$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/baa01805-cb98-4c85-9fa0-fdff4c3b18af.roa File: baa01805-cb98-4c85-9fa0-fdff4c3b18af.roa (raw, json) Hash identifier: TnDNVoUPN/6AoUf3hxnyt0YsohTSx3euG2b/CIVILV0= Subject key identifier: 45:3E:5C:4E:3B:15:68:BE:F4:C6:AE:87:18:5E:10:AD:E7:A0:A8:3C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0A928BFC1582C4EE4EC05D59B33015BB68E86C6B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/baa01805-cb98-4c85-9fa0-fdff4c3b18af.roa Signing time: Tue 12 May 2026 00:00:51 +0000 ROA not before: Tue 12 May 2026 00:00:51 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daec:7000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:92:8b:fc:15:82:c4:ee:4e:c0:5d:59:b3:30:15:bb:68:e8:6c:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 12 00:00:51 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=740e6e8810d686acff3c652b561794ba23ed930a2c5c5cf5588d047a6aa0fa6b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:99:be:ca:b5:b1:df:7f:3d:93:a4:a6:a1:46: 19:f6:0a:3e:09:71:d3:76:59:e6:98:79:06:7d:9c: 8d:9c:7f:d9:38:50:c6:05:b1:53:92:eb:c4:60:eb: 78:57:cb:e5:ef:fa:16:eb:e8:97:78:6a:77:cd:0d: 81:9d:3c:9e:fc:1f:b6:cf:a8:8b:3c:b8:8a:b5:2f: d2:3b:bd:b8:bb:6c:e0:d4:d7:ba:3b:3d:fc:a4:23: 32:60:95:e3:08:37:8d:e9:16:1d:8e:03:9d:e2:4c: e0:ba:08:b0:d1:d1:b6:fe:d5:38:7d:c7:5d:3b:e4: 9c:3b:75:f2:a4:9f:57:39:21:54:cf:34:8a:a4:11: 26:ee:00:12:08:03:c0:3e:b8:2e:47:e3:cc:ad:18: c9:9c:d8:8b:52:be:da:d0:c7:fa:8d:db:f2:0c:ac: 55:ba:2a:bf:74:17:f2:c9:ec:6d:72:8f:ae:3f:57: 25:a3:d9:87:6d:c6:00:7a:5d:93:9b:cf:6d:71:6e: ae:cd:d3:1c:fc:31:c2:54:2e:1a:41:c6:24:2c:1b: 89:52:34:d7:7d:be:0f:70:9c:bc:03:47:44:99:35: 6f:dd:43:71:5a:a4:4b:0d:5f:fc:e8:0e:37:ac:05: 17:cb:e5:f2:58:60:4a:0d:57:bf:52:4e:d2:87:b3: 40:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:3E:5C:4E:3B:15:68:BE:F4:C6:AE:87:18:5E:10:AD:E7:A0:A8:3C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/baa01805-cb98-4c85-9fa0-fdff4c3b18af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daec:7000::/48 Signature Algorithm: sha256WithRSAEncryption 5a:24:a4:1f:98:ed:f0:2b:65:e9:99:b6:a5:c9:6c:ec:6d:d1: 02:8c:b5:7c:17:ab:17:d9:fc:9e:99:fe:49:10:b7:5b:78:d6: ec:a3:6f:4a:e7:6f:bb:d5:59:b6:23:b3:85:0d:2d:4b:2c:91: f5:a7:8f:74:42:6f:83:b2:86:fa:6c:0e:5d:25:de:70:b5:94: c0:10:9a:0c:f9:0d:66:2f:74:a4:86:62:ec:e6:d2:12:00:34: 3e:ed:3d:a4:49:89:fd:96:57:1e:5c:f7:4c:33:9e:5d:30:f7: ee:10:82:9e:f7:e7:5e:b6:bb:f5:eb:68:87:2c:6e:91:73:93: 4e:7c:c3:46:66:44:1d:ab:d2:68:94:ef:fc:65:82:66:86:be: f2:5e:db:3f:d9:91:2c:fd:73:45:2c:68:79:8b:de:50:11:8a: 49:52:59:61:c0:cf:1e:7a:d5:14:27:c0:ca:51:a4:da:f3:04: 15:60:6e:71:4c:fb:e5:c2:a8:63:f4:3b:42:ce:da:33:50:e0: c9:98:fb:10:2c:a1:48:8d:78:b0:5b:4e:64:8a:f0:54:c3:c4: e7:ad:6c:89:bd:c5:77:0f:35:b3:8a:d2:25:54:87:89:1a:5d: 34:52:78:76:74:d0:5f:ec:13:5d:ca:85:b3:2f:17:34:2d:58: 3f:7e:68:13 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUCpKL/BWCxO5OwF1ZszAVu2jobGswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMjAwMDA1MVoX DTI2MDgxMDIzNTk1OVowejFJMEcGA1UEBRNANzQwZTZlODgxMGQ2ODZhY2ZmM2M2 NTJiNTYxNzk0YmEyM2VkOTMwYTJjNWM1Y2Y1NTg4ZDA0N2E2YWEwZmE2YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZm+yrWx3389k6SmoUYZ9go+CXHT dlnmmHkGfZyNnH/ZOFDGBbFTkuvEYOt4V8vl7/oW6+iXeGp3zQ2BnTye/B+2z6iL PLiKtS/SO724u2zg1Ne6Oz38pCMyYJXjCDeN6RYdjgOd4kzgugiw0dG2/tU4fcdd O+ScO3XypJ9XOSFUzzSKpBEm7gASCAPAPrguR+PMrRjJnNiLUr7a0Mf6jdvyDKxV uiq/dBfyyextco+uP1clo9mHbcYAel2Tm89tcW6uzdMc/DHCVC4aQcYkLBuJUjTX fb4PcJy8A0dEmTVv3UNxWqRLDV/86A43rAUXy+XyWGBKDVe/Uk7Sh7NAzwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEU+XE47FWi+9MauhxheEK3noKg8MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JhYTAxODA1LWNiOTgtNGM4NS05ZmEwLWZkZmY0YzNiMThhZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba7HAAMA0GCSqGSIb3DQEBCwUAA4IBAQBaJKQfmO3wK2Xpmbal yWzsbdECjLV8F6sX2fyemf5JELdbeNbso29K52+71Vm2I7OFDS1LLJH1p490Qm+D sob6bA5dJd5wtZTAEJoM+Q1mL3SkhmLs5tISADQ+7T2kSYn9llceXPdMM55dMPfu EIKe9+detrv162iHLG6Rc5NOfMNGZkQdq9JolO/8ZYJmhr7yXts/2ZEs/XNFLGh5 i95QEYpJUllhwM8eetUUJ8DKUaTa8wQVYG5xTPvlwqhj9DtCztozUODJmPsQLKFI jXiwW05kivBUw8TnrWyJvcV3DzWzitIlVIeJGl00Unh2dNBf7BNdyoWzLxc0LVg/ fmgT -----END CERTIFICATE-----Generated at Tue May 12 23:32:51 2026 by rpki-client