$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/326130613a363034303a396630303a3a2f34302d3438203d3e203531303139.roa File: 326130613a363034303a396630303a3a2f34302d3438203d3e203531303139.roa (raw, json) Hash identifier: 4Q4ROZYT81dIJHSkpaekI4Sbj95kc4xrlA3BgHVle7s= Subject key identifier: 77:72:6D:79:B4:7D:46:59:21:20:00:C8:5E:63:EC:5E:3E:DC:6C:45 Certificate issuer: /CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45 Certificate serial: 4D270ACDEE80266FE43D309F7104C65EF61E8F30 Authority key identifier: B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/326130613a363034303a396630303a3a2f34302d3438203d3e203531303139.roa Signing time: Fri 04 Jul 2025 14:53:50 +0000 ROA not before: Fri 04 Jul 2025 14:48:50 +0000 ROA not after: Fri 03 Jul 2026 14:53:50 +0000 asID: 51019 IP address blocks: 2a0a:6040:9f00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:27:0a:cd:ee:80:26:6f:e4:3d:30:9f:71:04:c6:5e:f6:1e:8f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45 Validity Not Before: Jul 4 14:48:50 2025 GMT Not After : Jul 3 14:53:50 2026 GMT Subject: CN=77726D79B47D4659212000C85E63EC5E3EDC6C45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f4:6b:a3:2e:8c:a3:1f:d0:75:90:aa:79:cc: 51:72:48:5a:22:2d:52:e4:3c:36:53:24:04:df:8f: 79:33:5c:43:3c:78:41:e6:58:da:8f:58:7e:34:48: 17:18:d4:0a:57:60:ab:47:c7:c0:be:d9:57:f1:7c: 31:eb:ec:ba:db:1b:db:a2:61:c9:db:3f:b2:30:57: 2e:3c:e1:15:12:36:28:bb:5e:01:28:8d:69:30:12: 50:db:1c:86:f3:9e:4e:76:77:aa:19:57:10:4a:bd: 7e:d6:8d:06:bf:59:f5:66:c3:92:c1:60:21:21:f6: c1:5f:da:41:8d:75:34:c6:cc:c9:68:bc:45:25:96: 3b:66:ba:ea:0c:52:c4:dd:f7:1f:cf:30:bb:b9:fe: 00:38:4d:ed:a4:18:60:a1:73:7b:aa:d5:ea:f9:2c: 2d:0d:76:0d:98:e1:f4:96:29:04:fe:0d:20:13:91: d3:6f:c2:68:ec:04:91:d2:24:be:e2:a8:c6:03:6a: 95:07:37:a9:78:93:38:de:2e:de:4e:17:3a:cc:bd: d1:b9:dd:75:a5:c0:16:38:94:34:e5:ab:1e:0d:49: 5b:57:e7:bf:5c:2e:b6:20:94:4f:bb:9a:52:6c:6d: b1:d1:3f:c4:19:22:55:38:cf:19:79:ae:93:cf:85: 48:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:72:6D:79:B4:7D:46:59:21:20:00:C8:5E:63:EC:5E:3E:DC:6C:45 X509v3 Authority Key Identifier: keyid:B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/326130613a363034303a396630303a3a2f34302d3438203d3e203531303139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:9f00::/40 Signature Algorithm: sha256WithRSAEncryption 98:7b:30:fe:79:d6:c1:d2:1c:ab:ea:fd:6d:5d:b3:b3:5c:19: 