$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356633353a3a2f34382d3438203d3e203538333339.roa File: 326130353a646663313a356633353a3a2f34382d3438203d3e203538333339.roa (raw, json) Hash identifier: E2kph64BLFRAhCtrkyUI3XQYKC/A1Crg5SvTtw+mxNQ= Subject key identifier: 6C:E1:24:2F:28:23:76:31:A9:FD:D9:0D:44:52:64:E0:46:77:04:38 Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Certificate serial: 2A2B75488BBE7F978C51FDAA58D1A024BD60067F Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356633353a3a2f34382d3438203d3e203538333339.roa Signing time: Fri 04 Jul 2025 19:52:53 +0000 ROA not before: Fri 04 Jul 2025 19:47:53 +0000 ROA not after: Fri 03 Jul 2026 19:52:53 +0000 asID: 58339 IP address blocks: 2a05:dfc1:5f35::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 23:30:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:2b:75:48:8b:be:7f:97:8c:51:fd:aa:58:d1:a0:24:bd:60:06:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Validity Not Before: Jul 4 19:47:53 2025 GMT Not After : Jul 3 19:52:53 2026 GMT Subject: CN=6CE1242F28237631A9FDD90D445264E046770438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:46:67:f2:bb:dc:7a:2a:55:b8:1f:0b:36:1c: ed:37:53:01:75:d0:c1:c6:0a:03:6f:57:99:ac:05: c0:99:35:af:f0:a0:ea:d3:26:84:68:cc:44:d1:0a: 29:e5:78:a9:40:2a:9a:23:24:26:85:32:6e:56:7e: f2:f2:f7:8b:9e:09:68:f7:67:ec:e5:de:e1:8a:02: b3:89:1a:13:d1:6c:02:a5:71:55:ea:c3:ef:5b:31: 51:11:0b:9e:2c:76:2d:c7:fe:5e:1c:e5:ea:79:d6: 38:9c:3e:4a:46:e6:08:4b:67:d4:c9:75:c2:04:9b: 49:d8:07:81:6d:95:62:ae:af:71:5b:86:14:9a:ca: d9:48:c4:e2:4a:57:04:26:20:f6:f0:1a:b8:3b:71: b7:fd:3d:57:fb:f8:e1:65:60:96:f0:34:61:14:e3: 32:2e:91:a6:75:f2:60:3a:26:ae:71:64:85:23:9f: 6d:04:2b:83:db:a8:53:e6:ee:18:cf:70:76:35:92: e9:f8:5b:1b:f5:12:c3:dd:be:75:df:92:79:f8:ea: 6e:72:46:85:76:95:aa:0a:6c:fa:c0:9c:b1:bb:b8: 76:c2:43:0c:98:2c:49:79:d7:e9:e1:60:6e:37:25: 97:e4:fd:4b:9b:9d:2d:38:b9:34:78:1a:c5:a1:7a: 1f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E1:24:2F:28:23:76:31:A9:FD:D9:0D:44:52:64:E0:46:77:04:38 X509v3 Authority Key Identifier: keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356633353a3a2f34382d3438203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:5f35::/48 Signature Algorithm: sha256WithRSAEncryption 0c:50:be:60:11:17:20:ff:f2:7f:59:49:f8:23:a7:b6:33:5e: 0f:5e:75:d7:97:34:05:c0:d6:92:f7:7c:75:08:eb:19:09:96: 36:17:2b:a0:a5:fb:81:25:34:bc:a7:58:f2:d6:70:1d:8f:01: 99:60:87:ac:cc:75:12:e6:bb:a7:80:71:6f:ae:3f:cc:f7:c2: de:7b:8a:59:31:34:ca:7e:65:39:36:0c:be:99:f5:7c:60:84: 34:8c:2c:46:4a:75:ea:e6:75:b2:5b:0b:d5:61:9b:ca:38:e5: 0f:d9:4f:5e:af:bb:fb:9f:bc:df:a6:84:bb:2f:0f:ee:2d:88: cf:0e:97:b3:df:dc:83:d1:28:e5:66:62:16:02:d2:18:21:1f: 53:1f:1e:3b:0c:54:b0:bf:6c:37:e9:f0:13:9e:b8:f0:9f:ee: bb:e5:f8:ca:59:c2:61:3d:14:71:86:a7:19:29:10:57:0b:ee: 14:6d:eb:ab:09:0b:e9:c7:1d:73:e3:ed:f3:cd:f2:3c:9d:b8: 65:dc:90:b5:f1:0e:cb:5b:7e:70:ba:99:ff:98:db:3f:21:3b: 8d:82:a4:59:4a:02:21:e4:92:eb:43:b2:18:0a:37:48:8f:0b: 0b:64:ac:8a:66:b6:fa:99:8c:5a:de:76:e6:d0:17:4e:ad:f2: 27:5b:29:bf -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUKit1SIu+f5eMUf2qWNGgJL1gBn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRD OEZCQzlDMzAeFw0yNTA3MDQxOTQ3NTNaFw0yNjA3MDMxOTUyNTNaMDMxMTAvBgNV BAMTKDZDRTEyNDJGMjgyMzc2MzFBOUZERDkwRDQ0NTI2NEUwNDY3NzA0MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiRmfyu9x6KlW4Hws2HO03UwF1 0MHGCgNvV5msBcCZNa/woOrTJoRozETRCinleKlAKpojJCaFMm5WfvLy94ueCWj3 Z+zl3uGKArOJGhPRbAKlcVXqw+9bMVERC54sdi3H/l4c5ep51jicPkpG5ghLZ9TJ dcIEm0nYB4FtlWKur3FbhhSaytlIxOJKVwQmIPbwGrg7cbf9PVf7+OFlYJbwNGEU 4zIukaZ18mA6Jq5xZIUjn20EK4PbqFPm7hjPcHY1kun4Wxv1EsPdvnXfknn46m5y RoV2laoKbPrAnLG7uHbCQwyYLEl51+nhYG43JZfk/UubnS04uTR4GsWheh/rAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUbOEkLygjdjGp/dkNRFJk4EZ3BDgwHwYDVR0j BBgwFoAUvj3GYU4KLzs9bwjcBKG8NMj7ycMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0JFM0RDNjYxNEUwQTJG M0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzU2NjMzMzUzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwV81MA0GCSqGSIb3DQEB CwUAA4IBAQAMUL5gERcg//J/WUn4I6e2M14PXnXXlzQFwNaS93x1COsZCZY2Fyug pfuBJTS8p1jy1nAdjwGZYIeszHUS5rungHFvrj/M98Lee4pZMTTKfmU5Ngy+mfV8 YIQ0jCxGSnXq5nWyWwvVYZvKOOUP2U9er7v7n7zfpoS7Lw/uLYjPDpez39yD0Sjl ZmIWAtIYIR9THx47DFSwv2w36fATnrjwn+675fjKWcJhPRRxhqcZKRBXC+4Ubeur CQvpxx1z4+3zzfI8nbhl3JC18Q7LW35wupn/mNs/ITuNgqRZSgIh5JLrQ7IYCjdI jwsLZKyKZrb6mYxa3nbm0BdOrfInWym/ -----END CERTIFICATE-----Generated at Sat Jul 5 12:56:15 2025 by rpki-client