$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/326130353a646663313a633431303a3a2f34342d3434203d3e203437343936.roa File: 326130353a646663313a633431303a3a2f34342d3434203d3e203437343936.roa (raw, json) Hash identifier: Sug13/bOHzR/z7k2MN1/PwM1kjEU9a8FYYmcJgI2acw= Subject key identifier: EF:2A:BE:7C:1F:25:51:A9:C9:66:AE:D2:B0:34:80:10:1F:BD:92:96 Certificate issuer: /CN=D7AC0BFBDA15A7F240A1283F5649194CE8BBB801 Certificate serial: 3C7049950DB35B87687AFD4C667CAEADBCA011F7 Authority key identifier: D7:AC:0B:FB:DA:15:A7:F2:40:A1:28:3F:56:49:19:4C:E8:BB:B8:01 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/326130353a646663313a633431303a3a2f34342d3434203d3e203437343936.roa Signing time: Fri 04 Jul 2025 19:50:13 +0000 ROA not before: Fri 04 Jul 2025 19:45:13 +0000 ROA not after: Fri 03 Jul 2026 19:50:13 +0000 asID: 47496 IP address blocks: 2a05:dfc1:c410::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.crl rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 22:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:70:49:95:0d:b3:5b:87:68:7a:fd:4c:66:7c:ae:ad:bc:a0:11:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7AC0BFBDA15A7F240A1283F5649194CE8BBB801 Validity Not Before: Jul 4 19:45:13 2025 GMT Not After : Jul 3 19:50:13 2026 GMT Subject: CN=EF2ABE7C1F2551A9C966AED2B03480101FBD9296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5f:dd:3c:df:64:f3:43:fd:70:bb:15:82:a1: a6:f6:4e:79:c0:00:d9:5b:d5:34:f0:a2:25:e0:5b: d5:fd:12:48:16:d3:87:ec:97:ef:57:f4:08:91:6a: 02:d9:0c:89:b9:c8:8f:c4:5f:fe:34:6d:52:0b:11: 1b:26:12:23:74:35:7b:0a:52:88:fd:15:84:bb:39: b5:bc:52:c8:2c:b3:63:46:50:f7:06:a3:da:fe:f0: 87:06:14:d6:38:39:21:1a:48:f5:0a:c1:92:bb:0f: f9:77:7d:a2:be:80:72:17:0b:10:78:f1:29:f5:c0: 8f:58:0c:71:6c:59:7f:19:7f:85:e9:07:79:fb:31: 68:72:71:15:9a:d4:4c:5c:82:62:98:8d:d2:74:54: 8a:62:86:2c:83:e1:ae:cb:ca:7a:c3:eb:f2:4c:ec: 91:63:48:a3:58:87:33:a3:18:a2:08:3f:a4:c4:0d: a4:44:05:ab:cf:51:2e:04:6b:ed:7d:84:e4:df:a3: c3:e2:00:db:c3:fb:fe:7a:68:86:af:a6:d4:a6:e1: c5:57:cf:f6:a9:c0:53:d4:d1:fa:e5:6e:0c:28:3f: e1:1f:b3:0f:84:56:59:74:95:4b:2a:ab:c0:35:b7: fe:60:de:9d:12:7e:6a:81:2f:46:49:b3:ad:0e:fb: 67:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:2A:BE:7C:1F:25:51:A9:C9:66:AE:D2:B0:34:80:10:1F:BD:92:96 X509v3 Authority Key Identifier: keyid:D7:AC:0B:FB:DA:15:A7:F2:40:A1:28:3F:56:49:19:4C:E8:BB:B8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/326130353a646663313a633431303a3a2f34342d3434203d3e203437343936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:c410::/44 Signature