$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333034353a3a2f34382d3438203d3e20313437303336.roa File: 326130363a396638313a333034353a3a2f34382d3438203d3e20313437303336.roa (raw, json) Hash identifier: qdR2c6Yk1rF85JM9cvy/J5RWgZjD5cAobIS8i6MUuw8= Subject key identifier: 87:EC:24:61:3F:F8:7D:71:4A:E4:70:19:28:4D:77:4F:47:0A:64:E7 Certificate issuer: /CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB Certificate serial: 65AAB76897F28407B69519E42D1D34A8DE89BD3B Authority key identifier: B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333034353a3a2f34382d3438203d3e20313437303336.roa Signing time: Tue 07 Jan 2025 12:12:39 +0000 ROA not before: Tue 07 Jan 2025 12:07:39 +0000 ROA not after: Tue 06 Jan 2026 12:12:39 +0000 asID: 147036 IP address blocks: 2a06:9f81:3045::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 12:18:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:aa:b7:68:97:f2:84:07:b6:95:19:e4:2d:1d:34:a8:de:89:bd:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB Validity Not Before: Jan 7 12:07:39 2025 GMT Not After : Jan 6 12:12:39 2026 GMT Subject: CN=87EC24613FF87D714AE47019284D774F470A64E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:0f:70:70:9e:06:c0:f2:bd:4d:7e:60:03:eb: 63:21:f1:29:a4:b1:b5:4a:2a:ac:ea:84:0d:3b:27: 95:1e:bb:83:85:39:b1:e9:27:28:cd:0c:90:f8:7b: d0:b1:83:12:8c:6c:7e:2f:da:5a:16:f6:a5:17:a7: 7d:55:65:96:6b:3f:c9:61:29:34:c6:b6:9d:cc:0f: d3:9a:95:3f:0d:43:d6:f4:d3:58:9c:70:0c:3a:47: ca:98:f8:53:0a:95:02:39:a9:69:07:87:7d:ef:df: 60:07:8e:ff:d3:d7:ca:5e:ab:f8:33:1d:c9:24:18: a9:94:8e:24:fa:7e:67:6d:14:82:84:89:46:cc:2a: 25:f1:83:17:fc:87:fa:0f:22:93:39:4f:ce:21:ec: ea:25:7a:0d:9a:88:5b:4c:24:37:96:17:e8:e7:9f: 5f:73:7c:24:5b:1c:c2:da:56:a8:14:5d:38:b1:3e: f5:20:04:52:2d:a9:54:99:87:c9:90:44:a4:2b:ce: 3a:fd:0b:04:41:e2:98:3a:80:75:f8:98:f5:33:97: 38:c2:c2:37:b9:ab:b2:a0:ca:c2:58:69:4e:f2:72: b8:a2:a1:aa:39:0d:ea:d5:de:4d:39:2b:30:85:c6: c6:6d:09:28:d8:a6:ed:35:47:0c:fd:63:e2:6d:94: 3e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:EC:24:61:3F:F8:7D:71:4A:E4:70:19:28:4D:77:4F:47:0A:64:E7 X509v3 Authority Key Identifier: keyid:B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333034353a3a2f34382d3438203d3e20313437303336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:3045::/48 Signature Algorithm: sha256WithRSAEncryption 77:29:c2:4a:cb:15:bf:d2:ba:c7:9f:22:63:aa:61:ea:d6:c6: 14:0b:34:1a:d8:2f:c3:3e:76:01:da:4c:93:35:9b:54:f2:3b: af:e2:b3:75:36:2e:66:12:24:cb:53:e0:c5:79:7d:7a:75:44: