$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/baa1273d-7883-4b5d-8e1c-23ebac490846.roa File: baa1273d-7883-4b5d-8e1c-23ebac490846.roa (raw, json) Hash identifier: YlxZgXpqjdRQzXBsL75ys265WewxgDAfjh0r5ltmCm4= Subject key identifier: 66:36:52:BE:D9:C3:CF:3C:07:B4:8E:5A:FA:A5:60:3A:DC:77:F9:99 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 7D649BD1B9C7FD9C3327E9BA1DC9B9C3073D4CBE Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/baa1273d-7883-4b5d-8e1c-23ebac490846.roa Signing time: Tue 04 Aug 2026 00:00:30 +0000 ROA not before: Tue 04 Aug 2026 00:00:30 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 240f:80ff:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Aug 2026 00:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:64:9b:d1:b9:c7:fd:9c:33:27:e9:ba:1d:c9:b9:c3:07:3d:4c:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Aug 4 00:00:30 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=0545a62bef616ec409edf3b79c62e37a90101875d2f5d2bbf519d9efd1714e77, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:83:15:1a:dd:11:71:bc:b5:ad:d4:0f:f9:e4: e7:57:10:fb:31:7a:44:cb:8f:59:d7:0e:46:96:54: 1e:3e:3c:1a:79:e3:cc:30:5a:83:25:f6:99:02:a2: ad:4c:35:68:d0:6a:e6:01:f4:cf:b0:65:93:cc:10: f0:5b:7c:e6:b2:70:24:ba:6e:5e:25:2a:6e:97:9a: 26:77:9e:69:e9:9f:6c:12:2b:4b:21:a9:bf:ec:85: 47:93:f1:b6:c5:b0:a4:de:0d:eb:cb:92:b5:0c:fa: a5:67:f0:00:75:c3:ce:09:0a:0a:b0:e2:5d:be:60: e2:b0:b9:b2:cc:90:3e:a8:ac:78:89:fa:83:03:21: b6:c1:86:6a:de:2b:1c:d3:e5:8a:ba:43:be:c1:75: 98:61:4e:5b:16:fb:22:51:ae:ca:f6:31:55:1f:70: a1:2b:44:6d:0e:d7:c0:1e:d9:33:71:ca:07:4d:2f: 82:fc:59:a3:22:ff:f5:bc:99:3f:f4:d8:f5:d4:d0: d0:2a:49:81:07:f9:46:1c:fb:d5:31:80:e9:1e:18: 6b:09:91:1c:e5:57:b5:a4:91:c4:04:44:2b:13:f5: 08:35:af:fe:2f:7f:35:4b:ba:02:17:57:71:81:fb: 1a:1c:37:93:85:a1:3f:73:ae:34:96:5d:99:7a:1c: 13:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:36:52:BE:D9:C3:CF:3C:07:B4:8E:5A:FA:A5:60:3A:DC:77:F9:99 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/baa1273d-7883-4b5d-8e1c-23ebac490846.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:80ff:4040::/48 Signature Algorithm: sha256WithRSAEncryption a1:d9:5a:f5:e1:33:cd:ac:0e:01:89:b9:1f:7b:88:30:d5:58: d3:26:d9:72:57:ec:b4:2b:c0:e5:ef:4b:0a:de:eb:57:9a:61: a4:30:41:1d:4a:03:93:61:90:a0:1b:07:8b:60:93:55:ba:f4: af:75:2a:4c:04:91:fe:11:70:01:75:d2:6a:f9:ed:a8:fb:35: 24:f1:38:6a:98:9b:ea:87:53:26:66:e9:ca:37:d7:d7:c9:74: 81:cc:ea:94:89:d3:5c:d0:78:26:69:c2:9a:e6:8e:86:b2:a3: 7a:1e:c2:6d:d3:f9:59:7b:8e:ff:8b:4a:37:c8:d0:02:82:b7: e8:dd:7b:89:75:d0:ea:c0:a5:1b:60:e7:56:23:fa:07:d9:83: b5:31:e2:aa:e4:1c:ff:39:3a:63:7f:7a:cb:4f:cc:32:fa:9d: 09:b1:5f:f1:ef:48:f9:ba:95:05:e2:4a:a4:69:5f:82:2e:33: 52:d1:db:9f:d0:a6:c7:5f:c5:05:89:10:5d:48:05:99:4c:4f: f6:5a:dc:54:ac:94:b6:16:79:30:dd:e5:7d:17:c3:44:9d:40: c4:c0:12:e4:ce:57:fd:7b:d8:91:c9:a2:b0:51:2c:4b:1d:a7: 49:4d:51:1d:38:0b:49:21:22:15:39:94:3f:25:3b:d8:2e:89: bb:59:17:76 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUfWSb0bnH/ZwzJ+m6Hcm5wwc9TL4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MDgwNDAwMDAzMFoX DTI2MTEwMjIzNTk1OVowejFJMEcGA1UEBRNAMDU0NWE2MmJlZjYxNmVjNDA5ZWRm M2I3OWM2MmUzN2E5MDEwMTg3NWQyZjVkMmJiZjUxOWQ5ZWZkMTcxNGU3NzEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIMVGt0Rcby1rdQP+eTnVxD7MXpE y49Z1w5GllQePjwaeePMMFqDJfaZAqKtTDVo0GrmAfTPsGWTzBDwW3zmsnAkum5e JSpul5omd55p6Z9sEitLIam/7IVHk/G2xbCk3g3ry5K1DPqlZ/AAdcPOCQoKsOJd vmDisLmyzJA+qKx4ifqDAyG2wYZq3isc0+WKukO+wXWYYU5bFvsiUa7K9jFVH3Ch K0RtDtfAHtkzccoHTS+C/FmjIv/1vJk/9Nj11NDQKkmBB/lGHPvVMYDpHhhrCZEc 5Ve1pJHEBEQrE/UINa/+L381S7oCF1dxgfsaHDeThaE/c640ll2ZehwT6QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGY2Ur7Zw888B7SOWvqlYDrcd/mZMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 L2JhYTEyNzNkLTc4ODMtNGI1ZC04ZTFjLTIzZWJhYzQ5MDg0Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJA+A/0BAMA0GCSqGSIb3DQEBCwUAA4IBAQCh2Vr14TPNrA4Bibkf e4gw1VjTJtlyV+y0K8Dl70sK3utXmmGkMEEdSgOTYZCgGweLYJNVuvSvdSpMBJH+ EXABddJq+e2o+zUk8ThqmJvqh1MmZunKN9fXyXSBzOqUidNc0HgmacKa5o6GsqN6 HsJt0/lZe47/i0o3yNACgrfo3XuJddDqwKUbYOdWI/oH2YO1MeKq5Bz/OTpjf3rL T8wy+p0JsV/x70j5upUF4kqkaV+CLjNS0duf0KbHX8UFiRBdSAWZTE/2WtxUrJS2 Fnkw3eV9F8NEnUDEwBLkzlf9e9iRyaKwUSxLHadJTVEdOAtJISIVOZQ/JTvYLom7 WRd2 -----END CERTIFICATE-----Generated at Sat Aug 15 07:43:11 2026 by rpki-client