$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/326130353a646663313a633431303a3a2f34342d3434203d3e203437343936.roa File: 326130353a646663313a633431303a3a2f34342d3434203d3e203437343936.roa (raw, json) Hash identifier: wwbAN7C3Thqz1WBUXadPwW0dibUsOJrY61KWQ1gCNxc= Subject key identifier: 64:0A:27:B1:09:DA:9E:33:69:6B:F3:33:06:81:FC:4F:86:C0:FD:E4 Certificate issuer: /CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0 Certificate serial: 63FF0117EA16516C8DFF95218498BEDA908BCF58 Authority key identifier: 8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/326130353a646663313a633431303a3a2f34342d3434203d3e203437343936.roa Signing time: Mon 23 Dec 2024 14:58:15 +0000 ROA not before: Mon 23 Dec 2024 14:53:15 +0000 ROA not after: Mon 22 Dec 2025 14:58:15 +0000 asID: 47496 IP address blocks: 2a05:dfc1:c410::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Apr 2025 14:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:ff:01:17:ea:16:51:6c:8d:ff:95:21:84:98:be:da:90:8b:cf:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0 Validity Not Before: Dec 23 14:53:15 2024 GMT Not After : Dec 22 14:58:15 2025 GMT Subject: CN=640A27B109DA9E33696BF3330681FC4F86C0FDE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:cf:34:9d:ab:af:65:d2:a1:fc:a0:67:00:f0: c3:45:ca:e5:96:dd:38:4c:65:6c:a7:a1:e2:c6:e2: b9:7b:6f:bb:d7:88:5b:ca:fe:7d:3e:b9:9a:f6:3e: eb:64:47:ef:71:91:c0:de:d8:d1:b8:9f:16:ea:b7: 65:2d:a6:1c:82:a6:2d:84:ea:60:48:38:fb:06:ca: 3a:b4:d7:d4:80:47:2e:00:5c:74:84:dd:50:5a:29: 4f:e5:55:2a:b8:03:ad:62:6c:0a:d1:3b:3d:3a:b2: db:c6:db:4a:22:2d:ef:9f:6c:21:de:ed:09:bd:81: d9:cf:bb:34:3e:bd:95:18:3b:4f:a8:90:97:30:cb: 0c:9a:d7:00:06:ec:db:8f:c0:38:45:9e:79:08:cd: ee:79:48:90:69:f7:32:c0:97:40:82:63:db:7a:58: ec:4e:e2:cf:a9:79:d0:27:13:07:91:91:ad:5f:69: 63:43:f1:b0:b1:e5:bc:ec:f1:ba:b2:2d:45:6a:87: 8e:39:1e:1d:a2:de:11:30:12:4d:e1:dd:09:df:8c: 7b:f9:22:12:28:5c:27:cd:9b:cc:c5:77:6e:72:bb: 30:d3:aa:f7:e3:9f:37:ec:55:66:a4:9f:cd:38:0f: 1d:96:4b:64:5d:8b:b2:80:86:90:4d:25:41:f8:ea: a8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:0A:27:B1:09:DA:9E:33:69:6B:F3:33:06:81:FC:4F:86:C0:FD:E4 X509v3 Authority Key Identifier: keyid:8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/326130353a646663313a633431303a3a2f34342d3434203d3e203437343936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:c410::/44 Signature Algorithm: sha256WithRSAEncryption c0:73:7e:83:bd:ee:78:e4:17:79:78:79:03:43:35:07:4c:0a: 