$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333030323a3a2f34382d3438203d3e20313531333439.roa File: 326130363a396638313a333030323a3a2f34382d3438203d3e20313531333439.roa (raw, json) Hash identifier: afCBiKO671M2uqyYxLM5ulTzG08Xm85NAbIeWNtGeG4= Subject key identifier: 7E:D2:E9:F7:76:75:F1:BF:F5:52:08:7D:D2:5B:60:CF:2F:9D:21:B0 Certificate issuer: /CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC Certificate serial: 1E42F0CC39928CC1E4CCD7F8BD93561EAAE60AFA Authority key identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333030323a3a2f34382d3438203d3e20313531333439.roa Signing time: Fri 04 Jul 2025 19:57:35 +0000 ROA not before: Fri 04 Jul 2025 19:52:35 +0000 ROA not after: Fri 03 Jul 2026 19:57:35 +0000 asID: 151349 IP address blocks: 2a06:9f81:3002::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 20:52:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:42:f0:cc:39:92:8c:c1:e4:cc:d7:f8:bd:93:56:1e:aa:e6:0a:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC Validity Not Before: Jul 4 19:52:35 2025 GMT Not After : Jul 3 19:57:35 2026 GMT Subject: CN=7ED2E9F77675F1BFF552087DD25B60CF2F9D21B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:76:48:f0:9e:2f:58:eb:b0:f7:c5:5e:a3:77: b4:31:bf:83:40:34:4c:b6:c4:8b:81:ca:a2:ca:64: 0f:73:dd:1e:d8:4f:aa:be:ed:ea:0c:34:88:df:8f: 8d:f7:c4:74:9a:18:8c:bf:19:37:db:4b:88:ed:1a: 0c:84:8b:cf:31:19:96:79:32:e5:80:26:29:49:94: b4:15:ec:ce:d6:12:4a:f8:ec:34:56:13:c5:17:46: 13:94:90:d0:77:b4:99:38:e0:6d:f0:40:65:a5:94: d5:b1:54:af:56:dc:cc:8f:3f:ae:47:1e:b8:fd:ac: bf:98:2d:d5:8b:55:2a:e2:ae:56:9b:27:8c:dc:96: a8:33:e0:31:2b:ce:48:89:2b:d6:cc:bc:72:43:52: 17:3b:79:c3:10:c6:4e:7f:a0:6e:c6:ac:9b:c9:7d: 87:12:fe:54:df:b1:d6:f8:3b:1c:d6:14:ea:92:ef: 89:a7:44:b7:16:c2:70:4b:10:63:06:d9:2f:1a:53: 67:31:da:6c:23:15:f9:6e:20:f8:ed:2c:22:4d:d2: e8:db:57:fc:1f:58:f3:f1:ce:be:d0:66:fc:9f:d3: 20:df:55:91:34:0f:2f:46:30:d6:98:6a:3b:4c:33: 4b:65:ab:47:4d:1b:e6:eb:fa:c3:f2:9e:8c:28:e5: f0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D2:E9:F7:76:75:F1:BF:F5:52:08:7D:D2:5B:60:CF:2F:9D:21:B0 X509v3 Authority Key Identifier: keyid:72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333030323a3a2f34382d3438203d3e20313531333439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:3002::/48 Signature Algorithm: sha256WithRSAEncryption 47:72:93:7f:ea:ec:d3:50:90:30:d7:c4:1f:4c:52:40:47:9e: 1b:d9:78:f6:9e:c9:57:e4:e1:29:f1:b3:2b:e9:ed:7b:f7:f2: d5:0b:e7:f6:a6:e2:36:f8:61:be:13:cc:93:c7:bd:fc:c7:e9: 