$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/326130353a646663313a383236303a3a2f34342d3438203d3e203331383938.roa File: 326130353a646663313a383236303a3a2f34342d3438203d3e203331383938.roa (raw, json) Hash identifier: NyB2Q3nplRrrVqQaiZpQzKBuInw96biJRlaf2Wfrra4= Subject key identifier: FA:8C:21:6F:C8:AA:87:23:E7:8D:BB:17:03:F4:9C:F1:A2:D5:CA:5E Certificate issuer: /CN=B729F0C7BF295C6844FD328B324A1ED8598032F9 Certificate serial: 076003BDF65C4D869C174B61F46AA3542D7BDBC0 Authority key identifier: B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/326130353a646663313a383236303a3a2f34342d3438203d3e203331383938.roa Signing time: Fri 04 Jul 2025 18:57:56 +0000 ROA not before: Fri 04 Jul 2025 18:52:56 +0000 ROA not after: Fri 03 Jul 2026 18:57:56 +0000 asID: 31898 IP address blocks: 2a05:dfc1:8260::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 21:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:60:03:bd:f6:5c:4d:86:9c:17:4b:61:f4:6a:a3:54:2d:7b:db:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B729F0C7BF295C6844FD328B324A1ED8598032F9 Validity Not Before: Jul 4 18:52:56 2025 GMT Not After : Jul 3 18:57:56 2026 GMT Subject: CN=FA8C216FC8AA8723E78DBB1703F49CF1A2D5CA5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b7:c2:ad:b5:12:8d:da:66:47:70:51:4f:de: 98:80:1a:69:62:10:3d:10:e4:8c:34:a7:01:3f:56: cc:8a:27:f7:dd:78:c2:d9:d1:81:57:10:8e:b5:28: d6:43:79:e7:3f:f5:09:d5:1e:36:ac:75:66:7a:32: 3c:ba:e7:fd:66:33:e8:c9:d8:04:46:99:3c:b8:6f: 21:9d:f2:ad:b5:2d:89:d2:71:82:6b:a1:25:41:2f: 4c:41:43:24:22:36:0e:d6:b9:b4:e0:08:dd:bb:d0: c3:f3:12:68:68:72:de:5b:3c:24:21:0c:ce:85:2e: 45:36:ab:78:c5:f0:d3:f7:d5:fd:98:96:ac:fb:5f: 0f:5f:18:9f:cf:42:9b:27:f8:71:0f:e4:db:1a:22: a9:43:04:e2:88:5b:69:ed:30:66:91:d4:42:3f:71: 82:35:33:a4:ce:8d:53:14:40:8d:7d:d6:0d:ec:34: ab:82:94:80:3f:1f:9c:b4:7b:2d:50:1b:1e:96:1b: 51:83:e4:a5:3f:9a:78:05:26:da:a1:76:c5:64:be: be:4b:0b:15:53:23:44:fa:1e:21:af:1a:ea:04:5d: 1d:de:47:22:36:7a:c2:4f:c4:23:95:5d:01:c4:a7: 8d:98:41:0e:62:fc:27:9f:5e:50:7b:c4:15:b5:03: b4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:8C:21:6F:C8:AA:87:23:E7:8D:BB:17:03:F4:9C:F1:A2:D5:CA:5E X509v3 Authority Key Identifier: keyid:B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/326130353a646663313a383236303a3a2f34342d3438203d3e203331383938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8260::/44 Signature Algorithm: sha256WithRSAEncryption ac:7d:0e:42:0e:81:2e:23:52:72:e0:7c:e9:42:24:f3:8b:74: 