$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386561303a3a2f34342d3434203d3e203538333339.roa File: 326130353a646663313a386561303a3a2f34342d3434203d3e203538333339.roa (raw, json) Hash identifier: w2EeiCF+tbKMmOoFYBqzZoSSzDfj9tN/LDactvJUZZo= Subject key identifier: 1E:80:47:65:1F:CE:33:D3:BF:63:4D:CD:B0:71:56:62:3D:5E:B7:38 Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Certificate serial: 0D7ACFF3F1DA689B567F35ED647E2CFE032A787B Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386561303a3a2f34342d3434203d3e203538333339.roa Signing time: Fri 04 Jul 2025 19:52:53 +0000 ROA not before: Fri 04 Jul 2025 19:47:53 +0000 ROA not after: Fri 03 Jul 2026 19:52:53 +0000 asID: 58339 IP address blocks: 2a05:dfc1:8ea0::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 23:30:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:7a:cf:f3:f1:da:68:9b:56:7f:35:ed:64:7e:2c:fe:03:2a:78:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Validity Not Before: Jul 4 19:47:53 2025 GMT Not After : Jul 3 19:52:53 2026 GMT Subject: CN=1E8047651FCE33D3BF634DCDB07156623D5EB738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:04:85:19:35:ae:52:f3:81:a9:f4:bf:56:17: 69:76:d2:57:78:43:a1:55:e3:ad:5a:9f:f2:d0:3e: b2:4d:1d:40:62:dc:89:b5:67:a7:30:04:f2:4b:a8: c4:8e:e3:f0:26:44:cb:7c:d8:d8:8d:ca:d0:eb:b0: 5a:f0:7b:56:3a:87:5e:34:62:a8:c1:2e:70:90:99: aa:cc:32:7d:8c:00:7b:25:73:21:0b:82:5b:9e:4b: 9f:86:98:3a:e4:92:66:ae:e0:72:ba:2a:ee:d1:cd: 6f:ab:f0:c0:58:2a:f3:96:92:ab:4c:61:46:a0:3c: ad:72:bb:6e:80:24:da:5b:d8:8b:c8:dd:eb:03:8d: ce:19:3c:ec:87:69:a2:85:a3:ea:81:ad:b1:fc:84: 2e:e5:cc:40:2c:b5:fa:8e:9c:a2:56:f5:cb:21:d1: 85:24:87:c3:b1:9e:fa:93:37:e5:68:6e:26:f9:98: 7d:bc:79:7d:42:6f:94:2a:1b:e9:69:d7:c8:5a:2d: aa:e8:20:fb:b2:5a:55:63:c5:b9:f8:99:6b:b2:54: 11:c7:43:89:c2:39:32:fe:f7:06:8a:07:98:b5:44: 59:c7:6b:cd:2e:40:02:fa:91:06:96:67:2d:51:2d: 2f:1b:b3:ca:4d:fd:14:b5:25:ce:ba:e5:03:65:fd: 59:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:80:47:65:1F:CE:33:D3:BF:63:4D:CD:B0:71:56:62:3D:5E:B7:38 X509v3 Authority Key Identifier: keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386561303a3a2f34342d3434203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8ea0::/44 Signature Algorithm: sha256WithRSAEncryption 49:e2:42:7f:c6:ad:26:74:94:0b:c3:1f:07:f2:a7:50:49:30: cd:f9:22:26:e0:7b:0e:36:15:94:a8:90:9a:b9:65:fb:ec:56: cb:b3:84:2b:f3:a1:e5:77:21:76:e2:55:e4:96:2b:62:55:12: bd:40:2c:87:b4:1a:cd:06:6d:37:60:30:47:34:37:34:56:ee: 0f:ca:4d:b4:71:f0:c9:df:30:4d:69:9c:a5:a8:c1:3b:53:eb: 40:85:af:4f:67:58:f1:77:24:9b:67:a1:4a:f3:bd:a1:9e:3d: 06:9b:b7:7d:56:d9:59:64:3d:cd:e7:ff:9b:82:c9:2a:ea:53: 40:db:d2:30:6c:34:9e:8c:37:42:74:ca:d4:7c:cd:f4:1a:d7: 10:82:0a:ba:fb:8a:47:26:1e:0b:61:c4:4d:c9:f8:80:fc:07: 42:52:23:60:0a:12:a4:62:fd:26:64:a0:85:f4:e2:90:c4:2f: f3:20:61:5b:04:d8:59:3c:28:36:bd:93:77:16:7d:78:c0:04: 48:5c:d0:d8:34:8a:10:45:47:a3:4c:40:23:d5:b2:2b:d7:c4: c9:be:9d:03:63:61:e3:76:5d:d6:db:18:39:fa:1b:8d:b8:5e: 4d:45:e9:58:22:5b:61:41:1c:12:4c:cb:bc:a4:dc:21:21:b5: 3a:d9:a6:d2 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUDXrP8/HaaJtWfzXtZH4s/gMqeHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRD OEZCQzlDMzAeFw0yNTA3MDQxOTQ3NTNaFw0yNjA3MDMxOTUyNTNaMDMxMTAvBgNV BAMTKDFFODA0NzY1MUZDRTMzRDNCRjYzNERDREIwNzE1NjYyM0Q1RUI3MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9BIUZNa5S84Gp9L9WF2l20ld4 Q6FV461an/LQPrJNHUBi3Im1Z6cwBPJLqMSO4/AmRMt82NiNytDrsFrwe1Y6h140 YqjBLnCQmarMMn2MAHslcyELglueS5+GmDrkkmau4HK6Ku7RzW+r8MBYKvOWkqtM YUagPK1yu26AJNpb2IvI3esDjc4ZPOyHaaKFo+qBrbH8hC7lzEAstfqOnKJW9csh 0YUkh8OxnvqTN+Vobib5mH28eX1Cb5QqG+lp18haLaroIPuyWlVjxbn4mWuyVBHH Q4nCOTL+9waKB5i1RFnHa80uQAL6kQaWZy1RLS8bs8pN/RS1Jc665QNl/Vk3AgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUHoBHZR/OM9O/Y03NsHFWYj1etzgwHwYDVR0j BBgwFoAUvj3GYU4KLzs9bwjcBKG8NMj7ycMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0JFM0RDNjYxNEUwQTJG M0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzg2NTYxMzAzYTNhMmYzNDM0MmQzNDM0 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgXfwY6gMA0GCSqGSIb3DQEB CwUAA4IBAQBJ4kJ/xq0mdJQLwx8H8qdQSTDN+SIm4HsONhWUqJCauWX77FbLs4Qr 86HldyF24lXklitiVRK9QCyHtBrNBm03YDBHNDc0Vu4Pyk20cfDJ3zBNaZylqME7 U+tAha9PZ1jxdySbZ6FK872hnj0Gm7d9VtlZZD3N5/+bgskq6lNA29IwbDSejDdC dMrUfM30GtcQggq6+4pHJh4LYcRNyfiA/AdCUiNgChKkYv0mZKCF9OKQxC/zIGFb BNhZPCg2vZN3Fn14wARIXNDYNIoQRUejTEAj1bIr18TJvp0DY2Hjdl3W2xg5+huN uF5NRelYIlthQRwSTMu8pNwhIbU62abS -----END CERTIFICATE-----Generated at Sat Jul 5 12:57:38 2025 by rpki-client