45:f6:ed:45:fd:57:6e:db:f1:b1:4e:fb:16:9e:81:e5:a4:c9: b7:5c:eb:05:40:6f:1e:95:ce:4d:18:24:ac:15:40:d1:e9:82: 12:19:2e:e0:78:da:53:91:ca:d1:5b:07:a2:f4:e5:25:fa:87: 83:a0:b1:f8:45:8c:b3:7f:57:38:77:cf:44:92:7d:1e:2c:f2: 00:fd:17:58:19:f7:9a:5d:8b:05:6a:a7:6b:ee:ff:cd:d6:fd: d4:6b:d0:ed:8c:28:6b:d2:ef:d8:cb:33:b0:bf:84:bb:f5:c0: b9:bb:ed:dd:47:f4:2c:aa:0a:c0:58:3e:fc:ce:42:4b:9f:30: 1a:c5:12:36:cb:e5:7e:cc:04:64:a4:e7:16:71:32:f3:d9:57: 2a:79:5b:da:f6:d7:15:73:f7:27:5e:7d:6a:fa:da:b5:3d:f2: 78:f3:e3:c7:5b:08:74:79:41:b2:21:81:8a:38:bc:c3:e5:ba: 3e:11:d5:3a:eb:f6:96:c6:59:40:f7:ef:52:76:58:e0:a4:0b: 60:8a:20:4e:68:64:2c:16:cf:75:58:b9:d7:ba:60:89:a9:b0: 67:33:30:00:0e:0a:8d:f4:37:97:0e:63:21:5a:23:f5:77:7a: c1:73:28:9d -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUTScKze6AJm/kPTCfcQTGXvYejzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1 QjhCM0Y0NTAeFw0yNTA3MDQxNDQ4NTBaFw0yNjA3MDMxNDUzNTBaMDMxMTAvBgNV BAMTKDc3NzI2RDc5QjQ3RDQ2NTkyMTIwMDBDODVFNjNFQzVFM0VEQzZDNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx9GujLoyjH9B1kKp5zFFySFoi LVLkPDZTJATfj3kzXEM8eEHmWNqPWH40SBcY1ApXYKtHx8C+2VfxfDHr7LrbG9ui YcnbP7IwVy484RUSNii7XgEojWkwElDbHIbznk52d6oZVxBKvX7WjQa/WfVmw5LB YCEh9sFf2kGNdTTGzMlovEUlljtmuuoMUsTd9x/PMLu5/gA4Te2kGGChc3uq1er5 LC0Ndg2Y4fSWKQT+DSATkdNvwmjsBJHSJL7iqMYDapUHN6l4kzjeLt5OFzrMvdG5 3XWlwBY4lDTlqx4NSVtX579cLrYglE+7mlJsbbHRP8QZIlU4zxl5rpPPhUijAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUd3JtebR9RlkhIADIXmPsXj7cbEUwHwYDVR0j BBgwFoAUshcoTqPVOESyr1Jwq7qjEFuLP0UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzUvQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1QjhCM0Y0NS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0IyMTcyODRFQTNENTM4 NDRCMkFGNTI3MEFCQkFBMzEwNUI4QjNGNDUuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWItNGRiNS1iYmQzLTVjY2E2MzNjYWUz Zi81LzMyNjEzMDYxM2EzNjMwMzQzMDNhMzk2NjMwMzAzYTNhMmYzNDMwMmQzNDM4 MjAzZDNlMjAzNTMxMzAzMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQJ8wDQYJKoZIhvcNAQEL BQADggEBAJh7MP551sHSHKvq/W1ds7NcGUX27UX9V27b8bFO+xaegeWkybdc6wVA bx6Vzk0YJKwVQNHpghIZLuB42lORytFbB6L05SX6h4OgsfhFjLN/Vzh3z0SSfR4s 8gD9F1gZ95pdiwVqp2vu/83W/dRr0O2MKGvS79jLM7C/hLv1wLm77d1H9CyqCsBY PvzOQkufMBrFEjbL5X7MBGSk5xZxMvPZVyp5W9r21xVz9ydefWr62rU98njz48db CHR5QbIhgYo4vMPluj4R1Trr9pbGWUD371J2WOCkC2CKIE5oZCwWz3VYude6YImp sGczMAAOCo30N5cOYyFaI/V3esFzKJ0= -----END CERTIFICATE-----Generated at Sat Jul 5 10:45:54 2025 by rpki-client