$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/326130353a646663313a633431303a3a2f34342d3434203d3e203437343936.roa File: 326130353a646663313a633431303a3a2f34342d3434203d3e203437343936.roa (raw, json) Hash identifier: Das7Btn5B8Y/j5fok+HEk7b1cz48CG+zBJ43A6XttKs= Subject key identifier: 75:62:E6:0B:3F:2E:54:1F:0F:75:2B:E5:82:07:31:5F:86:07:83:64 Certificate issuer: /CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0 Certificate serial: 1412769EC0968CA51C62FD24AC1EF19D12D683C1 Authority key identifier: 8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/326130353a646663313a633431303a3a2f34342d3434203d3e203437343936.roa Signing time: Mon 22 Jan 2024 14:30:34 +0000 ROA not before: Mon 22 Jan 2024 14:25:34 +0000 ROA not after: Mon 20 Jan 2025 14:30:34 +0000 asID: 47496 IP address blocks: 2a05:dfc1:c410::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 28 Sep 2024 22:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:12:76:9e:c0:96:8c:a5:1c:62:fd:24:ac:1e:f1:9d:12:d6:83:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0 Validity Not Before: Jan 22 14:25:34 2024 GMT Not After : Jan 20 14:30:34 2025 GMT Subject: CN=7562E60B3F2E541F0F752BE58207315F86078364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7e:80:b4:a2:53:54:ea:0b:50:4a:d3:42:37: cb:7f:52:38:43:b5:ac:26:38:df:03:e1:ec:a2:04: c2:a7:74:13:d8:ca:93:60:eb:2e:75:b5:93:07:a7: 04:a5:e1:9f:1c:24:df:77:2f:85:95:8d:c0:07:44: ab:8a:1a:92:3e:ba:bd:2a:1f:03:f7:04:37:a3:cc: 0a:eb:c8:15:cb:90:a6:f5:c4:f6:d5:67:33:29:e7: 40:eb:57:da:7c:2e:8b:13:0c:f4:15:45:a3:95:b5: 18:60:88:b6:08:28:a2:0d:e3:5b:40:a2:3c:ab:00: 5b:70:60:31:60:4f:3d:cc:1e:dc:3b:58:71:2d:bb: a0:a9:46:ba:38:d7:4c:59:bc:48:a7:fa:11:67:30: ab:16:05:6d:33:e3:1c:3c:8d:de:9d:83:82:a8:af: bb:f4:05:af:d9:6c:39:e5:03:a0:ae:2e:7a:49:25: 81:8c:a7:b8:47:d7:6e:c2:d1:55:c9:ec:f1:38:6a: 65:a4:75:4a:c4:95:f2:dd:b3:0f:6e:39:4d:91:27: ed:24:36:6d:ef:3c:6f:6e:6e:c1:22:3a:05:5d:e6: ee:c9:9f:12:0f:d3:6f:b9:dd:36:9d:fb:b3:c2:5c: fc:cf:80:a2:28:eb:51:93:26:16:e5:cc:be:ac:cc: fc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:62:E6:0B:3F:2E:54:1F:0F:75:2B:E5:82:07:31:5F:86:07:83:64 X509v3 Authority Key Identifier: keyid:8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/326130353a646663313a633431303a3a2f34342d3434203d3e203437343936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:c410::/44 Signature Algorithm: sha256WithRSAEncryption 95:07:51:28:f7:32:93:94:1d:7f:e9:08:62:0b:71:cf:66:0c: 6a:0c:54:84:e0:d2:34:71:03:0c:44:3f:00:5e:e4:ba:0e:48: