$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166333a3a2f34382d3438203d3e203530373535.roa File: 326130613a363034303a623166333a3a2f34382d3438203d3e203530373535.roa (raw, json) Hash identifier: zj+PtOUjRL+jh8fX/z3gQawz9pZ6f2aTfcfOK+OABQw= Subject key identifier: C9:B3:A8:93:3E:F2:AA:B4:C8:AB:27:BE:98:20:1E:69:3D:DC:81:98 Certificate issuer: /CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057 Certificate serial: 3FBEECA49DBC58139E2B0F2AB68C4ACCE119636E Authority key identifier: 4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166333a3a2f34382d3438203d3e203530373535.roa Signing time: Fri 04 Jul 2025 10:47:27 +0000 ROA not before: Fri 04 Jul 2025 10:42:27 +0000 ROA not after: Fri 03 Jul 2026 10:47:27 +0000 asID: 50755 IP address blocks: 2a0a:6040:b1f3::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 12:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:be:ec:a4:9d:bc:58:13:9e:2b:0f:2a:b6:8c:4a:cc:e1:19:63:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057 Validity Not Before: Jul 4 10:42:27 2025 GMT Not After : Jul 3 10:47:27 2026 GMT Subject: CN=C9B3A8933EF2AAB4C8AB27BE98201E693DDC8198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:09:50:22:04:97:bb:eb:71:e4:97:c4:49:a9: 2e:35:e9:df:d3:92:0c:b0:f8:0f:9a:34:2e:0d:55: c1:7a:b2:07:15:b2:0a:e9:d1:3b:f8:5b:00:35:8b: 4d:65:e3:8e:e0:af:b7:4c:91:44:56:9a:8a:81:88: 22:f1:b3:76:9e:cc:34:c8:fe:ac:e0:e6:09:66:d2: a6:31:cd:49:ab:02:e8:cb:8a:43:01:d9:79:45:b6: e6:08:af:ec:4e:34:74:ac:13:69:26:b3:4f:7f:40: d2:af:d6:1a:2e:4e:c1:72:ce:9e:09:dc:7d:d6:89: 19:c4:0c:6f:3b:a9:23:bb:53:a8:c5:49:32:08:09: d2:26:42:d4:b3:5a:e1:3e:a7:b3:ad:d3:8a:71:9c: 9a:19:85:7e:18:43:76:f3:b8:ec:c3:0b:18:b4:18: 21:4a:ed:97:8d:38:b5:e2:bb:9c:01:6d:a9:5a:c9: 17:f6:ad:7d:b9:19:14:42:54:9e:95:4a:e8:09:ef: 74:aa:e4:f1:e4:26:ab:7f:a5:a2:a5:2d:29:3a:e6: a3:5b:64:12:08:ce:7b:b7:24:21:2b:0e:56:99:b5: be:7f:1e:4d:c0:a8:f9:98:cf:ed:29:0e:a3:4d:6c: d8:7a:9f:81:d3:e3:2f:60:67:8a:9d:a5:c6:f7:31: fb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B3:A8:93:3E:F2:AA:B4:C8:AB:27:BE:98:20:1E:69:3D:DC:81:98 X509v3 Authority Key Identifier: keyid:4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a623166333a3a2f34382d3438203d3e203530373535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:b1f3::/48 Signature Algorithm: sha256WithRSAEncryption 77:db:62:5c:53:8c:0b:1a:e7:01:0d:22:20:54:5e:9f:8c:06: 57:cf:bd:3e:02:aa:55:8a:f5:c4:0b:1f:d7:1f:e7:53:a8:74: