$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a656430303a3a2f34302d3430203d3e2030.roa File: 326130613a363034303a656430303a3a2f34302d3430203d3e2030.roa (raw, json) Hash identifier: o3l9HmXdTaRr7QEUzlZUguF0y8FsRdpH47Ocd6jZ4Wc= Subject key identifier: D5:93:5B:97:A5:58:45:09:04:E0:D7:6E:91:F8:31:D1:8F:C2:1B:BF Certificate issuer: /CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057 Certificate serial: 2EA3F39584E43BA8CB39599146C23E9398884913 Authority key identifier: 4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a656430303a3a2f34302d3430203d3e2030.roa Signing time: Fri 05 Jun 2026 11:06:52 +0000 ROA not before: Fri 05 Jun 2026 11:01:52 +0000 ROA not after: Fri 04 Jun 2027 11:06:52 +0000 asID: 0 IP address blocks: 2a0a:6040:ed00::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 07:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:a3:f3:95:84:e4:3b:a8:cb:39:59:91:46:c2:3e:93:98:88:49:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057 Validity Not Before: Jun 5 11:01:52 2026 GMT Not After : Jun 4 11:06:52 2027 GMT Subject: CN=D5935B97A558450904E0D76E91F831D18FC21BBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b4:b3:75:ce:29:a6:22:d4:c4:3b:ee:0c:9f: cb:ad:70:e7:db:f4:a4:13:3e:e5:5a:21:24:dc:8a: 91:29:b0:0e:81:94:32:ae:0c:3e:c6:46:18:c9:3d: cf:c9:c5:69:69:0a:60:79:76:d7:03:6e:68:50:16: 73:3a:7c:4c:bc:f7:10:79:e3:a3:2d:37:ae:71:b2: d8:c0:36:a2:9f:79:93:b3:d6:ca:e4:1a:a9:70:ab: d3:b2:c7:16:17:ea:3d:c0:25:e0:3c:3f:ce:af:4d: 47:b7:a5:fc:56:9e:b3:3c:68:f5:12:4a:54:2a:fb: 37:2e:b6:91:f2:92:bb:f3:2d:b6:58:2f:e3:94:8d: f5:df:ba:8f:c4:6d:cb:f3:36:0c:3a:c7:0c:c3:01: 2d:36:31:e7:63:d4:e3:53:e1:7c:e5:62:0d:61:eb: c3:5b:a3:30:1e:9c:7f:b0:52:8c:b1:88:07:0c:ee: ab:5e:f2:94:67:fa:58:b1:2e:a5:29:e8:0e:57:83: d2:2a:c7:42:af:92:1d:01:73:6e:c1:ce:e9:c8:36: 2d:fe:f7:a5:a3:52:e1:6c:8f:53:4c:70:49:6d:3c: 1b:32:21:38:4d:5d:2b:96:52:3c:9f:ab:a3:8b:77: 28:b1:45:cc:01:54:41:41:ae:c7:76:0e:ec:7b:62: 20:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:93:5B:97:A5:58:45:09:04:E0:D7:6E:91:F8:31:D1:8F:C2:1B:BF X509v3 Authority Key Identifier: keyid:4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/326130613a363034303a656430303a3a2f34302d3430203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:ed00::/40 Signature Algorithm: sha256WithRSAEncryption b2:a6:83:c5:f6:1b:c7:6c:56:55:ea:c2:20:97:69:9a:51:20: 69:97:7a:1b:c6:d7:a6:18:0c:6e:c9:9a:c2:71:ce:e9:0d:6a: