$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa File: 326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa (raw, json) Hash identifier: E/OJJsH8vRLWk7ObLOrajKk/aVne0/9cuXNyPD2i5xg= Subject key identifier: A1:C2:7E:E5:20:41:60:A1:AD:DE:FE:12:B2:E1:60:77:B3:28:33:A5 Certificate issuer: /CN=1305A50FEEC042C917D8EF2D77D1D2448848C0F9 Certificate serial: 36214939A73AA96F1C17CB6D211DD1C2A6C71765 Authority key identifier: 13:05:A5:0F:EE:C0:42:C9:17:D8:EF:2D:77:D1:D2:44:88:48:C0:F9 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa Signing time: Fri 07 Feb 2025 19:39:29 +0000 ROA not before: Fri 07 Feb 2025 19:34:29 +0000 ROA not after: Fri 06 Feb 2026 19:39:29 +0000 asID: 216455 IP address blocks: 2a05:dfc1:8500::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 19:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:21:49:39:a7:3a:a9:6f:1c:17:cb:6d:21:1d:d1:c2:a6:c7:17:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1305A50FEEC042C917D8EF2D77D1D2448848C0F9 Validity Not Before: Feb 7 19:34:29 2025 GMT Not After : Feb 6 19:39:29 2026 GMT Subject: CN=A1C27EE5204160A1ADDEFE12B2E16077B32833A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:34:d6:5a:15:80:15:fb:5d:0e:7d:c6:2a:ee: 42:ee:d7:6c:ad:4c:aa:13:8a:b6:06:8a:63:0b:43: 71:0c:7e:4e:1b:11:72:68:1f:f3:69:cb:fa:a7:42: 00:2a:3c:45:6f:88:c7:18:25:ff:bc:74:8b:6b:2d: 04:82:5c:5e:8c:30:1e:06:77:f6:6d:56:13:08:72: a6:ab:ab:48:d9:f2:22:98:9d:f6:6f:54:d2:5c:2e: 16:3d:4a:49:d8:26:f5:e6:76:c5:db:3d:a2:d6:ce: 1b:5a:fb:dd:b0:16:93:b5:ec:d5:6f:78:94:9d:13: 90:76:40:c4:85:43:21:f9:46:a8:a4:5a:ee:5b:fc: 4c:bf:7e:54:00:40:9d:fc:94:89:32:e4:80:dd:31: ee:58:15:83:b4:96:3b:bf:63:87:69:93:be:b8:8a: de:87:23:0e:92:dc:99:dd:d1:89:8b:fe:45:e2:29: d0:4f:ab:69:c4:53:05:74:ee:be:96:7e:e7:3b:dc: b0:fd:49:03:65:6d:7d:71:da:63:e3:b3:f7:a3:1f: 4b:87:6e:63:47:73:e4:04:ef:1a:7b:15:d5:34:94: 41:11:30:4c:aa:e3:40:7d:ae:91:f8:45:9e:fd:4f: 92:63:35:2f:b9:47:a1:18:1e:12:8f:46:2d:51:15: 02:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C2:7E:E5:20:41:60:A1:AD:DE:FE:12:B2:E1:60:77:B3:28:33:A5 X509v3 Authority Key Identifier: keyid:13:05:A5:0F:EE:C0:42:C9:17:D8:EF:2D:77:D1:D2:44:88:48:C0:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8500::/40 Signature Algorithm: sha256WithRSAEncryption 39:d9:11:14:37:ff:20:d9:17:85:24:f4:aa:39:7f:db:c6:82: 4e:f9:60:46:ad:a8:3d:16:88:a2:00:10:ab:7e:7a:c9:fc:aa: 27:6f:d4:a1:ca:b7:fe:af:0b:e6:d0:8a:87:44:42:c0:ae:c9: 