Algorithm: sha256WithRSAEncryption 38:92:ab:62:c3:33:e0:c6:2e:26:17:69:a5:73:f1:6a:9f:b9: cb:a0:e5:88:7d:b0:b3:5d:5a:c4:4e:4c:3b:d3:6a:a9:6a:13: 11:bb:6e:3e:c3:3b:d6:53:65:8f:2c:aa:f1:11:df:32:31:97: 10:2a:2e:dd:fe:2a:2b:22:21:07:ae:75:92:2a:5b:90:3b:a3: 0a:18:ae:f8:41:65:3f:bf:fb:0d:17:84:d2:b8:27:bc:cb:7e: 61:bf:01:39:77:ca:d1:5a:0c:f2:30:34:e3:4d:3b:08:df:88: 96:22:8a:4b:e8:4c:7f:d1:d8:9c:44:9b:1d:7e:5a:2e:98:44: d9:7e:5a:e3:9e:2b:86:2c:7b:26:e2:46:a2:9e:9a:ad:d0:e4: f3:bc:47:4f:e5:a0:af:20:6c:aa:29:2a:ca:0f:d8:8f:f0:36: cb:d8:7a:8b:9e:3c:65:af:db:ae:27:4a:07:94:06:9b:bc:9d: 3c:4f:c7:0b:88:9d:08:b4:4c:02:3e:19:35:cb:d1:82:7d:1c: 53:ed:49:d9:ae:de:ce:3f:59:20:8c:af:47:bd:64:37:3d:e8: 6b:e6:70:cb:04:f3:62:9b:bf:c2:49:3b:61:f6:d4:27:cc:3c: 31:40:cd:99:c4:4f:ed:c5:6d:a9:c6:e9:28:38:ff:a8:27:5a: de:72:80:d5 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUPHBJlQ2zW4doev1MZnyurbygEfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdBQzBCRkJEQTE1QTdGMjQwQTEyODNGNTY0OTE5NENF OEJCQjgwMTAeFw0yNTA3MDQxOTQ1MTNaFw0yNjA3MDMxOTUwMTNaMDMxMTAvBgNV BAMTKEVGMkFCRTdDMUYyNTUxQTlDOTY2QUVEMkIwMzQ4MDEwMUZCRDkyOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+X90832TzQ/1wuxWCoab2TnnA ANlb1TTwoiXgW9X9EkgW04fsl+9X9AiRagLZDIm5yI/EX/40bVILERsmEiN0NXsK Uoj9FYS7ObW8Usgss2NGUPcGo9r+8IcGFNY4OSEaSPUKwZK7D/l3faK+gHIXCxB4 8Sn1wI9YDHFsWX8Zf4XpB3n7MWhycRWa1ExcgmKYjdJ0VIpihiyD4a7LynrD6/JM 7JFjSKNYhzOjGKIIP6TEDaREBavPUS4Ea+19hOTfo8PiANvD+/56aIavptSm4cVX z/apwFPU0frlbgwoP+Efsw+EVll0lUsqq8A1t/5g3p0SfmqBL0ZJs60O+2f1AgMB AAGjggJeMIICWjAdBgNVHQ4EFgQU7yq+fB8lUanJZq7SsDSAEB+9kpYwHwYDVR0j BBgwFoAU16wL+9oVp/JAoSg/VkkZTOi7uAEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgy MzUyLzQvRDdBQzBCRkJEQTE1QTdGMjQwQTEyODNGNTY0OTE5NENFOEJCQjgwMS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0Q3QUMwQkZCREExNUE3 RjI0MEExMjgzRjU2NDkxOTRDRThCQkI4MDEuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzNkYTRkOGI0LWExNTctNDYzNC1hYjE4LTNlZjlkMDk4MjM1 Mi80LzMyNjEzMDM1M2E2NDY2NjMzMTNhNjMzNDMxMzAzYTNhMmYzNDM0MmQzNDM0 MjAzZDNlMjAzNDM3MzQzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgXfwcQQMA0GCSqGSIb3DQEB CwUAA4IBAQA4kqtiwzPgxi4mF2mlc/Fqn7nLoOWIfbCzXVrETkw702qpahMRu24+ wzvWU2WPLKrxEd8yMZcQKi7d/iorIiEHrnWSKluQO6MKGK74QWU/v/sNF4TSuCe8 y35hvwE5d8rRWgzyMDTjTTsI34iWIopL6Ex/0dicRJsdfloumETZflrjniuGLHsm 4kainpqt0OTzvEdP5aCvIGyqKSrKD9iP8DbL2HqLnjxlr9uuJ0oHlAabvJ08T8cL iJ0ItEwCPhk1y9GCfRxT7UnZrt7OP1kgjK9HvWQ3Pehr5nDLBPNim7/CSTth9tQn zDwxQM2ZxE/txW2pxukoOP+oJ1recoDV -----END CERTIFICATE-----Generated at Sat Jul 5 12:56:15 2025 by rpki-client