$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ba66f204-ef53-4c25-92d8-95b5c7db0e2f.roa File: ba66f204-ef53-4c25-92d8-95b5c7db0e2f.roa (raw, json) Hash identifier: uqUoAzThwNyp0qK/dzHhyUDFjIe7r8mMG1mrrDskCXY= Subject key identifier: 57:2F:AE:98:2B:23:AA:F1:3D:CE:48:16:C5:8B:DC:F9:FA:94:5D:1E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1979DE993B6FCA172354DE51B31E43919D3443AE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ba66f204-ef53-4c25-92d8-95b5c7db0e2f.roa Signing time: Fri 20 Feb 2026 00:20:50 +0000 ROA not before: Fri 20 Feb 2026 00:20:50 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:1040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:79:de:99:3b:6f:ca:17:23:54:de:51:b3:1e:43:91:9d:34:43:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 20 00:20:50 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=5520c4f05639b817c40aa2fa24e857401246f25f5f5d0ed953d120814ea70eda, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:40:de:c9:69:e4:5c:07:2a:bf:b7:f9:28:c9: ea:6b:27:50:d5:4a:4e:c1:78:80:62:a9:d7:0a:bf: 9e:57:f2:bc:4a:a4:d1:41:b0:65:c6:aa:84:0e:1d: b7:a8:e0:68:fb:f5:a8:fc:02:53:0c:99:f7:8f:54: 56:ad:e3:c2:8c:35:57:25:8b:5e:7e:c7:2a:c2:56: 8f:b2:e8:43:57:44:f1:fd:ae:b4:f2:69:ad:4a:30: 14:35:48:82:39:c8:90:ed:26:95:cd:b0:95:3b:56: d8:5f:18:d6:97:95:3f:a7:ea:02:4b:8f:fd:6d:41: cb:6c:cb:a0:72:33:b4:23:75:43:d1:27:37:29:3b: 90:65:1f:56:c4:a9:ee:f1:39:dc:1a:dc:8d:99:6d: f5:15:25:a1:c2:bf:fa:65:51:51:e1:60:f2:64:d5: e2:53:30:67:b9:e7:56:72:5f:6f:ab:5b:1a:a6:24: 5c:8e:f5:81:c4:13:96:02:d3:e2:0e:f9:f4:cd:7c: 10:15:5c:7b:99:05:5e:e0:12:a1:cc:e4:9f:d4:e3: 72:55:30:d6:f5:04:bc:7c:47:ec:34:53:5a:19:5a: 3d:9d:2f:15:22:59:c2:03:81:53:76:6b:01:4d:66: 1b:cc:ce:e9:44:72:cd:b7:e0:74:b6:e8:25:e7:84: 51:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:2F:AE:98:2B:23:AA:F1:3D:CE:48:16:C5:8B:DC:F9:FA:94:5D:1E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ba66f204-ef53-4c25-92d8-95b5c7db0e2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:1040::/48 Signature Algorithm: sha256WithRSAEncryption 89:18:26:1e:96:05:3a:02:e0:e0:d8:f1:20:96:2d:5c:8d:4f: f5:2f:50:11:25:55:67:96:28:10:6a:02:6e:34:41:86:e9:ce: 8a:90:18:b0:d6:cd:82:7c:5b:7f:38:e8:68:d7:06:53:0e:11: 22:92:a8:22:f1:43:08:50:58:2a:fa:19:e5:85:da:1c:5f:6f: c9:f2:d9:2a:ed:19:35:d5:7c:84:a0:35:ba:2e:77:7a:af:f3: 21:f9:8a:f7:f5:1a:9b:87:3d:d7:b2:9e:ee:61:ad:f5:3b:d8: 3e:84:34:e4:a3:ec:d7:78:40:94:b6:b4:8e:c1:b9:0b:0c:9f: 33:08:4d:8e:f8:71:d7:14:b3:d6:cd:4b:b0:29:25:0f:f7:73: 53:5d:87:02:71:c2:be:f3:5d:19:2a:9f:aa:12:ab:e7:7d:c2: 0c:9e:c8:63:66:d0:51:1d:f7:f6:b4:22:18:ad:d3:24:ef:88: e5:62:b4:7d:f6:0a:c1:7c:c5:a6:c4:24:b9:8e:8d:09:7a:05: e8:27:46:b8:d8:60:b0:93:ef:6e:e9:25:82:d0:5d:b1:42:ee: ae:6e:f2:00:de:27:00:52:8f:bb:09:62:36:4f:1f:4b:4f:64: 49:bf:7f:d4:a3:bb:b1:be:c8:46:86:d8:04:e2:8c:11:f0:e4: 91:07:29:7a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUGXnemTtvyhcjVN5Rsx5DkZ00Q64wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyMDAwMjA1MFoX DTI2MDUyMTIzNTk1OVowejFJMEcGA1UEBRNANTUyMGM0ZjA1NjM5YjgxN2M0MGFh MmZhMjRlODU3NDAxMjQ2ZjI1ZjVmNWQwZWQ5NTNkMTIwODE0ZWE3MGVkYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkDeyWnkXAcqv7f5KMnqaydQ1UpO wXiAYqnXCr+eV/K8SqTRQbBlxqqEDh23qOBo+/Wo/AJTDJn3j1RWrePCjDVXJYte fscqwlaPsuhDV0Tx/a608mmtSjAUNUiCOciQ7SaVzbCVO1bYXxjWl5U/p+oCS4/9 bUHLbMugcjO0I3VD0Sc3KTuQZR9WxKnu8TncGtyNmW31FSWhwr/6ZVFR4WDyZNXi UzBnuedWcl9vq1sapiRcjvWBxBOWAtPiDvn0zXwQFVx7mQVe4BKhzOSf1ONyVTDW 9QS8fEfsNFNaGVo9nS8VIlnCA4FTdmsBTWYbzM7pRHLNt+B0tugl54RRTwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFcvrpgrI6rxPc5IFsWL3Pn6lF0eMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JhNjZmMjA0LWVmNTMtNGMyNS05MmQ4LTk1YjVjN2RiMGUyZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/xBAMA0GCSqGSIb3DQEBCwUAA4IBAQCJGCYelgU6AuDg2PEg li1cjU/1L1ARJVVnligQagJuNEGG6c6KkBiw1s2CfFt/OOho1wZTDhEikqgi8UMI UFgq+hnlhdocX2/J8tkq7Rk11XyEoDW6Lnd6r/Mh+Yr39Rqbhz3Xsp7uYa31O9g+ hDTko+zXeECUtrSOwbkLDJ8zCE2O+HHXFLPWzUuwKSUP93NTXYcCccK+810ZKp+q EqvnfcIMnshjZtBRHff2tCIYrdMk74jlYrR99grBfMWmxCS5jo0JegXoJ0a42GCw k+9u6SWC0F2xQu6ubvIA3icAUo+7CWI2Tx9LT2RJv3/Uo7uxvshGhtgE4owR8OSR Byl6 -----END CERTIFICATE-----Generated at Mon Mar 2 05:22:36 2026 by rpki-client