$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/326130353a646663313a383136303a3a2f34342d3438203d3e203133333335.roa File: 326130353a646663313a383136303a3a2f34342d3438203d3e203133333335.roa (raw, json) Hash identifier: yAU+s5RSQ9o74YFs/yjgZ6jS5+py4B0mK0alfQuMo9g= Subject key identifier: 34:F4:D1:8E:B5:50:1F:50:51:A6:A8:65:58:A4:6C:02:60:76:A9:24 Certificate issuer: /CN=CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2 Certificate serial: 7B8804522EB4FD760AC97587BC99FF538580B481 Authority key identifier: CA:DC:66:A6:E5:5B:EB:AF:DD:FA:8B:D7:2B:31:27:C8:AE:B5:0E:C2 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/326130353a646663313a383136303a3a2f34342d3438203d3e203133333335.roa Signing time: Tue 03 Oct 2023 16:53:17 +0000 ROA not before: Tue 03 Oct 2023 16:48:17 +0000 ROA not after: Tue 01 Oct 2024 16:53:17 +0000 asID: 13335 IP address blocks: 2a05:dfc1:8160::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.crl rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 12 May 2024 02:51:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:88:04:52:2e:b4:fd:76:0a:c9:75:87:bc:99:ff:53:85:80:b4:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2 Validity Not Before: Oct 3 16:48:17 2023 GMT Not After : Oct 1 16:53:17 2024 GMT Subject: CN=34F4D18EB5501F5051A6A86558A46C026076A924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b5:43:05:d8:eb:85:50:53:10:64:0f:af:6b: 94:cd:92:c5:a7:25:14:ef:d8:09:ee:0d:5c:5f:87: c8:af:32:ee:f2:fc:41:6e:c0:99:5a:e2:37:d8:ab: 05:99:97:90:62:69:28:77:1c:1a:40:35:20:63:60: 1c:14:66:a9:5e:e5:fe:6c:55:a5:49:79:de:b9:f4: 7a:e1:dd:3f:8d:60:91:91:e2:b5:dd:84:73:7e:45: ba:5c:7b:b0:32:7c:2d:94:82:98:74:21:2d:3b:fc: 8c:0f:0e:6c:87:a9:9a:ed:71:db:5b:dc:e8:dd:24: c7:26:1c:9c:90:fb:6a:9c:63:e7:ad:1f:f7:ea:31: b9:bb:4f:a7:ad:99:76:14:09:03:52:43:e3:9b:65: 62:b2:27:3b:e2:2c:d6:fd:37:a4:a9:68:fd:d1:e1: d0:ee:cb:5a:ce:fd:ae:c7:ae:22:e1:fc:6e:ba:de: 92:14:8c:e9:8a:97:bd:6f:60:5a:32:46:3e:c1:1e: 86:9e:87:72:c9:22:3f:a7:ef:7a:56:e7:0e:c8:c0: 6f:e0:81:67:e4:91:8b:9a:ce:7b:0f:4d:36:2a:9c: 37:20:a0:9b:ea:df:75:b7:bf:83:cf:e8:4c:a0:e9: b8:33:b5:7e:c4:41:77:53:f7:91:a9:90:87:d5:af: 02:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F4:D1:8E:B5:50:1F:50:51:A6:A8:65:58:A4:6C:02:60:76:A9:24 X509v3 Authority Key Identifier: keyid:CA:DC:66:A6:E5:5B:EB:AF:DD:FA:8B:D7:2B:31:27:C8:AE:B5:0E:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/326130353a646663313a383136303a3a2f34342d3438203d3e203133333335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8160::/44 Signature Algorithm: sha256WithRSAEncryption 