$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/326130353a646663313a633432643a3a2f34382d3438203d3e203437343936.roa File: 326130353a646663313a633432643a3a2f34382d3438203d3e203437343936.roa (raw, json) Hash identifier: Gupe1YIgB0KerBN5sp3jzwt/Vc6fQjkz29qB4d+YN6E= Subject key identifier: DD:04:87:45:2D:59:22:66:57:A2:59:2A:8A:3F:D3:6B:8D:04:5E:83 Certificate issuer: /CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0 Certificate serial: 13133E22F15B8592D90CE5F18C2CB065147E3249 Authority key identifier: 8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/326130353a646663313a633432643a3a2f34382d3438203d3e203437343936.roa Signing time: Wed 17 Jan 2024 09:59:18 +0000 ROA not before: Wed 17 Jan 2024 09:54:18 +0000 ROA not after: Wed 15 Jan 2025 09:59:18 +0000 asID: 47496 IP address blocks: 2a05:dfc1:c42d::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 28 Sep 2024 22:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:13:3e:22:f1:5b:85:92:d9:0c:e5:f1:8c:2c:b0:65:14:7e:32:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0 Validity Not Before: Jan 17 09:54:18 2024 GMT Not After : Jan 15 09:59:18 2025 GMT Subject: CN=DD0487452D59226657A2592A8A3FD36B8D045E83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:59:8b:0c:bf:e5:3f:95:e7:44:82:08:dc:d1: 6e:29:ec:ac:51:56:fe:18:8d:d4:09:4d:a5:71:ed: 4b:bf:71:0e:4f:bd:97:13:66:88:3a:52:69:6a:cb: 8f:81:d7:b4:d4:dd:a8:8b:f1:f3:8b:01:06:08:4f: 72:9f:f3:f6:52:d7:67:d6:00:8b:d2:f4:6f:10:de: 46:ba:63:6e:d1:c9:ea:71:bd:c9:8f:e0:6b:c8:76: 3c:f0:b7:fc:53:4c:84:83:fe:8b:5f:4c:f5:fb:93: 36:7a:12:f9:25:54:bd:6b:5c:fe:d7:cd:c1:6d:d3: 9e:79:36:8e:50:9b:05:5f:6b:55:35:d7:9c:7c:ca: 99:e9:d1:1a:f8:67:82:b1:c0:b8:f7:20:29:f9:2b: 95:cd:f9:b9:73:f9:84:10:42:23:09:02:37:66:5a: 81:a1:ea:9d:6f:2c:bf:ca:33:f7:9e:aa:97:84:9b: 61:c4:9a:2d:09:4a:0f:15:99:37:03:0f:56:79:2c: 9a:94:3c:80:af:f3:86:eb:f4:46:30:a7:0d:64:b9: 40:8b:1d:1c:fd:78:35:d1:24:5b:b2:ac:e5:7b:4e: dc:ac:05:5f:83:ab:01:21:d8:b3:f9:09:36:26:c3: 7b:52:9b:f8:58:3b:9d:71:51:d5:3d:bd:be:00:ab: 59:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:04:87:45:2D:59:22:66:57:A2:59:2A:8A:3F:D3:6B:8D:04:5E:83 X509v3 Authority Key Identifier: keyid:8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/326130353a646663313a633432643a3a2f34382d3438203d3e203437343936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:c42d::/48 Signature Algorithm: sha256WithRSAEncryption 61:db:6e:e4:b3:9a:1a:a0:eb:d6:78:0c:1c:21:fe:0f:2e:8b: 76:04:ea:98:6b:38:ba:f6:a9:a6:32:4c:59:9b:cd:9a:0f:8e: 