ba:45:66:f0:97:cd:84:b3:aa:6b:60:b0:49:26:e4:a1:79:09: 10:cd:27:8e:e4:fa:fe:80:61:d5:00:fb:2a:73:53:83:08:cd: e0:5f:c5:fb:66:52:19:f6:6a:e5:fc:2e:e3:25:eb:a0:75:54: 75:2b:ea:c9:ab:0d:e8:66:1b:29:67:e7:47:75:42:3f:bd:09: 7e:51:2a:99:74:5c:58:ba:f3:b0:04:a9:15:80:66:c8:3d:28: a4:05:53:20:3c:61:06:89:3e:f3:30:ac:da:c6:89:e4:ba:00: 66:5e:c5:1a:fd:db:8e:56:0a:ef:7e:d2:d6:fc:97:cf:5a:d4: ea:69:c4:f5:e0:fc:b8:85:b5:8a:62:8a:00:9a:29:0f:11:7a: 53:55:eb:02:66:f9:5b:92:7b:3c:72:d9:e2:3d:56:82:2a:92: 04:bd:af:e6:a2:86:75:f7:7c:3d:9d:e5:34:e3:e6:99:24:74: b4:92:c6:33:a4:18:10:99:60:f4:cd:51:80:21:51:0c:86:70: 6d:ea:3b:85:ec:57:92:c7:83:4a:a3:d6:90:ae:05:fa:f5:82: ad:56:69:bd -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgIULqPzlYTkO6jLOVmRRsI+k5iISRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZEQzU3MUE1Q0RBMTM5NThCQ0U0NzVGMEU1RDkxMDFE QjgxMjA1NzAeFw0yNjA2MDUxMTAxNTJaFw0yNzA2MDQxMTA2NTJaMDMxMTAvBgNV BAMTKEQ1OTM1Qjk3QTU1ODQ1MDkwNEUwRDc2RTkxRjgzMUQxOEZDMjFCQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTtLN1zimmItTEO+4Mn8utcOfb 9KQTPuVaISTcipEpsA6BlDKuDD7GRhjJPc/JxWlpCmB5dtcDbmhQFnM6fEy89xB5 46MtN65xstjANqKfeZOz1srkGqlwq9OyxxYX6j3AJeA8P86vTUe3pfxWnrM8aPUS SlQq+zcutpHykrvzLbZYL+OUjfXfuo/EbcvzNgw6xwzDAS02Medj1ONT4XzlYg1h 68NbozAenH+wUoyxiAcM7qte8pRn+lixLqUp6A5Xg9Iqx0Kvkh0Bc27BzunINi3+ 96WjUuFsj1NMcEltPBsyIThNXSuWUjyfq6OLdyixRcwBVEFBrsd2Dux7YiCPAgMB AAGjggJVMIICUTAdBgNVHQ4EFgQU1ZNbl6VYRQkE4Ndukfgx0Y/CG78wHwYDVR0j BBgwFoAUT9xXGlzaE5WLzkdfDl2RAduBIFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzMvNEZEQzU3MUE1Q0RBMTM5NThCQ0U0NzVGMEU1RDkxMDFEQjgxMjA1Ny5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzRGREM1NzFBNUNEQTEz OTU4QkNFNDc1RjBFNUQ5MTAxREI4MTIwNTcuY2VyMIGtBggrBgEFBQcBCwSBoDCB nTCBmgYIKwYBBQUHMAuGgY1yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzJhY2EzY2E2LTM0Y2MtNDc3Mi1iYWMwLWEzNWRkMDE5NWNl Ny8zLzMyNjEzMDYxM2EzNjMwMzQzMDNhNjU2NDMwMzAzYTNhMmYzNDMwMmQzNDMw MjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwDgQCAAIwCAMGACoKYEDtMA0GCSqGSIb3DQEBCwUAA4IBAQCy poPF9hvHbFZV6sIgl2maUSBpl3obxtemGAxuyZrCcc7pDWq6RWbwl82Es6prYLBJ JuSheQkQzSeO5Pr+gGHVAPsqc1ODCM3gX8X7ZlIZ9mrl/C7jJeugdVR1K+rJqw3o ZhspZ+dHdUI/vQl+USqZdFxYuvOwBKkVgGbIPSikBVMgPGEGiT7zMKzaxonkugBm XsUa/duOVgrvftLW/JfPWtTqacT14Py4hbWKYooAmikPEXpTVesCZvlbkns8ctni PVaCKpIEva/mooZ193w9neU04+aZJHS0ksYzpBgQmWD0zVGAIVEMhnBt6juF7FeS x4NKo9aQrgX69YKtVmm9 -----END CERTIFICATE-----Generated at Sat Jun 13 15:40:53 2026 by rpki-client