77:6e:a7:80:4e:fb:f8:ac:db:b3:75:4f:27:e3:6f:3a:20:9d: 14:4c:5a:a0:7d:ed:13:62:38:dd:ee:99:0e:15:44:19:c8:c0: 5b:aa:e5:c3:bb:5a:e1:5d:6c:10:8d:09:d8:bc:18:2f:b7:74: 3d:4b:55:f9:3a:58:5c:d9:10:2c:91:42:5a:7e:d4:75:56:08: f0:d6:18:d0:52:5c:10:09:f1:04:c5:1c:ef:54:91:2e:6a:bb: f1:03:c4:ac:7c:b8:6d:2e:19:d1:fd:07:d4:5b:9a:33:51:1b: c0:66:46:3b:9b:dd:12:72:68:f9:e2:8e:34:f5:e7:b9:46:87: 14:10:cb:a4:33:f6:65:f3:96:74:9a:b4:d6:14:12:87:b9:3e: 30:0f:f6:86:e9:db:c9:9a:4a:32:55:76:6e:8a:b6:70:93:61: 80:f9:d9:16:b2:5b:27:f8:5a:9f:ff:89:c0:d5:e5:b3:11:cd: e2:12:e0:67:03:1f:87:5d:7a:34:09:b9:02:31:14:46:cd:01: fb:32:8a:c5:16:fb:c9:ca:d2:64:d2:c0:c8:39:4c:ae:c7:37: ef:ee:ef:5b:27:4d:5b:bf:4a:52:5c:e4:e3:1d:c6:ab:e7:65: 72:e2:09:55:36:86:0b:69:26:2f:dd:ad:d6:a1:c9:97:57:c9: 2b:81:c9:04 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUe4gEUi60/XYKyXWHvJn/U4WAtIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FEQzY2QTZFNTVCRUJBRkRERkE4QkQ3MkIzMTI3QzhB RUI1MEVDMjAeFw0yMzEwMDMxNjQ4MTdaFw0yNDEwMDExNjUzMTdaMDMxMTAvBgNV BAMTKDM0RjREMThFQjU1MDFGNTA1MUE2QTg2NTU4QTQ2QzAyNjA3NkE5MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/tUMF2OuFUFMQZA+va5TNksWn JRTv2AnuDVxfh8ivMu7y/EFuwJla4jfYqwWZl5BiaSh3HBpANSBjYBwUZqle5f5s VaVJed659Hrh3T+NYJGR4rXdhHN+Rbpce7AyfC2Ugph0IS07/IwPDmyHqZrtcdtb 3OjdJMcmHJyQ+2qcY+etH/fqMbm7T6etmXYUCQNSQ+ObZWKyJzviLNb9N6SpaP3R 4dDuy1rO/a7HriLh/G663pIUjOmKl71vYFoyRj7BHoaeh3LJIj+n73pW5w7IwG/g gWfkkYuaznsPTTYqnDcgoJvq33W3v4PP6Eyg6bgztX7EQXdT95GpkIfVrwKTAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUNPTRjrVQH1BRpqhlWKRsAmB2qSQwHwYDVR0j BBgwFoAUytxmpuVb66/d+ovXKzEnyK61DsIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVl YjdkLzEvQ0FEQzY2QTZFNTVCRUJBRkRERkE4QkQ3MkIzMTI3QzhBRUI1MEVDMi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0NBREM2NkE2RTU1QkVC QUZEREZBOEJENzJCMzEyN0M4QUVCNTBFQzIuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2M5OTI2NWVmLTIyYTktNDEwMC1hMjNkLTUxYTlkOWZlZWI3 ZC8xLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzgzMTM2MzAzYTNhMmYzNDM0MmQzNDM4 MjAzZDNlMjAzMTMzMzMzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgXfwYFgMA0GCSqGSIb3DQEB CwUAA4IBAQB3bqeATvv4rNuzdU8n4286IJ0UTFqgfe0TYjjd7pkOFUQZyMBbquXD u1rhXWwQjQnYvBgvt3Q9S1X5Olhc2RAskUJaftR1Vgjw1hjQUlwQCfEExRzvVJEu arvxA8SsfLhtLhnR/QfUW5ozURvAZkY7m90Scmj54o409ee5RocUEMukM/Zl85Z0 mrTWFBKHuT4wD/aG6dvJmkoyVXZuirZwk2GA+dkWslsn+Fqf/4nA1eWzEc3iEuBn Ax+HXXo0CbkCMRRGzQH7MorFFvvJytJk0sDIOUyuxzfv7u9bJ01bv0pSXOTjHcar 52Vy4glVNoYLaSYv3a3WocmXV8krgckE -----END CERTIFICATE-----Generated at Sat May 11 16:57:55 2024 by rpki-client on console-ams.rpki-client.org