$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356633303a3a2f34382d3438203d3e203538333339.roa File: 326130353a646663313a356633303a3a2f34382d3438203d3e203538333339.roa (raw, json) Hash identifier: YHvYeedQkkKkz6S1VU1ULzE2Cwhk/aJA7/6mNWyITcw= Subject key identifier: B9:8F:DB:A4:B4:A3:D4:F9:1D:37:1B:0D:92:F0:BF:2B:B6:E1:12:DF Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Certificate serial: 15CDA8019D0310A9A6A559BDD6A27076DDE5469B Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356633303a3a2f34382d3438203d3e203538333339.roa Signing time: Fri 04 Jul 2025 19:52:52 +0000 ROA not before: Fri 04 Jul 2025 19:47:52 +0000 ROA not after: Fri 03 Jul 2026 19:52:52 +0000 asID: 58339 IP address blocks: 2a05:dfc1:5f30::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 23:30:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:cd:a8:01:9d:03:10:a9:a6:a5:59:bd:d6:a2:70:76:dd:e5:46:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Validity Not Before: Jul 4 19:47:52 2025 GMT Not After : Jul 3 19:52:52 2026 GMT Subject: CN=B98FDBA4B4A3D4F91D371B0D92F0BF2BB6E112DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7f:19:ee:88:16:5b:13:9a:ae:d1:6a:f0:b9: 46:f8:d2:08:c8:d0:71:5d:05:16:e0:4c:2b:fc:ce: 16:1f:f4:94:8b:ae:dc:44:cb:e7:22:70:25:2c:36: ed:ae:4c:77:3e:9d:ff:39:06:59:ec:81:0b:2d:2e: 59:d1:c9:a9:cf:44:a8:c9:fe:f6:bf:58:71:b7:49: 14:7d:63:9d:c3:aa:5b:a1:61:3f:5a:8e:01:8f:f8: 95:5a:61:2a:96:e2:32:56:90:00:95:ab:95:2f:7f: 82:3f:ef:71:72:79:25:d0:09:3c:c3:5d:a1:1e:b6: a9:c2:ca:77:fe:93:82:b2:14:e8:29:0b:fb:93:85: 32:bd:33:1f:56:e8:6e:7d:13:df:76:8c:f4:d7:e8: 90:72:ff:f1:68:01:47:9e:c1:80:52:cb:0c:65:66: ed:1b:8e:4a:4d:99:13:64:03:be:a1:fe:ee:92:c9: 43:00:0d:e4:7f:f8:fb:24:ca:83:c4:01:a3:a5:4c: 47:4d:b8:31:91:8e:9c:c7:4e:1d:a8:e0:03:2e:c5: df:fc:5b:36:5f:4b:39:83:5c:63:0f:f1:2b:b1:5a: 2a:5a:68:a1:67:33:93:68:d8:84:96:05:6d:27:cd: 71:25:18:a8:d8:86:32:de:98:79:eb:36:44:0f:73: 0d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:8F:DB:A4:B4:A3:D4:F9:1D:37:1B:0D:92:F0:BF:2B:B6:E1:12:DF X509v3 Authority Key Identifier: keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356633303a3a2f34382d3438203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:5f30::/48 Signature Algorithm: sha256WithRSAEncryption 84:e0:3e:7a:79:5f:33:d6:d8:92:35:5b:42:ac:47:3c:96:37: 45:6b:a1:32:61:a0:5e:a7:f8:7d:55:09:bd:fc:da:4e:1f:69: 16:31:3e:2e:40:13:e7:9b:54:31:d9:ca:35:64:28:a3:e8:45: 63:c0:cf:39:18:85:8d:64:64:42:65:1b:ae:85:69:32:68:7a: a2:81:d5:9b:70:0c:0d:16:50:4a:9a:3b:b2:ac:22:ea:cf:f8: 56:d2:00:fb:62:77:18:91:7f:6e:47:7a:79:c1:4e:79:c4:a5: 1c:bc:be:be:2f:67:84:db:10:e2:7a:81:f8:13:b4:12:56:ca: 93:86:c9:06:07:2f:98:31:7c:c9:18:21:b4:6d:70:e6:88:a2: 01:09:49:0f:0f:e5:12:3b:e5:59:b1:13:30:73:ce:64:ba:89: e1:54:f0:4d:24:3a:9a:85:29:3f:04:d3:77:eb:61:27:d0:86: 36:14:c1:8a:0b:a0:8e:6b:7f:e2:ff:d2:42:14:4a:fe:b2:4f: c4:d9:b3:65:89:b8:74:58:ca:e9:dc:59:59:b1:1e:b7:34:27: a8:86:84:85:3e:81:12:4d:5b:7f:08:47:46:28:60:b0:03:a7: 5f:73:89:7d:a4:b7:93:af:b8:f2:f3:df:31:06:d8:f5:0f:0c: 0e:e3:98:46 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUFc2oAZ0DEKmmpVm91qJwdt3lRpswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRD OEZCQzlDMzAeFw0yNTA3MDQxOTQ3NTJaFw0yNjA3MDMxOTUyNTJaMDMxMTAvBgNV BAMTKEI5OEZEQkE0QjRBM0Q0RjkxRDM3MUIwRDkyRjBCRjJCQjZFMTEyREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyfxnuiBZbE5qu0WrwuUb40gjI 0HFdBRbgTCv8zhYf9JSLrtxEy+cicCUsNu2uTHc+nf85BlnsgQstLlnRyanPRKjJ /va/WHG3SRR9Y53DqluhYT9ajgGP+JVaYSqW4jJWkACVq5Uvf4I/73FyeSXQCTzD XaEetqnCynf+k4KyFOgpC/uThTK9Mx9W6G59E992jPTX6JBy//FoAUeewYBSywxl Zu0bjkpNmRNkA76h/u6SyUMADeR/+PskyoPEAaOlTEdNuDGRjpzHTh2o4AMuxd/8 WzZfSzmDXGMP8SuxWipaaKFnM5No2ISWBW0nzXElGKjYhjLemHnrNkQPcw1pAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUuY/bpLSj1PkdNxsNkvC/K7bhEt8wHwYDVR0j BBgwFoAUvj3GYU4KLzs9bwjcBKG8NMj7ycMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0JFM0RDNjYxNEUwQTJG M0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzU2NjMzMzAzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwV8wMA0GCSqGSIb3DQEB CwUAA4IBAQCE4D56eV8z1tiSNVtCrEc8ljdFa6EyYaBep/h9VQm9/NpOH2kWMT4u QBPnm1Qx2co1ZCij6EVjwM85GIWNZGRCZRuuhWkyaHqigdWbcAwNFlBKmjuyrCLq z/hW0gD7YncYkX9uR3p5wU55xKUcvL6+L2eE2xDieoH4E7QSVsqThskGBy+YMXzJ GCG0bXDmiKIBCUkPD+USO+VZsRMwc85kuonhVPBNJDqahSk/BNN362En0IY2FMGK C6COa3/i/9JCFEr+sk/E2bNlibh0WMrp3FlZsR63NCeohoSFPoESTVt/CEdGKGCw A6dfc4l9pLeTr7jy898xBtj1DwwO45hG -----END CERTIFICATE-----Generated at Sat Jul 5 13:00:34 2025 by rpki-client