$ rpki-client -vvf repo.rpki.space/repo/infiniroute-proxiflare/1/326131343a3763303a3430303a3a2f33382d3438203d3e2030.roa File: 326131343a3763303a3430303a3a2f33382d3438203d3e2030.roa (raw, json) Hash identifier: jXnJoi63ZTBkqNyTekHe/vGO/hsrbzmMv54wBLal0iw= Subject key identifier: 3D:5D:B3:9E:A9:91:C0:88:9D:B1:F2:A7:6B:21:9D:8D:C1:0C:76:0F Certificate issuer: /CN=DCBE045BEA897D29CB12799DC38EF74D039B28EE Certificate serial: 0CD88C5E2CF501B1E0640EB0A25521ECDC0C7204 Authority key identifier: DC:BE:04:5B:EA:89:7D:29:CB:12:79:9D:C3:8E:F7:4D:03:9B:28:EE Authority info access: rsync://repo.rpki.space/repo/Infiniroute/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.cer Subject info access: rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/326131343a3763303a3430303a3a2f33382d3438203d3e2030.roa Signing time: Sat 17 May 2025 16:19:27 +0000 ROA not before: Sat 17 May 2025 16:14:27 +0000 ROA not after: Sat 16 May 2026 16:19:27 +0000 asID: 0 IP address blocks: 2a14:7c0:400::/38 maxlen: 48 Validation: OK Signature path: rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.crl rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.mft rsync://repo.rpki.space/repo/Infiniroute/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.cer rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 01 Jun 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:d8:8c:5e:2c:f5:01:b1:e0:64:0e:b0:a2:55:21:ec:dc:0c:72:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCBE045BEA897D29CB12799DC38EF74D039B28EE Validity Not Before: May 17 16:14:27 2025 GMT Not After : May 16 16:19:27 2026 GMT Subject: CN=3D5DB39EA991C0889DB1F2A76B219D8DC10C760F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e7:13:9f:05:31:e0:bc:97:23:6c:61:4e:6d: 15:d9:01:f1:a7:1d:1a:9f:77:7e:4c:58:49:2b:ee: e7:dc:9b:55:d5:f7:6b:18:dc:d0:fb:cd:a8:4a:89: 41:56:ef:b6:9b:f2:34:4f:39:3c:6a:93:9e:2c:7c: aa:8c:ee:67:5a:e3:84:73:27:e0:77:ba:6b:5c:e2: b0:6b:6f:29:5f:bd:77:e4:50:68:80:84:2d:be:d1: d1:e8:45:30:ce:2a:fa:f7:aa:51:a4:90:36:90:e4: 6a:fe:61:b9:a8:db:5d:61:64:8b:15:71:80:a2:f7: 4b:75:83:90:ab:72:0b:5d:1d:5b:c7:4a:e4:90:48: a9:88:9a:e7:f8:38:8b:a0:6a:dd:65:04:2d:b5:d6: 77:a0:03:f8:ca:d4:56:8a:52:78:47:b3:5c:dc:8d: 74:a2:6f:52:89:d9:ac:f2:00:d8:63:b6:ee:48:9d: 89:1b:5c:5e:89:84:9c:35:c2:1d:2f:88:86:7c:89: 9f:da:51:b3:77:7a:03:1d:52:83:18:e9:84:a0:db: fe:d8:d9:7d:cb:c8:6f:de:9d:01:e7:7a:f8:af:de: 6e:b3:a3:19:27:b9:67:cc:bf:41:72:56:19:b2:b4: 42:1a:10:a1:3b:56:8c:fa:65:23:a3:b2:77:27:8f: a8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:5D:B3:9E:A9:91:C0:88:9D:B1:F2:A7:6B:21:9D:8D:C1:0C:76:0F X509v3 Authority Key Identifier: keyid:DC:BE:04:5B:EA:89:7D:29:CB:12:79:9D:C3:8E:F7:4D:03:9B:28:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.crl Authority Information Access: CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.cer Subject Information