68:f8:e7:43:0e:64:d1:33:7d:a0:9b:9e:34:94:a6:fc:52:50: b1:9d:5a:18:a4:38:59:1d:5f:4a:bb:4a:52:b1:7b:72:41:22: 58:60:f6:a5:ed:aa:ec:1d:73:31:01:dc:de:7e:c7:e9:37:17: 97:79:47:02:e1:fc:0c:f2:8e:44:82:be:dd:fd:b8:a4:0a:98: 37:c5:32:84:fe:ca:de:35:04:ab:8d:19:b4:a2:32:b9:1d:af: d8:20:8c:a9:1b:e1:70:6c:ee:0f:b8:94:0b:06:41:c8:7a:68: a7:b5:75:f5:fa:a0:45:58:01:3d:34:98:5b:6b:6a:5c:54:4e: 15:f3:0d:85:c5:17:d2:d2:46:7f:66:28:02:2b:ef:01:b1:e8: 1e:c9:b2:34:00:e2:41:3e:9c:16:dc:6c:93:fe:05:c4:d9:2a: 34:e2:c2:cd:41:d2:5b:c2:3e:1a:7d:b4:fe:3d:65:0c:c4:7d: 20:3a:13:3c:f1:57:6b:cf:9f:a8:7c:32:b4:9e:ec:62:2d:73: 73:66:34:76:59:69:a3:e4:62:d9:55:2b:af:f5:6f:ee:43:9d: b2:8b:6f:65 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUExM+IvFbhZLZDOXxjCywZRR+MkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE4OUUwREI4OTUzMUY3MjNFNDJDNzUwOTI4MkNDNTQ5 NkZFQTRGMDAeFw0yNDAxMTcwOTU0MThaFw0yNTAxMTUwOTU5MThaMDMxMTAvBgNV BAMTKEREMDQ4NzQ1MkQ1OTIyNjY1N0EyNTkyQThBM0ZEMzZCOEQwNDVFODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVWYsMv+U/ledEggjc0W4p7KxR Vv4YjdQJTaVx7Uu/cQ5PvZcTZog6Umlqy4+B17TU3aiL8fOLAQYIT3Kf8/ZS12fW AIvS9G8Q3ka6Y27RyepxvcmP4GvIdjzwt/xTTISD/otfTPX7kzZ6EvklVL1rXP7X zcFt0555No5QmwVfa1U115x8ypnp0Rr4Z4KxwLj3ICn5K5XN+blz+YQQQiMJAjdm WoGh6p1vLL/KM/eeqpeEm2HEmi0JSg8VmTcDD1Z5LJqUPICv84br9EYwpw1kuUCL HRz9eDXRJFuyrOV7TtysBV+DqwEh2LP5CTYmw3tSm/hYO51xUdU9vb4Aq1mzAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQU3QSHRS1ZImZXolkqij/Ta40EXoMwHwYDVR0j BBgwFoAUiong24lTH3I+QsdQkoLMVJb+pPAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgy MzUyLzIvOEE4OUUwREI4OTUzMUY3MjNFNDJDNzUwOTI4MkNDNTQ5NkZFQTRGMC5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzhBODlFMERCODk1MzFG NzIzRTQyQzc1MDkyODJDQzU0OTZGRUE0RjAuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzNkYTRkOGI0LWExNTctNDYzNC1hYjE4LTNlZjlkMDk4MjM1 Mi8yLzMyNjEzMDM1M2E2NDY2NjMzMTNhNjMzNDMyNjQzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzNDM3MzQzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwcQtMA0GCSqGSIb3DQEB CwUAA4IBAQBh227ks5oaoOvWeAwcIf4PLot2BOqYazi69qmmMkxZm82aD45o+OdD DmTRM32gm540lKb8UlCxnVoYpDhZHV9Ku0pSsXtyQSJYYPal7arsHXMxAdzefsfp NxeXeUcC4fwM8o5Egr7d/bikCpg3xTKE/sreNQSrjRm0ojK5Ha/YIIypG+FwbO4P uJQLBkHIemintXX1+qBFWAE9NJhba2pcVE4V8w2FxRfS0kZ/ZigCK+8BsegeybI0 AOJBPpwW3GyT/gXE2So04sLNQdJbwj4afbT+PWUMxH0gOhM88Vdrz5+ofDK0nuxi LXNzZjR2WWmj5GLZVSuv9W/uQ52yi29l -----END CERTIFICATE-----Generated at Sat Sep 28 05:51:23 2024 by rpki-client on console-fra.rpki-client.org