$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/326130353a646663313a633432633a3a2f34382d3438203d3e203437343936.roa File: 326130353a646663313a633432633a3a2f34382d3438203d3e203437343936.roa (raw, json) Hash identifier: ScI94prSUtL9dbqcn5sgcF8bli8rK8rkjNyGdJkX4wE= Subject key identifier: B4:1C:FB:FC:C5:5F:BE:51:0C:77:F7:36:2A:DD:9B:AF:5C:F7:8E:E0 Certificate issuer: /CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0 Certificate serial: 2CB7DEB54B195D16C95DAAB2D33868EB10FE91A5 Authority key identifier: 8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/326130353a646663313a633432633a3a2f34382d3438203d3e203437343936.roa Signing time: Wed 17 Jan 2024 09:59:11 +0000 ROA not before: Wed 17 Jan 2024 09:54:11 +0000 ROA not after: Wed 15 Jan 2025 09:59:11 +0000 asID: 47496 IP address blocks: 2a05:dfc1:c42c::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 28 Sep 2024 22:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:b7:de:b5:4b:19:5d:16:c9:5d:aa:b2:d3:38:68:eb:10:fe:91:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0 Validity Not Before: Jan 17 09:54:11 2024 GMT Not After : Jan 15 09:59:11 2025 GMT Subject: CN=B41CFBFCC55FBE510C77F7362ADD9BAF5CF78EE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2d:e6:c4:e5:ef:e9:c6:f6:9f:ca:2c:72:96: dd:95:ec:b6:aa:07:9d:a4:a9:47:84:de:c0:40:50: fe:1c:fd:c2:46:cc:32:ad:eb:65:ee:5a:32:ea:c3: 5c:9e:24:ba:59:2c:9c:4c:ff:ad:cc:e2:93:e1:ce: c3:0f:6e:c5:03:9b:8b:28:2d:02:71:2b:bf:35:f7: 29:1a:89:3d:34:fe:bd:47:7d:9f:5e:bb:d7:55:3a: e9:f4:d6:77:ff:00:6a:f5:0e:43:0a:7a:07:51:b0: bd:64:15:46:d9:42:a0:9b:d7:b1:a7:1f:91:1d:cc: 01:4c:72:c7:18:6f:25:46:c6:0d:39:86:41:7c:27: 54:f2:4f:f4:6b:73:4b:f9:c7:6a:fd:74:ac:40:97: ef:e4:bb:3b:d1:1a:c1:e5:db:b7:f6:52:4e:c0:56: 7b:2f:5c:19:b0:00:4c:22:ac:17:73:13:65:14:96: 92:80:0c:0f:bc:2c:d6:7a:32:4e:cf:ef:c9:af:36: ee:eb:7d:2e:2f:1f:b1:a4:03:af:ba:cc:2d:43:ec: 8a:ec:6a:8a:3a:93:bc:10:5f:46:08:f9:32:24:1f: 18:2e:c3:b8:57:36:2e:8f:de:48:50:f7:f5:d1:56: 11:4f:4a:5f:98:9a:0a:0a:94:92:da:df:bc:e9:1c: c4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:1C:FB:FC:C5:5F:BE:51:0C:77:F7:36:2A:DD:9B:AF:5C:F7:8E:E0 X509v3 Authority Key Identifier: keyid:8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/326130353a646663313a633432633a3a2f34382d3438203d3e203437343936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:c42c::/48 Signature Algorithm: sha256WithRSAEncryption 63:1a:d0:23:f2:28:ab:ad:bb:b6:43:35:7a:3b:92:17:d8:59: ee:f9:d4:f8:6a:b5:0c:4d:1e:0d:83:e2:24:48:ef:5a:0d:0e: 