$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ba6c5703-b207-42ac-b6c0-2b7d9a5d1942.roa File: ba6c5703-b207-42ac-b6c0-2b7d9a5d1942.roa (raw, json) Hash identifier: dcRmzxYEhXyE3y4xVFvmpykBS4SlouRfL2QCUbO3vE8= Subject key identifier: 88:79:E0:26:68:49:FC:D9:50:A1:8C:B5:E2:F5:AF:16:26:54:9F:7C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 045039C43C35E09F718C2CEF06AC671F7817F9CB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ba6c5703-b207-42ac-b6c0-2b7d9a5d1942.roa Signing time: Fri 22 May 2026 16:52:19 +0000 ROA not before: Fri 22 May 2026 16:52:19 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae0:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:50:39:c4:3c:35:e0:9f:71:8c:2c:ef:06:ac:67:1f:78:17:f9:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 22 16:52:19 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=7f9e585b8c1620b9f26f142823729b7938e2569ca0926fce357bb67c7e659e34, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:19:0b:59:72:e0:50:df:6a:f5:b2:45:11:51: 49:49:3d:1c:00:b6:90:37:f1:33:ac:b5:7e:c0:2b: 97:a5:d0:c0:0d:c4:11:5a:e9:5a:9a:14:9a:58:41: d2:16:3b:82:7e:5c:2d:59:9a:2b:52:01:89:95:5f: c3:95:0b:03:33:69:92:b2:ca:63:85:a5:1f:61:c0: 1d:36:c0:0a:f7:52:19:9e:07:1b:de:18:4c:9b:80: 6a:ab:b7:75:4e:cb:6c:3b:0c:2e:be:00:a6:99:20: eb:4b:0b:36:03:a0:ef:27:d1:e9:3b:9c:ae:d3:f6: 7b:d8:e7:07:b8:7b:41:62:41:7e:d3:d9:52:c1:43: 40:24:ec:c0:f0:71:7c:b1:fc:8f:8c:6a:6e:b2:f1: c0:d4:0b:26:e4:1a:ee:81:18:72:0c:32:d3:3d:22: 41:81:26:f4:83:fd:f6:32:e0:ba:d5:c1:70:08:a0: a3:5c:7f:eb:39:6b:26:24:eb:20:97:bb:63:db:99: 3e:35:91:37:f1:25:f4:f9:bc:2f:fb:7d:59:b4:bc: 6c:03:da:fe:85:4f:39:10:37:0a:2e:f2:41:87:66: c0:2f:3e:c4:69:fb:69:ed:8a:4a:97:16:e0:91:43: 78:34:e3:c8:31:61:9f:5d:cb:7a:8e:5a:46:61:db: 04:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:79:E0:26:68:49:FC:D9:50:A1:8C:B5:E2:F5:AF:16:26:54:9F:7C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ba6c5703-b207-42ac-b6c0-2b7d9a5d1942.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae0:9000::/40 Signature Algorithm: sha256WithRSAEncryption 6d:29:78:8f:78:39:b4:7b:15:7b:98:85:59:a2:d9:8b:1c:1e: 83:cd:ca:44:38:47:75:c8:af:64:2b:5c:7c:4e:30:db:2a:8a: 13:b7:04:0f:c0:fc:43:fd:b0:37:eb:49:f0:b0:5d:e0:fb:fd: 7c:5a:51:37:1e:a2:aa:c8:71:82:22:c3:3e:f5:c9:62:31:63: a7:cf:96:3d:a9:d6:dc:76:cf:82:45:75:6e:6b:90:ab:c5:44: c3:1c:82:0e:04:24:ef:ed:dd:61:df:f4:e3:29:c0:27:0c:69: e8:e9:c5:2b:61:14:8b:b8:77:13:7b:95:e1:30:f9:ad:14:2b: 1a:77:a8:c2:23:0d:c7:64:c2:5e:1c:06:84:20:2d:38:6b:3e: bd:82:51:62:32:a0:89:b0:59:65:ed:af:29:3b:15:ab:42:a3: 0d:f1:a5:61:a7:b7:e5:9f:51:a9:51:f5:79:b6:fa:9e:6b:23: 92:3c:c9:64:d1:d4:f9:d1:e4:59:9f:88:f3:ec:ff:94:22:7f: df:26:88:db:65:9b:5d:0a:c1:12:8d:a9:3a:23:54:d8:a8:6f: 95:04:c1:db:d6:e7:18:0c:ff:32:96:de:2d:0a:20:a7:7b:87: 31:de:c2:a2:f5:a7:4d:aa:bc:75:61:4d:73:26:e6:be:3d:a2: ba:96:1c:e8 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBFA5xDw14J9xjCzvBqxnH3gX+cswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUyMjE2NTIxOVoX DTI2MDgyMDIzNTk1OVowejFJMEcGA1UEBRNAN2Y5ZTU4NWI4YzE2MjBiOWYyNmYx NDI4MjM3MjliNzkzOGUyNTY5Y2EwOTI2ZmNlMzU3YmI2N2M3ZTY1OWUzNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxkLWXLgUN9q9bJFEVFJST0cALaQ N/EzrLV+wCuXpdDADcQRWulamhSaWEHSFjuCflwtWZorUgGJlV/DlQsDM2mSsspj haUfYcAdNsAK91IZngcb3hhMm4Bqq7d1TstsOwwuvgCmmSDrSws2A6DvJ9HpO5yu 0/Z72OcHuHtBYkF+09lSwUNAJOzA8HF8sfyPjGpusvHA1Asm5BrugRhyDDLTPSJB gSb0g/32MuC61cFwCKCjXH/rOWsmJOsgl7tj25k+NZE38SX0+bwv+31ZtLxsA9r+ hU85EDcKLvJBh2bALz7Eaftp7YpKlxbgkUN4NOPIMWGfXct6jlpGYdsElQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIh54CZoSfzZUKGMteL1rxYmVJ98MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JhNmM1NzAzLWIyMDctNDJhYy1iNmMwLTJiN2Q5YTVkMTk0Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba4JAwDQYJKoZIhvcNAQELBQADggEBAG0peI94ObR7FXuYhVmi 2YscHoPNykQ4R3XIr2QrXHxOMNsqihO3BA/A/EP9sDfrSfCwXeD7/XxaUTceoqrI cYIiwz71yWIxY6fPlj2p1tx2z4JFdW5rkKvFRMMcgg4EJO/t3WHf9OMpwCcMaejp xSthFIu4dxN7leEw+a0UKxp3qMIjDcdkwl4cBoQgLThrPr2CUWIyoImwWWXtryk7 FatCow3xpWGnt+WfUalR9Xm2+p5rI5I8yWTR1PnR5FmfiPPs/5Qif98miNtlm10K wRKNqTojVNiob5UEwdvW5xgM/zKW3i0KIKd7hzHewqL1p02qvHVhTXMm5r49orqW HOg= -----END CERTIFICATE-----Generated at Sun May 24 12:19:41 2026 by rpki-client