$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/326130353a646663313a383030303a3a2f34302d3434203d3e20323131343331.roa File: 326130353a646663313a383030303a3a2f34302d3434203d3e20323131343331.roa (raw, json) Hash identifier: 5mpJF+s6CqpqwSrSlttfU1GwfwEb1pV825oBZgzU96I= Subject key identifier: 59:F9:45:AC:A4:E6:EA:3C:E5:19:DD:4D:FE:FF:DE:CB:0F:94:87:6A Certificate issuer: /CN=CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2 Certificate serial: 4D722EFFA590D004445443FCC65EC7790A0BE616 Authority key identifier: CA:DC:66:A6:E5:5B:EB:AF:DD:FA:8B:D7:2B:31:27:C8:AE:B5:0E:C2 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/326130353a646663313a383030303a3a2f34302d3434203d3e20323131343331.roa Signing time: Sat 11 May 2024 14:14:42 +0000 ROA not before: Sat 11 May 2024 14:09:42 +0000 ROA not after: Sat 10 May 2025 14:14:42 +0000 asID: 211431 IP address blocks: 2a05:dfc1:8000::/40 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.crl rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Jun 2024 01:42:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:72:2e:ff:a5:90:d0:04:44:54:43:fc:c6:5e:c7:79:0a:0b:e6:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2 Validity Not Before: May 11 14:09:42 2024 GMT Not After : May 10 14:14:42 2025 GMT Subject: CN=59F945ACA4E6EA3CE519DD4DFEFFDECB0F94876A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:32:db:e3:ca:9d:dc:c2:b6:df:7d:02:7e:d5: 94:13:b6:db:5e:d0:70:d0:f8:96:ce:cf:2b:dc:83: 0a:24:db:03:80:f1:23:31:e5:5b:52:d6:ec:91:7c: dd:53:04:42:4e:e2:1a:24:72:33:55:f1:18:b8:fc: 5a:cb:04:2e:9c:d3:c3:dd:40:fb:d4:b7:d2:d4:98: 70:88:a0:e3:cc:97:c2:77:0f:93:cc:27:8c:8a:37: e7:f3:37:0b:34:63:43:59:97:8c:da:3b:2a:8d:e6: 58:03:bd:a9:6d:81:1a:df:65:21:f1:c5:ea:5e:d7: b2:58:f0:ab:8a:8c:12:fd:62:44:fc:ed:98:46:16: 55:0c:9a:58:41:c9:3b:6a:ea:6d:71:5b:14:cf:fa: 34:9d:7a:38:53:09:89:3f:ac:e7:e4:e6:e4:4b:c9: 81:a3:e2:26:50:1f:83:2a:79:57:ed:9a:9a:66:85: 14:76:a5:db:f8:53:07:96:c7:6d:3b:75:3a:aa:f3: a1:22:c9:13:68:da:22:4a:8d:8e:04:1f:11:e6:f4: f2:09:77:b0:37:62:f4:2c:b3:1f:55:37:f8:93:27: ce:88:e9:6d:14:0d:77:f6:60:38:60:4f:29:da:39: 9c:75:cb:58:69:ca:6b:7c:66:a2:71:54:f8:e1:31: f7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F9:45:AC:A4:E6:EA:3C:E5:19:DD:4D:FE:FF:DE:CB:0F:94:87:6A X509v3 Authority Key Identifier: keyid:CA:DC:66:A6:E5:5B:EB:AF:DD:FA:8B:D7:2B:31:27:C8:AE:B5:0E:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/326130353a646663313a383030303a3a2f34302d3434203d3e20323131343331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8000::/40 Signature Algorithm: sha256WithRSAEncryption 