90:8b:93:34:58:49:ee:e1:23:43:5b:8a:6e:08:c0:b4:df:f0: 84:cc:17:a8:56:7d:dd:45:38:dd:a9:0e:c0:b6:cf:eb:92:55: 6f:23:21:4f:3c:83:2f:ea:e9:05:e3:68:64:68:63:de:a4:5c: 73:cf:06:e8:31:3f:ce:6a:c6:7d:b4:8c:4a:60:02:4c:8e:78: 0e:e5:9b:d4:f0:c8:5d:00:22:64:17:46:56:aa:94:a1:a7:e3: a8:91:e1:0e:a0:1f:8d:f0:34:b7:e2:ca:5e:06:76:6f:a2:3c: dd:0b:1d:f8:38:14:9d:0f:02:90:b0:26:b9:9a:0c:cd:67:14: 85:c2:9f:1a:2b:c6:38:79:e1:75:44:12:e4:df:aa:4b:27:48: f3:21:87:d4:57:be:7f:ea:54:6a:ce:d0:cd:62:ed:c6:5a:c2: 37:f0:2f:a2:21:55:9b:0e:a2:c9:d0:b1:99:b4:54:0c:81:9b: 8f:06:79:2a:75:75:5e:00:0f:5a:a9:d6:68:65:15:0a:64:e2: f8:f9:a7:75:23:2f:5b:11:1e:aa:3f:fd:ef:9d:18:79:99:1e: 4d:9b:01:4b -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIULLfetUsZXRbJXaqy0zho6xD+kaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE4OUUwREI4OTUzMUY3MjNFNDJDNzUwOTI4MkNDNTQ5 NkZFQTRGMDAeFw0yNDAxMTcwOTU0MTFaFw0yNTAxMTUwOTU5MTFaMDMxMTAvBgNV BAMTKEI0MUNGQkZDQzU1RkJFNTEwQzc3RjczNjJBREQ5QkFGNUNGNzhFRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8LebE5e/pxvafyixylt2V7Laq B52kqUeE3sBAUP4c/cJGzDKt62XuWjLqw1yeJLpZLJxM/63M4pPhzsMPbsUDm4so LQJxK7819ykaiT00/r1HfZ9eu9dVOun01nf/AGr1DkMKegdRsL1kFUbZQqCb17Gn H5EdzAFMcscYbyVGxg05hkF8J1TyT/Rrc0v5x2r9dKxAl+/kuzvRGsHl27f2Uk7A VnsvXBmwAEwirBdzE2UUlpKADA+8LNZ6Mk7P78mvNu7rfS4vH7GkA6+6zC1D7Irs aoo6k7wQX0YI+TIkHxguw7hXNi6P3khQ9/XRVhFPSl+YmgoKlJLa37zpHMT7AgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUtBz7/MVfvlEMd/c2Kt2br1z3juAwHwYDVR0j BBgwFoAUiong24lTH3I+QsdQkoLMVJb+pPAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgy MzUyLzIvOEE4OUUwREI4OTUzMUY3MjNFNDJDNzUwOTI4MkNDNTQ5NkZFQTRGMC5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzhBODlFMERCODk1MzFG NzIzRTQyQzc1MDkyODJDQzU0OTZGRUE0RjAuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzNkYTRkOGI0LWExNTctNDYzNC1hYjE4LTNlZjlkMDk4MjM1 Mi8yLzMyNjEzMDM1M2E2NDY2NjMzMTNhNjMzNDMyNjMzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzNDM3MzQzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwcQsMA0GCSqGSIb3DQEB CwUAA4IBAQBjGtAj8iirrbu2QzV6O5IX2Fnu+dT4arUMTR4Ng+IkSO9aDQ6Qi5M0 WEnu4SNDW4puCMC03/CEzBeoVn3dRTjdqQ7Ats/rklVvIyFPPIMv6ukF42hkaGPe pFxzzwboMT/OasZ9tIxKYAJMjngO5ZvU8MhdACJkF0ZWqpShp+OokeEOoB+N8DS3 4speBnZvojzdCx34OBSdDwKQsCa5mgzNZxSFwp8aK8Y4eeF1RBLk36pLJ0jzIYfU V75/6lRqztDNYu3GWsI38C+iIVWbDqLJ0LGZtFQMgZuPBnkqdXVeAA9aqdZoZRUK ZOL4+ad1Iy9bER6qP/3vnRh5mR5NmwFL -----END CERTIFICATE-----Generated at Sat Sep 28 06:48:59 2024 by rpki-client on console-ams.rpki-client.org