$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/326130353a646663313a633432653a3a2f34382d3438203d3e203437343936.roa File: 326130353a646663313a633432653a3a2f34382d3438203d3e203437343936.roa (raw, json) Hash identifier: 1cHE9g6peotLQGJPVbNnn14exMLqf7mblBEiwMXZvdY= Subject key identifier: 57:44:9F:3B:30:17:72:DB:DF:69:3C:A9:68:65:74:E5:EC:FA:B1:A7 Certificate issuer: /CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0 Certificate serial: 25AE95048B71F44AE8A0112D988BED4E64A72252 Authority key identifier: 8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/326130353a646663313a633432653a3a2f34382d3438203d3e203437343936.roa Signing time: Wed 17 Jan 2024 13:55:21 +0000 ROA not before: Wed 17 Jan 2024 13:50:21 +0000 ROA not after: Wed 15 Jan 2025 13:55:21 +0000 asID: 47496 IP address blocks: 2a05:dfc1:c42e::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 28 Sep 2024 22:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ae:95:04:8b:71:f4:4a:e8:a0:11:2d:98:8b:ed:4e:64:a7:22:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0 Validity Not Before: Jan 17 13:50:21 2024 GMT Not After : Jan 15 13:55:21 2025 GMT Subject: CN=57449F3B301772DBDF693CA9686574E5ECFAB1A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:19:1b:4b:a3:7a:c7:e9:46:49:62:ad:e1:56: f0:77:97:e3:fe:1e:79:4a:9d:79:b4:02:35:98:a4: 61:cf:e0:e1:00:b5:93:3c:e1:1d:8e:b4:e1:23:fd: 4c:ba:11:a9:eb:74:0d:cb:c5:a6:79:0a:10:30:d5: 80:f8:c6:78:ae:79:c0:74:2c:58:eb:63:b0:ef:fe: 24:a4:93:70:c5:59:c0:c3:8d:b6:64:87:b6:2d:3c: e8:94:2e:7c:b2:57:a1:af:4c:70:d0:76:d3:25:14: e6:9d:8a:8e:39:a9:d1:1d:c9:91:d0:7d:c3:b3:ac: 14:3c:99:a9:92:e5:60:6e:61:e4:d6:21:03:6e:e5: 68:be:47:65:c3:75:e8:8f:a6:ac:de:a1:0b:f6:23: 20:2d:29:e2:09:5a:02:e1:87:af:96:d7:9e:1d:11: c3:4c:7d:e5:c3:bb:df:49:41:ef:fa:9a:97:f5:6d: eb:e3:ca:de:87:9b:14:c7:7f:81:6f:c0:16:09:27: 1f:9a:d1:29:a0:8b:2c:3b:62:81:1a:18:6f:9b:7a: 4f:b1:9e:85:b5:58:30:0c:77:44:af:9b:d8:98:b2: c8:f0:c2:0b:e4:09:18:33:ad:18:3a:b2:32:4f:fd: 76:57:41:a7:b1:55:4c:11:df:a7:1f:43:3a:a4:a2: 1c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:44:9F:3B:30:17:72:DB:DF:69:3C:A9:68:65:74:E5:EC:FA:B1:A7 X509v3 Authority Key Identifier: keyid:8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/326130353a646663313a633432653a3a2f34382d3438203d3e203437343936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:c42e::/48 Signature Algorithm: sha256WithRSAEncryption 1a:38:02:55:2f:bf:ae:46:95:f9:4c:d2:3a:a4:92:33:57:04: 65:5b:9e:48:44:72:9e:81:e6:74:9d:de:42:63:18:ee:af:53: 