$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393161663a3a2f34382d3438203d3e20323033363836.roa File: 326130353a646663313a393161663a3a2f34382d3438203d3e20323033363836.roa (raw, json) Hash identifier: ugLBOe63cLwCvv2Xp+u+5li2Qxoh2hkZJx200vxex7I= Subject key identifier: 74:04:6D:52:35:7C:F9:5A:59:97:39:2C:E4:97:AB:66:C3:67:C9:81 Certificate issuer: /CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76 Certificate serial: 67B81057117E96B699D45D7B8E4D4849C73665A9 Authority key identifier: F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393161663a3a2f34382d3438203d3e20323033363836.roa Signing time: Wed 29 Nov 2023 13:40:25 +0000 ROA not before: Wed 29 Nov 2023 13:35:25 +0000 ROA not after: Wed 27 Nov 2024 13:40:25 +0000 asID: 203686 IP address blocks: 2a05:dfc1:91af::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Jun 2024 02:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:b8:10:57:11:7e:96:b6:99:d4:5d:7b:8e:4d:48:49:c7:36:65:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76 Validity Not Before: Nov 29 13:35:25 2023 GMT Not After : Nov 27 13:40:25 2024 GMT Subject: CN=74046D52357CF95A5997392CE497AB66C367C981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5d:55:d1:b1:56:00:16:6d:7d:ef:e8:18:5b: 6b:d8:62:61:ed:15:c6:9f:5d:fc:86:fc:85:b0:13: 12:01:8a:b2:a4:e1:c1:f2:a5:97:0a:23:70:83:05: ad:4f:b3:c3:64:8d:28:10:8d:87:53:2d:00:65:06: f8:cc:ad:d7:2a:52:1a:7c:75:10:bf:df:26:d7:7b: 8c:f6:d5:88:a2:5f:40:54:a9:a7:96:17:94:77:75: 80:2c:e3:58:6d:8a:b3:73:e9:82:45:e5:43:9a:4c: 2c:d5:7f:a6:a6:ab:47:9f:cb:5d:df:f6:dc:32:ac: 4d:11:20:f5:c3:99:01:4a:e8:a7:8d:3d:df:70:ed: 5a:6f:1f:a2:06:dd:2a:84:81:4d:e7:26:b2:b0:b9: 3f:8f:55:99:68:57:2c:aa:6d:fd:09:14:ba:c5:b3: 32:7a:ae:87:2b:f8:7a:19:f3:0a:10:6e:d8:1a:be: 27:63:1c:0b:e6:42:29:a9:ee:cc:da:df:9c:49:51: 3f:0f:f2:ff:78:59:af:72:0b:57:4d:59:22:25:f0: 9b:1d:9a:06:b7:ae:af:f9:9f:6f:f7:20:8d:b3:41: 43:1b:c5:38:ff:bc:b6:3a:24:fa:85:7e:1a:79:9b: 66:e7:25:41:93:53:d2:cd:d0:f1:0b:09:03:95:0e: 7c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:04:6D:52:35:7C:F9:5A:59:97:39:2C:E4:97:AB:66:C3:67:C9:81 X509v3 Authority Key Identifier: keyid:F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393161663a3a2f34382d3438203d3e20323033363836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:91af::/48 Signature Algorithm: sha256WithRSAEncryption 3a:ff:44:ae:2d:8d:bd:0e:64:71:9e:64:16:50:0e:f1:1b:09: f3:22:61:41:64:c2:69:9e:2a:50:f1:e6:9c:48:cd:78:4a:e3: a0:66:7e:05:a7:1e:b5:cb:99:e8:16:73:a6:ee:db:fd:db:89: 