$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ba1f6ba7-aecf-4871-a9f2-3e20ff35714b.roa File: ba1f6ba7-aecf-4871-a9f2-3e20ff35714b.roa (raw, json) Hash identifier: ImANw5chluavb+ObelNO+dRF1KngUOz7wielWBDmQoU= Subject key identifier: D4:79:CC:F0:FA:09:41:F5:CC:30:CB:A2:4D:71:70:43:D8:6A:D1:0B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 699E0E71A95F95B135A4244DD19B8706C4381CDC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ba1f6ba7-aecf-4871-a9f2-3e20ff35714b.roa Signing time: Fri 01 Aug 2025 00:10:19 +0000 ROA not before: Fri 01 Aug 2025 00:10:19 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daa0:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:9e:0e:71:a9:5f:95:b1:35:a4:24:4d:d1:9b:87:06:c4:38:1c:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:10:19 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=aa71712bf7451c0c7d5781253865e22996bf3492a207842229b9d1f896f6254c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:da:96:2d:24:6e:d7:4d:1d:00:c0:3c:e0:0f: 09:00:f8:3e:9b:d8:b4:24:cd:86:c6:36:89:03:95: 33:45:bc:82:40:39:5e:26:9f:72:ac:8f:88:5a:08: a9:dd:35:89:f6:4d:fa:9f:1f:2a:aa:ce:e7:00:5b: 46:bf:d6:60:73:90:43:0c:9a:44:7b:d0:48:7c:f0: 28:22:e6:6b:2f:45:a8:8e:a1:ce:1d:22:cb:0b:e6: f3:30:39:af:a5:3c:05:22:b4:aa:06:60:fe:63:41: 33:fd:c6:57:8d:9d:c3:e2:46:4e:dc:e5:68:01:d0: 91:98:d2:92:a7:09:46:c2:54:7a:94:eb:23:8e:c5: fe:98:bf:cd:dd:37:ab:39:a4:fc:cf:38:e5:98:7b: 9c:fc:5f:06:15:04:97:68:a6:7c:24:73:52:47:53: b8:49:d8:66:3b:35:d3:62:91:2b:37:25:a9:c2:ba: ca:e5:24:f1:5d:95:af:f3:d8:3f:0e:98:08:31:4d: 16:ea:b7:65:02:e6:18:a1:89:78:42:8c:16:64:94: ac:3b:51:6f:69:64:32:46:76:c1:66:23:27:03:83: 0a:5e:ba:76:b5:47:5f:3f:7c:45:f2:4d:68:7c:9b: b6:ea:77:fe:e1:be:ea:ec:53:d1:91:63:fe:73:f5: d7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:79:CC:F0:FA:09:41:F5:CC:30:CB:A2:4D:71:70:43:D8:6A:D1:0B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ba1f6ba7-aecf-4871-a9f2-3e20ff35714b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daa0:2000::/40 Signature Algorithm: sha256WithRSAEncryption c4:75:a8:67:e6:a4:67:60:a6:89:40:5f:0e:c8:b4:46:54:df: 97:6a:1c:8d:d9:f4:bc:a6:c9:a7:06:3c:92:1f:8a:d1:37:f3: 37:15:86:ce:83:90:9c:a8:2c:ee:33:cf:a9:2a:43:7a:62:c6: f4:57:08:2b:84:c0:20:c4:c2:d1:f7:20:5c:1e:1e:ef:92:6a: c3:86:80:ba:8e:be:fe:23:4e:f8:46:e6:62:46:0e:27:38:47: 12:b7:09:cc:db:09:ae:d9:90:48:2f:c6:e0:0f:46:22:52:15: 27:b1:07:8e:57:c0:31:74:87:d1:47:64:c5:01:5a:84:cd:cd: d0:ed:0d:d4:5d:c9:d6:e3:21:3b:f0:a1:00:a2:fc:4c:ac:2e: 01:63:87:5f:f3:d6:43:14:30:c9:85:28:ab:66:61:51:b4:a7: 98:63:0e:f3:dc:57:5a:a8:fc:b3:5d:09:58:22:f8:b8:a4:4f: e0:3c:11:8d:9f:d3:98:26:e1:ba:f6:33:2c:df:4e:c0:e9:35: 98:12:a6:1f:04:68:61:f7:98:74:5a:5c:34:29:c6:93:72:70: 44:0e:5c:30:1a:99:10:8b:6b:29:1e:91:f2:d9:98:ab:d0:0d: c0:78:6f:94:88:86:72:4b:92:07:fb:01:1d:0c:8d:b7:c3:9a: 1c:d7:6a:1c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUaZ4OcalflbE1pCRN0ZuHBsQ4HNwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwMTAwMTAxOVoX DTI1MDkwNTIzNTk1OVowejFJMEcGA1UEBRNAYWE3MTcxMmJmNzQ1MWMwYzdkNTc4 MTI1Mzg2NWUyMjk5NmJmMzQ5MmEyMDc4NDIyMjliOWQxZjg5NmY2MjU0YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudqWLSRu100dAMA84A8JAPg+m9i0 JM2GxjaJA5UzRbyCQDleJp9yrI+IWgip3TWJ9k36nx8qqs7nAFtGv9Zgc5BDDJpE e9BIfPAoIuZrL0WojqHOHSLLC+bzMDmvpTwFIrSqBmD+Y0Ez/cZXjZ3D4kZO3OVo AdCRmNKSpwlGwlR6lOsjjsX+mL/N3TerOaT8zzjlmHuc/F8GFQSXaKZ8JHNSR1O4 SdhmOzXTYpErNyWpwrrK5STxXZWv89g/DpgIMU0W6rdlAuYYoYl4QowWZJSsO1Fv aWQyRnbBZiMnA4MKXrp2tUdfP3xF8k1ofJu26nf+4b7q7FPRkWP+c/XXhQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNR5zPD6CUH1zDDLok1xcEPYatELMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JhMWY2YmE3LWFlY2YtNDg3MS1hOWYyLTNlMjBmZjM1NzE0Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaoCAwDQYJKoZIhvcNAQELBQADggEBAMR1qGfmpGdgpolAXw7I tEZU35dqHI3Z9LymyacGPJIfitE38zcVhs6DkJyoLO4zz6kqQ3pixvRXCCuEwCDE wtH3IFweHu+SasOGgLqOvv4jTvhG5mJGDic4RxK3CczbCa7ZkEgvxuAPRiJSFSex B45XwDF0h9FHZMUBWoTNzdDtDdRdydbjITvwoQCi/EysLgFjh1/z1kMUMMmFKKtm YVG0p5hjDvPcV1qo/LNdCVgi+LikT+A8EY2f05gm4br2MyzfTsDpNZgSph8EaGH3 mHRaXDQpxpNycEQOXDAamRCLaykekfLZmKvQDcB4b5SIhnJLkgf7AR0MjbfDmhzX ahw= -----END CERTIFICATE-----Generated at Mon Aug 4 14:06:26 2025 by rpki-client