2c:9a:61:32:3c:56:f8:5b:7d:81:7f:c5:76:4a:3d:f7:e4:91: c0:97:de:28:f4:3f:c4:49:cb:4c:ad:1d:74:23:a6:3b:b2:c3: 43:08:af:43:28:98:5c:88:8b:bb:d2:c1:b7:75:9d:54:31:fa: fa:90:84:b9:b4:1c:ab:f6:3a:c0:02:fa:38:58:bc:88:b2:75: d8:8e:7e:57:5c:be:d3:17:01:05:1b:55:ea:05:4e:84:9e:ed: b6:0f:ca:3c:af:71:d2:98:1c:eb:34:48:b9:97:30:02:c7:87: 89:82:99:76:ad:c0:f5:8c:bb:aa:8d:12:c1:e4:2f:dd:a6:6c: 95:24:fa:a7:35:53:5c:64:64:78:d1:e1:38:f3:f6:ad:7d:fd: 73:76:2e:fa:f0:79:3e:a9:95:54:51:f9:5b:9d:40:cc:03:e7: 13:6e:71:61:6f:b8:3f:ca:4e:17:6e:2c:9d:38:ea:a7:b6:cf: 32:ba:09:c5:b8:fe:53:fd:bb:7e:cd:5e:be:74:e8:43:17:c3: 9c:90:2b:cc -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgIUNiFJOac6qW8cF8ttIR3RwqbHF2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMwNUE1MEZFRUMwNDJDOTE3RDhFRjJENzdEMUQyNDQ4 ODQ4QzBGOTAeFw0yNTAyMDcxOTM0MjlaFw0yNjAyMDYxOTM5MjlaMDMxMTAvBgNV BAMTKEExQzI3RUU1MjA0MTYwQTFBRERFRkUxMkIyRTE2MDc3QjMyODMzQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKNNZaFYAV+10OfcYq7kLu12yt TKoTirYGimMLQ3EMfk4bEXJoH/Npy/qnQgAqPEVviMcYJf+8dItrLQSCXF6MMB4G d/ZtVhMIcqarq0jZ8iKYnfZvVNJcLhY9SknYJvXmdsXbPaLWzhta+92wFpO17NVv eJSdE5B2QMSFQyH5RqikWu5b/Ey/flQAQJ38lIky5IDdMe5YFYO0lju/Y4dpk764 it6HIw6S3Jnd0YmL/kXiKdBPq2nEUwV07r6Wfuc73LD9SQNlbX1x2mPjs/ejH0uH bmNHc+QE7xp7FdU0lEERMEyq40B9rpH4RZ79T5JjNS+5R6EYHhKPRi1RFQIZAgMB AAGjggJfMIICWzAdBgNVHQ4EFgQUocJ+5SBBYKGt3v4SsuFgd7MoM6UwHwYDVR0j BBgwFoAUEwWlD+7AQskX2O8td9HSRIhIwPkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzEvMTMwNUE1MEZFRUMwNDJDOTE3RDhFRjJENzdEMUQyNDQ4ODQ4QzBGOS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzEzMDVBNTBGRUVDMDQy QzkxN0Q4RUYyRDc3RDFEMjQ0ODg0OEMwRjkuY2VyMIG3BggrBgEFBQcBCwSBqjCB pzCBpAYIKwYBBQUHMAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzU4MjFjNDdlLWU4MTUtNDJkZS1iZDZiLTE5YTJlMWFlNTY0 YS8xLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzgzNTMwMzAzYTNhMmYzNDMwMmQzNDMw MjAzZDNlMjAzMjMxMzYzNDM1MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqBd/BhTANBgkqhkiG9w0B AQsFAAOCAQEAOdkRFDf/INkXhST0qjl/28aCTvlgRq2oPRaIogAQq356yfyqJ2/U ocq3/q8L5tCKh0RCwK7JLJphMjxW+Ft9gX/Fdko99+SRwJfeKPQ/xEnLTK0ddCOm O7LDQwivQyiYXIiLu9LBt3WdVDH6+pCEubQcq/Y6wAL6OFi8iLJ12I5+V1y+0xcB BRtV6gVOhJ7ttg/KPK9x0pgc6zRIuZcwAseHiYKZdq3A9Yy7qo0SweQv3aZslST6 pzVTXGRkeNHhOPP2rX39c3Yu+vB5PqmVVFH5W51AzAPnE25xYW+4P8pOF24snTjq p7bPMroJxbj+U/27fs1evnToQxfDnJArzA== -----END CERTIFICATE-----Generated at Tue Apr 29 09:18:51 2025 by rpki-client