$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386538303a3a2f34342d3434203d3e203538333339.roa File: 326130353a646663313a386538303a3a2f34342d3434203d3e203538333339.roa (raw, json) Hash identifier: TcZZuAWJaOHQpXHN6lfF7/ENwLkSC5UfCjQUfKogcBE= Subject key identifier: C6:96:29:AC:31:CC:3D:D2:8D:7C:9B:42:17:58:52:F4:2C:4B:0A:E6 Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Certificate serial: 4450FE54B0B3BF4F1430B313939C5B41189156F1 Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386538303a3a2f34342d3434203d3e203538333339.roa Signing time: Fri 04 Jul 2025 19:52:54 +0000 ROA not before: Fri 04 Jul 2025 19:47:54 +0000 ROA not after: Fri 03 Jul 2026 19:52:54 +0000 asID: 58339 IP address blocks: 2a05:dfc1:8e80::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 23:30:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:50:fe:54:b0:b3:bf:4f:14:30:b3:13:93:9c:5b:41:18:91:56:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Validity Not Before: Jul 4 19:47:54 2025 GMT Not After : Jul 3 19:52:54 2026 GMT Subject: CN=C69629AC31CC3DD28D7C9B42175852F42C4B0AE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ac:61:72:6d:10:10:cd:77:94:e4:e9:b6:cc: a4:b7:cc:5d:dd:60:73:fd:d8:72:dd:83:3a:19:76: be:41:8d:b0:f5:3a:e7:2f:57:75:61:26:a0:7f:82: 5d:c3:57:bd:4e:67:38:40:f4:38:c7:d2:c7:8c:81: 71:e5:e7:eb:64:bd:0c:af:35:6a:9c:d1:fb:55:ec: 4a:f2:80:bc:9c:19:c7:43:dd:a4:81:cb:6f:18:cc: 84:76:ca:3d:7d:46:a0:b8:4a:48:c0:f0:8f:b4:85: be:91:a3:f1:47:fd:7f:33:bc:ae:80:85:90:99:fc: 7e:2b:2a:6f:de:15:1a:67:04:78:58:cc:15:06:4e: 49:6d:0c:2e:9b:18:2b:54:c3:fc:9c:06:18:e1:3a: 5e:8c:3c:c9:e5:6a:57:5e:67:10:00:be:71:be:80: 7f:05:e9:23:d2:4c:41:87:61:68:41:ca:0e:b6:e0: 9b:14:21:62:dd:14:9f:f3:95:aa:1d:2a:88:ac:61: 93:30:d9:da:db:1d:d3:84:26:2e:2b:35:d6:9a:93: 39:98:e2:89:6b:38:da:ce:bc:b7:dd:d3:c0:70:2d: f3:5d:bf:8c:20:55:61:27:31:cf:a2:58:37:93:8f: da:1a:9f:24:f8:3c:9d:ff:d3:f4:56:20:29:82:cd: 84:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:96:29:AC:31:CC:3D:D2:8D:7C:9B:42:17:58:52:F4:2C:4B:0A:E6 X509v3 Authority Key Identifier: keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386538303a3a2f34342d3434203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8e80::/44 Signature Algorithm: sha256WithRSAEncryption 7c:82:a2:57:0f:ba:6f:71:f3:ae:42:68:fe:4a:1b:a0:e9:40: 09:d2:88:f5:8f:60:f3:84:2e:56:76:16:0a:8f:c2:97:c1:bf: fa:0a:e2:6a:16:8b:b5:91:50:37:9c:94:25:d0:16:87:87:1c: 65:8d:32:ab:0d:d1:cd:e9:63:41:2a:2b:37:bf:c7:ab:e8:ca: fd:cc:1a:16:57:1e:f6:6c:32:52:91:f3:a7:e1:84:c6:8d:c9: f9:0f:10:cb:52:43:09:cb:56:8a:4b:21:b2:cc:62:27:99:20: d8:d6:e2:ed:65:aa:ef:e4:f6:34:ea:61:3a:f8:bf:e8:ad:8d: 51:38:15:40:f5:ca:4b:66:d5:70:af:0d:7a:9f:e5:e2:f6:60: f8:fc:8a:98:02:9e:39:60:43:1c:7c:eb:b8:f3:09:49:de:4f: f4:57:a7:33:7d:7c:b4:b9:26:bd:db:b2:a4:af:be:02:e4:1b: ed:b0:d0:f4:29:a8:45:2f:8f:1a:0e:6a:cf:61:ce:e0:a0:87: 96:7e:9f:04:45:2a:bf:1a:06:60:7b:03:82:7b:25:0c:02:74: 39:7d:c6:a0:de:88:98:88:89:b1:60:04:7c:fd:f4:30:ae:d9: ee:9b:e0:b0:f5:4b:5b:49:4e:46:43:81:5b:35:5e:d8:3b:fa: 1a:f0:96:6d -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIURFD+VLCzv08UMLMTk5xbQRiRVvEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRD OEZCQzlDMzAeFw0yNTA3MDQxOTQ3NTRaFw0yNjA3MDMxOTUyNTRaMDMxMTAvBgNV BAMTKEM2OTYyOUFDMzFDQzNERDI4RDdDOUI0MjE3NTg1MkY0MkM0QjBBRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+rGFybRAQzXeU5Om2zKS3zF3d YHP92HLdgzoZdr5BjbD1OucvV3VhJqB/gl3DV71OZzhA9DjH0seMgXHl5+tkvQyv NWqc0ftV7ErygLycGcdD3aSBy28YzIR2yj19RqC4SkjA8I+0hb6Ro/FH/X8zvK6A hZCZ/H4rKm/eFRpnBHhYzBUGTkltDC6bGCtUw/ycBhjhOl6MPMnlaldeZxAAvnG+ gH8F6SPSTEGHYWhByg624JsUIWLdFJ/zlaodKoisYZMw2drbHdOEJi4rNdaakzmY 4olrONrOvLfd08BwLfNdv4wgVWEnMc+iWDeTj9oanyT4PJ3/0/RWICmCzYTbAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUxpYprDHMPdKNfJtCF1hS9CxLCuYwHwYDVR0j BBgwFoAUvj3GYU4KLzs9bwjcBKG8NMj7ycMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0JFM0RDNjYxNEUwQTJG M0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzg2NTM4MzAzYTNhMmYzNDM0MmQzNDM0 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgXfwY6AMA0GCSqGSIb3DQEB CwUAA4IBAQB8gqJXD7pvcfOuQmj+Shug6UAJ0oj1j2DzhC5WdhYKj8KXwb/6CuJq Fou1kVA3nJQl0BaHhxxljTKrDdHN6WNBKis3v8er6Mr9zBoWVx72bDJSkfOn4YTG jcn5DxDLUkMJy1aKSyGyzGInmSDY1uLtZarv5PY06mE6+L/orY1ROBVA9cpLZtVw rw16n+Xi9mD4/IqYAp45YEMcfOu48wlJ3k/0V6czfXy0uSa927Kkr74C5BvtsND0 KahFL48aDmrPYc7goIeWfp8ERSq/GgZgewOCeyUMAnQ5fcag3oiYiImxYAR8/fQw rtnum+Cw9UtbSU5GQ4FbNV7YO/oa8JZt -----END CERTIFICATE-----Generated at Sat Jul 5 12:59:09 2025 by rpki-client