$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356636303a3a2f34342d3434203d3e203538333339.roa File: 326130353a646663313a356636303a3a2f34342d3434203d3e203538333339.roa (raw, json) Hash identifier: A6dMPcDVvAm2/mTQl5zfF/P12rP5E/0NT4CV7AixNWc= Subject key identifier: 07:21:50:E1:AE:08:96:8D:C9:92:25:D0:36:F1:C2:6E:17:E6:63:49 Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Certificate serial: 08827A081715043AAA3DC3DE1B3FA8DA6EF33D3A Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356636303a3a2f34342d3434203d3e203538333339.roa Signing time: Fri 04 Jul 2025 19:52:54 +0000 ROA not before: Fri 04 Jul 2025 19:47:54 +0000 ROA not after: Fri 03 Jul 2026 19:52:54 +0000 asID: 58339 IP address blocks: 2a05:dfc1:5f60::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:82:7a:08:17:15:04:3a:aa:3d:c3:de:1b:3f:a8:da:6e:f3:3d:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Validity Not Before: Jul 4 19:47:54 2025 GMT Not After : Jul 3 19:52:54 2026 GMT Subject: CN=072150E1AE08968DC99225D036F1C26E17E66349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b0:c8:a1:72:27:5d:3f:8f:ea:63:e2:a4:58: b0:f8:5a:1d:76:17:da:c7:e5:83:93:c4:19:1a:08: ce:8b:e4:ae:81:7a:94:93:18:7f:f6:13:27:d8:a3: 56:82:cd:59:4a:82:5b:e1:1e:7b:2e:aa:90:a1:3c: e1:8e:a4:95:63:d6:31:32:8f:f4:8f:3d:8c:3f:09: 49:7a:cc:a0:99:86:21:49:91:74:3e:df:5b:5d:e0: 6e:cd:30:b7:4e:da:26:b0:a3:ca:ce:b1:a3:d4:f2: b6:9b:d3:b3:14:a9:32:ae:6a:70:74:12:11:95:77: 8c:e8:08:6b:7f:43:da:e7:86:9a:89:9c:77:71:37: 8a:dc:a7:2d:1a:e0:d8:2d:a8:73:45:ae:3b:72:29: aa:2e:9d:06:76:4a:e6:73:b7:22:e3:60:2f:1f:08: 58:a7:bf:00:85:ae:e7:7b:54:bb:16:30:e4:91:b3: 7c:f6:43:4d:1c:7b:ca:f7:b6:47:b0:e7:2a:64:49: 63:1a:42:29:18:75:db:a5:70:4d:f9:b5:37:af:d5: 2b:22:7f:24:f9:8f:cb:90:18:76:bf:cd:97:4d:f1: 7c:77:ff:7a:cf:eb:0f:fc:e1:00:06:f1:5c:ea:f8: bb:26:84:2a:77:cc:6f:59:d0:3e:50:da:86:06:6b: 8d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:21:50:E1:AE:08:96:8D:C9:92:25:D0:36:F1:C2:6E:17:E6:63:49 X509v3 Authority Key Identifier: keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356636303a3a2f34342d3434203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:5f60::/44 Signature Algorithm: sha256WithRSAEncryption 4d:e0:09:8f:9f:ef:b4:76:4c:3f:7c:af:b7:ee:df:d8:d2:4c: 22:32:78:6c:c2:c7:62:90:2e:94:23:14:4a:7c:0f:a5:41:1b: 62:b8:32:d8:85:c7:2a:b9:68:b3:3f:b5:72:87:56:40:a3:4f: c4:81:79:b6:d1:7b:cb:61:ed:c0:50:10:e8:3f:54:e7:57:26: 39:2e:70:00:3f:9c:c0:39:55:f2:e3:5e:d0:e7:b4:63:1a:95: d3:e2:5d:8d:22:e1:68:78:d9:93:ed:6a:86:a8:22:d0:9e:7f: eb:70:b7:55:7a:ce:4e:41:04:4d:d1:f7:42:ac:7f:55:fb:06: d3:6e:0a:72:0e:a3:43:be:49:1a:74:d9:8e:76:4f:34:e8:d1: 2f:d7:ce:6c:3a:6e:15:91:69:f0:c4:d8:41:43:b5:10:51:52: b8:35:28:0c:3a:d6:af:5e:2c:af:5b:5d:4e:e7:a7:56:dc:42: 4e:65:cf:79:f6:a4:cd:2d:ff:ce:ad:16:24:56:51:75:77:8d: 12:dd:23:fc:81:b1:76:98:aa:ae:cc:7c:48:f5:92:5f:09:84: 4c:bd:de:4c:c5:f2:8d:98:6b:29:ac:25:2d:0b:3d:fb:25:f8: b1:a6:11:cb:4e:a6:ce:42:e1:c7:2a:ae:3a:21:14:b7:ed:99: eb:f1:2f:b8 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUCIJ6CBcVBDqqPcPeGz+o2m7zPTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRD OEZCQzlDMzAeFw0yNTA3MDQxOTQ3NTRaFw0yNjA3MDMxOTUyNTRaMDMxMTAvBgNV BAMTKDA3MjE1MEUxQUUwODk2OERDOTkyMjVEMDM2RjFDMjZFMTdFNjYzNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnsMihciddP4/qY+KkWLD4Wh12 F9rH5YOTxBkaCM6L5K6BepSTGH/2EyfYo1aCzVlKglvhHnsuqpChPOGOpJVj1jEy j/SPPYw/CUl6zKCZhiFJkXQ+31td4G7NMLdO2iawo8rOsaPU8rab07MUqTKuanB0 EhGVd4zoCGt/Q9rnhpqJnHdxN4rcpy0a4NgtqHNFrjtyKaounQZ2SuZztyLjYC8f CFinvwCFrud7VLsWMOSRs3z2Q00ce8r3tkew5ypkSWMaQikYddulcE35tTev1Ssi fyT5j8uQGHa/zZdN8Xx3/3rP6w/84QAG8Vzq+LsmhCp3zG9Z0D5Q2oYGa43dAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUByFQ4a4Ilo3JkiXQNvHCbhfmY0kwHwYDVR0j BBgwFoAUvj3GYU4KLzs9bwjcBKG8NMj7ycMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzMvQkUzREM2NjE0RTBBMkYzQjNENkYwOERDMDRBMUJDMzRDOEZCQzlDMy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0JFM0RDNjYxNEUwQTJG M0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8zLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzU2NjM2MzAzYTNhMmYzNDM0MmQzNDM0 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgXfwV9gMA0GCSqGSIb3DQEB CwUAA4IBAQBN4AmPn++0dkw/fK+37t/Y0kwiMnhswsdikC6UIxRKfA+lQRtiuDLY hccquWizP7Vyh1ZAo0/EgXm20XvLYe3AUBDoP1TnVyY5LnAAP5zAOVXy417Q57Rj GpXT4l2NIuFoeNmT7WqGqCLQnn/rcLdVes5OQQRN0fdCrH9V+wbTbgpyDqNDvkka dNmOdk806NEv185sOm4VkWnwxNhBQ7UQUVK4NSgMOtavXiyvW11O56dW3EJOZc95 9qTNLf/OrRYkVlF1d40S3SP8gbF2mKquzHxI9ZJfCYRMvd5MxfKNmGsprCUtCz37 JfixphHLTqbOQuHHKq46IRS37Znr8S+4 -----END CERTIFICATE-----Generated at Wed Nov 5 10:20:31 2025 by rpki-client