8b:2f:67:e7:e2:60:54:72:0c:54:df:5c:ff:b8:a2:11:67:02: 31:ac:cc:d2:24:7a:19:70:5e:f6:7d:69:cf:85:2f:1a:b3:75: d9:9f:b8:91:cb:7f:58:99:67:59:29:5b:e9:28:9f:ea:b7:78: 08:9a:1d:91:36:38:3c:9d:55:78:01:5a:f2:29:1f:ca:d1:40: 69:b3:72:86:64:f8:61:0b:93:29:6c:61:4e:00:a0:51:4c:89: 8e:b7:16:ce:40:05:81:f1:de:51:04:72:03:1e:82:49:13:5b: f2:56:46:ab:b9:a0:0a:02:bb:24:b2:40:34:62:0c:28:d9:2d: 94:88:f1:df:b0:e1:16:49:93:ba:a6:ef:5c:df:6b:74:21:71: c9:03:b4:8d:51:d4:5e:88:3a:67:a0:0e:c4:9d:7e:83:9a:cb: ab:31:a7:63:1a:92:12:fc:1b:fc:69:6b:21:36:88:11:fc:a8: 8f:5b:b5:a2:22:3b:27:17:f3:b2:83:64:a1:ca:27:45:77:ee: ef:3c:b5:45 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUZ7gQVxF+lraZ1F17jk1IScc2ZakwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjczN0Q4MUJGQkVGRkRFRUM5RUMzMkI3Qjg2NDExMkRF MDVFN0I3NjAeFw0yMzExMjkxMzM1MjVaFw0yNDExMjcxMzQwMjVaMDMxMTAvBgNV BAMTKDc0MDQ2RDUyMzU3Q0Y5NUE1OTk3MzkyQ0U0OTdBQjY2QzM2N0M5ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3XVXRsVYAFm197+gYW2vYYmHt FcafXfyG/IWwExIBirKk4cHypZcKI3CDBa1Ps8NkjSgQjYdTLQBlBvjMrdcqUhp8 dRC/3ybXe4z21YiiX0BUqaeWF5R3dYAs41htirNz6YJF5UOaTCzVf6amq0efy13f 9twyrE0RIPXDmQFK6KeNPd9w7VpvH6IG3SqEgU3nJrKwuT+PVZloVyyqbf0JFLrF szJ6rocr+HoZ8woQbtgavidjHAvmQimp7sza35xJUT8P8v94Wa9yC1dNWSIl8Jsd mga3rq/5n2/3II2zQUMbxTj/vLY6JPqFfhp5m2bnJUGTU9LN0PELCQOVDnyRAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUdARtUjV8+VpZlzks5JerZsNnyYEwHwYDVR0j BBgwFoAU9zfYG/vv/e7J7DK3uGQRLeBee3YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1 YzdkLzEvRjczN0Q4MUJGQkVGRkRFRUM5RUMzMkI3Qjg2NDExMkRFMDVFN0I3Ni5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0Y3MzdEODFCRkJFRkZE RUVDOUVDMzJCN0I4NjQxMTJERTA1RTdCNzYuY2VyMIG3BggrBgEFBQcBCwSBqjCB pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYtNDU0MS1iY2MxLTI3NjU0M2EyNWM3 ZC8xLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzkzMTYxNjYzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzMjMwMzMzNjM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBd/Bka8wDQYJKoZIhvcN AQELBQADggEBADr/RK4tjb0OZHGeZBZQDvEbCfMiYUFkwmmeKlDx5pxIzXhK46Bm fgWnHrXLmegWc6bu2/3biYsvZ+fiYFRyDFTfXP+4ohFnAjGszNIkehlwXvZ9ac+F LxqzddmfuJHLf1iZZ1kpW+kon+q3eAiaHZE2ODydVXgBWvIpH8rRQGmzcoZk+GEL kylsYU4AoFFMiY63Fs5ABYHx3lEEcgMegkkTW/JWRqu5oAoCuySyQDRiDCjZLZSI 8d+w4RZJk7qm71zfa3QhcckDtI1R1F6IOmegDsSdfoOay6sxp2MakhL8G/xpayE2 iBH8qI9btaIiOycX87KDZKHKJ0V37u88tUU= -----END CERTIFICATE-----Generated at Thu Jun 27 13:46:42 2024 by rpki-client on console-fra.rpki-client.org