97:e4:34:ca:a9:2b:2b:47:91:d9:08:ef:b0:f6:2a:88:e4:5c: 1e:db:0c:7a:60:04:a9:fc:a8:b4:d9:13:64:bb:a6:0d:4f:5d: f3:de:39:a8:66:55:d8:c0:cd:3c:cd:37:b8:52:b0:30:84:c5: d2:45:a7:b8:16:00:60:6a:98:eb:fe:b5:bc:2f:9e:42:5b:b7: 2a:09:8b:b7:de:79:a8:93:39:0c:03:00:6b:74:a0:3b:8a:78: e1:86:2f:02:0e:cc:0d:1a:8a:c6:25:e1:db:6c:2d:20:27:08: e5:b4:c6:cc:0a:75:5f:38:31:9d:0a:41:f2:29:8a:b5:fe:f8: 69:8f:74:a4:06:18:8f:d8:2c:93:e3:dc:e8:5a:1d:31:1f:38: 3f:29:34:44:c1:63:af:1e:b5:54:2d:aa:6d:2b:7c:a1:26:9e: b3:d0:99:d9:ac:93:e5:5d:a4:12:27:96:a3:cf:a7:54:d9:08: 83:a3:6b:17:a5:5f:e2:76:e0:95:6b:6e:af:da:d8:35:1d:2c: e7:1f:f0:43:69:7d:c0:06:66:34:f0:6c:c3:df:d1:15:4e:4a: ff:d5:0d:34:a7:61:ce:22:95:69:1b:16:fe:23:81:d6:4f:e6: 88:05:2b:ad:b9:54:7b:9b:7d:5a:ae:3f:b2:f5:50:4c:e4:d0: bb:ef:9d:43 -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgIUTXIu/6WQ0AREVEP8xl7HeQoL5hYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FEQzY2QTZFNTVCRUJBRkRERkE4QkQ3MkIzMTI3QzhB RUI1MEVDMjAeFw0yNDA1MTExNDA5NDJaFw0yNTA1MTAxNDE0NDJaMDMxMTAvBgNV BAMTKDU5Rjk0NUFDQTRFNkVBM0NFNTE5REQ0REZFRkZERUNCMEY5NDg3NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Mtvjyp3cwrbffQJ+1ZQTttte 0HDQ+JbOzyvcgwok2wOA8SMx5VtS1uyRfN1TBEJO4hokcjNV8Ri4/FrLBC6c08Pd QPvUt9LUmHCIoOPMl8J3D5PMJ4yKN+fzNws0Y0NZl4zaOyqN5lgDvaltgRrfZSHx xepe17JY8KuKjBL9YkT87ZhGFlUMmlhByTtq6m1xWxTP+jSdejhTCYk/rOfk5uRL yYGj4iZQH4MqeVftmppmhRR2pdv4UweWx207dTqq86EiyRNo2iJKjY4EHxHm9PIJ d7A3YvQssx9VN/iTJ86I6W0UDXf2YDhgTynaOZx1y1hpymt8ZqJxVPjhMfeJAgMB AAGjggJfMIICWzAdBgNVHQ4EFgQUWflFrKTm6jzlGd1N/v/eyw+Uh2owHwYDVR0j BBgwFoAUytxmpuVb66/d+ovXKzEnyK61DsIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVl YjdkLzEvQ0FEQzY2QTZFNTVCRUJBRkRERkE4QkQ3MkIzMTI3QzhBRUI1MEVDMi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0NBREM2NkE2RTU1QkVC QUZEREZBOEJENzJCMzEyN0M4QUVCNTBFQzIuY2VyMIG3BggrBgEFBQcBCwSBqjCB pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2M5OTI2NWVmLTIyYTktNDEwMC1hMjNkLTUxYTlkOWZlZWI3 ZC8xLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzgzMDMwMzAzYTNhMmYzNDMwMmQzNDM0 MjAzZDNlMjAzMjMxMzEzNDMzMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqBd/BgDANBgkqhkiG9w0B AQsFAAOCAQEAl+Q0yqkrK0eR2QjvsPYqiORcHtsMemAEqfyotNkTZLumDU9d8945 qGZV2MDNPM03uFKwMITF0kWnuBYAYGqY6/61vC+eQlu3KgmLt955qJM5DAMAa3Sg O4p44YYvAg7MDRqKxiXh22wtICcI5bTGzAp1XzgxnQpB8imKtf74aY90pAYYj9gs k+Pc6FodMR84Pyk0RMFjrx61VC2qbSt8oSaes9CZ2ayT5V2kEieWo8+nVNkIg6Nr F6Vf4nbglWtur9rYNR0s5x/wQ2l9wAZmNPBsw9/RFU5K/9UNNKdhziKVaRsW/iOB 1k/miAUrrblUe5t9Wq4/svVQTOTQu++dQw== -----END CERTIFICATE-----Generated at Tue Jun 25 12:07:55 2024 by rpki-client on console-fra.rpki-client.org