$ rpki-client -vvvf repo.rpki.space/repo/pfcloud-hostarray/1/326131343a3763303a376630303a3a2f34302d3430203d3e20323134393135.roa File: 326131343a3763303a376630303a3a2f34302d3430203d3e20323134393135.roa (raw, json) Hash identifier: +EWjCatq1rWIPreWWJCXuv5vUmHFKmcixfNHxVnDizQ= Subject key identifier: 99:38:02:A1:6B:AB:55:47:39:26:1D:EB:A1:92:CA:3D:A5:46:F9:9C Certificate issuer: /CN=03652B3C78925180B74895BD527DF7C661F7318A Certificate serial: 6AB5AC538C4DC87CE985DE56C2C8B1B8516183AD Authority key identifier: 03:65:2B:3C:78:92:51:80:B7:48:95:BD:52:7D:F7:C6:61:F7:31:8A Authority info access: rsync://repo.rpki.space/repo/Infiniroute/1/03652B3C78925180B74895BD527DF7C661F7318A.cer Subject info access: rsync://repo.rpki.space/repo/pfcloud-hostarray/1/326131343a3763303a376630303a3a2f34302d3430203d3e20323134393135.roa Signing time: Tue 06 Oct 2026 19:51:30 +0000 ROA not before: Tue 06 Oct 2026 19:46:30 +0000 ROA not after: Tue 05 Oct 2027 19:51:30 +0000 asID: 214915 IP address blocks: 2a14:7c0:7f00::/40 maxlen: 40 Validation: OK Signature path: rsync://repo.rpki.space/repo/pfcloud-hostarray/1/03652B3C78925180B74895BD527DF7C661F7318A.crl rsync://repo.rpki.space/repo/pfcloud-hostarray/1/03652B3C78925180B74895BD527DF7C661F7318A.mft rsync://repo.rpki.space/repo/Infiniroute/1/03652B3C78925180B74895BD527DF7C661F7318A.cer rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Oct 2026 12:44:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:b5:ac:53:8c:4d:c8:7c:e9:85:de:56:c2:c8:b1:b8:51:61:83:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03652B3C78925180B74895BD527DF7C661F7318A Validity Not Before: Oct 6 19:46:30 2026 GMT Not After : Oct 5 19:51:30 2027 GMT Subject: CN=993802A16BAB554739261DEBA192CA3DA546F99C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:70:6a:13:6a:2c:aa:5f:76:92:90:14:85:5a: c1:3e:c2:98:bb:c9:d9:e4:0c:b5:e6:81:fa:e3:d2: 91:fa:9d:4d:19:ca:0f:cc:79:8f:5f:15:95:40:d8: 83:14:33:5c:54:70:07:0a:5b:29:af:01:00:c9:da: 13:47:0c:74:2b:b1:84:31:f9:ec:42:09:0b:1d:c2: 51:e9:dd:4a:d3:f7:16:b3:85:b8:ba:64:df:d0:2f: b5:e7:80:c5:13:6f:07:b0:3b:2a:8c:50:fb:11:e0: e9:70:42:58:cb:f1:0f:58:95:e6:1a:4c:1d:9f:aa: 3e:99:62:d2:a1:85:1f:ce:16:19:bf:d2:42:27:c9: 39:df:ff:49:51:69:c8:2c:2b:2e:0b:3d:dc:3e:d3: ca:11:d7:86:69:f4:99:95:7b:6e:e7:b0:be:a7:c2: dd:cc:5c:48:2d:7e:ee:ab:fd:74:b6:00:74:d3:45: b2:97:05:38:3f:58:5d:a6:5e:fc:64:4f:15:46:7f: 74:19:65:01:89:ba:1a:a8:72:a4:b8:6c:95:9a:bb: b5:36:64:4a:41:1c:94:6b:9f:2c:58:ce:29:6a:d3: ea:b7:f2:b6:53:79:a0:7a:8b:bf:ce:3a:67:84:1c: e6:b4:ac:ca:4b:7d:e1:77:89:f7:1d:31:d8:22:ae: ed:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:38:02:A1:6B:AB:55:47:39:26:1D:EB:A1:92:CA:3D:A5:46:F9:9C X509v3 Authority Key Identifier: keyid:03:65:2B:3C:78:92:51:80:B7:48:95:BD:52:7D:F7:C6:61:F7:31:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.rpki.space/repo/pfcloud-hostarray/1/03652B3C78925180B74895BD527DF7C661F7318A.crl Authority Information Access: CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/03652B3C78925180B74895BD527DF7C661F7318A.cer