$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/326130353a646663313a633432333a3a2f34382d3438203d3e203437343936.roa File: 326130353a646663313a633432333a3a2f34382d3438203d3e203437343936.roa (raw, json) Hash identifier: porfq6B1Ft1HhHPKTYk32qHSKsRN6FR98QnIiPiDxeY= Subject key identifier: A6:FB:19:49:F1:3B:11:3A:3D:F6:38:3B:5B:62:ED:48:BD:71:27:B4 Certificate issuer: /CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0 Certificate serial: 791C06F0F34A7289B7F4942DDE0F53BC4BD19868 Authority key identifier: 8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/326130353a646663313a633432333a3a2f34382d3438203d3e203437343936.roa Signing time: Wed 17 Jan 2024 09:59:05 +0000 ROA not before: Wed 17 Jan 2024 09:54:05 +0000 ROA not after: Wed 15 Jan 2025 09:59:05 +0000 asID: 47496 IP address blocks: 2a05:dfc1:c423::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 28 Sep 2024 22:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:1c:06:f0:f3:4a:72:89:b7:f4:94:2d:de:0f:53:bc:4b:d1:98:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0 Validity Not Before: Jan 17 09:54:05 2024 GMT Not After : Jan 15 09:59:05 2025 GMT Subject: CN=A6FB1949F13B113A3DF6383B5B62ED48BD7127B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:18:4d:c7:4e:96:cb:d0:17:b1:fd:9f:91:68: 67:81:90:24:f5:40:03:88:33:ef:d4:70:b2:96:d2: 4b:3f:94:15:32:61:a8:c8:1b:40:98:99:07:93:8d: 8f:e1:2f:fe:48:3f:9c:12:df:ec:ff:ec:fb:60:03: ac:a2:a2:2a:04:91:e0:84:2a:75:8a:e7:cc:43:d9: 1f:cf:5b:18:dc:97:3d:42:3f:7b:d3:18:4c:96:cb: 04:c4:7a:7f:46:1f:36:85:41:21:76:59:80:f5:51: ff:20:33:af:4a:a9:45:ea:ff:ca:fa:2d:a7:98:fe: 26:62:c1:5a:c2:82:a6:97:63:fb:6c:c6:52:c3:59: 4c:13:23:9e:b2:05:24:6b:23:44:ed:9a:55:d3:92: bb:20:68:ef:a4:67:ba:93:17:be:89:f3:6a:3e:4b: cb:4b:83:be:22:3e:1a:ab:7c:91:4d:24:00:90:5e: 76:6d:6a:d0:f0:94:09:87:04:9a:0f:6d:5c:65:91: e1:c9:e0:29:d9:e1:89:9d:04:5c:53:7b:22:8e:e2: 13:86:fb:bc:d3:2c:b0:e0:a9:59:42:0b:b4:db:ea: 40:cd:bc:b4:cb:a4:bc:a1:30:75:9f:4f:aa:0f:44: 45:ae:ec:bf:a4:e0:c5:32:cb:44:67:71:f4:54:23: b3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:FB:19:49:F1:3B:11:3A:3D:F6:38:3B:5B:62:ED:48:BD:71:27:B4 X509v3 Authority Key Identifier: keyid:8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/326130353a646663313a633432333a3a2f34382d3438203d3e203437343936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:c423::/48 Signature Algorithm: sha256WithRSAEncryption 26:c9:56:cc:cc:f1:aa:0f:80:ac:9e:e0:73:bd:5a:26:26:49: b9:14:3b:ed:a0:ab:df:63:81:fd:b8:a6:b5:9f:47:1c:99:b8: 