$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393136633a3a2f34382d3438203d3e20323135363635.roa File: 326130353a646663313a393136633a3a2f34382d3438203d3e20323135363635.roa (raw, json) Hash identifier: NyjS0J9OSZc3HGajOO1nIcfJxB1Vx0HNeI0VD1YZ3IU= Subject key identifier: BD:FA:FF:81:FB:25:BA:F5:06:53:1A:6D:1E:15:4B:F3:85:F9:E7:76 Certificate issuer: /CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76 Certificate serial: 26BB2315F50FBC0B92912F437C08B17AF64C071A Authority key identifier: F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393136633a3a2f34382d3438203d3e20323135363635.roa Signing time: Tue 23 Jan 2024 20:23:51 +0000 ROA not before: Tue 23 Jan 2024 20:18:51 +0000 ROA not after: Tue 21 Jan 2025 20:23:51 +0000 asID: 215665 IP address blocks: 2a05:dfc1:916c::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Jun 2024 08:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:bb:23:15:f5:0f:bc:0b:92:91:2f:43:7c:08:b1:7a:f6:4c:07:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76 Validity Not Before: Jan 23 20:18:51 2024 GMT Not After : Jan 21 20:23:51 2025 GMT Subject: CN=BDFAFF81FB25BAF506531A6D1E154BF385F9E776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:49:10:91:18:7e:03:64:12:f3:08:c2:87:cf: ba:50:d3:be:d8:6e:7e:a4:74:23:2e:81:ec:f3:e1: 3d:51:62:5b:81:2f:2a:80:aa:29:dd:20:1a:fd:ea: ab:02:c7:23:f4:8e:bb:ed:9a:60:c2:3a:d8:9d:41: e4:43:36:f6:27:1f:56:4d:87:e0:95:81:6e:c4:d2: 7e:bd:0e:b4:a0:b2:ec:ca:43:77:91:bb:c1:66:77: b3:2b:a5:82:bc:dd:43:aa:29:7e:4e:49:f3:51:2d: 88:82:21:d4:f4:09:63:79:86:cb:6f:30:65:87:0e: e1:bc:48:e6:ae:ba:2b:93:f7:17:6d:60:69:f2:b9: 2f:d7:37:94:fc:81:c0:17:a9:ec:5f:96:e0:43:5f: 02:ef:1f:2e:c2:a6:a4:f5:c5:1a:5b:91:8a:79:81: ab:9a:da:e9:af:85:a8:5f:5a:38:8f:94:1b:df:49: 18:82:46:66:de:61:4c:75:7e:5e:88:b2:c6:5c:1c: 02:0d:68:55:7d:e6:a9:45:f5:04:73:6a:7b:d2:a7: 1b:01:5d:57:3c:a1:62:83:28:ce:f3:0f:54:25:c8: af:65:42:08:6c:c8:32:e8:a5:b3:fb:c0:18:fc:53: de:64:2a:96:8a:ed:f1:c7:d3:62:fb:6a:c3:ef:c4: 31:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:FA:FF:81:FB:25:BA:F5:06:53:1A:6D:1E:15:4B:F3:85:F9:E7:76 X509v3 Authority Key Identifier: keyid:F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393136633a3a2f34382d3438203d3e20323135363635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:916c::/48 Signature Algorithm: sha256WithRSAEncryption 87:fd:37:ea:c8:e6:6c:fb:5f:a7:70:23:96:c3:fb:e9:40:e4: c1:98:6f:81:5d:f1:b2:29:5b:c3:1e:ea:c0:4f:84:2f:08:9d: fb:4f:44:ec:3d:48:70:c1:e4:d2:fc:36:f0:c5:04:9e:c2:b4: