$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/326130353a646663313a6364333a3a2f34382d3438203d3e20323136313037.roa File: 326130353a646663313a6364333a3a2f34382d3438203d3e20323136313037.roa (raw, json) Hash identifier: ODgMOPEtFM31kytaPhS/kNBKt+7tRnGYNverVN9W6GI= Subject key identifier: 53:58:E4:09:77:90:48:C5:94:2F:79:5E:D4:C8:7D:8E:6E:90:D4:B6 Certificate issuer: /CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Certificate serial: 7FDA9CC1DCB28CFA330C80CC64825816A21933C3 Authority key identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/326130353a646663313a6364333a3a2f34382d3438203d3e20323136313037.roa Signing time: Fri 04 Jul 2025 22:34:42 +0000 ROA not before: Fri 04 Jul 2025 22:29:42 +0000 ROA not after: Fri 03 Jul 2026 22:34:42 +0000 asID: 216107 IP address blocks: 2a05:dfc1:cd3::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 00:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:da:9c:c1:dc:b2:8c:fa:33:0c:80:cc:64:82:58:16:a2:19:33:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=475A3BFA09614E07BE0567B1FB15110F45F894EB Validity Not Before: Jul 4 22:29:42 2025 GMT Not After : Jul 3 22:34:42 2026 GMT Subject: CN=5358E409779048C5942F795ED4C87D8E6E90D4B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ef:e1:bd:ea:e8:ac:13:39:c4:05:38:24:80: c5:55:37:55:84:e2:76:b5:3f:ae:5c:91:f2:cc:20: 1c:1a:5a:6a:29:15:96:bb:42:0e:fd:7e:ac:84:08: 9c:b3:45:86:91:a3:d9:25:f8:6d:6e:93:9e:1a:b3: c6:e2:ba:9d:c2:d8:35:9b:a2:02:e7:45:dd:a4:9a: 2a:86:99:6d:b1:d4:6b:21:5c:8c:22:44:bd:68:e5: cb:ca:66:f5:41:6a:a0:46:7a:a7:00:4b:5b:4e:27: 1e:24:ce:e8:bc:dc:13:80:88:a7:e6:a3:09:79:13: 9a:76:d5:62:b6:85:1c:49:c8:b9:93:b0:01:98:e2: bd:e7:ac:c6:f0:64:19:4c:67:61:1d:fa:54:e3:30: 30:ef:f0:43:f0:12:f0:b7:0e:c1:e1:35:7b:fb:4c: 42:73:f8:9e:d0:52:5b:3f:50:10:3a:3e:0d:3a:e1: c4:8c:a6:df:56:0c:74:5f:88:b4:0d:1c:30:47:e3: da:80:fc:3a:66:50:d9:b7:0f:d2:1b:04:f3:d8:20: b2:7c:91:2a:0a:47:a4:c0:4f:86:95:cb:9b:60:45: 02:db:e7:b4:22:cd:19:c8:16:b2:e3:df:64:72:c8: 31:fb:6d:76:2a:74:53:f9:8f:81:32:9b:7e:fc:41: 11:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:58:E4:09:77:90:48:C5:94:2F:79:5E:D4:C8:7D:8E:6E:90:D4:B6 X509v3 Authority Key Identifier: keyid:47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/326130353a646663313a6364333a3a2f34382d3438203d3e20323136313037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:cd3::/48 Signature Algorithm: sha256WithRSAEncryption 10:ee:73:7d:71:e2:97:cc:bb:64:0e:60:c7:76:71:d6:a4:ed: 