$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166323a3a2f34382d3438203d3e20323030363736.roa File: 326130613a363034303a623166323a3a2f34382d3438203d3e20323030363736.roa (raw, json) Hash identifier: GfDTo5P3qIg8CFRKTrJhl2ZS/FY+3t9O8Sx9C2rOTZk= Subject key identifier: 34:64:A5:22:E0:F0:93:1B:CC:07:B5:02:C9:93:DF:7E:54:BD:47:84 Certificate issuer: /CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057 Certificate serial: 113B4247CF44BFDE4A54E4C6F3DB7AFD06BBF911 Authority key identifier: 4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166323a3a2f34382d3438203d3e20323030363736.roa Signing time: Fri 05 Jun 2026 11:06:48 +0000 ROA not before: Fri 05 Jun 2026 11:01:48 +0000 ROA not after: Fri 04 Jun 2027 11:06:48 +0000 asID: 200676 IP address blocks: 2a0a:6040:b1f2::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 19:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:3b:42:47:cf:44:bf:de:4a:54:e4:c6:f3:db:7a:fd:06:bb:f9:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057 Validity Not Before: Jun 5 11:01:48 2026 GMT Not After : Jun 4 11:06:48 2027 GMT Subject: CN=3464A522E0F0931BCC07B502C993DF7E54BD4784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e4:df:89:ac:25:a4:40:e5:db:bc:47:1a:ad: d6:0f:35:62:49:14:d9:76:0e:c4:09:15:e4:af:50: 09:1f:24:a7:96:04:79:6e:23:bf:c7:37:6c:37:c6: 44:c4:64:e7:26:37:52:42:5d:bc:77:b1:d9:56:ec: 6a:68:3d:f2:fd:61:3b:bf:5b:2d:47:0c:12:5b:0e: 17:d5:b6:16:3f:8a:46:c9:ed:23:02:f1:57:29:39: 24:12:75:f3:b0:0c:83:14:97:bd:9f:70:ff:86:9f: 8b:ad:65:53:07:be:93:c8:b2:8f:61:be:2a:7b:ca: 7a:3c:a7:08:ce:2b:6b:fb:34:b8:89:04:37:28:03: 8a:cc:31:4f:4b:47:4a:b8:b8:eb:aa:f6:d3:b9:4a: cf:9d:9b:14:ae:81:18:e7:0f:00:0a:1e:a9:9f:99: 6a:f2:64:b7:60:16:9a:d9:9e:62:7d:a7:15:56:b8: 88:8f:0f:ef:87:81:d8:93:c8:44:ec:06:76:f4:6f: 8b:8d:2e:03:23:62:42:e1:fc:0b:1a:35:d6:ba:dd: 70:61:96:74:f9:54:5b:bb:76:c5:db:c0:ea:df:23: 97:5e:df:91:d1:96:a0:f6:3f:fc:21:92:20:41:f4: 73:e2:b1:ff:89:5d:e5:7a:05:1f:09:05:7e:b8:2a: 78:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:64:A5:22:E0:F0:93:1B:CC:07:B5:02:C9:93:DF:7E:54:BD:47:84 X509v3 Authority Key Identifier: keyid:4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166323a3a2f34382d3438203d3e20323030363736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:b1f2::/48 Signature Algorithm: sha256WithRSAEncryption 3c:bc:0d:6c:81:10:18:b1:8c:6c:01:42:93:1f:e6:06:57:d3: 46:22:83:e2:38:66:cb:98:ef:3f:4a:de:c7:40:ba:f4:c4:d9: 