$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333034303a3a2f34382d3438203d3e20323134373635.roa File: 326130363a396638313a333034303a3a2f34382d3438203d3e20323134373635.roa (raw, json) Hash identifier: O8ROpuurWVl726N6xvNejp9oHTgaqsCMET3fS33WC9g= Subject key identifier: CB:48:03:E3:75:EB:3D:22:C2:4F:38:BE:20:AC:40:65:59:1E:72:08 Certificate issuer: /CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC Certificate serial: 6FD9FD43D02BCD40705BE9F7E8F69FBBC24A8422 Authority key identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333034303a3a2f34382d3438203d3e20323134373635.roa Signing time: Fri 04 Jul 2025 19:57:34 +0000 ROA not before: Fri 04 Jul 2025 19:52:34 +0000 ROA not after: Fri 03 Jul 2026 19:57:34 +0000 asID: 214765 IP address blocks: 2a06:9f81:3040::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 20:52:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:d9:fd:43:d0:2b:cd:40:70:5b:e9:f7:e8:f6:9f:bb:c2:4a:84:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC Validity Not Before: Jul 4 19:52:34 2025 GMT Not After : Jul 3 19:57:34 2026 GMT Subject: CN=CB4803E375EB3D22C24F38BE20AC4065591E7208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c2:35:75:7a:5b:10:2b:74:0b:cd:19:df:27: 53:18:26:71:4d:aa:1f:d7:c3:15:22:fc:28:08:d3: ed:29:d7:9d:dc:26:55:a7:c6:12:98:80:be:bc:70: df:3a:f6:3f:f9:1e:9d:27:00:e2:57:28:5d:44:0b: ce:4d:d3:29:f2:f5:88:39:3c:eb:e0:b7:e2:c0:dd: da:9d:c2:ea:23:67:66:24:09:df:20:a2:99:4e:54: f2:21:48:6c:23:04:f5:2c:fd:d7:79:ea:d1:39:95: 03:a6:8e:15:36:0e:ee:79:a3:08:6d:52:f2:d2:33: d2:79:b1:30:4b:41:5c:30:d1:6f:28:fe:26:3f:76: 0d:7d:f6:7f:4e:df:46:47:ed:c3:3f:fe:ad:2c:7e: e6:66:75:26:58:30:15:18:03:c5:13:2a:0d:06:68: 11:83:c9:27:c4:00:cd:55:13:05:f0:cc:20:d5:2f: 29:4b:9a:44:56:9d:5a:8c:bf:c2:7d:e2:cf:3e:04: ee:27:be:53:6d:a4:57:c6:b7:c1:5f:64:12:8a:fa: 3b:0f:4b:f2:ab:37:f3:8d:f9:85:8f:62:90:b4:ff: 16:b9:e3:01:46:21:03:ac:41:ad:39:fd:89:4d:e5: 8d:b0:97:9b:47:b8:ef:73:8d:19:44:c3:c8:03:4f: 0b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:48:03:E3:75:EB:3D:22:C2:4F:38:BE:20:AC:40:65:59:1E:72:08 X509v3 Authority Key Identifier: keyid:72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333034303a3a2f34382d3438203d3e20323134373635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:3040::/48 Signature Algorithm: sha256WithRSAEncryption 5d:28:1f:25:ad:21:7b:90:a5:52:40:ff:75:7b:39:11:48:39: d3:ec:7b:05:74:2e:63:54:bd:62:91:07:a4:53:0c:63:67:a1: d1:35:cf:22:99:1e:c8:9b:31:f1:d6:2e:08:7b:dd:e0:d3:28: 