$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/326130353a646663313a633432333a3a2f34382d3438203d3e203437343936.roa File: 326130353a646663313a633432333a3a2f34382d3438203d3e203437343936.roa (raw, json) Hash identifier: BjWFZsrWASwd+CG/7hUBbq3vJkOhy5Z+SMjVBI4v+js= Subject key identifier: 12:28:B9:2F:AA:D0:05:92:85:B9:B0:5C:31:70:1F:0F:8E:C5:4C:E1 Certificate issuer: /CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0 Certificate serial: 79EA964980F4E8AF2A333990949F0B8EB2214379 Authority key identifier: 8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/326130353a646663313a633432333a3a2f34382d3438203d3e203437343936.roa Signing time: Wed 18 Dec 2024 10:58:12 +0000 ROA not before: Wed 18 Dec 2024 10:53:12 +0000 ROA not after: Wed 17 Dec 2025 10:58:12 +0000 asID: 47496 IP address blocks: 2a05:dfc1:c423::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 11:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:ea:96:49:80:f4:e8:af:2a:33:39:90:94:9f:0b:8e:b2:21:43:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0 Validity Not Before: Dec 18 10:53:12 2024 GMT Not After : Dec 17 10:58:12 2025 GMT Subject: CN=1228B92FAAD0059285B9B05C31701F0F8EC54CE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7f:b1:65:fd:f4:27:48:23:80:58:c9:22:69: 67:dc:5e:6c:69:db:2d:bb:30:de:98:f1:2f:37:e1: 10:1c:ee:21:82:7b:94:5e:9f:1e:5d:20:1e:46:1e: da:06:bc:0b:64:4e:ef:4b:fb:73:18:e5:96:80:ec: bd:1a:e3:99:e9:c7:5b:dc:9d:7e:b5:0b:bb:1b:14: b7:7a:c0:be:cb:2e:66:69:0f:e5:51:56:21:5d:f4: a3:8a:6e:86:34:8d:96:d7:0f:d7:a7:b8:79:e8:40: e2:48:ab:67:72:44:09:7d:23:ce:97:4a:05:5c:1c: 3b:f3:69:03:f2:b8:52:0f:6d:53:a6:e5:14:23:24: 4e:d9:58:f7:83:d8:a5:75:c6:1c:9a:26:b7:6e:e5: a7:55:0b:0f:08:c5:bf:61:d4:f8:eb:c6:ba:67:3e: c1:48:90:0e:57:62:80:45:18:95:f0:b5:80:67:a0: a6:5f:a0:0f:c7:5f:6b:ed:a3:87:66:82:15:a2:5a: 09:63:b3:cf:09:31:dc:e3:89:fb:56:b7:48:a0:8b: d4:65:55:c7:33:25:bc:d2:3d:c4:d0:3b:79:1f:41: 3e:1b:81:1e:38:2f:26:de:93:b4:c9:97:b5:7d:68: 29:ff:70:dc:42:c3:07:25:74:f5:df:8d:7a:1d:ff: ce:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:28:B9:2F:AA:D0:05:92:85:B9:B0:5C:31:70:1F:0F:8E:C5:4C:E1 X509v3 Authority Key Identifier: keyid:8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/326130353a646663313a633432333a3a2f34382d3438203d3e203437343936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:c423::/48 Signature Algorithm: sha256WithRSAEncryption 51:83:4f:48:a0:54:ec:b8:22:3b:57:1e:01:7b:21:0e:31:ea: