$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/326130353a646663313a633432303a3a2f34382d3438203d3e203437343936.roa File: 326130353a646663313a633432303a3a2f34382d3438203d3e203437343936.roa (raw, json) Hash identifier: pxkwC1tXh5AA3dY0ImOI+evo8PccYn8siWbTpsnS3+U= Subject key identifier: 0F:AD:AC:E4:F6:DA:4A:FE:96:C5:30:01:E6:31:E6:DA:B5:0E:DC:C3 Certificate issuer: /CN=D7AC0BFBDA15A7F240A1283F5649194CE8BBB801 Certificate serial: 3311B6C1CF2EEA65196B4AF059CDC309D65ED91A Authority key identifier: D7:AC:0B:FB:DA:15:A7:F2:40:A1:28:3F:56:49:19:4C:E8:BB:B8:01 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/326130353a646663313a633432303a3a2f34382d3438203d3e203437343936.roa Signing time: Fri 04 Jul 2025 19:50:13 +0000 ROA not before: Fri 04 Jul 2025 19:45:13 +0000 ROA not after: Fri 03 Jul 2026 19:50:13 +0000 asID: 47496 IP address blocks: 2a05:dfc1:c420::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.crl rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 22:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:11:b6:c1:cf:2e:ea:65:19:6b:4a:f0:59:cd:c3:09:d6:5e:d9:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7AC0BFBDA15A7F240A1283F5649194CE8BBB801 Validity Not Before: Jul 4 19:45:13 2025 GMT Not After : Jul 3 19:50:13 2026 GMT Subject: CN=0FADACE4F6DA4AFE96C53001E631E6DAB50EDCC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1c:f0:af:f9:c8:4c:65:5d:56:42:c5:24:fd: 20:30:d7:89:88:99:c6:18:f6:af:50:8c:16:b6:ad: 55:aa:b0:71:ac:f5:42:e0:7e:7e:23:14:5e:f8:0b: 92:57:df:64:95:3d:82:a2:ad:c0:d3:8f:1d:45:f6: 73:2c:d4:50:f9:c9:9d:a7:a5:6a:0f:c4:09:d0:4f: a1:b1:c4:c9:ec:7f:96:5f:f6:71:b6:48:13:d9:44: 60:ac:a1:01:72:30:d9:c0:b8:78:40:18:55:66:b5: 22:0c:db:bc:de:cf:9d:c2:01:4e:8c:24:63:0c:df: 74:48:57:65:d7:66:51:d5:f1:62:c2:9b:5e:7f:1e: f9:40:9e:45:fc:74:85:30:b6:14:91:16:ec:60:c2: d2:80:79:7d:b1:24:0b:34:8b:22:17:bc:13:c0:e5: 2e:f6:ed:ff:c3:29:74:44:d7:72:75:16:09:4d:88: 2f:68:fa:df:56:54:b5:64:58:e5:f9:3f:2e:f5:39: 07:18:90:dc:96:1a:5d:3e:94:0b:91:15:37:31:1a: 74:7c:b4:cd:ef:81:cd:01:9b:11:99:bd:e0:14:c2: 3a:d7:d9:44:57:a7:31:d9:a9:21:6a:02:5f:87:45: 74:ee:9f:55:75:3e:56:74:0a:14:b5:9d:0a:ad:cc: 70:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:AD:AC:E4:F6:DA:4A:FE:96:C5:30:01:E6:31:E6:DA:B5:0E:DC:C3 X509v3 Authority Key Identifier: keyid:D7:AC:0B:FB:DA:15:A7:F2:40:A1:28:3F:56:49:19:4C:E8:BB:B8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/326130353a646663313a633432303a3a2f34382d3438203d3e203437343936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:c420::/48 Signature Algorithm: