$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/326130613a363034303a313330303a3a2f34302d3438203d3e203531303139.roa File: 326130613a363034303a313330303a3a2f34302d3438203d3e203531303139.roa (raw, json) Hash identifier: wn+vtltLdcEkhCOvzx/4fvtvh6EcQrGmjXhUFly5CfQ= Subject key identifier: 20:6E:65:81:52:B1:54:01:E0:31:82:B6:A6:12:E4:7F:D1:76:0E:71 Certificate issuer: /CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45 Certificate serial: 095125754B874C36FB734171A10F9B3493C270E9 Authority key identifier: B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/326130613a363034303a313330303a3a2f34302d3438203d3e203531303139.roa Signing time: Fri 04 Jul 2025 14:53:50 +0000 ROA not before: Fri 04 Jul 2025 14:48:50 +0000 ROA not after: Fri 03 Jul 2026 14:53:50 +0000 asID: 51019 IP address blocks: 2a0a:6040:1300::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:51:25:75:4b:87:4c:36:fb:73:41:71:a1:0f:9b:34:93:c2:70:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45 Validity Not Before: Jul 4 14:48:50 2025 GMT Not After : Jul 3 14:53:50 2026 GMT Subject: CN=206E658152B15401E03182B6A612E47FD1760E71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c5:15:c8:e5:93:46:f8:db:df:b3:81:9a:0f: b9:e4:79:b7:97:66:de:3c:bc:14:72:eb:8e:4d:1c: 45:f0:b1:2f:f0:21:8b:e1:c1:12:45:83:bd:08:b0: cb:44:2e:d1:07:9b:d7:92:1e:51:b7:1a:d1:19:69: be:27:ab:27:3c:b9:0b:4b:87:05:cd:a3:6f:dd:42: 1f:84:0e:89:bb:0e:d1:ad:11:30:c4:36:65:01:cd: 0c:c4:bd:f9:24:13:3e:87:e4:7c:02:c6:ac:73:5a: 9d:54:d5:a7:f2:7a:f1:ef:87:81:69:df:32:ab:1b: 3d:49:04:97:d7:b9:f0:e9:f1:10:7f:e0:21:16:8d: a1:d2:17:df:4c:17:7e:c8:cc:ca:9c:16:c5:0c:34: a3:f2:b1:f2:9a:95:88:c6:d7:d8:0f:c9:65:76:8e: 3d:5b:67:08:24:4d:bd:b3:36:02:42:b3:58:12:f1: 6f:31:63:b4:f2:92:c0:c2:b3:26:5a:21:d7:ea:5a: 51:3c:60:f1:1a:1e:4d:38:23:37:f6:06:46:c1:af: 8f:54:40:52:b2:47:7f:9f:77:68:fc:c9:db:1f:8d: 86:eb:30:bc:0a:53:54:ed:1d:b5:3b:ab:05:45:a6: f3:18:bd:9e:36:66:1e:e3:44:f1:e5:ab:5f:d7:b0: f6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6E:65:81:52:B1:54:01:E0:31:82:B6:A6:12:E4:7F:D1:76:0E:71 X509v3 Authority Key Identifier: keyid:B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/326130613a363034303a313330303a3a2f34302d3438203d3e203531303139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:1300::/40 Signature Algorithm: sha256WithRSAEncryption 94:6c:81:ea:42:4b:70:10:c5:08:a2:38:d7:b3:f2:35:91:a7: 