$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333066393a3a2f34382d3438203d3e203136353039.roa File: 326130363a396638313a333066393a3a2f34382d3438203d3e203136353039.roa (raw, json) Hash identifier: rXpfmww+Ew/jGolMjNSiEO8uETTQ/TWoraqh3Qzn5aM= Subject key identifier: 08:54:90:09:A4:59:6B:E8:32:D8:78:22:2F:A3:DC:69:51:5B:05:75 Certificate issuer: /CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC Certificate serial: 6DC7445A749BAD0FB8B729356B3C7D92553CB743 Authority key identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333066393a3a2f34382d3438203d3e203136353039.roa Signing time: Fri 04 Jul 2025 19:57:33 +0000 ROA not before: Fri 04 Jul 2025 19:52:33 +0000 ROA not after: Fri 03 Jul 2026 19:57:33 +0000 asID: 16509 IP address blocks: 2a06:9f81:30f9::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 20:52:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:c7:44:5a:74:9b:ad:0f:b8:b7:29:35:6b:3c:7d:92:55:3c:b7:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC Validity Not Before: Jul 4 19:52:33 2025 GMT Not After : Jul 3 19:57:33 2026 GMT Subject: CN=08549009A4596BE832D878222FA3DC69515B0575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:aa:fa:b6:50:bf:65:81:bd:a9:d2:2e:5c:37: c0:62:75:1b:f1:c2:0e:6f:81:59:39:6d:18:5f:85: 3e:8d:12:6f:cb:a5:5f:3f:1d:e3:58:7f:6f:67:aa: bd:3e:2a:9a:53:35:c6:6f:5b:d0:42:23:cd:c7:5a: d3:c7:1c:7c:56:25:e4:ab:1c:0b:5a:12:cc:0d:0a: 73:9e:a5:8e:a8:b3:5c:5b:c6:85:69:bb:93:10:f5: fd:28:c6:73:9e:af:1e:d9:b1:f5:55:07:3c:7d:6a: 10:ef:3a:e5:43:62:8a:5f:91:a1:25:ae:a5:eb:73: f6:e2:af:a9:67:1f:69:05:b5:97:9f:1e:8e:9b:65: f4:bd:8a:0f:17:02:87:70:5c:04:9d:30:89:c9:08: 45:d9:73:5e:12:19:44:b6:9b:46:2e:f0:2a:e8:f9: ef:b9:61:61:89:da:85:6f:ba:30:19:6d:15:ad:22: dc:cf:1f:81:48:48:ab:7f:09:96:ae:4f:23:dc:ec: a8:3b:c7:cb:60:30:12:7a:31:d3:b3:ba:f6:16:08: 3e:b7:d4:fb:e3:cf:f9:81:3e:2e:db:ca:49:72:56: f6:b2:f5:d8:8a:f0:6b:fd:ef:2f:59:0e:c9:d8:4f: b6:97:11:96:74:c9:ac:15:37:82:92:ad:7c:35:bb: 71:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:54:90:09:A4:59:6B:E8:32:D8:78:22:2F:A3:DC:69:51:5B:05:75 X509v3 Authority Key Identifier: keyid:72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333066393a3a2f34382d3438203d3e203136353039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:30f9::/48 Signature Algorithm: sha256WithRSAEncryption 03:2d:33:83:7e:05:36:93:62:64:3e:df:e4:07:31:39:aa:e6: 4b:e9:93:2d:55:19:23:67:dd:6e:10:0e:f3:a0:19:3d:87:8c: 