:59:59 2026 GMT Subject: serialNumber=8261fb817506dc9d111ad8e13e751ea79ccfef49d7742c2e37987d9024a4ac83, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6f:96:62:a6:ae:de:85:05:fe:88:ec:46:c5: 51:ca:42:e2:ac:1f:5c:5d:48:55:4d:ca:5b:4d:37: 46:7e:42:2d:37:b8:61:e8:94:77:bc:44:d6:35:61: 80:c5:d1:a6:6b:fc:9a:2e:ab:ef:4c:85:80:cd:2c: 69:48:02:1f:9b:22:e6:8e:28:76:85:51:fc:2e:7d: 0f:34:bf:f5:f8:e6:ce:aa:7d:66:1c:b0:6a:e3:a9: fe:b2:e3:bb:00:32:2c:ab:57:af:e7:8c:18:1d:32: 97:1b:6b:b0:88:8a:69:20:a2:46:0b:bd:a9:5d:ae: cd:d9:a0:8d:5b:8b:29:06:94:dd:bc:c4:0d:02:7e: 32:b1:5e:7d:79:18:73:b9:9b:b6:9f:91:61:76:26: d8:8b:cb:9a:df:ef:3f:d3:77:65:9a:f2:c9:ea:cc: 4d:36:d2:ea:68:f8:56:2d:2e:17:c0:ac:86:18:96: 98:a9:ac:da:3d:ba:06:04:12:47:88:83:a2:b7:55: 47:2e:78:aa:a9:c7:a0:a4:a0:e7:d1:85:f3:c5:ac: 17:9b:54:1e:a0:0c:60:31:c6:1e:26:16:e9:eb:a9: 5d:85:ab:93:99:7f:ca:db:72:98:1b:99:c4:46:3e: 44:e4:59:ba:3f:b9:f2:57:79:4f:8e:f6:67:bc:3f: 2a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F5:82:63:A8:EE:9D:1C:28:4B:6B:9A:5C:22:6F:74:93:2C:A2:42 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/deebf2b8-e915-45af-9266-cecda7c6e2e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:800::/40 Signature Algorithm: sha256WithRSAEncryption 4d:d8:b8:73:10:09:4d:fe:a2:3e:e3:98:d2:26:33:59:1d:01: b7:6e:55:4b:bd:2d:be:f8:82:c0:0b:d4:43:d7:02:2b:67:a2: c0:93:6f:22:62:c9:30:8a:26:80:a7:05:61:2e:d9:2b:95:e4: a3:7a:3b:7c:e0:14:ef:28:73:c7:50:9b:bc:9e:f5:bd:81:d1: 0d:f3:d4:d3:3d:d1:a6:fa:0a:6f:06:33:1f:e7:94:bb:a0:99: 89:11:d5:70:65:e2:cd:81:07:5c:d0:e7:d1:f3:dc:8d:81:c7: d4:4b:88:13:91:6e:be:fa:fd:85:e2:dc:4b:8c:02:13:25:6b: 91:6a:18:c1:86:19:97:d8:3c:95:7a:00:18:44:2a:4d:fe:84: 20:28:c6:4f:81:1c:e0:64:13:f3:79:6f:69:01:f9:db:c7:8b: 50:1c:14:0f:e8:67:2c:83:07:b9:07:2a:33:15:57:5c:d3:a6: 5f:66:bf:88:b6:ad:60:40:04:96:85:41:d1:5c:28:17:31:4a: ad:88:7f:bc:b2:0e:7b:63:cd:06:d3:3d:52:56:6b:d9:f5:81: 69:42:89:91:19:94:43:4c:f5:b1:59:68:c5:b4:1d:75:72:c0: f5:cf:d2:5b:39:89:ee:96:83:71:68:ba:ea:1c:51:fd:de:29: 26:a0:bb:41 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIURaoXs2SIh0AIeEBNynU5x4vW7F4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMzAwMDAyNloX DTI2MDUyNDIzNTk1OVowejFJMEcGA1UEBRNAODI2MWZiODE3NTA2ZGM5ZDExMWFk OGUxM2U3NTFlYTc5Y2NmZWY0OWQ3NzQyYzJlMzc5ODdkOTAyNGE0YWM4MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2+WYqau3oUF/ojsRsVRykLirB9c XUhVTcpbTTdGfkItN7hh6JR3vETWNWGAxdGma/yaLqvvTIWAzSxpSAIfmyLmjih2 hVH8Ln0PNL/1+ObOqn1mHLBq46n+suO7ADIsq1ev54wYHTKXG2uwiIppIKJGC72p Xa7N2aCNW4spBpTdvMQNAn4ysV59eRhzuZu2n5FhdibYi8ua3+8/03dlmvLJ6sxN NtLqaPhWLS4XwKyGGJaYqazaPboGBBJHiIOit1VHLniqqcegpKDn0YXzxawXm1Qe oAxgMcYeJhbp66ldhauTmX/K23KYG5nERj5E5Fm6P7nyV3lPjvZnvD8qXwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHf1gmOo7p0cKEtrmlwib3STLKJCMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RlZWJmMmI4LWU5MTUtNDVhZi05MjY2LWNlY2RhN2M2ZTJlNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaOAgwDQYJKoZIhvcNAQELBQADggEBAE3YuHMQCU3+oj7jmNIm M1kdAbduVUu9Lb74gsAL1EPXAitnosCTbyJiyTCKJoCnBWEu2SuV5KN6O3zgFO8o c8dQm7ye9b2B0Q3z1NM90ab6Cm8GMx/nlLugmYkR1XBl4s2BB1zQ59Hz3I2Bx9RL iBORbr76/YXi3EuMAhMla5FqGMGGGZfYPJV6ABhEKk3+hCAoxk+BHOBkE/N5b2kB +dvHi1AcFA/oZyyDB7kHKjMVV1zTpl9mv4i2rWBABJaFQdFcKBcxSq2If7yyDntj zQbTPVJWa9n1gWlCiZEZlENM9bFZaMW0HXVywPXP0ls5ie6Wg3FouuocUf3eKSag u0E= -----END CERTIFICATE-----Generated at Sun Mar 1 23:46:24 2026 by rpki-client