a0:99:e6:de:3c:b1:aa:d7:8e:b2:29:da:51:a4:36:40:96:ba: 47:ee:c8:8c:ae:ae:f0:92:75:c5:a1:0c:dc:b4:4a:1a:ca:e1: 3b:13:ef:b9:78:4b:22:62:9b:d8:ee:a9:8d:fd:ab:6e:d1:63: fe:cd:2a:b4:90:30:3a:86:9c:e0:42:4c:7a:c8:45:2a:cf:a2: 61:0d:2d:0d:52:17:4e:26:85:b0:ea:e7:dd:75:8e:ae:50:57: 5a:12:6a:6c:2b:1f:c9:5b:8c:c3:8e:c0:ca:98:67:37:c8:a0: e9:23:ca:ee:25:b6:8f:c7:fb:17:e1:00:8a:7b:43:9d:d1:75: 8c:07:27:d9:0b:a8:7e:14:50:d6:f3:ac:69:60:19:6c:9b:5a: 46:98:12:9d:17:60:4d:bf:1b:68:92:e4:e3:c0:f0:bb:4f:c6: c6:f9:e9:14:39:53:19:71:99:6f:4f:39:dd:b6:a7:5c:5e:09: f4:ef:ca:58:29:70:52:9e:62:03:46:b7:be:e5:67:69:73:09: e9:57:f3:bf -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUJrsjFfUPvAuSkS9DfAixevZMBxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjczN0Q4MUJGQkVGRkRFRUM5RUMzMkI3Qjg2NDExMkRF MDVFN0I3NjAeFw0yNDAxMjMyMDE4NTFaFw0yNTAxMjEyMDIzNTFaMDMxMTAvBgNV BAMTKEJERkFGRjgxRkIyNUJBRjUwNjUzMUE2RDFFMTU0QkYzODVGOUU3NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgSRCRGH4DZBLzCMKHz7pQ077Y bn6kdCMugezz4T1RYluBLyqAqindIBr96qsCxyP0jrvtmmDCOtidQeRDNvYnH1ZN h+CVgW7E0n69DrSgsuzKQ3eRu8Fmd7MrpYK83UOqKX5OSfNRLYiCIdT0CWN5hstv MGWHDuG8SOauuiuT9xdtYGnyuS/XN5T8gcAXqexfluBDXwLvHy7CpqT1xRpbkYp5 gaua2umvhahfWjiPlBvfSRiCRmbeYUx1fl6IssZcHAINaFV95qlF9QRzanvSpxsB XVc8oWKDKM7zD1QlyK9lQghsyDLopbP7wBj8U95kKpaK7fHH02L7asPvxDHXAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUvfr/gfsluvUGUxptHhVL84X553YwHwYDVR0j BBgwFoAU9zfYG/vv/e7J7DK3uGQRLeBee3YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1 YzdkLzEvRjczN0Q4MUJGQkVGRkRFRUM5RUMzMkI3Qjg2NDExMkRFMDVFN0I3Ni5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0Y3MzdEODFCRkJFRkZE RUVDOUVDMzJCN0I4NjQxMTJERTA1RTdCNzYuY2VyMIG3BggrBgEFBQcBCwSBqjCB pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYtNDU0MS1iY2MxLTI3NjU0M2EyNWM3 ZC8xLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzkzMTM2NjMzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzMjMxMzUzNjM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBd/BkWwwDQYJKoZIhvcN AQELBQADggEBAIf9N+rI5mz7X6dwI5bD++lA5MGYb4Fd8bIpW8Me6sBPhC8InftP ROw9SHDB5NL8NvDFBJ7CtKCZ5t48sarXjrIp2lGkNkCWukfuyIyurvCSdcWhDNy0 ShrK4TsT77l4SyJim9juqY39q27RY/7NKrSQMDqGnOBCTHrIRSrPomENLQ1SF04m hbDq5911jq5QV1oSamwrH8lbjMOOwMqYZzfIoOkjyu4lto/H+xfhAIp7Q53RdYwH J9kLqH4UUNbzrGlgGWybWkaYEp0XYE2/G2iS5OPA8LtPxsb56RQ5UxlxmW9POd22 p1xeCfTvylgpcFKeYgNGt77lZ2lzCelX878= -----END CERTIFICATE-----Generated at Wed Jun 26 14:22:13 2024 by rpki-client on console-ams.rpki-client.org