e1:5e:84:2f:0b:7f:5d:0f:d4:7f:e3:e3:98:50:99:9b:9a:22: 43:57:4e:25:0d:5d:88:87:dc:39:e7:0c:92:39:af:ef:38:a9: 55:e4:15:d3:66:8d:ab:db:50:12:4e:e8:81:8f:79:5a:ca:1b: be:d1:1a:13:c9:2e:21:6e:a5:ca:1e:2d:1f:4b:56:df:f6:55: fb:dd:15:ad:92:a1:98:52:39:52:e3:be:77:59:17:a0:f5:57: 72:c0:28:ac:2a:cc:72:97:97:7e:80:fa:de:c0:62:95:7c:3e: 13:13:51:42:09:22:6a:88:f2:01:69:df:ee:22:74:6e:6e:91: 86:e0:0f:7d:d1:16:c6:1d:3b:a2:b4:4b:f2:f9:13:e5:6e:70: bb:e4:fc:98:5a:c7:94:3f:91:be:62:d2:00:d2:81:54:f4:c4: 8c:16:86:11:0f:fe:78:22:b7:89:fc:fb:f1:59:12:db:01:14: 81:84:3f:fa:8e:59:1b:13:ad:ba:32:41:02:64:3d:e3:9d:9b: 53:1d:92:57 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUZaq3aJfyhAe2lRnkLR00qN6JvTswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc1RTVGMzY1MjQzMENFRjk2RTFFMEJEMTZEREFDNDA3 MjY4ODlFQjAeFw0yNTAxMDcxMjA3MzlaFw0yNjAxMDYxMjEyMzlaMDMxMTAvBgNV BAMTKDg3RUMyNDYxM0ZGODdENzE0QUU0NzAxOTI4NEQ3NzRGNDcwQTY0RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlD3BwngbA8r1NfmAD62Mh8Smk sbVKKqzqhA07J5Ueu4OFObHpJyjNDJD4e9CxgxKMbH4v2loW9qUXp31VZZZrP8lh KTTGtp3MD9OalT8NQ9b001iccAw6R8qY+FMKlQI5qWkHh33v32AHjv/T18peq/gz HckkGKmUjiT6fmdtFIKEiUbMKiXxgxf8h/oPIpM5T84h7Ooleg2aiFtMJDeWF+jn n19zfCRbHMLaVqgUXTixPvUgBFItqVSZh8mQRKQrzjr9CwRB4pg6gHX4mPUzlzjC wje5q7KgysJYaU7ycriioao5DerV3k05KzCFxsZtCSjYpu01Rwz9Y+JtlD49AgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUh+wkYT/4fXFK5HAZKE13T0cKZOcwHwYDVR0j BBgwFoAUt15fNlJDDO+W4eC9Ft2sQHJoieswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDY0YWM5NDEtNWE3Yy00MmNmLWI2NGItMGIyODhmMTg4 N2YyLzAvQjc1RTVGMzY1MjQzMENFRjk2RTFFMEJEMTZEREFDNDA3MjY4ODlFQi5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0I3NUU1RjM2NTI0MzBD RUY5NkUxRTBCRDE2RERBQzQwNzI2ODg5RUIuY2VyMIG3BggrBgEFBQcBCwSBqjCB pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2Q2NGFjOTQxLTVhN2MtNDJjZi1iNjRiLTBiMjg4ZjE4ODdm Mi8wLzMyNjEzMDM2M2EzOTY2MzgzMTNhMzMzMDM0MzUzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzMTM0MzczMDMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBp+BMEUwDQYJKoZIhvcN AQELBQADggEBAHcpwkrLFb/SusefImOqYerWxhQLNBrYL8M+dgHaTJM1m1TyO6/i s3U2LmYSJMtT4MV5fXp1ROFehC8Lf10P1H/j45hQmZuaIkNXTiUNXYiH3DnnDJI5 r+84qVXkFdNmjavbUBJO6IGPeVrKG77RGhPJLiFupcoeLR9LVt/2VfvdFa2SoZhS OVLjvndZF6D1V3LAKKwqzHKXl36A+t7AYpV8PhMTUUIJImqI8gFp3+4idG5ukYbg D33RFsYdO6K0S/L5E+VucLvk/Jhax5Q/kb5i0gDSgVT0xIwWhhEP/ngit4n8+/FZ EtsBFIGEP/qOWRsTrboyQQJkPeOdm1Mdklc= -----END CERTIFICATE-----Generated at Mon May 12 02:06:44 2025 by rpki-client