e4:ff:c4:ad:95:87:61:1a:d1:b8:18:21:42:07:aa:91:f1:e2: 45:f6:a6:a4:66:47:b7:3b:ed:84:57:64:e0:55:fe:5c:4a:c6: b7:81:6c:bd:0f:e6:9f:50:55:2d:44:d4:06:dd:48:70:51:9f: 59:39:b0:d3:dd:7b:31:31:82:a2:9d:a3:bc:41:97:ed:64:f7: da:98:a5:03:4d:32:fe:6e:c1:e8:3f:d2:be:31:28:55:40:5a: 5e:d1:52:e3:4a:14:aa:69:a4:bc:dc:22:8f:93:dd:7a:bb:14: ef:e5:e3:18:94:a7:05:0c:17:73:f4:45:11:d1:81:0e:14:4e: c0:8d:fd:14:5c:ae:05:3d:11:6a:b9:5f:5a:c4:c9:4d:83:13: a7:de:66:7c:d7:14:3e:4f:98:9f:44:b1:47:a4:09:79:8a:91: fe:51:01:9a:6b:d1:71:be:cc:f7:0c:86:8d:eb:03:33:4e:ea: d0:14:cc:cd:42:69:af:11:e1:f2:54:1a:f1:78:95:ba:23:95: 62:a5:be:0a:09:cc:5a:31:ed:2f:0d:8d:b5:74:e9:3d:e4:16: ee:40:f8:51 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUFBJ2nsCWjKUcYv0krB7xnRLWg8EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE4OUUwREI4OTUzMUY3MjNFNDJDNzUwOTI4MkNDNTQ5 NkZFQTRGMDAeFw0yNDAxMjIxNDI1MzRaFw0yNTAxMjAxNDMwMzRaMDMxMTAvBgNV BAMTKDc1NjJFNjBCM0YyRTU0MUYwRjc1MkJFNTgyMDczMTVGODYwNzgzNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6foC0olNU6gtQStNCN8t/UjhD tawmON8D4eyiBMKndBPYypNg6y51tZMHpwSl4Z8cJN93L4WVjcAHRKuKGpI+ur0q HwP3BDejzArryBXLkKb1xPbVZzMp50DrV9p8LosTDPQVRaOVtRhgiLYIKKIN41tA ojyrAFtwYDFgTz3MHtw7WHEtu6CpRro410xZvEin+hFnMKsWBW0z4xw8jd6dg4Ko r7v0Ba/ZbDnlA6CuLnpJJYGMp7hH127C0VXJ7PE4amWkdUrElfLdsw9uOU2RJ+0k Nm3vPG9ubsEiOgVd5u7JnxIP02+53Tad+7PCXPzPgKIo61GTJhblzL6szPz7AgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUdWLmCz8uVB8PdSvlggcxX4YHg2QwHwYDVR0j BBgwFoAUiong24lTH3I+QsdQkoLMVJb+pPAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgy MzUyLzIvOEE4OUUwREI4OTUzMUY3MjNFNDJDNzUwOTI4MkNDNTQ5NkZFQTRGMC5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzhBODlFMERCODk1MzFG NzIzRTQyQzc1MDkyODJDQzU0OTZGRUE0RjAuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzNkYTRkOGI0LWExNTctNDYzNC1hYjE4LTNlZjlkMDk4MjM1 Mi8yLzMyNjEzMDM1M2E2NDY2NjMzMTNhNjMzNDMxMzAzYTNhMmYzNDM0MmQzNDM0 MjAzZDNlMjAzNDM3MzQzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgXfwcQQMA0GCSqGSIb3DQEB CwUAA4IBAQCVB1Eo9zKTlB1/6QhiC3HPZgxqDFSE4NI0cQMMRD8AXuS6Dkjk/8St lYdhGtG4GCFCB6qR8eJF9qakZke3O+2EV2TgVf5cSsa3gWy9D+afUFUtRNQG3Uhw UZ9ZObDT3XsxMYKinaO8QZftZPfamKUDTTL+bsHoP9K+MShVQFpe0VLjShSqaaS8 3CKPk916uxTv5eMYlKcFDBdz9EUR0YEOFE7Ajf0UXK4FPRFquV9axMlNgxOn3mZ8 1xQ+T5ifRLFHpAl5ipH+UQGaa9Fxvsz3DIaN6wMzTurQFMzNQmmvEeHyVBrxeJW6 I5Vipb4KCcxaMe0vDY21dOk95BbuQPhR -----END CERTIFICATE-----Generated at Sat Sep 28 05:51:23 2024 by rpki-client on console-fra.rpki-client.org