$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/0/326131343a3763323a313032323a3a2f34382d3438203d3e203230343733.roa File: 326131343a3763323a313032323a3a2f34382d3438203d3e203230343733.roa (raw, json) Hash identifier: lmsU4Ru6WU6LD+Trpra0hPmekL3FYErdA4kEIEpXNJY= Subject key identifier: 1D:A8:1F:1A:F9:E1:54:A3:E1:D3:FC:F2:AF:90:71:49:21:EA:24:41 Certificate issuer: /CN=43FB377824B048048B8756B6C65C599B82AEB5B9 Certificate serial: 60E403145507EF144A755455472CB397B6D7E767 Authority key identifier: 43:FB:37:78:24:B0:48:04:8B:87:56:B6:C6:5C:59:9B:82:AE:B5:B9 Authority info access: rsync://repo.rpki.space/repo/Infiniroute/1/43FB377824B048048B8756B6C65C599B82AEB5B9.cer Subject info access: rsync://repo.rpki.space/repo/Pfcloud/0/326131343a3763323a313032323a3a2f34382d3438203d3e203230343733.roa Signing time: Sat 10 May 2025 13:43:18 +0000 ROA not before: Sat 10 May 2025 13:38:18 +0000 ROA not after: Sat 09 May 2026 13:43:18 +0000 asID: 20473 IP address blocks: 2a14:7c2:1022::/48 maxlen: 48 Validation: OK Signature path: rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.crl rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.mft rsync://repo.rpki.space/repo/Infiniroute/1/43FB377824B048048B8756B6C65C599B82AEB5B9.cer rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Jun 2025 05:23:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:e4:03:14:55:07:ef:14:4a:75:54:55:47:2c:b3:97:b6:d7:e7:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43FB377824B048048B8756B6C65C599B82AEB5B9 Validity Not Before: May 10 13:38:18 2025 GMT Not After : May 9 13:43:18 2026 GMT Subject: CN=1DA81F1AF9E154A3E1D3FCF2AF90714921EA2441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1f:d3:d9:b1:df:53:a7:f0:4b:1d:bd:43:51: 6a:34:1e:5f:1b:98:4d:c2:8d:9e:e8:bc:e9:b2:93: 07:87:dd:ea:95:eb:dc:78:5c:c9:da:e7:da:b6:a0: 05:7f:46:ef:13:1b:49:0a:04:b5:45:49:3e:9e:d1: 4f:6e:6e:e8:ee:3b:b0:cc:35:b2:93:25:43:a5:6c: 56:64:69:be:9d:00:a1:36:d6:b7:b3:90:b9:9d:4e: d2:4f:09:26:83:f7:ee:23:18:d8:99:c2:90:bc:fb: 1f:35:77:fa:f1:a0:7a:36:4b:a8:6b:60:e7:11:07: af:6b:f2:22:39:09:30:cb:cb:49:7f:5f:cf:ed:24: c6:ea:3d:61:ea:47:23:bc:18:07:63:50:be:48:1b: db:fb:e5:f3:05:7d:7a:1d:ca:b7:f8:45:06:48:51: e5:8e:13:a2:90:66:c4:44:1f:54:3b:2f:43:5f:07: 44:f6:a7:82:ca:0b:b4:f9:4c:3f:85:3e:ab:a3:ca: 90:94:04:33:ad:3b:d6:18:fb:4c:70:93:6d:e4:25: 83:c8:b8:b0:e5:cf:bd:f2:82:23:08:83:1e:b2:a9: 53:69:09:44:9a:25:f6:57:fd:e9:16:6e:c4:e5:69: 4f:aa:fe:09:84:c2:cc:27:7e:bd:41:a0:3b:e4:9e: 2e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A8:1F:1A:F9:E1:54:A3:E1:D3:FC:F2:AF:90:71:49:21:EA:24:41 X509v3 Authority Key Identifier: keyid:43:FB:37:78:24:B0:48:04:8B:87:56:B6:C6:5C:59:9B:82:AE:B5:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.crl Authority Information Access: CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/43FB377824B048048B8756B6C65C599B82AEB5B9.cer