$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130613a363034303a346230303a3a2f34302d3430203d3e203539363738.roa File: 326130613a363034303a346230303a3a2f34302d3430203d3e203539363738.roa (raw, json) Hash identifier: OZcXg7oSxMWmIL2mdwgletcXRHIXQYaVlA2h+tGENrg= Subject key identifier: 42:13:B1:60:EA:8A:2E:DC:24:CD:29:20:78:6A:D6:47:90:6B:3F:76 Certificate issuer: /CN=F77F4B82C60F0B0171F0976CDCFADB441829DC83 Certificate serial: 59A1241523FC219F2CE2D728D9536C0C69D5E99F Authority key identifier: F7:7F:4B:82:C6:0F:0B:01:71:F0:97:6C:DC:FA:DB:44:18:29:DC:83 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130613a363034303a346230303a3a2f34302d3430203d3e203539363738.roa Signing time: Mon 27 Jan 2025 12:14:15 +0000 ROA not before: Mon 27 Jan 2025 12:09:15 +0000 ROA not after: Mon 26 Jan 2026 12:14:15 +0000 asID: 59678 IP address blocks: 2a0a:6040:4b00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.crl rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Apr 2025 15:03:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:a1:24:15:23:fc:21:9f:2c:e2:d7:28:d9:53:6c:0c:69:d5:e9:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F77F4B82C60F0B0171F0976CDCFADB441829DC83 Validity Not Before: Jan 27 12:09:15 2025 GMT Not After : Jan 26 12:14:15 2026 GMT Subject: CN=4213B160EA8A2EDC24CD2920786AD647906B3F76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:47:fa:d4:e2:c7:3a:53:a0:46:80:78:95:f6: d8:b2:c0:90:e9:6b:28:54:de:6d:60:4a:a0:81:07: cc:08:6d:cc:9e:14:4f:0d:3e:49:13:1e:af:ba:34: 77:85:e0:9c:f1:fd:b7:22:3e:e8:13:3d:fa:b4:c8: 85:01:bb:d0:3e:e2:88:15:13:c8:d4:12:d3:a2:48: 88:c0:c7:75:85:b0:c2:b0:be:4a:70:d7:f7:66:7d: be:3a:bc:fe:50:a3:66:d9:86:68:90:a4:35:3b:18: 26:9b:1f:ab:44:e8:bc:f7:e2:3c:0f:5a:9c:cd:65: bb:86:c5:bd:83:f5:07:e6:a5:8a:ff:93:a9:05:51: e3:85:8a:ed:7d:fb:46:a2:84:0d:2e:96:06:8b:3e: 2e:15:e4:54:60:a1:9a:e5:04:10:53:13:23:53:4b: e4:41:7a:11:20:c9:34:82:03:6e:85:1f:96:a0:06: 3f:56:c5:14:0b:9f:b3:19:87:6b:9e:b2:19:46:8e: 43:4a:ff:92:7b:93:0f:48:46:a5:ab:44:bf:85:8e: e7:ee:4f:81:f9:9f:23:79:81:13:ec:d8:93:f5:97: b5:2b:dc:9d:1d:4f:30:8a:eb:d4:6a:0a:1f:c1:66: 14:cb:c5:7e:d8:94:a5:cc:38:e8:08:9d:9a:01:d5: 1f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:13:B1:60:EA:8A:2E:DC:24:CD:29:20:78:6A:D6:47:90:6B:3F:76 X509v3 Authority Key Identifier: keyid:F7:7F:4B:82:C6:0F:0B:01:71:F0:97:6C:DC:FA:DB:44:18:29:DC:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/326130613a363034303a346230303a3a2f34302d3430203d3e203539363738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:4b00::/40 Signature Algorithm: sha256WithRSAEncryption 56:1e:5a:d7:f1:32:d1:13:72:62:84:f4:c4:8a:c2:3d:e4:1d: 