$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ba1f6ba7-aecf-4871-a9f2-3e20ff35714b.roa File: ba1f6ba7-aecf-4871-a9f2-3e20ff35714b.roa (raw, json) Hash identifier: Y+fta/aCXvY13sONPdFH6d8cids6XtS9y3P9/MVepmE= Subject key identifier: 55:8E:2A:2D:A0:4D:FB:0D:D6:37:BE:AA:82:55:E0:FF:6D:87:E0:59 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6B160D8AD222E00AE7A85FE2EC4A04F882D20065 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ba1f6ba7-aecf-4871-a9f2-3e20ff35714b.roa Signing time: Sat 01 Aug 2026 00:11:13 +0000 ROA not before: Sat 01 Aug 2026 00:11:13 +0000 ROA not after: Fri 30 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daa0:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:16:0d:8a:d2:22:e0:0a:e7:a8:5f:e2:ec:4a:04:f8:82:d2:00:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:11:13 2026 GMT Not After : Oct 30 23:59:59 2026 GMT Subject: serialNumber=7eabd849cfea3519be87e69c534f25307595b7e6dc3173d8d0b4425d59dfb9dd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e9:f0:39:16:4d:2d:fb:88:99:20:76:6b:7f: 0e:65:1c:46:8f:04:26:6e:68:a1:20:d9:e7:42:31: ea:c7:df:e5:47:b9:3d:e0:bb:93:d7:57:8d:f1:83: fc:fe:f8:24:83:6e:ac:0b:2d:fc:73:fc:0b:59:0e: 6a:a1:c3:2e:ff:73:d5:80:2f:72:51:20:5f:1b:f4: d2:d6:bd:62:ab:3e:b6:ef:e1:08:ff:c8:32:3f:95: 38:ec:97:e8:10:67:d8:c6:2c:cc:32:62:28:4f:13: 95:7e:ab:d7:59:98:0e:2b:7b:b8:4a:90:4b:c0:93: 5f:74:18:b7:c8:c2:b3:db:ea:89:3c:50:db:37:b6: f3:d4:96:33:8e:c7:08:61:5a:db:18:79:7d:92:af: d9:0a:5e:01:e8:47:6e:69:57:dc:93:5c:40:d1:cb: d5:d5:03:ec:76:0e:21:2f:b7:84:53:77:97:3f:4d: 34:23:f1:27:91:2c:dc:d6:57:46:c8:b4:b8:0a:47: 52:b7:48:1b:d4:4a:0b:cb:6a:3b:b8:6c:cb:01:c4: cb:92:47:03:4f:a5:10:ee:f6:d5:c2:55:10:5e:ce: 10:7f:f8:79:50:70:28:9a:08:2a:5e:f1:31:59:57: 12:94:fe:9d:a2:19:d2:3e:34:ea:d4:4c:2c:d3:91: 63:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:8E:2A:2D:A0:4D:FB:0D:D6:37:BE:AA:82:55:E0:FF:6D:87:E0:59 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ba1f6ba7-aecf-4871-a9f2-3e20ff35714b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daa0:2000::/40 Signature Algorithm: sha256WithRSAEncryption a2:b3:0d:05:df:69:a1:21:1f:fe:cf:a4:6d:60:e5:a5:c8:b1: b6:78:73:7f:b5:cf:28:8d:ef:26:31:37:de:dc:a7:d7:87:8d: 73:79:4f:7b:14:e1:62:e4:ed:24:99:6c:45:82:7a:61:56:e7: 0c:80:b2:90:0a:50:90:98:77:77:e3:cb:19:3c:f3:63:27:ef: f2:36:06:12:4e:7d:dc:0e:fe:26:5d:5f:53:4d:b5:b8:97:e3: 1c:83:03:aa:f2:7c:c3:e0:be:cf:19:1f:1e:43:00:58:0b:a7: 89:ec:2e:72:ec:2d:61:ee:b7:b4:ad:e0:04:b7:45:4c:44:c0: b2:c4:de:af:ad:d7:76:63:1d:b2:11:56:26:0f:93:bc:41:05: 17:3b:c8:fd:6d:6c:61:db:48:f0:a4:97:d6:84:1b:ac:f6:de: 0b:87:7d:14:92:f2:47:b2:88:aa:4d:b1:14:c3:35:b0:14:e5: eb:63:53:3c:25:5f:6a:97:cf:a6:7e:e8:4b:7f:5e:e2:43:58: 6f:74:9f:dd:3e:58:de:32:e7:99:06:9d:b6:3d:eb:bb:35:5a: 9e:56:09:98:b9:bd:70:26:02:41:1b:71:fe:55:0e:8d:33:9b: a6:0e:db:9f:e0:71:5a:c2:31:62:bf:63:ff:4d:7f:a3:01:25: f4:09:24:55 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUaxYNitIi4ArnqF/i7EoE+ILSAGUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwMTAwMTExM1oX DTI2MTAzMDIzNTk1OVowejFJMEcGA1UEBRNAN2VhYmQ4NDljZmVhMzUxOWJlODdl NjljNTM0ZjI1MzA3NTk1YjdlNmRjMzE3M2Q4ZDBiNDQyNWQ1OWRmYjlkZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOnwORZNLfuImSB2a38OZRxGjwQm bmihINnnQjHqx9/lR7k94LuT11eN8YP8/vgkg26sCy38c/wLWQ5qocMu/3PVgC9y USBfG/TS1r1iqz627+EI/8gyP5U47JfoEGfYxizMMmIoTxOVfqvXWZgOK3u4SpBL wJNfdBi3yMKz2+qJPFDbN7bz1JYzjscIYVrbGHl9kq/ZCl4B6EduaVfck1xA0cvV 1QPsdg4hL7eEU3eXP000I/EnkSzc1ldGyLS4CkdSt0gb1EoLy2o7uGzLAcTLkkcD T6UQ7vbVwlUQXs4Qf/h5UHAomggqXvExWVcSlP6dohnSPjTq1Ews05Fj4QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFWOKi2gTfsN1je+qoJV4P9th+BZMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JhMWY2YmE3LWFlY2YtNDg3MS1hOWYyLTNlMjBmZjM1NzE0Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaoCAwDQYJKoZIhvcNAQELBQADggEBAKKzDQXfaaEhH/7PpG1g 5aXIsbZ4c3+1zyiN7yYxN97cp9eHjXN5T3sU4WLk7SSZbEWCemFW5wyAspAKUJCY d3fjyxk882Mn7/I2BhJOfdwO/iZdX1NNtbiX4xyDA6ryfMPgvs8ZHx5DAFgLp4ns LnLsLWHut7St4AS3RUxEwLLE3q+t13ZjHbIRViYPk7xBBRc7yP1tbGHbSPCkl9aE G6z23guHfRSS8keyiKpNsRTDNbAU5etjUzwlX2qXz6Z+6Et/XuJDWG90n90+WN4y 55kGnbY967s1Wp5WCZi5vXAmAkEbcf5VDo0zm6YO25/gcVrCMWK/Y/9Nf6MBJfQJ JFU= -----END CERTIFICATE-----Generated at Mon Sep 21 12:05:39 2026 by rpki-client