$ rpki-client -vvf repo.rpki.space/repo/infiniroute-proxiflare/1/326131343a3763303a3830303a3a2f33382d3338203d3e20323135353331.roa File: 326131343a3763303a3830303a3a2f33382d3338203d3e20323135353331.roa (raw, json) Hash identifier: 4BV9GsU/BGWjO82KCq/8g0TKsa2vIgFN+miYk3bQSnY= Subject key identifier: 63:26:E5:F8:C8:D9:C9:4A:91:C0:03:B0:C9:C9:2F:3F:B4:E8:0A:98 Certificate issuer: /CN=DCBE045BEA897D29CB12799DC38EF74D039B28EE Certificate serial: 750341E1D25153987EE3156FD63D6B84B1A5FCDF Authority key identifier: DC:BE:04:5B:EA:89:7D:29:CB:12:79:9D:C3:8E:F7:4D:03:9B:28:EE Authority info access: rsync://repo.rpki.space/repo/Infiniroute/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.cer Subject info access: rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/326131343a3763303a3830303a3a2f33382d3338203d3e20323135353331.roa Signing time: Tue 29 Apr 2025 18:19:20 +0000 ROA not before: Tue 29 Apr 2025 18:14:20 +0000 ROA not after: Tue 28 Apr 2026 18:19:20 +0000 asID: 215531 IP address blocks: 2a14:7c0:800::/38 maxlen: 38 Validation: OK Signature path: rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.crl rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.mft rsync://repo.rpki.space/repo/Infiniroute/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.cer rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 May 2025 22:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:03:41:e1:d2:51:53:98:7e:e3:15:6f:d6:3d:6b:84:b1:a5:fc:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCBE045BEA897D29CB12799DC38EF74D039B28EE Validity Not Before: Apr 29 18:14:20 2025 GMT Not After : Apr 28 18:19:20 2026 GMT Subject: CN=6326E5F8C8D9C94A91C003B0C9C92F3FB4E80A98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5b:62:7c:d2:d2:0b:e4:1a:f7:a2:a9:10:f2: 32:51:e3:ea:c3:0a:3f:39:3d:6c:1c:78:83:9d:a7: 1c:d2:03:28:f5:ad:ed:e4:1d:99:d8:5e:ff:12:d4: 66:f1:b7:bd:4d:4f:ea:f5:94:e5:41:a4:b3:ab:7e: 92:f9:9f:37:b2:eb:4c:ef:df:5c:53:0e:68:a7:93: 3c:3f:c8:7f:97:b4:94:45:6c:67:de:67:ea:ed:1c: 52:be:0f:f1:ad:d0:91:ea:c3:28:32:6e:81:f1:3c: 19:47:70:59:87:9e:02:bd:e8:24:34:89:bf:3d:7b: 0a:37:af:e9:96:66:fb:2b:e0:28:77:a7:30:cc:24: a8:43:06:7d:a3:68:a2:f1:bb:56:56:9e:fd:41:c2: 16:61:26:f6:af:5c:ab:18:12:fb:d8:59:df:c9:fc: 45:ce:2d:78:60:ce:6d:73:24:1f:e6:e8:c6:69:eb: f8:63:79:a7:a1:de:c9:04:af:56:22:ac:5e:01:c9: e3:1c:6f:47:07:ce:c2:3b:4b:07:a6:f7:69:af:c0: 5b:0d:ca:79:ed:b3:14:69:93:27:f5:66:fc:c7:cf: 55:42:3d:86:83:b8:eb:b2:0f:5f:04:85:85:79:91: c0:11:b9:b8:e4:cc:25:2a:ae:e5:da:cd:02:35:fb: ed:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:26:E5:F8:C8:D9:C9:4A:91:C0:03:B0:C9:C9:2F:3F:B4:E8:0A:98 X509v3 Authority Key Identifier: keyid:DC:BE:04:5B:EA:89:7D:29:CB:12:79:9D:C3:8E:F7:4D:03:9B:28:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.crl Authority Information Access: CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.cer Subject