43:cc:d6:ae:6a:0e:c9:4b:db:a8:79:24:57:fc:65:e1:8f:b4: de:3a:0c:55:8c:fc:e5:dc:d4:71:74:83:95:d4:68:8f:d3:b0: 20:cf:fb:bd:4a:70:be:54:29:4f:16:02:18:8b:7b:e4:0c:2b: b3:00:9a:ca:fd:8c:0a:f8:65:9d:cb:2e:77:86:5e:11:01:a5: dd:eb:ee:e6:c3:eb:d6:f6:a4:ad:4b:c9:b2:2f:8a:73:22:cb: 2d:9d:f7:d8:3f:64:ab:29:f3:09:ec:1b:23:0e:77:db:d9:02: 7f:15:54:70:b6:e0:43:d5:7c:c3:2e:c6:e1:6c:cc:23:c6:1c: 91:a6:40:15:38:1d:c6:2d:9a:85:88:38:92:26:85:b8:91:4c: 1e:8b:f9:6e:3d:66:33:c2:65:5d:7f:5c:5b:dd:11:81:7a:74: f6:ec:06:4e:ed:f0:0f:e5:b2:a8:10:cf:19:51:61:52:13:b1: 77:53:2d:bb:f9:c8:38:b8:ce:44:75:1a:e9:92:2f:e2:37:16: 7f:22:71:9b:0f:62:6c:01:3b:cf:7c:d9:64:df:56:f6:e8:e1: 7e:59:ed:af:e1:4d:a6:36:02:2b:c5:b0:67:12:a7:41:43:7a: 19:07:c1:e0 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUY/8BF+oWUWyN/5UhhJi+2pCLz1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE4OUUwREI4OTUzMUY3MjNFNDJDNzUwOTI4MkNDNTQ5 NkZFQTRGMDAeFw0yNDEyMjMxNDUzMTVaFw0yNTEyMjIxNDU4MTVaMDMxMTAvBgNV BAMTKDY0MEEyN0IxMDlEQTlFMzM2OTZCRjMzMzA2ODFGQzRGODZDMEZERTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3zzSdq69l0qH8oGcA8MNFyuWW 3ThMZWynoeLG4rl7b7vXiFvK/n0+uZr2PutkR+9xkcDe2NG4nxbqt2UtphyCpi2E 6mBIOPsGyjq019SARy4AXHSE3VBaKU/lVSq4A61ibArROz06stvG20oiLe+fbCHe 7Qm9gdnPuzQ+vZUYO0+okJcwywya1wAG7NuPwDhFnnkIze55SJBp9zLAl0CCY9t6 WOxO4s+pedAnEweRka1faWND8bCx5bzs8bqyLUVqh445Hh2i3hEwEk3h3QnfjHv5 IhIoXCfNm8zFd25yuzDTqvfjnzfsVWakn804Dx2WS2Rdi7KAhpBNJUH46qi1AgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUZAonsQnanjNpa/MzBoH8T4bA/eQwHwYDVR0j BBgwFoAUiong24lTH3I+QsdQkoLMVJb+pPAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgy MzUyLzIvOEE4OUUwREI4OTUzMUY3MjNFNDJDNzUwOTI4MkNDNTQ5NkZFQTRGMC5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzhBODlFMERCODk1MzFG NzIzRTQyQzc1MDkyODJDQzU0OTZGRUE0RjAuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzNkYTRkOGI0LWExNTctNDYzNC1hYjE4LTNlZjlkMDk4MjM1 Mi8yLzMyNjEzMDM1M2E2NDY2NjMzMTNhNjMzNDMxMzAzYTNhMmYzNDM0MmQzNDM0 MjAzZDNlMjAzNDM3MzQzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgXfwcQQMA0GCSqGSIb3DQEB CwUAA4IBAQDAc36Dve545Bd5eHkDQzUHTApDzNauag7JS9uoeSRX/GXhj7TeOgxV jPzl3NRxdIOV1GiP07Agz/u9SnC+VClPFgIYi3vkDCuzAJrK/YwK+GWdyy53hl4R AaXd6+7mw+vW9qStS8myL4pzIsstnffYP2SrKfMJ7BsjDnfb2QJ/FVRwtuBD1XzD LsbhbMwjxhyRpkAVOB3GLZqFiDiSJoW4kUwei/luPWYzwmVdf1xb3RGBenT27AZO 7fAP5bKoEM8ZUWFSE7F3Uy27+cg4uM5EdRrpki/iNxZ/InGbD2JsATvPfNlk31b2 6OF+We2v4U2mNgIrxbBnEqdBQ3oZB8Hg -----END CERTIFICATE-----Generated at Sun Apr 6 04:37:34 2025 by rpki-client