$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/326130353a646663313a633432643a3a2f34382d3438203d3e203437343936.roa File: 326130353a646663313a633432643a3a2f34382d3438203d3e203437343936.roa (raw, json) Hash identifier: 4lliDoKad0QWiI8QFd6IuWpcnQIUMJu5VW5vCep/nzY= Subject key identifier: 6C:58:41:0A:2D:56:B9:45:78:50:82:2A:F2:1E:36:88:60:AD:33:E9 Certificate issuer: /CN=D7AC0BFBDA15A7F240A1283F5649194CE8BBB801 Certificate serial: 34607952606044A537D63DA56224CBA78700E8C1 Authority key identifier: D7:AC:0B:FB:DA:15:A7:F2:40:A1:28:3F:56:49:19:4C:E8:BB:B8:01 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/326130353a646663313a633432643a3a2f34382d3438203d3e203437343936.roa Signing time: Fri 04 Jul 2025 19:50:14 +0000 ROA not before: Fri 04 Jul 2025 19:45:14 +0000 ROA not after: Fri 03 Jul 2026 19:50:14 +0000 asID: 47496 IP address blocks: 2a05:dfc1:c42d::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.crl rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 22:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:60:79:52:60:60:44:a5:37:d6:3d:a5:62:24:cb:a7:87:00:e8:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7AC0BFBDA15A7F240A1283F5649194CE8BBB801 Validity Not Before: Jul 4 19:45:14 2025 GMT Not After : Jul 3 19:50:14 2026 GMT Subject: CN=6C58410A2D56B9457850822AF21E368860AD33E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:77:35:10:a8:46:18:5d:c0:95:3f:6f:bd:10: 1f:5a:ab:6b:1e:23:11:60:96:28:89:66:6a:1a:a5: 6f:a8:78:47:27:01:48:99:c5:da:8e:6d:39:f6:e8: 01:ba:49:e3:b2:c2:3a:3f:46:2c:d6:98:32:71:30: 3b:7a:48:bf:4c:da:03:7e:86:91:be:47:0d:c9:2d: e2:bc:86:bc:b7:ff:70:c6:a3:0e:0b:aa:94:28:96: 9c:9e:6e:70:c5:9d:3c:59:94:f8:f9:22:92:4e:a4: 32:91:53:96:23:c3:f0:59:09:5c:25:23:81:ba:84: 90:82:01:13:d1:4d:c0:bd:4d:07:54:ba:fc:b0:ab: de:ba:a3:53:54:09:6b:cf:8a:c5:41:db:43:1f:d7: 71:38:15:6c:64:34:93:48:13:05:36:e3:47:d7:66: b7:ca:43:ab:9f:37:76:f6:07:b5:30:08:98:14:72: c9:c0:61:59:73:c3:56:5d:ce:cf:86:c7:07:12:2d: 24:f4:b9:29:39:79:83:61:e7:ef:5e:f2:92:bb:23: c4:d5:26:bb:6e:d1:1a:db:2b:de:7b:34:ec:e5:e4: 29:a1:33:9d:6d:9d:c0:be:d4:16:25:b7:e9:11:6c: 4e:7e:da:af:15:54:d4:56:93:32:8f:f0:21:0b:2e: 47:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:58:41:0A:2D:56:B9:45:78:50:82:2A:F2:1E:36:88:60:AD:33:E9 X509v3 Authority Key Identifier: keyid:D7:AC:0B:FB:DA:15:A7:F2:40:A1:28:3F:56:49:19:4C:E8:BB:B8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/326130353a646663313a633432643a3a2f34382d3438203d3e203437343936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:c42d::/48 Signature Algorithm: