$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386538303a3a2f34342d3434203d3e203538333339.roa File: 326130353a646663313a386538303a3a2f34342d3434203d3e203538333339.roa (raw, json) Hash identifier: M5kYFsgv7x38sDtt7ftrB1PIo6LvSkGQW5lDtgjzeYg= Subject key identifier: B9:B1:57:85:9A:1A:1C:58:84:03:F9:E0:4D:76:BC:F2:32:34:EA:CD Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Certificate serial: 53E1BB9DCB20B85A711A8BC83FE4971F0695AB93 Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386538303a3a2f34342d3434203d3e203538333339.roa Signing time: Fri 05 Jun 2026 19:58:11 +0000 ROA not before: Fri 05 Jun 2026 19:53:11 +0000 ROA not after: Fri 04 Jun 2027 19:58:11 +0000 asID: 58339 IP address blocks: 2a05:dfc1:8e80::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 07:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:e1:bb:9d:cb:20:b8:5a:71:1a:8b:c8:3f:e4:97:1f:06:95:ab:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Validity Not Before: Jun 5 19:53:11 2026 GMT Not After : Jun 4 19:58:11 2027 GMT Subject: CN=B9B157859A1A1C588403F9E04D76BCF23234EACD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:70:96:67:5e:8d:69:6e:53:f7:9e:1c:dc:a9: 70:72:35:98:dd:11:c3:e7:93:b3:42:5c:04:30:57: b3:04:63:7d:08:fc:62:8c:79:cb:56:09:ff:bb:6a: 4e:bd:5f:31:0d:c9:71:fa:59:6c:7c:09:bf:cd:a7: f8:f4:23:a5:f8:85:ba:9e:d4:0b:ec:60:16:9e:fa: d7:d9:4d:b8:2f:8c:a2:ac:e3:e1:b9:f8:43:05:22: 89:89:75:ee:d2:83:27:40:35:65:ee:32:52:f8:26: 39:b1:ef:f1:ee:bf:47:4f:10:69:b4:63:b1:98:66: d3:cf:ee:95:6d:82:e4:7f:e5:17:fb:25:a1:a9:09: b7:09:cf:92:57:a3:0f:3f:d7:e6:16:8a:0b:63:d5: 22:c7:c5:8c:af:a6:e3:14:ce:56:43:1a:f4:c1:6c: 65:45:56:08:63:cc:43:99:2c:a6:63:c7:38:3f:75: 4d:9b:d9:a8:cd:ee:ac:5b:fb:9c:6b:e3:54:76:95: 9f:07:91:30:4a:ae:21:08:14:bc:15:39:31:44:b1: b8:f0:8f:03:6d:1d:77:5d:2a:6a:6c:38:aa:c5:e8: eb:ed:95:16:d2:11:c5:11:63:5e:bf:0b:ff:36:fe: 5d:11:60:28:12:c0:c0:eb:88:33:3e:fd:d5:2d:fb: d4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B1:57:85:9A:1A:1C:58:84:03:F9:E0:4D:76:BC:F2:32:34:EA:CD X509v3 Authority Key Identifier: keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386538303a3a2f34342d3434203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8e80::/44 Signature Algorithm: sha256WithRSAEncryption 72:1a:82:38:32:e4:93:7e:54:4d:29:24:d2:6f:52:3a:39:1f: f3:de:aa:56:40:44:19:6a:9f:11:8a:58:10:0d:d5:f3:ce:59: 49:0c:89:73:01:4c:a2:fe:0c:46:9b:e7:fc:d8:96:8f:00:af: b0:7d:54:5b:c8:38:b0:f6:ce:dd:15:b9:fa:fd:e9:2a:38:b0: 6e:d1:2c:59:e2:24:f4:32:1d:f4:d4:fb:58:d9:37:3d:77:dc: 81:37:32:f0:0d:3c:39:72:77:74:5d:04:7d:ce:56:86:4d:e1: dd:50:83:56:bd:86:be:8e:d9:46:b8:40:76:a7:b7:29:be:db: 23:0c:a6:69:a7:90:75:32:0f:07:1d:72:0d:58:59:4a:1f:aa: e4:c4:bd:e8:f0:71:11:ab:58:b2:68:ca:2b:45:b6:2b:94:2b: 41:93:84:b0:2f:2c:d3:6e:bf:5a:9d:f3:f4:2d:f1:e3:49:1a: 66:95:e9:4d:c3:8c:d6:51:9e:00:75:09:28:f9:e6:9b:f6:ca: 3e:c2:93:9b:52:54:5c:2a:32:6e:0f:7d:e2:ad:9e:4e:e0:80: 2d:26:31:7d:b9:e2:80:10:af:dd:69:a9:ab:53:b6:98:5c:a8: 54:92:eb:c7:e6:90:1e:26:1c:60:38:b9:8d:87:ba:51:84:d5: c6:39:2f:37 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUU+G7ncsguFpxGovIP+SXHwaVq5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRD OEZCQzlDMzAeFw0yNjA2MDUxOTUzMTFaFw0yNzA2MDQxOTU4MTFaMDMxMTAvBgNV BAMTKEI5QjE1Nzg1OUExQTFDNTg4NDAzRjlFMDRENzZCQ0YyMzIzNEVBQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbcJZnXo1pblP3nhzcqXByNZjd EcPnk7NCXAQwV7MEY30I/GKMectWCf+7ak69XzENyXH6WWx8Cb/Np/j0I6X4hbqe 1AvsYBae+tfZTbgvjKKs4+G5+EMFIomJde7SgydANWXuMlL4Jjmx7/Huv0dPEGm0 Y7GYZtPP7pVtguR/5Rf7JaGpCbcJz5JXow8/1+YWigtj1SLHxYyvpuMUzlZDGvTB bGVFVghjzEOZLKZjxzg/dU2b2ajN7qxb+5xr41R2lZ8HkTBKriEIFLwVOTFEsbjw jwNtHXddKmpsOKrF6OvtlRbSEcURY16/C/82/l0RYCgSwMDriDM+/dUt+9Q1AgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUubFXhZoaHFiEA/ngTXa88jI06s0wHwYDVR0j BBgwFoAUvj3GYU4KLzs9bwjcBKG8NMj7ycMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0JFM0RDNjYxNEUwQTJG M0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzg2NTM4MzAzYTNhMmYzNDM0MmQzNDM0 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgXfwY6AMA0GCSqGSIb3DQEB CwUAA4IBAQByGoI4MuSTflRNKSTSb1I6OR/z3qpWQEQZap8RilgQDdXzzllJDIlz AUyi/gxGm+f82JaPAK+wfVRbyDiw9s7dFbn6/ekqOLBu0SxZ4iT0Mh301PtY2Tc9 d9yBNzLwDTw5cnd0XQR9zlaGTeHdUINWvYa+jtlGuEB2p7cpvtsjDKZpp5B1Mg8H HXINWFlKH6rkxL3o8HERq1iyaMorRbYrlCtBk4SwLyzTbr9anfP0LfHjSRpmlelN w4zWUZ4AdQko+eab9so+wpObUlRcKjJuD33irZ5O4IAtJjF9ueKAEK/daamrU7aY XKhUkuvH5pAeJhxgOLmNh7pRhNXGOS83 -----END CERTIFICATE-----Generated at Fri Jun 12 01:10:46 2026 by rpki-client