07:f6:38:20:4c:ab:7e:84:25:3e:ec:f7:37:3f:09:d6:b1:3e: a3:20:0d:d5:25:7c:c4:12:31:05:37:90:ec:fd:ba:b2:cf:5d: b5:9a:4c:6c:a9:17:6d:8a:b2:82:84:f1:df:99:38:0f:f5:78: a7:12:d8:e5:9b:11:11:47:ad:17:bf:4b:91:54:50:1c:c8:ae: da:c7:c1:a1:e0:a6:89:04:18:03:4d:39:bc:03:29:7e:55:86: fe:3c:08:bd:29:61:07:3c:84:cd:c1:c6:d7:5d:b3:dd:48:21: fb:09:b9:50:67:1a:40:47:96:50:10:2e:18:82:b5:4f:46:83: e1:22:8d:95:32:64:d9:0b:08:b9:64:94:04:b3:45:ac:6d:db: d6:37:a9:5b:f7:d5:9e:f2:85:75:5a:45:e0:1b:36:a6:48:21: 62:7c:5d:69:47:68:34:b8:55:02:c4:90:dd:cf:26:90:db:3c: b7:c3:a1:51:a8:42:0c:b6:ac:5f:6c:06:96:fb:89:a6:a5:48: 71:26:6f:6c:d3:73:0c:77:e6:3e:ba:08:f6:f8:9d:9e:93:2f: 51:3f:2a:90:67:b2:a5:60:e2:a4:96:38:bc:ca:7b:5d:76:d7: f9:dc:8f:40 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUWaEkFSP8IZ8s4tco2VNsDGnV6Z8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc3RjRCODJDNjBGMEIwMTcxRjA5NzZDRENGQURCNDQx ODI5REM4MzAeFw0yNTAxMjcxMjA5MTVaFw0yNjAxMjYxMjE0MTVaMDMxMTAvBgNV BAMTKDQyMTNCMTYwRUE4QTJFREMyNENEMjkyMDc4NkFENjQ3OTA2QjNGNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZR/rU4sc6U6BGgHiV9tiywJDp ayhU3m1gSqCBB8wIbcyeFE8NPkkTHq+6NHeF4Jzx/bciPugTPfq0yIUBu9A+4ogV E8jUEtOiSIjAx3WFsMKwvkpw1/dmfb46vP5Qo2bZhmiQpDU7GCabH6tE6Lz34jwP WpzNZbuGxb2D9QfmpYr/k6kFUeOFiu19+0aihA0ulgaLPi4V5FRgoZrlBBBTEyNT S+RBehEgyTSCA26FH5agBj9WxRQLn7MZh2ueshlGjkNK/5J7kw9IRqWrRL+Fjufu T4H5nyN5gRPs2JP1l7Ur3J0dTzCK69RqCh/BZhTLxX7YlKXMOOgInZoB1R8HAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUQhOxYOqKLtwkzSkgeGrWR5BrP3YwHwYDVR0j BBgwFoAU939LgsYPCwFx8Jds3PrbRBgp3IMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGU4OGUzOWJmYTAxODkwYzlmZWVjMTI0OWUvMy9GNzdGNEI4MkM2 MEYwQjAxNzFGMDk3NkNEQ0ZBREI0NDE4MjlEQzgzLmNybDB6BggrBgEFBQcBAQRu MGwwagYIKwYBBQUHMAKGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3Jl cG8vQ0xPVURJRS1SUEtJLzAvRjc3RjRCODJDNjBGMEIwMTcxRjA5NzZDRENGQURC NDQxODI5REM4My5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aB inJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4 ZTM5YmZhMDE4OTBjOWZlZWMxMjQ5ZS8zLzMyNjEzMDYxM2EzNjMwMzQzMDNhMzQ2 MjMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzNTM5MzYzNzM4LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI AwYAKgpgQEswDQYJKoZIhvcNAQELBQADggEBAFYeWtfxMtETcmKE9MSKwj3kHQf2 OCBMq36EJT7s9zc/CdaxPqMgDdUlfMQSMQU3kOz9urLPXbWaTGypF22KsoKE8d+Z OA/1eKcS2OWbERFHrRe/S5FUUBzIrtrHwaHgpokEGANNObwDKX5Vhv48CL0pYQc8 hM3Bxtdds91IIfsJuVBnGkBHllAQLhiCtU9Gg+EijZUyZNkLCLlklASzRaxt29Y3 qVv31Z7yhXVaReAbNqZIIWJ8XWlHaDS4VQLEkN3PJpDbPLfDoVGoQgy2rF9sBpb7 iaalSHEmb2zTcwx35j66CPb4nZ6TL1E/KpBnsqVg4qSWOLzKe1121/ncj0A= -----END CERTIFICATE-----Generated at Thu Apr 3 07:21:12 2025 by rpki-client