Access: Signed Object - URI:rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/326131343a3763303a3430303a3a2f33382d3438203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7c0:400::/38 Signature Algorithm: sha256WithRSAEncryption 6c:6b:60:d4:97:43:fa:90:20:00:c3:4f:38:b1:d6:15:09:d6: a1:2e:1f:1f:c6:ef:85:4f:99:cb:b9:c1:88:8c:e6:db:bf:83: 82:73:74:f6:78:b1:52:37:a2:a5:6f:28:12:63:37:36:d2:a5: e4:7a:03:14:b5:f7:be:50:66:b6:fb:8d:c7:da:9b:c2:34:13: 55:a2:68:50:e5:b3:57:51:e8:8d:7a:80:15:0e:f2:d8:63:03: ab:6c:ca:65:58:92:fd:7a:82:d1:5c:66:fe:d5:3e:ce:5d:0c: 4b:f9:92:90:35:5d:26:a0:4e:90:cd:40:15:24:ed:ee:13:2d: 52:69:04:c4:f3:e5:31:7d:d7:a7:10:d0:d1:eb:4c:de:e4:15: a5:f2:eb:d6:ec:88:2e:ed:8a:dc:13:6e:03:2a:d9:35:71:c1: 22:c5:9c:4f:2e:fe:a9:8e:09:9f:74:1b:5a:64:c0:92:89:05: ae:01:e5:df:98:a8:11:4c:84:14:7b:72:3e:10:68:f4:66:17: 66:b8:b7:37:31:c3:51:67:76:7b:7c:f1:bf:45:2c:cb:99:9b: 5b:c4:fc:de:b3:0c:78:99:5d:43:14:22:ab:3f:f7:4e:5e:04: d6:5e:10:a3:f6:05:70:96:a8:78:32:44:9e:62:e6:92:9a:f0: 4b:17:71:5e -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgIUDNiMXiz1AbHgZA6wolUh7NwMcgQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENCRTA0NUJFQTg5N0QyOUNCMTI3OTlEQzM4RUY3NEQw MzlCMjhFRTAeFw0yNTA1MTcxNjE0MjdaFw0yNjA1MTYxNjE5MjdaMDMxMTAvBgNV BAMTKDNENURCMzlFQTk5MUMwODg5REIxRjJBNzZCMjE5RDhEQzEwQzc2MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw5xOfBTHgvJcjbGFObRXZAfGn HRqfd35MWEkr7ufcm1XV92sY3ND7zahKiUFW77ab8jRPOTxqk54sfKqM7mda44Rz J+B3umtc4rBrbylfvXfkUGiAhC2+0dHoRTDOKvr3qlGkkDaQ5Gr+Ybmo211hZIsV cYCi90t1g5CrcgtdHVvHSuSQSKmImuf4OIugat1lBC211negA/jK1FaKUnhHs1zc jXSib1KJ2azyANhjtu5InYkbXF6JhJw1wh0viIZ8iZ/aUbN3egMdUoMY6YSg2/7Y 2X3LyG/enQHneviv3m6zoxknuWfMv0FyVhmytEIaEKE7Voz6ZSOjsncnj6jfAgMB AAGjggIGMIICAjAdBgNVHQ4EFgQUPV2znqmRwIidsfKnayGdjcEMdg8wHwYDVR0j BBgwFoAU3L4EW+qJfSnLEnmdw473TQObKO4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vaW5maW5p cm91dGUtcHJveGlmbGFyZS8xL0RDQkUwNDVCRUE4OTdEMjlDQjEyNzk5REMzOEVG NzREMDM5QjI4RUUuY3JsMHMGCCsGAQUFBwEBBGcwZTBjBggrBgEFBQcwAoZXcnN5 bmM6Ly9yZXBvLnJwa2kuc3BhY2UvcmVwby9JbmZpbmlyb3V0ZS8xL0RDQkUwNDVC RUE4OTdEMjlDQjEyNzk5REMzOEVGNzREMDM5QjI4RUUuY2VyMIGIBggrBgEFBQcB CwR8MHoweAYIKwYBBQUHMAuGbHJzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8v aW5maW5pcm91dGUtcHJveGlmbGFyZS8xLzMyNjEzMTM0M2EzNzYzMzAzYTM0MzAz MDNhM2EyZjMzMzgyZDM0MzgyMDNkM2UyMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCKhQHwAQwDQYJ KoZIhvcNAQELBQADggEBAGxrYNSXQ/qQIADDTzix1hUJ1qEuHx/G74VPmcu5wYiM 5tu/g4JzdPZ4sVI3oqVvKBJjNzbSpeR6AxS1975QZrb7jcfam8I0E1WiaFDls1dR 6I16gBUO8thjA6tsymVYkv16gtFcZv7VPs5dDEv5kpA1XSagTpDNQBUk7e4TLVJp BMTz5TF916cQ0NHrTN7kFaXy69bsiC7titwTbgMq2TVxwSLFnE8u/qmOCZ90G1pk wJKJBa4B5d+YqBFMhBR7cj4QaPRmF2a4tzcxw1Fndnt88b9FLMuZm1vE/N6zDHiZ XUMUIqs/905eBNZeEKP2BXCWqHgyRJ5i5pKa8EsXcV4= -----END CERTIFICATE-----Generated at Sun Jun 1 03:06:47 2025 by rpki-client