$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199343.roa File: AS199343.roa (raw, json) Hash identifier: AwusAPTLBdU5m6dpjv6k/F5ScGQwsCfFwT6QaFhetlk= Subject key identifier: D0:1E:4C:52:1E:4F:AF:91:D1:96:20:2C:A7:6E:50:E6:5E:3D:9A:49 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 2686A90FFF159DAD9F6B63E78F66D6B04BFC291E Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199343.roa Signing time: Sun 06 Oct 2024 04:45:03 +0000 ROA not before: Sun 06 Oct 2024 04:40:03 +0000 ROA not after: Sun 05 Oct 2025 04:45:03 +0000 asID: 199343 IP address blocks: 2a0a:6040:9800::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:86:a9:0f:ff:15:9d:ad:9f:6b:63:e7:8f:66:d6:b0:4b:fc:29:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 6 04:40:03 2024 GMT Not After : Oct 5 04:45:03 2025 GMT Subject: CN=D01E4C521E4FAF91D196202CA76E50E65E3D9A49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a8:37:fd:43:a1:a1:a8:89:29:89:32:30:42: 56:8f:6b:e9:d6:23:11:19:c3:02:14:b1:36:9c:4d: 25:47:29:8d:60:29:dc:8d:e9:b8:d9:b9:bb:15:ec: 93:48:e1:d9:0a:b4:8b:a2:95:72:ad:29:d2:41:32: 9b:a6:d1:e5:52:de:22:c3:d3:d8:f8:c7:c6:67:64: 82:eb:4e:8f:4f:c7:81:76:44:ee:1b:52:86:37:1e: cb:66:c7:8a:ff:ec:75:a3:80:66:bc:e8:58:1c:31: 7f:70:81:26:a5:ac:3d:e2:69:23:ad:78:9c:28:59: 68:04:49:4e:c9:7f:4a:d3:13:09:d4:07:44:a4:1c: cb:6d:41:3b:90:77:27:37:62:2f:8b:47:6e:41:ca: dc:f3:62:b4:01:db:62:b2:79:66:7f:6e:00:93:c1: 97:ab:49:9f:bb:16:a5:0e:0f:77:3e:a1:cc:47:45: a6:0d:bd:5e:21:21:0c:1d:89:fc:1f:ed:37:12:66: c9:db:db:81:3e:2d:c0:6a:ef:ce:21:98:71:45:26: a4:b5:96:1f:21:10:b7:2d:7d:d7:78:5f:c4:db:2a: 6c:26:46:db:43:e8:6f:60:61:d2:f2:d0:0f:3a:1b: 76:6f:27:29:cb:ec:76:68:b1:04:13:a6:b8:4b:2a: 97:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:1E:4C:52:1E:4F:AF:91:D1:96:20:2C:A7:6E:50:E6:5E:3D:9A:49 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199343.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:9800::/40 Signature Algorithm: sha256WithRSAEncryption 67:3a:b1:38:b6:47:5b:38:e0:7e:e1:ee:5b:c2:bc:b4:33:a7: ca:71:67:e1:89:42:72:0f:b3:a8:e2:ab:c1:e3:7c:6b:a9:40: 6b:f6:9d:b7:5e:78:27:eb:bd:53:67:d9:55:8f:6c:30:29:1c: b3:07:d5:1d:00:40:ff:73:b2:91:57:1a:5d:21:2d:66:5f:d8: 03:87:51:5e:71:bc:c1:e6:4a:40:dd:a9:34:b9:ea:12:c0:fe: 1c:1e:37:8c:70:bf:ce:c2:4b:dd:fb:6f:b3:03:cd:c1:60:50: eb:5b:07:46:a5:df:35:3c:ef:e8:d7:a1:ba:1b:cc:2c:89:ab: a6:11:d6:7f:8a:ce:42:e9:f9:5d:39:82:d1:8b:e6:ce:d6:9c: 42:e7:8f:a6:1c:97:32:68:5a:5e:dc:89:b9:58:63:de:01:d5: 91:71:b0:ab:64:4e:7f:a9:d3:52:e5:a4:b0:9a:0a:41:ec:6c: 42:89:f3:ff:fc:4b:c8:dc:4a:94:a0:10:32:c0:33:d9:e1:c4: c6:bb:2e:2d:3a:8c:98:cc:cd:26:2f:79:13:58:60:cf:73:82: 33:0f:cd:f3:0e:91:a0:d9:5a:69:fe:18:18:69:3a:7a:3f:6e: f4:7d:9d:ee:27:9e:cb:1b:6f:94:01:7e:25:da:48:af:39:88: 4f:27:87:1e -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUJoapD/8Vna2fa2Pnj2bWsEv8KR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEwMDYwNDQwMDNaFw0yNTEwMDUwNDQ1MDNaMDMxMTAvBgNV BAMTKEQwMUU0QzUyMUU0RkFGOTFEMTk2MjAyQ0E3NkU1MEU2NUUzRDlBNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/qDf9Q6GhqIkpiTIwQlaPa+nW IxEZwwIUsTacTSVHKY1gKdyN6bjZubsV7JNI4dkKtIuilXKtKdJBMpum0eVS3iLD 09j4x8ZnZILrTo9Px4F2RO4bUoY3Hstmx4r/7HWjgGa86FgcMX9wgSalrD3iaSOt eJwoWWgESU7Jf0rTEwnUB0SkHMttQTuQdyc3Yi+LR25BytzzYrQB22KyeWZ/bgCT wZerSZ+7FqUOD3c+ocxHRaYNvV4hIQwdifwf7TcSZsnb24E+LcBq784hmHFFJqS1 lh8hELctfdd4X8TbKmwmRttD6G9gYdLy0A86G3ZvJynL7HZosQQTprhLKpdhAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU0B5MUh5Pr5HRliAsp25Q5l49mkkwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMTk5MzQzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQJgwDQYJKoZIhvcNAQELBQADggEBAGc6 sTi2R1s44H7h7lvCvLQzp8pxZ+GJQnIPs6jiq8HjfGupQGv2nbdeeCfrvVNn2VWP bDApHLMH1R0AQP9zspFXGl0hLWZf2AOHUV5xvMHmSkDdqTS56hLA/hweN4xwv87C S937b7MDzcFgUOtbB0al3zU87+jXobobzCyJq6YR1n+KzkLp+V05gtGL5s7WnELn j6YclzJoWl7ciblYY94B1ZFxsKtkTn+p01LlpLCaCkHsbEKJ8//8S8jcSpSgEDLA M9nhxMa7Li06jJjMzSYveRNYYM9zgjMPzfMOkaDZWmn+GBhpOno/bvR9ne4nnssb b5QBfiXaSK85iE8nhx4= -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:45 2024 by rpki-client on console-fra.rpki-client.org