Subject Information Access: Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/0/326131343a3763323a313032323a3a2f34382d3438203d3e203230343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7c2:1022::/48 Signature Algorithm: sha256WithRSAEncryption 8a:47:e5:46:87:27:84:33:9a:e6:9a:9e:d9:7d:8b:b6:ad:8e: b8:f8:09:ed:1a:67:96:a4:b2:6b:70:8d:36:89:7e:0d:01:fb: 43:36:d0:79:7e:be:d4:c7:e1:4d:64:81:22:6f:60:9a:06:2e: 05:5b:5b:8e:41:be:45:24:b4:8d:f4:31:62:6c:65:74:e1:9b: 13:bd:f2:d2:c2:80:c7:4d:7e:c9:78:da:94:b5:0f:ac:29:9a: f7:81:28:f1:b9:01:d0:13:95:20:2d:e9:75:0a:02:5e:43:cd: 59:90:54:85:fc:30:1d:fe:85:a5:91:b3:a5:e2:fb:fa:d1:5d: 52:ad:b9:ca:67:4a:90:ff:32:ac:ba:a4:e2:5c:2d:28:43:08: a6:42:9b:45:54:90:28:31:0f:87:29:79:53:3c:ab:13:25:43: af:29:f4:2c:dd:2e:09:29:9f:1c:b9:4c:87:30:0a:dd:1e:21: 89:f1:d0:2c:70:4b:a9:b4:f5:f9:41:d8:6b:46:5b:90:e2:89: 85:20:7c:b0:77:b2:0f:3d:d2:89:b1:55:72:27:aa:0b:a9:21: d9:e7:c2:f7:68:1b:2c:dd:9a:ef:26:a6:32:23:d4:22:35:97: 2e:4a:ee:d2:2e:f8:26:ca:76:f9:4d:bd:6a:ab:93:ac:f3:88: 53:cc:45:d3 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUYOQDFFUH7xRKdVRVRyyzl7bX52cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNGQjM3NzgyNEIwNDgwNDhCODc1NkI2QzY1QzU5OUI4 MkFFQjVCOTAeFw0yNTA1MTAxMzM4MThaFw0yNjA1MDkxMzQzMThaMDMxMTAvBgNV BAMTKDFEQTgxRjFBRjlFMTU0QTNFMUQzRkNGMkFGOTA3MTQ5MjFFQTI0NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMH9PZsd9Tp/BLHb1DUWo0Hl8b mE3CjZ7ovOmykweH3eqV69x4XMna59q2oAV/Ru8TG0kKBLVFST6e0U9ubujuO7DM NbKTJUOlbFZkab6dAKE21rezkLmdTtJPCSaD9+4jGNiZwpC8+x81d/rxoHo2S6hr YOcRB69r8iI5CTDLy0l/X8/tJMbqPWHqRyO8GAdjUL5IG9v75fMFfXodyrf4RQZI UeWOE6KQZsREH1Q7L0NfB0T2p4LKC7T5TD+FPqujypCUBDOtO9YY+0xwk23kJYPI uLDlz73ygiMIgx6yqVNpCUSaJfZX/ekWbsTlaU+q/gmEwswnfr1BoDvkni7NAgMB AAGjggHzMIIB7zAdBgNVHQ4EFgQUHagfGvnhVKPh0/zyr5BxSSHqJEEwHwYDVR0j BBgwFoAUQ/s3eCSwSASLh1a2xlxZm4KutbkwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vUGZjbG91 ZC8wLzQzRkIzNzc4MjRCMDQ4MDQ4Qjg3NTZCNkM2NUM1OTlCODJBRUI1QjkuY3Js MHMGCCsGAQUFBwEBBGcwZTBjBggrBgEFBQcwAoZXcnN5bmM6Ly9yZXBvLnJwa2ku c3BhY2UvcmVwby9JbmZpbmlyb3V0ZS8xLzQzRkIzNzc4MjRCMDQ4MDQ4Qjg3NTZC NkM2NUM1OTlCODJBRUI1QjkuY2VyMIGDBggrBgEFBQcBCwR3MHUwcwYIKwYBBQUH MAuGZ3JzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vUGZjbG91ZC8wLzMyNjEz MTM0M2EzNzYzMzIzYTMxMzAzMjMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM0MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoUB8IQIjANBgkqhkiG9w0BAQsFAAOCAQEAikfl RocnhDOa5pqe2X2Ltq2OuPgJ7RpnlqSya3CNNol+DQH7QzbQeX6+1MfhTWSBIm9g mgYuBVtbjkG+RSS0jfQxYmxldOGbE73y0sKAx01+yXjalLUPrCma94Eo8bkB0BOV IC3pdQoCXkPNWZBUhfwwHf6FpZGzpeL7+tFdUq25ymdKkP8yrLqk4lwtKEMIpkKb RVSQKDEPhyl5UzyrEyVDryn0LN0uCSmfHLlMhzAK3R4hifHQLHBLqbT1+UHYa0Zb kOKJhSB8sHeyDz3SibFVcieqC6kh2efC92gbLN2a7yamMiPUIjWXLkru0i74Jsp2 +U29aquTrPOIU8xF0w== -----END CERTIFICATE-----Generated at Mon Jun 2 16:27:54 2025 by rpki-client