aa:6e:d0:98:c5:3a:78:25:97:75:3b:1a:97:bd:11:36:89:d7: 2b:27:15:72:2a:cd:10:02:e9:d9:7c:26:89:a7:99:94:0b:9f: 20:3c:85:18:3b:0f:31:04:47:ab:6a:c1:b4:87:9a:0f:fc:c0: 59:e1:1f:af:70:13:20:f0:c5:8c:28:ab:45:a9:b5:18:6f:f0: 1c:b8:a4:41:00:7d:03:29:d4:07:9f:c3:45:a8:d8:e3:dd:db: 1f:78:57:76:09:d0:b5:f4:ca:7e:64:45:1a:62:69:a9:08:6e: cb:82:e7:12:cc:b7:31:9e:68:d2:32:52:49:b9:d9:01:d4:db: 7f:25:8c:97:58:61:d7:97:66:a3:b1:9c:05:25:0c:76:2b:49: 64:20:66:1a:d3:47:11:1b:5b:0c:16:13:46:df:0d:7d:9c:bb: 8d:53:36:3e:34:39:2f:2f:9b:84:f6:dd:16:51:25:fe:ef:05: 05:c1:39:bc:83:f6:a9:2c:67:67:95:54:75:49:61:7e:cf:6a: 6e:e1:76:a6:73:79:9a:3c:5c:0a:95:40:7a:20:76:63:ad:ed: a7:46:e7:25 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUP77spJ28WBOeKw8qtoxKzOEZY24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZEQzU3MUE1Q0RBMTM5NThCQ0U0NzVGMEU1RDkxMDFE QjgxMjA1NzAeFw0yNTA3MDQxMDQyMjdaFw0yNjA3MDMxMDQ3MjdaMDMxMTAvBgNV BAMTKEM5QjNBODkzM0VGMkFBQjRDOEFCMjdCRTk4MjAxRTY5M0REQzgxOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNCVAiBJe763Hkl8RJqS416d/T kgyw+A+aNC4NVcF6sgcVsgrp0Tv4WwA1i01l447gr7dMkURWmoqBiCLxs3aezDTI /qzg5glm0qYxzUmrAujLikMB2XlFtuYIr+xONHSsE2kms09/QNKv1houTsFyzp4J 3H3WiRnEDG87qSO7U6jFSTIICdImQtSzWuE+p7Ot04pxnJoZhX4YQ3bzuOzDCxi0 GCFK7ZeNOLXiu5wBbalayRf2rX25GRRCVJ6VSugJ73Sq5PHkJqt/paKlLSk65qNb ZBIIznu3JCErDlaZtb5/Hk3AqPmYz+0pDqNNbNh6n4HT4y9gZ4qdpcb3MfvjAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUybOokz7yqrTIqye+mCAeaT3cgZgwHwYDVR0j BBgwFoAUT9xXGlzaE5WLzkdfDl2RAduBIFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzMvNEZEQzU3MUE1Q0RBMTM5NThCQ0U0NzVGMEU1RDkxMDFEQjgxMjA1Ny5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzRGREM1NzFBNUNEQTEz OTU4QkNFNDc1RjBFNUQ5MTAxREI4MTIwNTcuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzJhY2EzY2E2LTM0Y2MtNDc3Mi1iYWMwLWEzNWRkMDE5NWNl Ny8zLzMyNjEzMDYxM2EzNjMwMzQzMDNhNjIzMTY2MzMzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzNTMwMzczNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgQLHzMA0GCSqGSIb3DQEB CwUAA4IBAQB322JcU4wLGucBDSIgVF6fjAZXz70+AqpVivXECx/XH+dTqHSqbtCY xTp4JZd1OxqXvRE2idcrJxVyKs0QAunZfCaJp5mUC58gPIUYOw8xBEerasG0h5oP /MBZ4R+vcBMg8MWMKKtFqbUYb/AcuKRBAH0DKdQHn8NFqNjj3dsfeFd2CdC19Mp+ ZEUaYmmpCG7LgucSzLcxnmjSMlJJudkB1Nt/JYyXWGHXl2ajsZwFJQx2K0lkIGYa 00cRG1sMFhNG3w19nLuNUzY+NDkvL5uE9t0WUSX+7wUFwTm8g/apLGdnlVR1SWF+ z2pu4Xamc3maPFwKlUB6IHZjre2nRucl -----END CERTIFICATE-----Generated at Wed Nov 5 01:18:24 2025 by rpki-client