35:66:42:c6:7e:06:e2:4e:51:7b:bd:30:fc:6e:4c:b1:c9:39: fe:a0:c1:e0:8d:f5:41:be:2e:86:da:1b:49:fc:46:b4:78:29: 20:44:f9:c1:d0:be:e4:46:97:a2:dd:db:fe:9b:05:a7:15:21: 9e:a8:4d:d7:19:a8:0c:e0:0a:c0:11:f0:b3:66:76:ef:df:6f: 8e:43:d7:c8:ad:dd:5d:3d:9d:6a:19:e7:d4:92:0a:8f:10:96: 92:ea:e7:aa:29:ee:de:bd:60:1e:0e:3f:84:50:e4:46:3a:d1: c8:b5:e3:cd:bb:05:09:e2:6b:29:db:db:89:6c:cd:25:70:b7: 65:f0:ba:6f:63:13:34:7f:47:02:19:98:09:1c:0a:70:39:6d: ce:f3:68:9c:57:ed:85:22:a5:ee:59:b9:34:68:09:a1:09:c6: f5:ed:61:b9:99:6a:5f:ce:3d:56:75:28:41:b3:a2:9f:ee:d1: bc:d7:d9:b0:b2:8e:d4:dc:5a:af:60:6e:e2:e7:20:a0:58:51: 4a:6d:93:57:91:c2:ad:f0:61:e7:3f:e4:31:0a:93:cf:e3:54: 97:b2:20:c2 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUETtCR89Ev95KVOTG89t6/Qa7+REwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZEQzU3MUE1Q0RBMTM5NThCQ0U0NzVGMEU1RDkxMDFE QjgxMjA1NzAeFw0yNjA2MDUxMTAxNDhaFw0yNzA2MDQxMTA2NDhaMDMxMTAvBgNV BAMTKDM0NjRBNTIyRTBGMDkzMUJDQzA3QjUwMkM5OTNERjdFNTRCRDQ3ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx5N+JrCWkQOXbvEcardYPNWJJ FNl2DsQJFeSvUAkfJKeWBHluI7/HN2w3xkTEZOcmN1JCXbx3sdlW7GpoPfL9YTu/ Wy1HDBJbDhfVthY/ikbJ7SMC8VcpOSQSdfOwDIMUl72fcP+Gn4utZVMHvpPIso9h vip7yno8pwjOK2v7NLiJBDcoA4rMMU9LR0q4uOuq9tO5Ss+dmxSugRjnDwAKHqmf mWryZLdgFprZnmJ9pxVWuIiPD++HgdiTyETsBnb0b4uNLgMjYkLh/AsaNda63XBh lnT5VFu7dsXbwOrfI5de35HRlqD2P/whkiBB9HPisf+JXeV6BR8JBX64Kni3AgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUNGSlIuDwkxvMB7UCyZPfflS9R4QwHwYDVR0j BBgwFoAUT9xXGlzaE5WLzkdfDl2RAduBIFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzMvNEZEQzU3MUE1Q0RBMTM5NThCQ0U0NzVGMEU1RDkxMDFEQjgxMjA1Ny5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzRGREM1NzFBNUNEQTEz OTU4QkNFNDc1RjBFNUQ5MTAxREI4MTIwNTcuY2VyMIG3BggrBgEFBQcBCwSBqjCB pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzJhY2EzY2E2LTM0Y2MtNDc3Mi1iYWMwLWEzNWRkMDE5NWNl Ny8zLzMyNjEzMDYxM2EzNjMwMzQzMDNhNjIzMTY2MzIzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzMjMwMzAzNjM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqCmBAsfIwDQYJKoZIhvcN AQELBQADggEBADy8DWyBEBixjGwBQpMf5gZX00Yig+I4ZsuY7z9K3sdAuvTE2TVm QsZ+BuJOUXu9MPxuTLHJOf6gweCN9UG+LobaG0n8RrR4KSBE+cHQvuRGl6Ld2/6b BacVIZ6oTdcZqAzgCsAR8LNmdu/fb45D18it3V09nWoZ59SSCo8QlpLq56op7t69 YB4OP4RQ5EY60ci14827BQniaynb24lszSVwt2Xwum9jEzR/RwIZmAkcCnA5bc7z aJxX7YUipe5ZuTRoCaEJxvXtYbmZal/OPVZ1KEGzop/u0bzX2bCyjtTcWq9gbuLn IKBYUUptk1eRwq3wYec/5DEKk8/jVJeyIMI= -----END CERTIFICATE-----Generated at Sat Jun 13 13:16:24 2026 by rpki-client