44:9b:be:36:9f:20:65:57:e0:f2:5e:78:82:dc:35:9c:1f:22: 0b:7b:04:a8:65:75:e9:af:88:88:46:a2:eb:8d:ef:e5:40:8b: 01:af:93:0c:b1:95:b1:1a:49:41:a8:39:92:82:4e:13:3b:e6: bd:b6:7c:f4:79:1e:3e:b0:36:fe:ab:f2:3a:23:30:5b:1c:62: 48:df:d9:86:7a:3d:a3:26:09:98:67:d9:9b:a0:74:71:7d:ca: cb:ad:79:88:f2:a1:54:35:02:4f:41:79:c4:88:85:93:1c:09: 18:e0:e1:ff:20:b6:25:ca:2e:dc:f6:12:b9:53:77:7e:97:65: 76:7b:e0:75:63:16:86:5c:1d:38:55:48:c3:5b:18:82:c8:b5: af:59:e3:86:ac:c2:46:6a:fd:c9:e7:08:cd:37:75:28:61:50: f3:7a:ec:07:20:f9:9c:1e:a9:44:32:37:66:3f:65:dc:dc:4c: ed:5e:39:fb:9c:ab:51:59:f0:65:59:22:41:71:fb:e4:25:86: bd:c2:46:ef -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUb9n9Q9ArzUBwW+n36Pafu8JKhCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJEMURERTFCMUIwNDVEOEJFNDM5REREMTAxNDg2RTY3 MTdDOTNDQzAeFw0yNTA3MDQxOTUyMzRaFw0yNjA3MDMxOTU3MzRaMDMxMTAvBgNV BAMTKENCNDgwM0UzNzVFQjNEMjJDMjRGMzhCRTIwQUM0MDY1NTkxRTcyMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgwjV1elsQK3QLzRnfJ1MYJnFN qh/XwxUi/CgI0+0p153cJlWnxhKYgL68cN869j/5Hp0nAOJXKF1EC85N0yny9Yg5 POvgt+LA3dqdwuojZ2YkCd8goplOVPIhSGwjBPUs/dd56tE5lQOmjhU2Du55owht UvLSM9J5sTBLQVww0W8o/iY/dg199n9O30ZH7cM//q0sfuZmdSZYMBUYA8UTKg0G aBGDySfEAM1VEwXwzCDVLylLmkRWnVqMv8J94s8+BO4nvlNtpFfGt8FfZBKK+jsP S/KrN/ON+YWPYpC0/xa54wFGIQOsQa05/YlN5Y2wl5tHuO9zjRlEw8gDTwvvAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUy0gD43XrPSLCTzi+IKxAZVkecggwHwYDVR0j BBgwFoAUctHd4bGwRdi+Q53dEBSG5nF8k8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDY0YWM5NDEtNWE3Yy00MmNmLWI2NGItMGIyODhmMTg4 N2YyLzEvNzJEMURERTFCMUIwNDVEOEJFNDM5REREMTAxNDg2RTY3MTdDOTNDQy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzcyRDFEREUxQjFCMDQ1 RDhCRTQzOURERDEwMTQ4NkU2NzE3QzkzQ0MuY2VyMIG3BggrBgEFBQcBCwSBqjCB pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2Q2NGFjOTQxLTVhN2MtNDJjZi1iNjRiLTBiMjg4ZjE4ODdm Mi8xLzMyNjEzMDM2M2EzOTY2MzgzMTNhMzMzMDM0MzAzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzMjMxMzQzNzM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBp+BMEAwDQYJKoZIhvcN AQELBQADggEBAF0oHyWtIXuQpVJA/3V7ORFIOdPsewV0LmNUvWKRB6RTDGNnodE1 zyKZHsibMfHWLgh73eDTKESbvjafIGVX4PJeeILcNZwfIgt7BKhldemviIhGouuN 7+VAiwGvkwyxlbEaSUGoOZKCThM75r22fPR5Hj6wNv6r8jojMFscYkjf2YZ6PaMm CZhn2ZugdHF9ysuteYjyoVQ1Ak9BecSIhZMcCRjg4f8gtiXKLtz2ErlTd36XZXZ7 4HVjFoZcHThVSMNbGILIta9Z44aswkZq/cnnCM03dShhUPN67Acg+ZweqUQyN2Y/ ZdzcTO1eOfucq1FZ8GVZIkFx++Qlhr3CRu8= -----END CERTIFICATE-----Generated at Sat Jul 5 10:59:23 2025 by rpki-client