14:55:af:e4:e4:25:76:2f:93:9d:07:a8:05:86:1b:f4:d0:3c: f8:74:3a:2d:e7:c7:d8:fe:55:3a:ae:a4:01:48:a5:e2:9e:a6: 3f:c7:29:7c:4c:d4:38:80:89:3a:15:56:92:f5:24:99:82:48: bf:06:af:21:59:a8:59:99:29:77:13:c6:08:22:b5:74:04:27: e9:9f:7c:cd:e1:8f:cb:cb:c9:f9:28:13:54:59:76:0c:07:04: 86:d7:b9:5c:ba:6e:70:3f:3d:82:26:e7:d5:a4:d7:97:dd:df: 8e:63:99:11:79:be:c9:b8:cf:bd:5b:16:d8:3e:4c:01:4a:e6: 86:78:a6:d5:d7:ea:5c:ab:10:17:a2:40:1a:0b:57:d2:10:0a: b4:39:04:b9:5c:8b:34:86:a6:a8:f9:5a:eb:0f:56:4a:3f:4c: 61:8d:d7:ff:71:b4:82:db:7a:35:7a:c1:83:7a:44:4f:c9:e4: 2e:f2:fd:3d:7e:4e:9f:13:be:f9:dc:a0:68:45:4e:f4:50:d5: ac:40:d0:4e:d4:2d:0f:b3:b2:ce:7d:2f:95:f5:fd:23:6d:f1: 4d:b1:9b:1e -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUJa6VBItx9ErooBEtmIvtTmSnIlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE4OUUwREI4OTUzMUY3MjNFNDJDNzUwOTI4MkNDNTQ5 NkZFQTRGMDAeFw0yNDAxMTcxMzUwMjFaFw0yNTAxMTUxMzU1MjFaMDMxMTAvBgNV BAMTKDU3NDQ5RjNCMzAxNzcyREJERjY5M0NBOTY4NjU3NEU1RUNGQUIxQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2GRtLo3rH6UZJYq3hVvB3l+P+ HnlKnXm0AjWYpGHP4OEAtZM84R2OtOEj/Uy6EanrdA3LxaZ5ChAw1YD4xniuecB0 LFjrY7Dv/iSkk3DFWcDDjbZkh7YtPOiULnyyV6GvTHDQdtMlFOadio45qdEdyZHQ fcOzrBQ8mamS5WBuYeTWIQNu5Wi+R2XDdeiPpqzeoQv2IyAtKeIJWgLhh6+W154d EcNMfeXDu99JQe/6mpf1bevjyt6HmxTHf4FvwBYJJx+a0Smgiyw7YoEaGG+bek+x noW1WDAMd0Svm9iYssjwwgvkCRgzrRg6sjJP/XZXQaexVUwR36cfQzqkohwHAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUV0SfOzAXctvfaTypaGV05ez6sacwHwYDVR0j BBgwFoAUiong24lTH3I+QsdQkoLMVJb+pPAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgy MzUyLzIvOEE4OUUwREI4OTUzMUY3MjNFNDJDNzUwOTI4MkNDNTQ5NkZFQTRGMC5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzhBODlFMERCODk1MzFG NzIzRTQyQzc1MDkyODJDQzU0OTZGRUE0RjAuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzNkYTRkOGI0LWExNTctNDYzNC1hYjE4LTNlZjlkMDk4MjM1 Mi8yLzMyNjEzMDM1M2E2NDY2NjMzMTNhNjMzNDMyNjUzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzNDM3MzQzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwcQuMA0GCSqGSIb3DQEB CwUAA4IBAQAaOAJVL7+uRpX5TNI6pJIzVwRlW55IRHKegeZ0nd5CYxjur1MUVa/k 5CV2L5OdB6gFhhv00Dz4dDot58fY/lU6rqQBSKXinqY/xyl8TNQ4gIk6FVaS9SSZ gki/Bq8hWahZmSl3E8YIIrV0BCfpn3zN4Y/Ly8n5KBNUWXYMBwSG17lcum5wPz2C JufVpNeX3d+OY5kReb7JuM+9WxbYPkwBSuaGeKbV1+pcqxAXokAaC1fSEAq0OQS5 XIs0hqao+VrrD1ZKP0xhjdf/cbSC23o1esGDekRPyeQu8v09fk6fE7753KBoRU70 UNWsQNBO1C0Ps7LOfS+V9f0jbfFNsZse -----END CERTIFICATE-----Generated at Sat Sep 28 06:48:59 2024 by rpki-client on console-ams.rpki-client.org