3e:fc:b7:72:22:31:55:12:8a:80:31:7c:21:29:8c:40:e0:e9: 0d:88:51:fc:0c:fe:67:84:f6:59:8b:13:19:a0:c0:ed:f7:aa: 5a:21:96:c5:fc:fb:3d:dc:23:95:1c:56:05:bd:3d:6e:6e:0b: 2c:01:03:f8:20:be:62:21:fe:4b:55:ef:66:2a:bf:5e:04:06: b3:b9:19:c9:b0:5d:0c:7c:90:1d:89:1d:2d:e2:da:ed:a3:44: 46:c6:43:af:28:01:c6:48:88:81:2a:b1:70:db:73:2d:6d:b2: ab:96:71:57:78:36:94:fd:8d:6e:39:88:f0:ce:8b:75:55:b9: 79:8b:80:cd:5b:55:8a:9c:b8:1f:d4:b8:81:d7:cd:89:a3:95: 8c:1e:06:59:44:89:2c:06:39:2c:67:da:c9:08:86:af:d1:99: 01:2a:e2:0e:e0:78:bf:7b:c7:d5:34:0e:d6:ca:51:24:b1:02: c5:28:bc:55:04:e4:2e:66:76:4c:1e:51:78:85:fa:f3:6d:ba: bc:7c:de:89:1c:29:1c:ec:54:5e:4d:17:97:0b:84:52:c9:2c: 93:d2:be:a2:d9:c9:9e:d7:6f:42:73:a7:38:77:45:e7:1a:c6: ba:e4:3e:15 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUB2ADvfZcTYacF0th9GqjVC1728AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1 OTgwMzJGOTAeFw0yNTA3MDQxODUyNTZaFw0yNjA3MDMxODU3NTZaMDMxMTAvBgNV BAMTKEZBOEMyMTZGQzhBQTg3MjNFNzhEQkIxNzAzRjQ5Q0YxQTJENUNBNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHt8KttRKN2mZHcFFP3piAGmli ED0Q5Iw0pwE/VsyKJ/fdeMLZ0YFXEI61KNZDeec/9QnVHjasdWZ6Mjy65/1mM+jJ 2ARGmTy4byGd8q21LYnScYJroSVBL0xBQyQiNg7WubTgCN270MPzEmhoct5bPCQh DM6FLkU2q3jF8NP31f2Ylqz7Xw9fGJ/PQpsn+HEP5NsaIqlDBOKIW2ntMGaR1EI/ cYI1M6TOjVMUQI191g3sNKuClIA/H5y0ey1QGx6WG1GD5KU/mngFJtqhdsVkvr5L CxVTI0T6HiGvGuoEXR3eRyI2esJPxCOVXQHEp42YQQ5i/CefXlB7xBW1A7TJAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQU+owhb8iqhyPnjbsXA/Sc8aLVyl4wHwYDVR0j BBgwFoAUtynwx78pXGhE/TKLMkoe2FmAMvkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzMvQjcyOUYwQzdCRjI5NUM2ODQ0RkQzMjhCMzI0QTFFRDg1OTgwMzJGOS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0I3MjlGMEM3QkYyOTVD Njg0NEZEMzI4QjMyNEExRUQ4NTk4MDMyRjkuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzcyYzQwNWYxLWMzMmQtNDdjZS04OTQzLTA3NTJlZDEzZDhl Zi8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzgzMjM2MzAzYTNhMmYzNDM0MmQzNDM4 MjAzZDNlMjAzMzMxMzgzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgXfwYJgMA0GCSqGSIb3DQEB CwUAA4IBAQCsfQ5CDoEuI1Jy4HzpQiTzi3Q+/LdyIjFVEoqAMXwhKYxA4OkNiFH8 DP5nhPZZixMZoMDt96paIZbF/Ps93COVHFYFvT1ubgssAQP4IL5iIf5LVe9mKr9e BAazuRnJsF0MfJAdiR0t4trto0RGxkOvKAHGSIiBKrFw23MtbbKrlnFXeDaU/Y1u OYjwzot1Vbl5i4DNW1WKnLgf1LiB182Jo5WMHgZZRIksBjksZ9rJCIav0ZkBKuIO 4Hi/e8fVNA7WylEksQLFKLxVBOQuZnZMHlF4hfrzbbq8fN6JHCkc7FReTReXC4RS ySyT0r6i2cme129Cc6c4d0XnGsa65D4V -----END CERTIFICATE-----Generated at Sat Jul 5 11:00:17 2025 by rpki-client