$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356632303a3a2f34382d3438203d3e203538333339.roa File: 326130353a646663313a356632303a3a2f34382d3438203d3e203538333339.roa (raw, json) Hash identifier: hqGCUVhF1o7nJGTVBmjcxnI7fkr4Nwy0dt9JVppF1Io= Subject key identifier: 91:CC:61:AA:96:58:2A:41:B2:FA:26:70:60:10:86:DB:C3:39:26:D0 Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Certificate serial: 7B782A45FC4E0F2E414EB94A91D64FA1742D92DF Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356632303a3a2f34382d3438203d3e203538333339.roa Signing time: Fri 04 Jul 2025 19:52:55 +0000 ROA not before: Fri 04 Jul 2025 19:47:55 +0000 ROA not after: Fri 03 Jul 2026 19:52:55 +0000 asID: 58339 IP address blocks: 2a05:dfc1:5f20::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 23:30:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:78:2a:45:fc:4e:0f:2e:41:4e:b9:4a:91:d6:4f:a1:74:2d:92:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Validity Not Before: Jul 4 19:47:55 2025 GMT Not After : Jul 3 19:52:55 2026 GMT Subject: CN=91CC61AA96582A41B2FA2670601086DBC33926D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:83:4a:81:a5:9d:b5:5a:34:2f:78:fb:e2:1c: 19:15:39:d0:34:21:1e:0a:d1:ec:7c:45:aa:d3:64: 5c:e4:ba:f3:d4:38:c0:5f:4f:96:42:d6:0b:c0:64: c5:ac:94:0d:aa:30:a1:b6:bf:78:a5:15:1e:dc:75: c8:4b:38:81:49:f8:0f:e8:1f:14:09:2f:1c:d5:c2: 11:84:59:83:a3:4c:e8:74:b6:dc:f7:1c:81:6e:6b: fb:ae:07:67:f0:3a:c8:4c:05:87:76:f5:34:95:46: 25:f6:61:1e:91:f0:ac:ac:3d:f9:34:94:4b:d3:5d: 07:3e:02:6a:40:83:9e:4b:4b:b9:08:6f:86:35:65: 0e:d1:59:42:30:b3:c2:ef:d2:d5:77:f0:f8:a6:a4: d5:6b:71:d5:2a:41:d4:79:d5:54:3a:17:44:d4:84: 21:e8:02:23:e9:00:ab:27:92:37:57:9f:ee:e8:6a: ae:7a:c1:d7:b2:7e:90:86:72:8c:36:67:be:ba:c6: b7:27:fb:13:c2:a0:cd:3d:91:21:dc:4e:72:56:06: 11:96:58:25:34:d9:96:db:af:cb:07:44:e8:39:98: e3:4d:1c:0d:9c:23:06:3e:eb:63:70:69:d7:b7:0e: 24:6a:ea:71:e4:c1:a8:ad:21:fb:d6:1b:44:39:2c: cc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:CC:61:AA:96:58:2A:41:B2:FA:26:70:60:10:86:DB:C3:39:26:D0 X509v3 Authority Key Identifier: keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356632303a3a2f34382d3438203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:5f20::/48 Signature Algorithm: sha256WithRSAEncryption a8:9f:1e:f8:a9:d4:1d:d9:c9:85:76:4c:92:86:13:dc:1f:58: 7e:2d:ac:30:ef:65:bb:be:fd:c7:e3:29:4b:31:26:bd:37:72: ca:4f:8b:1f:26:46:3f:8e:9b:26:50:dd:6d:a4:18:27:a7:17: f9:82:3a:27:d1:0e:54:4c:0d:63:85:1b:b2:5b:5c:bb:e1:1a: d5:02:39:ab:78:92:1f:58:8b:1b:a0:e2:49:b5:e1:59:8e:b4: 73:77:43:3b:41:94:4a:f8:cd:1c:85:99:89:b1:fa:e7:e5:e3: 38:d9:a5:81:2b:a4:72:ca:2b:98:0c:c6:00:f3:11:6b:d2:96: f3:60:20:bc:b2:e2:ea:fe:7a:c5:85:17:da:cf:db:e6:ce:19: cf:20:f3:b5:5f:db:94:22:46:43:d4:85:a3:d2:25:b8:da:e3: ea:d9:59:99:5f:f4:bc:b9:31:d0:82:d8:35:a4:15:1c:09:6b: ee:14:81:5f:dc:01:fa:4b:0f:a5:77:18:dc:7a:2d:4b:10:77: 7a:8d:a9:fe:bc:fa:85:29:a2:3a:87:96:71:44:94:db:9e:16: 43:53:aa:5e:f0:e6:5f:b7:7b:bf:08:9e:8d:dc:10:75:00:84: cc:fa:75:71:e4:b0:7c:86:c8:78:bb:f3:41:bd:ae:72:40:e0: 8c:95:c8:ae -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUe3gqRfxODy5BTrlKkdZPoXQtkt8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRD OEZCQzlDMzAeFw0yNTA3MDQxOTQ3NTVaFw0yNjA3MDMxOTUyNTVaMDMxMTAvBgNV BAMTKDkxQ0M2MUFBOTY1ODJBNDFCMkZBMjY3MDYwMTA4NkRCQzMzOTI2RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCug0qBpZ21WjQvePviHBkVOdA0 IR4K0ex8RarTZFzkuvPUOMBfT5ZC1gvAZMWslA2qMKG2v3ilFR7cdchLOIFJ+A/o HxQJLxzVwhGEWYOjTOh0ttz3HIFua/uuB2fwOshMBYd29TSVRiX2YR6R8KysPfk0 lEvTXQc+AmpAg55LS7kIb4Y1ZQ7RWUIws8Lv0tV38PimpNVrcdUqQdR51VQ6F0TU hCHoAiPpAKsnkjdXn+7oaq56wdeyfpCGcow2Z766xrcn+xPCoM09kSHcTnJWBhGW WCU02Zbbr8sHROg5mONNHA2cIwY+62Nwade3DiRq6nHkwaitIfvWG0Q5LMwRAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUkcxhqpZYKkGy+iZwYBCG28M5JtAwHwYDVR0j BBgwFoAUvj3GYU4KLzs9bwjcBKG8NMj7ycMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0JFM0RDNjYxNEUwQTJG M0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzU2NjMyMzAzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwV8gMA0GCSqGSIb3DQEB CwUAA4IBAQConx74qdQd2cmFdkyShhPcH1h+Laww72W7vv3H4ylLMSa9N3LKT4sf JkY/jpsmUN1tpBgnpxf5gjon0Q5UTA1jhRuyW1y74RrVAjmreJIfWIsboOJJteFZ jrRzd0M7QZRK+M0chZmJsfrn5eM42aWBK6RyyiuYDMYA8xFr0pbzYCC8suLq/nrF hRfaz9vmzhnPIPO1X9uUIkZD1IWj0iW42uPq2VmZX/S8uTHQgtg1pBUcCWvuFIFf 3AH6Sw+ldxjcei1LEHd6jan+vPqFKaI6h5ZxRJTbnhZDU6pe8OZft3u/CJ6N3BB1 AITM+nVx5LB8hsh4u/NBva5yQOCMlciu -----END CERTIFICATE-----Generated at Sat Jul 5 13:00:00 2025 by rpki-client