sha256WithRSAEncryption 8b:8a:34:5c:a9:0e:5d:52:89:40:ed:ee:51:d5:50:26:ae:e1: db:85:52:1a:96:45:73:ab:f1:7e:32:dd:ff:c1:ee:74:3a:c3: 51:7e:99:5b:4e:4e:8f:f6:94:be:f7:f9:a2:a3:49:ef:d9:0d: bc:41:17:11:36:6a:a5:66:f4:6d:fe:96:bf:86:ac:70:ac:89: 13:00:a1:97:bc:b0:13:15:b4:66:61:9a:7b:ba:64:a2:61:9a: f1:2d:18:2b:b5:78:41:4f:58:d8:61:db:67:e9:57:ef:6a:f9: 98:0f:76:ec:37:a9:51:7e:99:61:a3:cc:e7:e4:89:a6:f6:33: 87:11:ee:89:9a:34:0a:10:60:b0:9c:38:ea:ea:80:c8:22:64: 14:f6:b8:f3:36:15:92:d3:ed:cd:a9:cf:11:e3:5f:ef:e5:e5: 5a:b3:11:c9:2c:9f:c4:84:2e:b6:d7:e7:d8:a9:22:0d:99:d3: c6:e2:4e:4d:f2:6c:84:a0:0a:22:d5:75:de:9a:f1:8d:87:85: 5b:9f:a7:67:fa:31:ae:cb:8f:d3:37:80:40:5e:5f:30:f3:55: 10:b8:e4:a2:57:27:9b:d7:5f:8a:af:a0:22:d7:7e:f6:22:73: 51:9a:9f:98:ec:10:98:2c:8b:e7:db:19:bf:07:33:1f:7f:2a: 19:bb:bc:9a -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUMxG2wc8u6mUZa0rwWc3DCdZe2RowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdBQzBCRkJEQTE1QTdGMjQwQTEyODNGNTY0OTE5NENF OEJCQjgwMTAeFw0yNTA3MDQxOTQ1MTNaFw0yNjA3MDMxOTUwMTNaMDMxMTAvBgNV BAMTKDBGQURBQ0U0RjZEQTRBRkU5NkM1MzAwMUU2MzFFNkRBQjUwRURDQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtHPCv+chMZV1WQsUk/SAw14mI mcYY9q9QjBa2rVWqsHGs9ULgfn4jFF74C5JX32SVPYKircDTjx1F9nMs1FD5yZ2n pWoPxAnQT6GxxMnsf5Zf9nG2SBPZRGCsoQFyMNnAuHhAGFVmtSIM27zez53CAU6M JGMM33RIV2XXZlHV8WLCm15/HvlAnkX8dIUwthSRFuxgwtKAeX2xJAs0iyIXvBPA 5S727f/DKXRE13J1FglNiC9o+t9WVLVkWOX5Py71OQcYkNyWGl0+lAuRFTcxGnR8 tM3vgc0BmxGZveAUwjrX2URXpzHZqSFqAl+HRXTun1V1PlZ0ChS1nQqtzHDlAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUD62s5PbaSv6WxTAB5jHm2rUO3MMwHwYDVR0j BBgwFoAU16wL+9oVp/JAoSg/VkkZTOi7uAEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgy MzUyLzQvRDdBQzBCRkJEQTE1QTdGMjQwQTEyODNGNTY0OTE5NENFOEJCQjgwMS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0Q3QUMwQkZCREExNUE3 RjI0MEExMjgzRjU2NDkxOTRDRThCQkI4MDEuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzNkYTRkOGI0LWExNTctNDYzNC1hYjE4LTNlZjlkMDk4MjM1 Mi80LzMyNjEzMDM1M2E2NDY2NjMzMTNhNjMzNDMyMzAzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzNDM3MzQzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwcQgMA0GCSqGSIb3DQEB CwUAA4IBAQCLijRcqQ5dUolA7e5R1VAmruHbhVIalkVzq/F+Mt3/we50OsNRfplb Tk6P9pS+9/mio0nv2Q28QRcRNmqlZvRt/pa/hqxwrIkTAKGXvLATFbRmYZp7umSi YZrxLRgrtXhBT1jYYdtn6VfvavmYD3bsN6lRfplho8zn5Imm9jOHEe6JmjQKEGCw nDjq6oDIImQU9rjzNhWS0+3Nqc8R41/v5eVasxHJLJ/EhC621+fYqSINmdPG4k5N 8myEoAoi1XXemvGNh4Vbn6dn+jGuy4/TN4BAXl8w81UQuOSiVyeb11+Kr6Ai1372 InNRmp+Y7BCYLIvn2xm/BzMffyoZu7ya -----END CERTIFICATE-----Generated at Sat Jul 5 12:53:28 2025 by rpki-client