56:e6:15:e3:8c:cb:9e:66:0d:cc:4c:a6:ad:bb:6f:ba:2a:71: 4a:4c:70:bf:05:72:f6:fc:60:9c:13:d5:1b:93:d0:43:27:4f: b5:9b:94:8e:7e:f0:0c:65:94:90:09:30:3c:6e:8f:16:69:d3: e7:b9:e6:7c:76:a0:c4:15:a5:b3:b2:a2:39:64:07:e3:4b:0e: 1d:7b:c6:30:77:aa:e7:fc:5a:62:cc:ac:f4:c5:48:ee:8f:0f: b4:eb:af:3c:03:59:56:70:c0:8b:57:d9:20:9a:07:6f:aa:c3: 4e:c0:e4:80:b2:29:5f:70:15:9c:39:6d:78:89:46:70:d7:0f: 9f:5b:f8:75:ca:9a:aa:96:3d:b4:09:fc:fb:c3:15:40:bb:f3: c1:da:35:74:dd:04:af:e2:be:30:f8:16:27:2f:51:0b:4c:5b: 85:70:f4:28:f3:d2:21:51:85:70:86:83:53:b8:8f:7b:48:47: 35:60:65:06:bf:ac:06:17:84:29:f9:98:a5:b8:1c:76:5f:79: 8a:4c:0c:35:71:0d:7a:51:3b:08:c8:14:56:12:0a:36:8b:05: 33:33:f6:f0 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUbcdEWnSbrQ+4tyk1azx9klU8t0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJEMURERTFCMUIwNDVEOEJFNDM5REREMTAxNDg2RTY3 MTdDOTNDQzAeFw0yNTA3MDQxOTUyMzNaFw0yNjA3MDMxOTU3MzNaMDMxMTAvBgNV BAMTKDA4NTQ5MDA5QTQ1OTZCRTgzMkQ4NzgyMjJGQTNEQzY5NTE1QjA1NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKqvq2UL9lgb2p0i5cN8BidRvx wg5vgVk5bRhfhT6NEm/LpV8/HeNYf29nqr0+KppTNcZvW9BCI83HWtPHHHxWJeSr HAtaEswNCnOepY6os1xbxoVpu5MQ9f0oxnOerx7ZsfVVBzx9ahDvOuVDYopfkaEl rqXrc/bir6lnH2kFtZefHo6bZfS9ig8XAodwXASdMInJCEXZc14SGUS2m0Yu8Cro +e+5YWGJ2oVvujAZbRWtItzPH4FISKt/CZauTyPc7Kg7x8tgMBJ6MdOzuvYWCD63 1Pvjz/mBPi7byklyVvay9diK8Gv97y9ZDsnYT7aXEZZ0yawVN4KSrXw1u3FLAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUCFSQCaRZa+gy2HgiL6PcaVFbBXUwHwYDVR0j BBgwFoAUctHd4bGwRdi+Q53dEBSG5nF8k8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDY0YWM5NDEtNWE3Yy00MmNmLWI2NGItMGIyODhmMTg4 N2YyLzEvNzJEMURERTFCMUIwNDVEOEJFNDM5REREMTAxNDg2RTY3MTdDOTNDQy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzcyRDFEREUxQjFCMDQ1 RDhCRTQzOURERDEwMTQ4NkU2NzE3QzkzQ0MuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2Q2NGFjOTQxLTVhN2MtNDJjZi1iNjRiLTBiMjg4ZjE4ODdm Mi8xLzMyNjEzMDM2M2EzOTY2MzgzMTNhMzMzMDY2MzkzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzMTM2MzUzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgafgTD5MA0GCSqGSIb3DQEB CwUAA4IBAQADLTODfgU2k2JkPt/kBzE5quZL6ZMtVRkjZ91uEA7zoBk9h4xW5hXj jMueZg3MTKatu2+6KnFKTHC/BXL2/GCcE9Ubk9BDJ0+1m5SOfvAMZZSQCTA8bo8W adPnueZ8dqDEFaWzsqI5ZAfjSw4de8Ywd6rn/FpizKz0xUjujw+06688A1lWcMCL V9kgmgdvqsNOwOSAsilfcBWcOW14iUZw1w+fW/h1ypqqlj20Cfz7wxVAu/PB2jV0 3QSv4r4w+BYnL1ELTFuFcPQo89IhUYVwhoNTuI97SEc1YGUGv6wGF4Qp+ZiluBx2 X3mKTAw1cQ16UTsIyBRWEgo2iwUzM/bw -----END CERTIFICATE-----Generated at Sat Jul 5 10:45:50 2025 by rpki-client