ef:d5:f5:39:7d:00:85:c8:30:2b:d0:83:53:cf:61:a7:ff:ad: 83:41:2b:3b:a8:58:45:f1:21:15:df:f0:e4:4c:d8:cc:55:40: 9d:6a:a8:b3:f1:0f:1b:1d:94:b7:27:9b:2a:fe:81:01:b5:95: a9:ae:ca:c2:22:13:8a:8f:58:20:f5:b7:7a:28:68:94:d2:b3: 81:91:44:37:ae:ed:88:c4:14:a3:e6:7d:6f:22:48:0d:a9:29: 50:e3:cc:4d:82:59:19:8e:2a:4c:df:9f:d5:a5:64:e7:1e:15: 7f:6c:b3:4d:ae:1e:5e:81:a1:f1:b2:d8:dc:bd:7e:20:05:28: 36:80:d7:9a:6d:6e:ac:6c:f8:3e:82:b6:c6:83:85:4a:ba:b6: a7:11:d2:ec:88:5a:dd:0e:91:d9:56:8d:15:f9:0b:09:b7:ca: 81:6d:56:1d:f7:18:16:fd:ee:bd:ff:75:25:53:d1:2e:a0:6c: 61:2a:1c:7b:92:8c:70:db:90:fd:ab:4b:ae:7a:99:fd:bb:01: 83:51:a0:82:1a:a1:a0:23:20:4f:3b:f5:b1:20:52:2a:5f:bf: b2:74:d4:e0:3c:b4:53:84:35:1d:d7:2b:fd:d6:ff:07:31:4f: be:50:7a:ce -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUeeqWSYD06K8qMzmQlJ8LjrIhQ3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE4OUUwREI4OTUzMUY3MjNFNDJDNzUwOTI4MkNDNTQ5 NkZFQTRGMDAeFw0yNDEyMTgxMDUzMTJaFw0yNTEyMTcxMDU4MTJaMDMxMTAvBgNV BAMTKDEyMjhCOTJGQUFEMDA1OTI4NUI5QjA1QzMxNzAxRjBGOEVDNTRDRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPf7Fl/fQnSCOAWMkiaWfcXmxp 2y27MN6Y8S834RAc7iGCe5Renx5dIB5GHtoGvAtkTu9L+3MY5ZaA7L0a45npx1vc nX61C7sbFLd6wL7LLmZpD+VRViFd9KOKboY0jZbXD9enuHnoQOJIq2dyRAl9I86X SgVcHDvzaQPyuFIPbVOm5RQjJE7ZWPeD2KV1xhyaJrdu5adVCw8Ixb9h1Pjrxrpn PsFIkA5XYoBFGJXwtYBnoKZfoA/HX2vto4dmghWiWgljs88JMdzjiftWt0igi9Rl VcczJbzSPcTQO3kfQT4bgR44Lybek7TJl7V9aCn/cNxCwwcldPXfjXod/859AgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUEii5L6rQBZKFubBcMXAfD47FTOEwHwYDVR0j BBgwFoAUiong24lTH3I+QsdQkoLMVJb+pPAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgy MzUyLzIvOEE4OUUwREI4OTUzMUY3MjNFNDJDNzUwOTI4MkNDNTQ5NkZFQTRGMC5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzhBODlFMERCODk1MzFG NzIzRTQyQzc1MDkyODJDQzU0OTZGRUE0RjAuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzNkYTRkOGI0LWExNTctNDYzNC1hYjE4LTNlZjlkMDk4MjM1 Mi8yLzMyNjEzMDM1M2E2NDY2NjMzMTNhNjMzNDMyMzMzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzNDM3MzQzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwcQjMA0GCSqGSIb3DQEB CwUAA4IBAQBRg09IoFTsuCI7Vx4BeyEOMerv1fU5fQCFyDAr0INTz2Gn/62DQSs7 qFhF8SEV3/DkTNjMVUCdaqiz8Q8bHZS3J5sq/oEBtZWprsrCIhOKj1gg9bd6KGiU 0rOBkUQ3ru2IxBSj5n1vIkgNqSlQ48xNglkZjipM35/VpWTnHhV/bLNNrh5egaHx stjcvX4gBSg2gNeabW6sbPg+grbGg4VKuranEdLsiFrdDpHZVo0V+QsJt8qBbVYd 9xgW/e69/3UlU9EuoGxhKhx7koxw25D9q0uuepn9uwGDUaCCGqGgIyBPO/WxIFIq X7+ydNTgPLRThDUd1yv91v8HMU++UHrO -----END CERTIFICATE-----Generated at Wed May 7 03:54:07 2025 by rpki-client