$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS139328.roa File: AS139328.roa (raw, json) Hash identifier: Kk3LkB/6bu3+qoZ3suceIttKZqsZdF/HmZ+iC4cKmLk= Subject key identifier: 57:13:C7:2C:34:A2:92:D2:8B:C5:80:D7:F0:6E:D1:9C:2F:EC:83:C5 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 409FF9D7CF7F1D9C4CB2C7EB6244118AF13BA0F1 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS139328.roa Signing time: Sun 05 Nov 2023 04:06:59 +0000 ROA not before: Sun 05 Nov 2023 04:01:59 +0000 ROA not after: Sun 03 Nov 2024 04:06:59 +0000 asID: 139328 IP address blocks: 2a0a:6040:7e40::/44 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Apr 2024 06:44:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:9f:f9:d7:cf:7f:1d:9c:4c:b2:c7:eb:62:44:11:8a:f1:3b:a0:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 5 04:01:59 2023 GMT Not After : Nov 3 04:06:59 2024 GMT Subject: CN=5713C72C34A292D28BC580D7F06ED19C2FEC83C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5a:1f:e5:1c:40:4b:90:e0:a6:ff:2b:44:2b: ee:64:59:60:7a:29:bd:6f:78:41:b2:bc:27:d3:6e: 3e:ca:c4:ef:71:68:95:53:ae:6c:de:1a:b6:3e:25: 29:91:74:78:ef:a9:e2:20:0c:3a:61:5b:40:47:49: 10:ab:5f:f7:12:81:e3:61:6f:27:e2:1f:27:17:1a: 4a:d4:79:c1:d7:dc:31:2b:e5:c1:98:63:c1:d1:b7: 6c:b8:0b:58:35:67:39:f1:1e:bc:0f:d6:0c:8f:46: 49:9c:25:32:68:12:49:56:11:00:bf:3d:11:83:e5: 41:13:50:01:af:1a:7c:b7:87:3f:5f:15:bb:1e:7e: 2a:61:ae:cb:48:de:4d:8a:2c:32:cc:f1:df:80:61: 88:6a:b2:fe:50:43:84:87:72:10:a4:9d:c5:fc:e9: c1:a6:b2:f8:63:12:52:18:5e:fb:41:d8:0a:f1:28: d8:af:02:f9:0a:92:73:07:f9:6d:d2:49:91:7b:ae: 6c:e0:a4:02:2d:5d:f3:9d:2d:42:9b:a8:96:a0:98: db:32:97:3d:0d:c5:82:1c:20:a9:6c:4c:a7:15:41: 89:07:77:0b:ff:93:6c:5f:6e:dd:b2:8b:ad:f8:c0: 9d:05:3e:e2:f8:ca:49:8a:71:bd:a1:0f:d9:c2:e3: 9e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:13:C7:2C:34:A2:92:D2:8B:C5:80:D7:F0:6E:D1:9C:2F:EC:83:C5 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS139328.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:7e40::/44 Signature Algorithm: sha256WithRSAEncryption 92:1a:c1:52:98:16:45:5f:9a:e4:f0:78:0b:7a:fc:58:0e:30: 98:b3:b7:e9:21:b9:15:15:66:aa:68:ec:69:8b:d5:6c:fd:d3: a1:46:4d:99:6c:3a:23:42:f7:8e:c9:94:05:9b:ba:24:ca:e9: 66:87:34:07:d8:49:e4:ca:5d:be:14:63:f1:88:85:4e:14:8b: e2:fa:4c:06:57:97:ce:e5:a2:48:57:8d:31:5f:d4:a6:e3:59: b5:89:93:1f:4d:31:fe:00:9a:bb:b5:e0:f6:7b:09:da:f3:50: 9e:88:bd:13:dd:76:2d:c2:d4:9d:1f:0e:29:37:04:b2:e0:cc: 95:05:aa:11:c0:e4:dd:ad:96:6c:75:10:b3:be:20:52:5e:39: a6:5b:70:3b:98:03:4a:b8:0c:26:32:33:1b:c0:53:63:37:9e: d1:5a:75:2f:2f:ff:c0:73:5e:85:5b:4d:8a:4d:30:e4:89:8e: 02:ff:96:5e:b4:46:f8:d9:cc:6e:57:c4:4d:66:ee:4a:66:45: a0:7d:3e:55:b5:38:81:23:59:86:74:44:15:d8:1c:d4:e1:b5: 99:50:c2:c3:65:a4:28:0f:f6:54:fc:fc:bb:e9:8f:c8:71:a5: b6:f7:3f:0e:fe:fa:3c:1a:6a:ec:0b:ea:a9:0e:93:d2:cc:a7: 88:12:61:f3 -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgIUQJ/5189/HZxMssfrYkQRivE7oPEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMDUwNDAxNTlaFw0yNDExMDMwNDA2NTlaMDMxMTAvBgNV BAMTKDU3MTNDNzJDMzRBMjkyRDI4QkM1ODBEN0YwNkVEMTlDMkZFQzgzQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgWh/lHEBLkOCm/ytEK+5kWWB6 Kb1veEGyvCfTbj7KxO9xaJVTrmzeGrY+JSmRdHjvqeIgDDphW0BHSRCrX/cSgeNh byfiHycXGkrUecHX3DEr5cGYY8HRt2y4C1g1ZznxHrwP1gyPRkmcJTJoEklWEQC/ PRGD5UETUAGvGny3hz9fFbsefiphrstI3k2KLDLM8d+AYYhqsv5QQ4SHchCkncX8 6cGmsvhjElIYXvtB2ArxKNivAvkKknMH+W3SSZF7rmzgpAItXfOdLUKbqJagmNsy lz0NxYIcIKlsTKcVQYkHdwv/k2xfbt2yi634wJ0FPuL4ykmKcb2hD9nC4541AgMB AAGjggH1MIIB8TAdBgNVHQ4EFgQUVxPHLDSiktKLxYDX8G7RnC/sg8UwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMTM5MzI4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKgpgQH5AMA0GCSqGSIb3DQEBCwUAA4IBAQCS GsFSmBZFX5rk8HgLevxYDjCYs7fpIbkVFWaqaOxpi9Vs/dOhRk2ZbDojQveOyZQF m7okyulmhzQH2Enkyl2+FGPxiIVOFIvi+kwGV5fO5aJIV40xX9Sm41m1iZMfTTH+ AJq7teD2ewna81CeiL0T3XYtwtSdHw4pNwSy4MyVBaoRwOTdrZZsdRCzviBSXjmm W3A7mANKuAwmMjMbwFNjN57RWnUvL//Ac16FW02KTTDkiY4C/5ZetEb42cxuV8RN Zu5KZkWgfT5VtTiBI1mGdEQV2BzU4bWZUMLDZaQoD/ZU/Py76Y/IcaW29z8O/vo8 GmrsC+qpDpPSzKeIEmHz -----END CERTIFICATE-----Generated at Sat Apr 27 20:19:50 2024 by rpki-client on console-ams.rpki-client.org