sha256WithRSAEncryption 02:75:18:fb:22:0d:e0:c4:37:73:f2:47:e6:f3:37:68:d8:1d: 90:f1:7f:2a:ca:bf:e8:35:6c:40:c0:ec:9e:ca:55:b2:23:ab: d4:13:96:d4:18:00:b0:45:93:e2:3c:59:0c:2c:f6:6c:61:07: 9a:d1:99:3d:f6:d2:23:d5:06:c6:88:00:cf:49:85:9a:0d:0c: 5c:15:b9:1f:0e:ae:aa:89:21:c2:03:18:bd:9b:f9:f3:f0:dc: 5d:51:44:d2:1c:5f:9e:c6:09:15:32:54:53:ba:fa:15:e7:46: 97:ed:5b:3a:86:03:cf:65:4e:62:71:51:06:7b:68:47:db:01: 59:fd:ac:10:f2:19:fd:25:66:85:06:41:df:b0:60:27:5f:c0: c4:5f:cf:77:cc:6d:88:74:83:7b:59:54:00:25:40:d6:69:b3: 6d:24:36:5f:a8:69:2a:41:a8:01:2b:8a:80:aa:c0:61:2d:c4: cc:b8:cd:2d:d3:17:1a:9a:cc:3e:0f:21:f4:21:eb:04:62:79: 5a:34:68:48:3d:c7:d1:ec:f5:96:da:d5:fd:e4:27:e9:e2:81: 4f:ab:32:50:b0:e3:a2:c0:62:cf:1f:c1:52:9e:cf:ed:96:95: e8:c8:27:a0:13:67:8b:44:56:e7:7f:e2:d6:f4:1e:02:4f:d3: 29:c8:1a:b6 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUNGB5UmBgRKU31j2lYiTLp4cA6MEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdBQzBCRkJEQTE1QTdGMjQwQTEyODNGNTY0OTE5NENF OEJCQjgwMTAeFw0yNTA3MDQxOTQ1MTRaFw0yNjA3MDMxOTUwMTRaMDMxMTAvBgNV BAMTKDZDNTg0MTBBMkQ1NkI5NDU3ODUwODIyQUYyMUUzNjg4NjBBRDMzRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCldzUQqEYYXcCVP2+9EB9aq2se IxFgliiJZmoapW+oeEcnAUiZxdqObTn26AG6SeOywjo/RizWmDJxMDt6SL9M2gN+ hpG+Rw3JLeK8hry3/3DGow4LqpQolpyebnDFnTxZlPj5IpJOpDKRU5Yjw/BZCVwl I4G6hJCCARPRTcC9TQdUuvywq966o1NUCWvPisVB20Mf13E4FWxkNJNIEwU240fX ZrfKQ6ufN3b2B7UwCJgUcsnAYVlzw1Zdzs+GxwcSLST0uSk5eYNh5+9e8pK7I8TV Jrtu0RrbK957NOzl5CmhM51tncC+1BYlt+kRbE5+2q8VVNRWkzKP8CELLkezAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUbFhBCi1WuUV4UIIq8h42iGCtM+kwHwYDVR0j BBgwFoAU16wL+9oVp/JAoSg/VkkZTOi7uAEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgy MzUyLzQvRDdBQzBCRkJEQTE1QTdGMjQwQTEyODNGNTY0OTE5NENFOEJCQjgwMS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0Q3QUMwQkZCREExNUE3 RjI0MEExMjgzRjU2NDkxOTRDRThCQkI4MDEuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzNkYTRkOGI0LWExNTctNDYzNC1hYjE4LTNlZjlkMDk4MjM1 Mi80LzMyNjEzMDM1M2E2NDY2NjMzMTNhNjMzNDMyNjQzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzNDM3MzQzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwcQtMA0GCSqGSIb3DQEB CwUAA4IBAQACdRj7Ig3gxDdz8kfm8zdo2B2Q8X8qyr/oNWxAwOyeylWyI6vUE5bU GACwRZPiPFkMLPZsYQea0Zk99tIj1QbGiADPSYWaDQxcFbkfDq6qiSHCAxi9m/nz 8NxdUUTSHF+exgkVMlRTuvoV50aX7Vs6hgPPZU5icVEGe2hH2wFZ/awQ8hn9JWaF BkHfsGAnX8DEX893zG2IdIN7WVQAJUDWabNtJDZfqGkqQagBK4qAqsBhLcTMuM0t 0xcamsw+DyH0IesEYnlaNGhIPcfR7PWW2tX95Cfp4oFPqzJQsOOiwGLPH8FSns/t lpXoyCegE2eLRFbnf+LW9B4CT9MpyBq2 -----END CERTIFICATE-----Generated at Sat Jul 5 12:50:05 2025 by rpki-client