Subject Information Access: Signed Object - URI:rsync://repo.rpki.space/repo/pfcloud-hostarray/1/326131343a3763303a376630303a3a2f34302d3430203d3e20323134393135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7c0:7f00::/40 Signature Algorithm: sha256WithRSAEncryption 7f:13:71:2a:e5:43:a0:70:ee:f4:ba:a5:66:79:6a:6d:2d:3e: 08:83:e7:14:d3:cf:0c:2b:2f:e0:10:e7:2d:63:3c:8f:47:c5: b0:49:40:dd:eb:17:4b:e7:57:3a:ad:d4:c1:f5:b6:3a:0b:d6: 4e:68:79:4f:ed:8d:19:e2:d7:2e:3b:72:8b:28:8e:ac:6d:90: c3:dc:38:d1:9c:cb:da:0a:19:20:03:fc:64:6d:a2:5d:24:9b: da:36:00:77:7c:fb:ec:15:8e:1f:71:03:9c:c3:62:83:65:8b: f2:f5:bb:85:d3:4b:f5:12:fe:ef:d8:c0:1b:2f:cd:61:d9:11: cf:8d:42:64:51:c4:a8:bf:a9:09:2a:02:80:d0:14:33:37:49: 9a:a4:34:fd:8e:93:e0:09:0b:26:ee:74:72:3a:93:2b:56:67: c5:4e:b9:07:dc:4b:0f:05:c4:2b:f4:1c:48:ea:38:6f:60:72: 1a:65:18:9a:c5:15:e6:33:c3:57:11:a4:82:f9:c4:cf:7e:51: 21:32:ef:5c:7f:60:d7:83:4b:33:e0:3c:13:aa:b2:42:a2:d1: c7:49:7b:a1:81:9f:8b:ea:3f:49:55:6b:48:b7:b6:8e:6a:d5: e3:18:11:78:89:c7:d4:29:d9:43:a9:54:ca:75:de:07:82:a3: 42:cb:a2:2f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUarWsU4xNyHzphd5WwsixuFFhg60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM2NTJCM0M3ODkyNTE4MEI3NDg5NUJENTI3REY3QzY2 MUY3MzE4QTAeFw0yNjEwMDYxOTQ2MzBaFw0yNzEwMDUxOTUxMzBaMDMxMTAvBgNV BAMTKDk5MzgwMkExNkJBQjU1NDczOTI2MURFQkExOTJDQTNEQTU0NkY5OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3cGoTaiyqX3aSkBSFWsE+wpi7 ydnkDLXmgfrj0pH6nU0Zyg/MeY9fFZVA2IMUM1xUcAcKWymvAQDJ2hNHDHQrsYQx +exCCQsdwlHp3UrT9xazhbi6ZN/QL7XngMUTbwewOyqMUPsR4OlwQljL8Q9YleYa TB2fqj6ZYtKhhR/OFhm/0kInyTnf/0lRacgsKy4LPdw+08oR14Zp9JmVe27nsL6n wt3MXEgtfu6r/XS2AHTTRbKXBTg/WF2mXvxkTxVGf3QZZQGJuhqocqS4bJWau7U2 ZEpBHJRrnyxYzilq0+q38rZTeaB6i7/OOmeEHOa0rMpLfeF3ifcdMdgiru2BAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUmTgCoWurVUc5Jh3roZLKPaVG+ZwwHwYDVR0j BBgwFoAUA2UrPHiSUYC3SJW9Un33xmH3MYowDgYDVR0PAQH/BAQDAgeAMG4GA1Ud HwRnMGUwY6BhoF+GXXJzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vcGZjbG91 ZC1ob3N0YXJyYXkvMS8wMzY1MkIzQzc4OTI1MTgwQjc0ODk1QkQ1MjdERjdDNjYx RjczMThBLmNybDBzBggrBgEFBQcBAQRnMGUwYwYIKwYBBQUHMAKGV3JzeW5jOi8v cmVwby5ycGtpLnNwYWNlL3JlcG8vSW5maW5pcm91dGUvMS8wMzY1MkIzQzc4OTI1 MTgwQjc0ODk1QkQ1MjdERjdDNjYxRjczMThBLmNlcjCBkQYIKwYBBQUHAQsEgYQw gYEwfwYIKwYBBQUHMAuGc3JzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vcGZj bG91ZC1ob3N0YXJyYXkvMS8zMjYxMzEzNDNhMzc2MzMwM2EzNzY2MzAzMDNhM2Ey ZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzEzNDM5MzEzNS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoUB8B/ MA0GCSqGSIb3DQEBCwUAA4IBAQB/E3Eq5UOgcO70uqVmeWptLT4Ig+cU088MKy/g EOctYzyPR8WwSUDd6xdL51c6rdTB9bY6C9ZOaHlP7Y0Z4tcuO3KLKI6sbZDD3DjR nMvaChkgA/xkbaJdJJvaNgB3fPvsFY4fcQOcw2KDZYvy9buF00v1Ev7v2MAbL81h 2RHPjUJkUcSov6kJKgKA0BQzN0mapDT9jpPgCQsm7nRyOpMrVmfFTrkH3EsPBcQr 9BxI6jhvYHIaZRiaxRXmM8NXEaSC+cTPflEhMu9cf2DXg0sz4DwTqrJCotHHSXuh gZ+L6j9JVWtIt7aOatXjGBF4icfUKdlDqVTKdd4HgqNCy6Iv -----END CERTIFICATE-----Generated at Wed Oct 28 20:52:52 2026 by rpki-client