Information Access: Signed Object - URI:rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/326131343a3763303a3830303a3a2f33382d3338203d3e20323135353331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7c0:800::/38 Signature Algorithm: sha256WithRSAEncryption 86:14:30:32:0d:36:45:2b:9e:4f:8b:13:05:63:4e:eb:da:90: c8:05:2d:52:1f:d0:0e:bc:03:f7:1e:ba:3e:83:a2:ca:dd:52: 5f:86:d6:78:c8:71:ee:d6:2e:84:72:7f:a1:dd:9d:4b:51:f8: 11:05:25:4b:11:80:e7:32:fd:ec:fd:6b:39:34:af:37:58:05: 69:58:9e:c8:c4:7c:d9:2b:1f:71:83:e9:9f:e9:61:50:68:7e: 1d:02:ec:a8:21:6c:43:5b:cf:66:25:7a:a1:6f:3a:77:91:6d: 61:c6:29:89:7e:09:38:57:77:79:b2:17:e1:87:52:5a:1b:fc: 6d:cf:ff:77:62:b4:f8:f8:1d:c0:1b:51:e9:70:77:5a:42:c8: 73:92:ea:5c:4c:bc:79:c2:78:68:7a:97:c7:10:cd:99:32:a0: 34:a9:c6:e3:8f:46:44:87:a1:2d:9b:18:73:88:b2:10:d4:c8: 21:ec:4d:9f:01:eb:08:aa:2f:c8:53:ad:82:e1:85:41:12:d1: 14:bc:6e:29:0c:84:ad:aa:d3:30:23:b6:24:b8:ae:8f:52:5d: 74:18:0b:1f:13:17:a2:dc:ea:ee:ea:8a:30:24:52:60:2f:83: 26:80:df:da:c3:10:71:1b:2b:3d:07:76:34:17:e7:f9:f9:2c: 5a:ec:82:5d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIUdQNB4dJRU5h+4xVv1j1rhLGl/N8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENCRTA0NUJFQTg5N0QyOUNCMTI3OTlEQzM4RUY3NEQw MzlCMjhFRTAeFw0yNTA0MjkxODE0MjBaFw0yNjA0MjgxODE5MjBaMDMxMTAvBgNV BAMTKDYzMjZFNUY4QzhEOUM5NEE5MUMwMDNCMEM5QzkyRjNGQjRFODBBOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNW2J80tIL5Br3oqkQ8jJR4+rD Cj85PWwceIOdpxzSAyj1re3kHZnYXv8S1Gbxt71NT+r1lOVBpLOrfpL5nzey60zv 31xTDminkzw/yH+XtJRFbGfeZ+rtHFK+D/Gt0JHqwygyboHxPBlHcFmHngK96CQ0 ib89ewo3r+mWZvsr4Ch3pzDMJKhDBn2jaKLxu1ZWnv1BwhZhJvavXKsYEvvYWd/J /EXOLXhgzm1zJB/m6MZp6/hjeaeh3skEr1YirF4ByeMcb0cHzsI7Swem92mvwFsN ynntsxRpkyf1ZvzHz1VCPYaDuOuyD18EhYV5kcARubjkzCUqruXazQI1++05AgMB AAGjggITMIICDzAdBgNVHQ4EFgQUYybl+MjZyUqRwAOwyckvP7ToCpgwHwYDVR0j BBgwFoAU3L4EW+qJfSnLEnmdw473TQObKO4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vaW5maW5p cm91dGUtcHJveGlmbGFyZS8xL0RDQkUwNDVCRUE4OTdEMjlDQjEyNzk5REMzOEVG NzREMDM5QjI4RUUuY3JsMHMGCCsGAQUFBwEBBGcwZTBjBggrBgEFBQcwAoZXcnN5 bmM6Ly9yZXBvLnJwa2kuc3BhY2UvcmVwby9JbmZpbmlyb3V0ZS8xL0RDQkUwNDVC RUE4OTdEMjlDQjEyNzk5REMzOEVGNzREMDM5QjI4RUUuY2VyMIGVBggrBgEFBQcB CwSBiDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3Jl cG8vaW5maW5pcm91dGUtcHJveGlmbGFyZS8xLzMyNjEzMTM0M2EzNzYzMzAzYTM4 MzAzMDNhM2EyZjMzMzgyZDMzMzgyMDNkM2UyMDMyMzEzNTM1MzMzMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw CAMGAioUB8AIMA0GCSqGSIb3DQEBCwUAA4IBAQCGFDAyDTZFK55PixMFY07r2pDI BS1SH9AOvAP3Hro+g6LK3VJfhtZ4yHHu1i6Ecn+h3Z1LUfgRBSVLEYDnMv3s/Ws5 NK83WAVpWJ7IxHzZKx9xg+mf6WFQaH4dAuyoIWxDW89mJXqhbzp3kW1hximJfgk4 V3d5shfhh1JaG/xtz/93YrT4+B3AG1HpcHdaQshzkupcTLx5wnhoepfHEM2ZMqA0 qcbjj0ZEh6EtmxhziLIQ1Mgh7E2fAesIqi/IU62C4YVBEtEUvG4pDIStqtMwI7Yk uK6PUl10GAsfExei3Oru6oowJFJgL4MmgN/awxBxGys9B3Y0F+f5+Sxa7IJd -----END CERTIFICATE-----Generated at Thu May 8 08:03:37 2025 by rpki-client