99:d3:e0:d8:f4:38:3d:c1:18:83:77:20:d4:15:fd:16:87:7c: 36:dd:5b:2c:a5:d6:f5:d8:b5:8a:f3:d9:fb:af:47:e6:83:8b: 90:38:9a:a4:ea:bd:40:68:54:cd:10:29:4b:4f:b0:8b:52:09: 1e:ad:12:84:29:3d:33:ce:90:1c:37:83:73:45:c4:f7:39:59: 3e:05:ae:35:30:c2:5d:54:2c:6e:e1:79:4e:8b:5f:10:1a:3f: 09:68:fd:9f:47:f7:1e:4f:c2:4b:5c:93:f6:88:9a:3b:44:dc: 41:f7:ad:37:e0:f5:e8:04:e6:00:ca:67:99:99:64:20:46:0c: 48:a6:5d:90:e3:9c:6e:9c:35:b7:7c:24:d0:e2:59:6e:2b:14: 8c:c1:f8:f4:be:7b:27:df:f6:12:7c:f3:17:ca:df:5c:d1:71: e0:12:ff:33:b1:87:47:0b:98:a7:06:23:22:e5:b6:be:51:5e: d7:9d:ef:bf:f6:29:39:47:fd:f6:a7:63:92:7a:1a:f7:0d:b8: dd:ce:d1:84:cd:dc:04:ea:67:4d:2a:95:eb:e3:78:c0:47:fa: 36:2b:0c:67:1e:a3:45:4a:65:ba:fc:83:27:d4:cc:38:52:7a: 36:b3:1c:24 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUf9qcwdyyjPozDIDMZIJYFqIZM8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0 NUY4OTRFQjAeFw0yNTA3MDQyMjI5NDJaFw0yNjA3MDMyMjM0NDJaMDMxMTAvBgNV BAMTKDUzNThFNDA5Nzc5MDQ4QzU5NDJGNzk1RUQ0Qzg3RDhFNkU5MEQ0QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR7+G96uisEznEBTgkgMVVN1WE 4na1P65ckfLMIBwaWmopFZa7Qg79fqyECJyzRYaRo9kl+G1uk54as8biup3C2DWb ogLnRd2kmiqGmW2x1GshXIwiRL1o5cvKZvVBaqBGeqcAS1tOJx4kzui83BOAiKfm owl5E5p21WK2hRxJyLmTsAGY4r3nrMbwZBlMZ2Ed+lTjMDDv8EPwEvC3DsHhNXv7 TEJz+J7QUls/UBA6Pg064cSMpt9WDHRfiLQNHDBH49qA/DpmUNm3D9IbBPPYILJ8 kSoKR6TAT4aVy5tgRQLb57QizRnIFrLj32RyyDH7bXYqdFP5j4Eym378QREHAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUU1jkCXeQSMWUL3le1Mh9jm6Q1LYwHwYDVR0j BBgwFoAUR1o7+glhTge+BWex+xURD0X4lOswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5 MjQzLzIvNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0NUY4OTRFQi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzQ3NUEzQkZBMDk2MTRF MDdCRTA1NjdCMUZCMTUxMTBGNDVGODk0RUIuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzI4Y2Q2MjI0LWEzYjAtNDY4ZS1hYTM3LTgyY2E2YTNlOTI0 My8yLzMyNjEzMDM1M2E2NDY2NjMzMTNhNjM2NDMzM2EzYTJmMzQzODJkMzQzODIw M2QzZTIwMzIzMTM2MzEzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwQzTMA0GCSqGSIb3DQEB CwUAA4IBAQAQ7nN9ceKXzLtkDmDHdnHWpO2Z0+DY9Dg9wRiDdyDUFf0Wh3w23Vss pdb12LWK89n7r0fmg4uQOJqk6r1AaFTNEClLT7CLUgkerRKEKT0zzpAcN4NzRcT3 OVk+Ba41MMJdVCxu4XlOi18QGj8JaP2fR/ceT8JLXJP2iJo7RNxB96034PXoBOYA ymeZmWQgRgxIpl2Q45xunDW3fCTQ4lluKxSMwfj0vnsn3/YSfPMXyt9c0XHgEv8z sYdHC5inBiMi5ba+UV7Xne+/9ik5R/32p2OSehr3DbjdztGEzdwE6mdNKpXr43jA R/o2KwxnHqNFSmW6/IMn1Mw4Uno2sxwk -----END CERTIFICATE-----Generated at Sat Jul 5 10:46:27 2025 by rpki-client