$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS134478.roa File: AS134478.roa (raw, json) Hash identifier: O+axvt68QH8K7BZ6wGyRwmOUSm4VdTgfuJ0rvqrw+1A= Subject key identifier: 3C:E5:DA:9E:AB:BD:D6:6D:D5:68:A7:8E:69:01:CA:44:C8:E6:1A:6B Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 76C6D5403EBA09CD18B2CC9F0099B0F4C0AEE8DF Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS134478.roa Signing time: Sun 06 Oct 2024 04:45:17 +0000 ROA not before: Sun 06 Oct 2024 04:40:17 +0000 ROA not after: Sun 05 Oct 2025 04:45:17 +0000 asID: 134478 IP address blocks: 2a0a:6040:7e00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:c6:d5:40:3e:ba:09:cd:18:b2:cc:9f:00:99:b0:f4:c0:ae:e8:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 6 04:40:17 2024 GMT Not After : Oct 5 04:45:17 2025 GMT Subject: CN=3CE5DA9EABBDD66DD568A78E6901CA44C8E61A6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:16:29:b2:59:ef:5c:77:81:a0:a9:c0:29:89: ea:58:4e:05:b6:00:ca:fe:c0:6c:a5:11:69:38:40: 96:a6:7b:aa:03:0b:9d:52:df:59:db:56:90:1e:76: cc:11:d3:a2:95:a5:65:17:75:aa:e4:42:c9:94:2f: 44:fc:99:12:d8:4a:ab:32:cb:57:19:8b:fd:07:7b: de:4d:c9:20:0a:ea:58:14:1a:12:af:2a:28:9e:14: 5f:8a:d1:aa:35:ed:5c:8c:b5:e9:c8:32:cc:ff:0c: 57:f4:29:93:49:c0:e7:19:e1:af:e6:3a:c6:bc:a6: 16:f1:2d:37:20:8a:4f:35:f4:8b:3b:8f:63:be:38: 3b:4d:51:a2:8a:4b:be:96:e0:5f:25:e0:2f:59:d9: e6:47:83:b8:fa:d9:c1:f5:7c:c1:9f:87:d6:12:6b: d0:a4:20:a2:53:9d:a6:83:ab:bc:9c:20:2c:17:36: e6:91:f6:95:6c:47:c0:32:83:d4:ab:c6:6e:2f:1a: 39:98:ef:6c:3b:f3:ee:f7:33:fc:fd:38:83:ff:57: 6d:03:1f:90:f1:6b:00:da:22:6b:1e:27:0f:c5:be: 34:4d:fd:f3:53:6f:fe:54:e7:08:94:29:21:7f:08: 19:85:76:a9:57:26:62:f2:48:79:51:c1:d0:52:fd: 58:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E5:DA:9E:AB:BD:D6:6D:D5:68:A7:8E:69:01:CA:44:C8:E6:1A:6B X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS134478.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:7e00::/40 Signature Algorithm: sha256WithRSAEncryption b5:0a:e0:1b:ea:93:50:7e:40:26:fe:9c:00:9d:1f:c9:0c:a4: 50:03:55:d3:5a:0c:fa:7c:35:5e:ca:d9:da:2b:4e:ad:e4:d4: bd:c5:b5:d3:a0:ec:98:b6:08:cb:c5:11:1b:3c:64:ea:71:9d: ef:e1:f8:e1:8f:1b:62:eb:9e:6a:8e:af:9e:2f:42:af:b4:97: e1:fe:b4:f2:2e:22:da:bc:10:57:90:a4:30:6a:01:a7:50:64: 33:dd:d1:6c:b6:a5:4e:66:50:a5:ae:00:6a:a0:f4:01:51:74: f5:f7:93:25:82:5f:19:9b:37:a0:89:cc:b7:f0:da:c5:64:52: b0:13:06:8c:39:a4:80:13:dd:05:c2:c7:74:a4:46:d6:c7:cf: 40:a4:53:ed:a3:67:3f:4f:24:5f:65:ce:f4:e3:85:3e:ef:2f: 54:48:f4:f3:99:dc:a5:c2:2a:a8:d4:bf:5b:31:f5:ac:8c:14: ff:32:d8:77:45:bd:3d:bc:85:78:c5:97:45:d6:98:f7:77:4e: 2d:b9:a0:6a:20:b9:c1:94:90:52:17:ae:1b:6d:ec:bb:2c:42: ce:b5:8b:88:d9:fc:6e:12:54:97:02:1e:2f:1d:80:db:73:d6: 87:cf:14:f2:6c:ae:c2:5c:81:f9:da:8a:e6:bb:0e:30:c2:28: c9:67:65:58 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUdsbVQD66Cc0YssyfAJmw9MCu6N8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEwMDYwNDQwMTdaFw0yNTEwMDUwNDQ1MTdaMDMxMTAvBgNV BAMTKDNDRTVEQTlFQUJCREQ2NkRENTY4QTc4RTY5MDFDQTQ0QzhFNjFBNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDFimyWe9cd4GgqcApiepYTgW2 AMr+wGylEWk4QJame6oDC51S31nbVpAedswR06KVpWUXdarkQsmUL0T8mRLYSqsy y1cZi/0He95NySAK6lgUGhKvKiieFF+K0ao17VyMtenIMsz/DFf0KZNJwOcZ4a/m Osa8phbxLTcgik819Is7j2O+ODtNUaKKS76W4F8l4C9Z2eZHg7j62cH1fMGfh9YS a9CkIKJTnaaDq7ycICwXNuaR9pVsR8Ayg9Srxm4vGjmY72w78+73M/z9OIP/V20D H5DxawDaImseJw/FvjRN/fNTb/5U5wiUKSF/CBmFdqlXJmLySHlRwdBS/Vj3AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUPOXanqu91m3VaKeOaQHKRMjmGmswHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMTM0NDc4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQH4wDQYJKoZIhvcNAQELBQADggEBALUK 4Bvqk1B+QCb+nACdH8kMpFADVdNaDPp8NV7K2dorTq3k1L3FtdOg7Ji2CMvFERs8 ZOpxne/h+OGPG2LrnmqOr54vQq+0l+H+tPIuItq8EFeQpDBqAadQZDPd0Wy2pU5m UKWuAGqg9AFRdPX3kyWCXxmbN6CJzLfw2sVkUrATBow5pIAT3QXCx3SkRtbHz0Ck U+2jZz9PJF9lzvTjhT7vL1RI9POZ3KXCKqjUv1sx9ayMFP8y2HdFvT28hXjFl0XW mPd3Ti25oGogucGUkFIXrhtt7LssQs61i4jZ/G4SVJcCHi8dgNtz1ofPFPJsrsJc gfnaiua7DjDCKMlnZVg= -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:54 2024 by rpki-client on console-ams.rpki-client.org