$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa File: 326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa (raw, json) Hash identifier: R34yyXLS2JN3du0sWYjJzaZCEqLgwBOyYDGo+BSfbs4= Subject key identifier: 8E:93:C4:14:46:F8:0D:28:01:14:39:A6:54:C6:E2:08:72:F1:80:A5 Certificate issuer: /CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057 Certificate serial: 52C6CC213B4553F5AD24E0FD46FC936698A1E052 Authority key identifier: 4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa Signing time: Fri 04 Jul 2025 10:47:30 +0000 ROA not before: Fri 04 Jul 2025 10:42:30 +0000 ROA not after: Fri 03 Jul 2026 10:47:30 +0000 asID: 50755 IP address blocks: 2a0a:6040:b1f6::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 03:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:c6:cc:21:3b:45:53:f5:ad:24:e0:fd:46:fc:93:66:98:a1:e0:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057 Validity Not Before: Jul 4 10:42:30 2025 GMT Not After : Jul 3 10:47:30 2026 GMT Subject: CN=8E93C41446F80D28011439A654C6E20872F180A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:76:d5:2e:24:f8:1d:2c:26:30:ed:51:8b:a3: cf:14:6f:ce:b3:7f:6a:a2:40:1e:83:9c:19:18:36: a9:61:bf:bc:c5:ae:d7:b5:8b:1d:5f:a0:64:28:84: 35:ff:95:f0:68:f4:43:45:f2:f3:be:98:0b:11:a9: 6f:a4:04:63:3f:26:20:c4:1f:52:e1:4a:a0:ee:8f: 15:b1:fd:34:c8:cc:a1:e3:e7:47:b6:4b:72:0a:7a: 7a:85:ec:e9:70:cb:5f:b8:be:a3:14:9e:19:62:86: e2:b1:70:98:12:f8:0c:4c:73:03:8b:6d:b9:78:05: fd:6f:c6:b2:e9:4b:6e:b8:5e:57:a9:70:88:93:18: 73:ce:3b:4d:e4:36:20:79:2f:c0:7c:a6:97:7d:23: 8a:05:11:52:82:1b:fd:09:bc:a7:93:69:bb:b0:ee: 15:06:25:79:b9:fc:78:00:9b:1a:df:af:85:ee:e4: 85:70:fd:db:55:f3:62:92:03:9f:33:d4:6f:e3:89: 75:9d:d5:58:db:c6:89:5b:49:60:8d:1f:2d:f0:bd: 7a:72:76:07:87:e9:0d:30:c3:e6:5f:d3:6f:64:42: 52:f5:77:45:5a:ea:04:58:a2:8b:4f:9e:1b:4d:cf: d6:51:ad:77:70:e9:ce:63:8f:b7:84:1d:90:0d:65: 3c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:93:C4:14:46:F8:0D:28:01:14:39:A6:54:C6:E2:08:72:F1:80:A5 X509v3 Authority Key Identifier: keyid:4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:b1f6::/48 Signature Algorithm: sha256WithRSAEncryption bb:0a:3b:e7:49:ac:c2:22:38:60:e6:00:fb:2d:2f:3e:3b:0f: cd:9b:59:01:92:78:b0:90:91:1f:90:23:2d:8a:73:42:42:79: 0b:b9:a2:77:04:07:c4:51:7e:3c:90:22:a0:5e:cf:0d:8a:1e: 6a:44:37:1d:34:1c:74:42:56:55:c2:c9:bb:6c:15:a1:f0:eb: 