7c:f6:7a:3e:d6:b4:fe:32:42:24:c0:a1:bc:89:63:69:35:a0: 14:02:b2:96:ff:65:1d:ec:8c:ff:bc:a2:84:49:80:bb:4c:d1: 70:d2:8b:0f:ca:b4:de:00:44:cd:f8:2a:21:60:08:93:a5:c2: ea:44:be:fb:73:2f:48:cc:06:1d:86:50:24:bb:00:34:11:ce: 97:20:73:5c:3c:2c:75:d6:6a:79:22:db:9f:38:11:30:45:66: 9d:6a:7e:06:d6:61:f9:4c:db:20:a6:32:3d:85:ff:e9:78:79: 32:07:d9:b3:23:ed:d4:cf:93:22:d7:dc:26:c5:50:8a:f4:22: a9:0c:00:80:2e:ff:76:5e:6d:65:c9:30:76:6f:3f:d5:70:44: c2:25:bc:b5:4e:71:95:f6:75:88:49:42:ab:64:94:f8:bc:d2: 5c:ab:b3:3a:63:64:71:de:a6:0d:b9:0c:c2:06:b2:4d:94:d5: ba:f2:9a:17:6a:b4:56:de:62:c9:1d:87:99:b2:69:ce:55:cc: 31:79:e8:cf:c5:1b:ef:e1:9e:7a:e6:f5:ee:58:fd:df:4e:fd: c7:60:cb:d2:ec:66:6d:f0:de:06:9a:49:20:f1:0c:53:b5:f5: bb:10:b8:d9 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUCVEldUuHTDb7c0FxoQ+bNJPCcOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1 QjhCM0Y0NTAeFw0yNTA3MDQxNDQ4NTBaFw0yNjA3MDMxNDUzNTBaMDMxMTAvBgNV BAMTKDIwNkU2NTgxNTJCMTU0MDFFMDMxODJCNkE2MTJFNDdGRDE3NjBFNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjxRXI5ZNG+Nvfs4GaD7nkebeX Zt48vBRy645NHEXwsS/wIYvhwRJFg70IsMtELtEHm9eSHlG3GtEZab4nqyc8uQtL hwXNo2/dQh+EDom7DtGtETDENmUBzQzEvfkkEz6H5HwCxqxzWp1U1afyevHvh4Fp 3zKrGz1JBJfXufDp8RB/4CEWjaHSF99MF37IzMqcFsUMNKPysfKalYjG19gPyWV2 jj1bZwgkTb2zNgJCs1gS8W8xY7TyksDCsyZaIdfqWlE8YPEaHk04Izf2BkbBr49U QFKyR3+fd2j8ydsfjYbrMLwKU1TtHbU7qwVFpvMYvZ42Zh7jRPHlq1/XsPbrAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUIG5lgVKxVAHgMYK2phLkf9F2DnEwHwYDVR0j BBgwFoAUshcoTqPVOESyr1Jwq7qjEFuLP0UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzUvQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1QjhCM0Y0NS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0IyMTcyODRFQTNENTM4 NDRCMkFGNTI3MEFCQkFBMzEwNUI4QjNGNDUuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWItNGRiNS1iYmQzLTVjY2E2MzNjYWUz Zi81LzMyNjEzMDYxM2EzNjMwMzQzMDNhMzEzMzMwMzAzYTNhMmYzNDMwMmQzNDM4 MjAzZDNlMjAzNTMxMzAzMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQBMwDQYJKoZIhvcNAQEL BQADggEBAJRsgepCS3AQxQiiONez8jWRp3z2ej7WtP4yQiTAobyJY2k1oBQCspb/ ZR3sjP+8ooRJgLtM0XDSiw/KtN4ARM34KiFgCJOlwupEvvtzL0jMBh2GUCS7ADQR zpcgc1w8LHXWanki2584ETBFZp1qfgbWYflM2yCmMj2F/+l4eTIH2bMj7dTPkyLX 3CbFUIr0IqkMAIAu/3ZebWXJMHZvP9VwRMIlvLVOcZX2dYhJQqtklPi80lyrszpj ZHHepg25DMIGsk2U1brymhdqtFbeYskdh5myac5VzDF56M/FG+/hnnrm9e5Y/d9O /cdgy9LsZm3w3gaaSSDxDFO19bsQuNk= -----END CERTIFICATE-----Generated at Sat Jul 5 10:45:14 2025 by rpki-client