49:70:66:2a:cd:80:18:37:5e:4d:a5:66:10:dd:53:80:b7:56: 7a:89:32:81:a6:b4:d0:54:20:a7:80:c4:fc:25:13:92:1a:f5: e7:78:98:fe:85:cc:24:1b:1c:e3:5e:01:77:81:94:be:af:aa: 54:b4:a4:d5:5a:27:b8:8b:ed:a4:ca:55:0a:88:05:46:0d:00: b9:f8:09:6e:af:62:9e:f9:3e:f5:c6:ea:f4:e4:d6:1b:d9:20: 66:d9:20:78:6a:6f:2d:51:6d:38:6d:c5:6f:6b:45:46:ad:d8: 6d:8f:eb:5e:c6:7f:91:90:12:4d:32:dc:26:68:02:46:b2:c9: 22:69:9a:14:8e:cf:11:7d:97:c7:b4:64:0c:54:2d:8d:16:24: cf:a6:59:ad:6b:e1:b6:14:52:08:f5:e6:5c:ba:4e:a9:d1:3e: 98:d9:30:20:40:19:95:9e:61:ef:3a:9b:3b:25:20:16:82:f6: 76:ce:5a:2b:06:b5:06:3a:6f:82:c2:67:56:a6:91:49:e1:09: 3b:98:99:6b:f6:c4:95:84:01:84:03:b6:c7:9f:ef:68:8a:11: 2b:a3:8a:2c -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUeRwG8PNKcom39JQt3g9TvEvRmGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE4OUUwREI4OTUzMUY3MjNFNDJDNzUwOTI4MkNDNTQ5 NkZFQTRGMDAeFw0yNDAxMTcwOTU0MDVaFw0yNTAxMTUwOTU5MDVaMDMxMTAvBgNV BAMTKEE2RkIxOTQ5RjEzQjExM0EzREY2MzgzQjVCNjJFRDQ4QkQ3MTI3QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoGE3HTpbL0Bex/Z+RaGeBkCT1 QAOIM+/UcLKW0ks/lBUyYajIG0CYmQeTjY/hL/5IP5wS3+z/7PtgA6yioioEkeCE KnWK58xD2R/PWxjclz1CP3vTGEyWywTEen9GHzaFQSF2WYD1Uf8gM69KqUXq/8r6 LaeY/iZiwVrCgqaXY/tsxlLDWUwTI56yBSRrI0TtmlXTkrsgaO+kZ7qTF76J82o+ S8tLg74iPhqrfJFNJACQXnZtatDwlAmHBJoPbVxlkeHJ4CnZ4YmdBFxTeyKO4hOG +7zTLLDgqVlCC7Tb6kDNvLTLpLyhMHWfT6oPREWu7L+k4MUyy0RncfRUI7OdAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUpvsZSfE7ETo99jg7W2LtSL1xJ7QwHwYDVR0j BBgwFoAUiong24lTH3I+QsdQkoLMVJb+pPAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgy MzUyLzIvOEE4OUUwREI4OTUzMUY3MjNFNDJDNzUwOTI4MkNDNTQ5NkZFQTRGMC5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzhBODlFMERCODk1MzFG NzIzRTQyQzc1MDkyODJDQzU0OTZGRUE0RjAuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzNkYTRkOGI0LWExNTctNDYzNC1hYjE4LTNlZjlkMDk4MjM1 Mi8yLzMyNjEzMDM1M2E2NDY2NjMzMTNhNjMzNDMyMzMzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzNDM3MzQzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwcQjMA0GCSqGSIb3DQEB CwUAA4IBAQAmyVbMzPGqD4CsnuBzvVomJkm5FDvtoKvfY4H9uKa1n0ccmbhJcGYq zYAYN15NpWYQ3VOAt1Z6iTKBprTQVCCngMT8JROSGvXneJj+hcwkGxzjXgF3gZS+ r6pUtKTVWie4i+2kylUKiAVGDQC5+Alur2Ke+T71xur05NYb2SBm2SB4am8tUW04 bcVva0VGrdhtj+texn+RkBJNMtwmaAJGsskiaZoUjs8RfZfHtGQMVC2NFiTPplmt a+G2FFII9eZcuk6p0T6Y2TAgQBmVnmHvOps7JSAWgvZ2zlorBrUGOm+CwmdWppFJ 4Qk7mJlr9sSVhAGEA7bHn+9oihEro4os -----END CERTIFICATE-----Generated at Sat Sep 28 06:48:59 2024 by rpki-client on console-ams.rpki-client.org