42:b3:13:1d:51:34:06:1c:22:fe:a3:f8:fb:be:ef:15:6d:8d: 5d:af:4c:0b:71:96:41:de:b2:ce:09:28:66:87:59:2c:1f:94: ab:70:19:a0:84:fa:7e:62:05:fc:67:6f:ee:94:22:bf:c1:0d: 3e:e9:8c:a9:1f:d0:79:85:91:24:c1:46:a6:c6:c6:18:52:12: 7f:fd:4c:20:fb:b3:05:f1:ae:c0:62:26:b7:d8:23:52:2d:68: 0e:cc:b5:cc:9f:c7:29:4c:fb:f0:2d:97:b5:7f:46:05:af:ed: 15:1d:d1:48:aa:5a:5f:3b:ec:36:51:61:20:3b:65:7d:d7:08: bc:a1:b3:c3:6b:4e:67:60:b6:17:07:da:f9:f0:8d:8d:3f:fe: bf:fc:2b:3e:f6:99:d6:d1:02:61:16:9f:0d:f4:eb:70:38:18: 7e:4e:b3:dd:74:7f:67:c7:17:27:35:53:86:28:43:21:55:aa: a6:90:88:48 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUUsbMITtFU/WtJOD9RvyTZpih4FIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZEQzU3MUE1Q0RBMTM5NThCQ0U0NzVGMEU1RDkxMDFE QjgxMjA1NzAeFw0yNTA3MDQxMDQyMzBaFw0yNjA3MDMxMDQ3MzBaMDMxMTAvBgNV BAMTKDhFOTNDNDE0NDZGODBEMjgwMTE0MzlBNjU0QzZFMjA4NzJGMTgwQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCndtUuJPgdLCYw7VGLo88Ub86z f2qiQB6DnBkYNqlhv7zFrte1ix1foGQohDX/lfBo9ENF8vO+mAsRqW+kBGM/JiDE H1LhSqDujxWx/TTIzKHj50e2S3IKenqF7Olwy1+4vqMUnhlihuKxcJgS+AxMcwOL bbl4Bf1vxrLpS264XlepcIiTGHPOO03kNiB5L8B8ppd9I4oFEVKCG/0JvKeTabuw 7hUGJXm5/HgAmxrfr4Xu5IVw/dtV82KSA58z1G/jiXWd1VjbxolbSWCNHy3wvXpy dgeH6Q0ww+Zf029kQlL1d0Va6gRYootPnhtNz9ZRrXdw6c5jj7eEHZANZTwBAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUjpPEFEb4DSgBFDmmVMbiCHLxgKUwHwYDVR0j BBgwFoAUT9xXGlzaE5WLzkdfDl2RAduBIFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzMvNEZEQzU3MUE1Q0RBMTM5NThCQ0U0NzVGMEU1RDkxMDFEQjgxMjA1Ny5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzRGREM1NzFBNUNEQTEz OTU4QkNFNDc1RjBFNUQ5MTAxREI4MTIwNTcuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzJhY2EzY2E2LTM0Y2MtNDc3Mi1iYWMwLWEzNWRkMDE5NWNl Ny8zLzMyNjEzMDYxM2EzNjMwMzQzMDNhNjIzMTY2MzYzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzNTMwMzczNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgQLH2MA0GCSqGSIb3DQEB CwUAA4IBAQC7CjvnSazCIjhg5gD7LS8+Ow/Nm1kBkniwkJEfkCMtinNCQnkLuaJ3 BAfEUX48kCKgXs8Nih5qRDcdNBx0QlZVwsm7bBWh8OtCsxMdUTQGHCL+o/j7vu8V bY1dr0wLcZZB3rLOCShmh1ksH5SrcBmghPp+YgX8Z2/ulCK/wQ0+6YypH9B5hZEk wUamxsYYUhJ//Uwg+7MF8a7AYia32CNSLWgOzLXMn8cpTPvwLZe1f0YFr+0VHdFI qlpfO+w2UWEgO2V91wi8obPDa05nYLYXB9r58I2NP/6//Cs+9pnW0QJhFp8N9Otw OBh+TrPddH9nxxcnNVOGKEMhVaqmkIhI -----END CERTIFICATE-----Generated at Sat Jul 5 12:53:28 2025 by rpki-client