$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356635303a3a2f34342d3434203d3e203538333339.roa File: 326130353a646663313a356635303a3a2f34342d3434203d3e203538333339.roa (raw, json) Hash identifier: w4QduBJxaGnsws7o+9RznEINzdMyGMWIEo6q5XRFLE4= Subject key identifier: C2:F3:04:4A:96:32:29:BD:CB:8D:BE:E8:30:FD:B8:CE:42:60:5D:1C Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Certificate serial: 6B1C0DAB2566BF9F4225B16FA4A6471A70991D1D Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356635303a3a2f34342d3434203d3e203538333339.roa Signing time: Fri 04 Jul 2025 19:52:52 +0000 ROA not before: Fri 04 Jul 2025 19:47:52 +0000 ROA not after: Fri 03 Jul 2026 19:52:52 +0000 asID: 58339 IP address blocks: 2a05:dfc1:5f50::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 23:30:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:1c:0d:ab:25:66:bf:9f:42:25:b1:6f:a4:a6:47:1a:70:99:1d:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Validity Not Before: Jul 4 19:47:52 2025 GMT Not After : Jul 3 19:52:52 2026 GMT Subject: CN=C2F3044A963229BDCB8DBEE830FDB8CE42605D1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:19:51:d8:97:39:b4:0e:ab:c9:4f:5e:ec:8c: 30:9a:15:da:ec:9c:aa:06:1a:2a:5d:80:a5:f5:f1: d1:32:74:12:05:51:07:8f:28:7e:7a:e8:ed:82:4f: 06:d9:11:0a:51:58:a5:3c:3e:b5:87:5a:84:5c:57: dc:01:26:a8:6b:7a:df:8e:c6:83:7e:72:c7:e4:12: 13:47:c3:9d:7d:69:df:a1:4d:06:d2:22:22:33:3e: 07:5f:e8:ff:2e:f9:bb:93:ce:9a:19:4b:8e:84:39: 67:c5:e7:f1:08:34:82:06:c6:67:5e:42:4a:89:72: ca:62:35:24:20:87:a1:a2:5d:e6:af:7b:ee:8b:e9: 4e:80:9c:aa:09:a4:e7:f6:7d:e7:f8:7b:bd:e3:19: db:98:6c:f2:04:f6:e3:e6:30:e5:e5:b4:e3:c0:8c: d9:e7:42:d7:d6:51:10:67:83:70:d1:89:fb:c1:8e: 08:04:56:bb:fd:eb:0d:20:b4:77:c0:e9:91:48:c1: b1:17:90:fe:5c:8e:08:ae:2e:9c:14:2b:db:9c:07: 02:c0:18:65:e9:5d:db:db:80:0e:16:30:b2:dc:9f: 9a:46:e2:e2:1b:10:65:af:04:f3:a2:31:0c:6c:01: 37:03:60:2a:03:16:45:f6:d3:55:4b:39:bb:57:86: c2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F3:04:4A:96:32:29:BD:CB:8D:BE:E8:30:FD:B8:CE:42:60:5D:1C X509v3 Authority Key Identifier: keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356635303a3a2f34342d3434203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:5f50::/44 Signature Algorithm: sha256WithRSAEncryption 37:9f:5a:5c:bd:97:fc:a6:35:04:10:99:43:cc:fe:84:d5:c8: 62:21:d2:46:12:6c:9f:43:ff:4c:97:36:3b:74:33:93:6b:e8: f8:9f:e8:66:65:f3:eb:98:d1:26:dc:cd:67:d1:c7:a0:0d:82: 0c:be:00:9c:18:98:9a:d6:5d:c1:cb:a0:9a:44:20:38:9e:b2: b7:ba:1f:b0:29:ba:b9:2a:a5:52:a7:52:ad:40:f4:c4:7d:4c: 61:36:46:a4:13:40:5c:10:3e:7e:15:b7:65:14:83:dc:74:79: 27:f1:c6:84:2d:50:44:aa:4d:fe:06:af:17:e3:f2:74:84:6c: 31:9a:8e:1e:f1:dc:1f:41:f3:79:81:71:9e:33:4c:dc:a8:86: 80:56:ef:99:fd:94:a8:ef:70:d2:81:28:5a:0d:81:f1:ae:d1: 8e:00:a0:a4:01:62:47:5a:95:0e:9f:d1:a0:00:4a:07:f4:75: bf:20:71:b6:69:4a:80:3f:71:0e:73:85:95:f9:8d:3d:6f:73: 24:6f:df:0e:e8:da:35:27:2f:9b:cd:3b:81:99:2a:4f:02:25: 9d:66:56:c6:52:54:fa:84:24:a1:80:d1:44:81:40:01:22:dc: 42:8c:47:8e:2a:0b:59:9d:be:a6:a6:b9:68:64:9a:5d:0d:c2: 02:23:94:f5 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUaxwNqyVmv59CJbFvpKZHGnCZHR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRD OEZCQzlDMzAeFw0yNTA3MDQxOTQ3NTJaFw0yNjA3MDMxOTUyNTJaMDMxMTAvBgNV BAMTKEMyRjMwNDRBOTYzMjI5QkRDQjhEQkVFODMwRkRCOENFNDI2MDVEMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiGVHYlzm0DqvJT17sjDCaFdrs nKoGGipdgKX18dEydBIFUQePKH566O2CTwbZEQpRWKU8PrWHWoRcV9wBJqhret+O xoN+csfkEhNHw519ad+hTQbSIiIzPgdf6P8u+buTzpoZS46EOWfF5/EINIIGxmde QkqJcspiNSQgh6GiXeave+6L6U6AnKoJpOf2fef4e73jGduYbPIE9uPmMOXltOPA jNnnQtfWURBng3DRifvBjggEVrv96w0gtHfA6ZFIwbEXkP5cjgiuLpwUK9ucBwLA GGXpXdvbgA4WMLLcn5pG4uIbEGWvBPOiMQxsATcDYCoDFkX201VLObtXhsItAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUwvMESpYyKb3Ljb7oMP24zkJgXRwwHwYDVR0j BBgwFoAUvj3GYU4KLzs9bwjcBKG8NMj7ycMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0JFM0RDNjYxNEUwQTJG M0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzU2NjM1MzAzYTNhMmYzNDM0MmQzNDM0 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgXfwV9QMA0GCSqGSIb3DQEB CwUAA4IBAQA3n1pcvZf8pjUEEJlDzP6E1chiIdJGEmyfQ/9MlzY7dDOTa+j4n+hm ZfPrmNEm3M1n0cegDYIMvgCcGJia1l3By6CaRCA4nrK3uh+wKbq5KqVSp1KtQPTE fUxhNkakE0BcED5+FbdlFIPcdHkn8caELVBEqk3+Bq8X4/J0hGwxmo4e8dwfQfN5 gXGeM0zcqIaAVu+Z/ZSo73DSgShaDYHxrtGOAKCkAWJHWpUOn9GgAEoH9HW/IHG2 aUqAP3EOc4WV+Y09b3Mkb98O6No1Jy+bzTuBmSpPAiWdZlbGUlT6hCShgNFEgUAB ItxCjEeOKgtZnb6mprloZJpdDcICI5T1 -----END CERTIFICATE-----Generated at Sat Jul 5 13:00:34 2025 by rpki-client