$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199376.roa File: AS199376.roa (raw, json) Hash identifier: R6ndJqrNhJU7PeSkXOrWq5fOp0lxif2rDavqK8lzzH0= Subject key identifier: A8:6B:96:DE:4A:24:70:C8:D2:BB:0C:A5:4C:5B:6C:E6:50:1E:5D:E7 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 38F72AEAA06678209DCF62CF42A3034D48485CA0 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199376.roa Signing time: Sun 05 Nov 2023 04:07:13 +0000 ROA not before: Sun 05 Nov 2023 04:02:13 +0000 ROA not after: Sun 03 Nov 2024 04:07:13 +0000 asID: 199376 IP address blocks: 2a0a:6040:3000::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 07:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:f7:2a:ea:a0:66:78:20:9d:cf:62:cf:42:a3:03:4d:48:48:5c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 5 04:02:13 2023 GMT Not After : Nov 3 04:07:13 2024 GMT Subject: CN=A86B96DE4A2470C8D2BB0CA54C5B6CE6501E5DE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4f:5f:61:65:2a:23:a4:f4:8e:76:20:88:57: dd:1e:24:c4:6e:d2:6c:ee:d7:8d:c7:c4:c5:14:43: e9:ff:b3:9d:c0:b9:45:a9:19:93:78:85:40:97:f0: 2a:b6:57:60:0f:e6:8a:a8:50:d7:af:b3:86:71:61: 75:67:a2:0f:63:ef:75:88:d5:23:e4:7b:95:16:8b: 89:31:fd:8b:6a:23:61:d5:fa:00:cb:28:03:81:f4: 74:ef:d0:ef:9e:d9:16:8e:9f:55:98:00:07:44:1a: c5:11:ca:00:b5:58:a7:a6:a4:09:00:0c:30:ff:39: a8:64:66:1d:e2:ac:ee:7a:fa:ef:75:6e:08:bc:1c: 47:15:9d:ef:b0:41:92:de:0d:05:03:d9:ba:17:96: 4a:13:cb:72:41:a3:cf:ab:74:1d:7e:f9:f6:fa:0f: eb:ce:e0:23:92:4a:71:8c:84:9b:33:c2:70:40:d2: 1e:66:26:85:4e:98:3e:60:e0:8b:88:d2:aa:70:33: a8:78:64:0f:44:34:37:d8:de:2c:66:d8:35:e4:ed: 7d:25:61:24:e6:f1:d7:69:27:91:05:c7:f3:8f:22: 0e:f0:fa:b3:e4:05:79:e4:32:5a:7c:94:84:63:fa: db:57:3a:10:82:6a:f5:db:94:d4:98:45:59:d8:f5: f2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:6B:96:DE:4A:24:70:C8:D2:BB:0C:A5:4C:5B:6C:E6:50:1E:5D:E7 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199376.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:3000::/40 Signature Algorithm: sha256WithRSAEncryption 7b:5e:f3:ca:4a:c5:c4:84:8c:07:14:05:4a:09:33:b1:0a:02: 5c:0b:bd:4f:b1:f3:78:a9:28:34:fa:b8:68:dc:87:92:a0:c4: 47:ec:89:c9:e4:92:32:5a:c1:97:d9:e9:0c:c5:74:b3:30:30: 56:79:39:30:45:a1:6e:04:0f:7b:e3:54:f7:fd:51:68:d4:a0: 04:4a:7e:0f:a8:79:92:22:2f:b1:f3:bd:76:08:02:10:99:c0: 90:3c:43:45:1a:62:ba:dc:8d:05:da:ec:c6:8a:16:bb:c6:59: 7c:83:1c:7a:df:00:1c:3c:8a:31:25:8c:67:3d:37:5a:b4:d2: 64:b3:21:f7:bb:31:a4:0e:66:8d:ce:03:63:a3:ef:1d:f1:b5: 62:1a:fa:a6:23:60:14:b8:46:e9:96:8a:4f:2e:2f:34:72:57: fa:4f:d7:54:40:1b:6f:5a:5f:cc:d5:5b:e4:59:2f:52:d2:60: 37:dd:db:bf:03:36:0c:76:c7:b9:b7:9e:07:37:7c:63:7f:d9: 99:6b:be:34:2c:3c:33:b3:c1:2c:d8:71:1a:e6:39:25:f9:d0: 56:29:58:52:ca:a0:b2:6d:7c:49:7b:c0:6c:83:e6:8e:a5:55: 55:ef:4d:f9:7b:94:58:7e:f5:1c:8a:62:ec:be:0d:20:b7:bc: 93:d1:c3:ad -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUOPcq6qBmeCCdz2LPQqMDTUhIXKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMDUwNDAyMTNaFw0yNDExMDMwNDA3MTNaMDMxMTAvBgNV BAMTKEE4NkI5NkRFNEEyNDcwQzhEMkJCMENBNTRDNUI2Q0U2NTAxRTVERTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPT19hZSojpPSOdiCIV90eJMRu 0mzu143HxMUUQ+n/s53AuUWpGZN4hUCX8Cq2V2AP5oqoUNevs4ZxYXVnog9j73WI 1SPke5UWi4kx/YtqI2HV+gDLKAOB9HTv0O+e2RaOn1WYAAdEGsURygC1WKempAkA DDD/OahkZh3irO56+u91bgi8HEcVne+wQZLeDQUD2boXlkoTy3JBo8+rdB1++fb6 D+vO4COSSnGMhJszwnBA0h5mJoVOmD5g4IuI0qpwM6h4ZA9ENDfY3ixm2DXk7X0l YSTm8ddpJ5EFx/OPIg7w+rPkBXnkMlp8lIRj+ttXOhCCavXblNSYRVnY9fI9AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUqGuW3kokcMjSuwylTFts5lAeXecwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMTk5Mzc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQDAwDQYJKoZIhvcNAQELBQADggEBAHte 88pKxcSEjAcUBUoJM7EKAlwLvU+x83ipKDT6uGjch5KgxEfsicnkkjJawZfZ6QzF dLMwMFZ5OTBFoW4ED3vjVPf9UWjUoARKfg+oeZIiL7HzvXYIAhCZwJA8Q0UaYrrc jQXa7MaKFrvGWXyDHHrfABw8ijEljGc9N1q00mSzIfe7MaQOZo3OA2Oj7x3xtWIa +qYjYBS4RumWik8uLzRyV/pP11RAG29aX8zVW+RZL1LSYDfd278DNgx2x7m3ngc3 fGN/2ZlrvjQsPDOzwSzYcRrmOSX50FYpWFLKoLJtfEl7wGyD5o6lVVXvTfl7lFh+ 9RyKYuy+DSC3vJPRw60= -----END CERTIFICATE-----Generated at Mon May 20 13:08:21 2024 by rpki-client on console-fra.rpki-client.org