70:c3:62:4f:10:08:4f:fa:ad:d3:41:b9:ec:b0:16:44:af:59: 17:e2:7c:87:4a:f0:dd:ae:da:e6:06:e9:7e:a4:44:89:44:83: c5:05:71:36:49:0f:c6:19:9a:c5:48:07:64:e4:41:c8:d8:95: 52:6e:67:d6:3a:d5:61:ee:fa:53:10:77:d8:ea:7a:d2:36:84: a7:e8:f1:e2:1c:76:d8:81:78:84:09:14:67:a4:00:fa:e7:e4: 2d:49:43:fa:be:04:80:09:c2:3d:b5:0e:00:ca:e4:9d:df:bb: a1:fe:1c:80:07:44:7a:fc:c4:6a:55:e0:a9:d6:15:6c:9b:8c: 42:8f:54:3f:35:17:f7:4c:21:0c:fe:95:28:77:f6:f8:a9:58: 41:0a:8b:70:47:c8:2e:7c:3d:59:9a:46:c5:38:78:c2:9d:52: 77:f5:d7:9f:27:06:9d:4d:9e:aa:1f:ec:3b:d2:de:c6:2e:06: f8:72:69:5c:60:b5:39:f5:1c:65:da:90:4e:04:5f:97:03:a5: 23:f1:9d:39 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUHkLwzDmSjMHkzNf4vZNWHqrmCvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJEMURERTFCMUIwNDVEOEJFNDM5REREMTAxNDg2RTY3 MTdDOTNDQzAeFw0yNTA3MDQxOTUyMzVaFw0yNjA3MDMxOTU3MzVaMDMxMTAvBgNV BAMTKDdFRDJFOUY3NzY3NUYxQkZGNTUyMDg3REQyNUI2MENGMkY5RDIxQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRdkjwni9Y67D3xV6jd7Qxv4NA NEy2xIuByqLKZA9z3R7YT6q+7eoMNIjfj433xHSaGIy/GTfbS4jtGgyEi88xGZZ5 MuWAJilJlLQV7M7WEkr47DRWE8UXRhOUkNB3tJk44G3wQGWllNWxVK9W3MyPP65H Hrj9rL+YLdWLVSrirlabJ4zclqgz4DErzkiJK9bMvHJDUhc7ecMQxk5/oG7GrJvJ fYcS/lTfsdb4OxzWFOqS74mnRLcWwnBLEGMG2S8aU2cx2mwjFfluIPjtLCJN0ujb V/wfWPPxzr7QZvyf0yDfVZE0Dy9GMNaYajtMM0tlq0dNG+br+sPynowo5fABAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUftLp93Z18b/1Ugh90ltgzy+dIbAwHwYDVR0j BBgwFoAUctHd4bGwRdi+Q53dEBSG5nF8k8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDY0YWM5NDEtNWE3Yy00MmNmLWI2NGItMGIyODhmMTg4 N2YyLzEvNzJEMURERTFCMUIwNDVEOEJFNDM5REREMTAxNDg2RTY3MTdDOTNDQy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzcyRDFEREUxQjFCMDQ1 RDhCRTQzOURERDEwMTQ4NkU2NzE3QzkzQ0MuY2VyMIG3BggrBgEFBQcBCwSBqjCB pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2Q2NGFjOTQxLTVhN2MtNDJjZi1iNjRiLTBiMjg4ZjE4ODdm Mi8xLzMyNjEzMDM2M2EzOTY2MzgzMTNhMzMzMDMwMzIzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzMTM1MzEzMzM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBp+BMAIwDQYJKoZIhvcN AQELBQADggEBAEdyk3/q7NNQkDDXxB9MUkBHnhvZePaeyVfk4Snxsyvp7Xv38tUL 5/am4jb4Yb4TzJPHvfzH6XDDYk8QCE/6rdNBueywFkSvWRfifIdK8N2u2uYG6X6k RIlEg8UFcTZJD8YZmsVIB2TkQcjYlVJuZ9Y61WHu+lMQd9jqetI2hKfo8eIcdtiB eIQJFGekAPrn5C1JQ/q+BIAJwj21DgDK5J3fu6H+HIAHRHr8xGpV4KnWFWybjEKP VD81F/dMIQz+lSh39vipWEEKi3BHyC58PVmaRsU4eMKdUnf1158nBp1Nnqof7DvS 3sYuBvhyaVxgtTn1HGXakE4EX5cDpSPxnTk= -----END CERTIFICATE-----Generated at Sat Jul 5 10:56:17 2025 by rpki-client