$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199376.roa File: AS199376.roa (raw, json) Hash identifier: f74FiflKXckBHhJWb6QmYru52I2JW2AKupq4caW/haE= Subject key identifier: 87:31:F2:38:08:EC:08:07:5C:A0:CE:EE:38:E9:00:B3:B3:0E:43:B5 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 4BFBA3185BD0FE1E083201B0A026D9E19E9AD413 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199376.roa Signing time: Sun 06 Oct 2024 04:44:59 +0000 ROA not before: Sun 06 Oct 2024 04:39:59 +0000 ROA not after: Sun 05 Oct 2025 04:44:59 +0000 asID: 199376 IP address blocks: 2a0a:6040:3000::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 21:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:fb:a3:18:5b:d0:fe:1e:08:32:01:b0:a0:26:d9:e1:9e:9a:d4:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 6 04:39:59 2024 GMT Not After : Oct 5 04:44:59 2025 GMT Subject: CN=8731F23808EC08075CA0CEEE38E900B3B30E43B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2b:c0:92:97:ab:e0:fa:a4:18:fe:09:ff:fb: ec:c6:c1:8e:57:eb:65:76:84:b1:8e:76:92:d0:93: 1a:20:0d:ef:4f:b0:7d:3b:40:b5:d8:41:9c:03:16: cb:e1:eb:ce:c9:4d:fc:d1:39:1d:5d:ea:8f:0e:14: c0:3c:31:e4:a6:e0:63:25:47:cf:23:12:ff:b8:9d: d0:7b:41:2b:41:b9:1c:3e:e6:58:d3:cd:79:73:af: 3c:73:1c:92:eb:c1:dc:a3:72:f9:a7:82:94:a4:f4: 0b:1e:01:59:e4:7b:e6:2e:00:e5:07:e8:01:ec:06: ff:08:5d:b8:3e:85:0b:79:ae:38:bc:5f:54:eb:0b: 08:80:28:ff:a3:2c:8e:a9:ec:73:70:08:4f:70:df: 13:df:dc:49:d6:68:19:14:da:a5:b5:70:aa:62:b4: 93:ef:0f:7f:f9:a7:1c:e0:cb:da:4d:fe:af:9b:89: c8:ba:43:c4:17:d4:a4:9c:22:02:a2:12:9e:f8:d5: 78:4b:57:76:eb:e6:74:7e:e0:67:7d:85:7e:42:c8: c7:03:42:a6:20:77:d6:17:5a:33:f9:cd:c5:37:03: 45:1b:de:12:e9:23:09:34:3e:79:23:b8:3f:a7:65: eb:89:54:d1:55:b3:c8:69:f5:30:19:8b:ea:d4:8e: 5c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:31:F2:38:08:EC:08:07:5C:A0:CE:EE:38:E9:00:B3:B3:0E:43:B5 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199376.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:3000::/40 Signature Algorithm: sha256WithRSAEncryption 24:de:59:c4:21:2a:f6:45:6e:ce:b4:ac:19:7c:74:9a:5b:25: 67:1a:1c:62:31:24:e4:63:ba:a2:49:6e:97:89:cb:52:7c:6f: e0:a4:5b:99:c5:7a:49:38:23:dc:ae:ca:bc:cd:ec:ed:4f:e5: 64:33:32:5b:0e:b2:1b:46:f3:51:16:86:b2:a7:14:ea:35:41: c3:ba:6b:56:fc:30:69:08:d8:87:ed:71:ce:11:c5:6f:09:88: dc:35:a3:e5:86:06:8e:74:4b:42:85:3f:3a:cb:01:99:0b:fd: 92:44:50:c4:d8:a9:3a:e6:1c:31:c6:52:1b:be:4d:ea:5b:25: 3f:08:be:3f:04:41:74:3c:29:20:d6:ce:a2:71:a2:ee:b5:41: 14:51:73:f7:8b:66:14:70:48:09:81:d6:ba:10:a1:2f:71:7f: 1d:f0:25:be:5b:03:a5:13:7e:9f:94:d6:ce:8e:70:a8:f9:81: b0:76:ef:ec:83:4e:f1:93:be:45:22:8d:af:96:93:a4:fa:fa: 5c:06:54:39:6f:55:a6:71:e9:9c:71:b1:01:9f:ab:8d:d1:f3: 38:0b:9c:c6:5e:bd:53:45:60:a9:15:40:5e:73:86:93:78:cd: 29:b4:b2:20:d7:17:71:eb:b2:99:86:3d:a6:b6:ea:c2:e8:0f: 34:f8:f8:3d -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUS/ujGFvQ/h4IMgGwoCbZ4Z6a1BMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEwMDYwNDM5NTlaFw0yNTEwMDUwNDQ0NTlaMDMxMTAvBgNV BAMTKDg3MzFGMjM4MDhFQzA4MDc1Q0EwQ0VFRTM4RTkwMEIzQjMwRTQzQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBK8CSl6vg+qQY/gn/++zGwY5X 62V2hLGOdpLQkxogDe9PsH07QLXYQZwDFsvh687JTfzROR1d6o8OFMA8MeSm4GMl R88jEv+4ndB7QStBuRw+5ljTzXlzrzxzHJLrwdyjcvmngpSk9AseAVnke+YuAOUH 6AHsBv8IXbg+hQt5rji8X1TrCwiAKP+jLI6p7HNwCE9w3xPf3EnWaBkU2qW1cKpi tJPvD3/5pxzgy9pN/q+bici6Q8QX1KScIgKiEp741XhLV3br5nR+4Gd9hX5CyMcD QqYgd9YXWjP5zcU3A0Ub3hLpIwk0PnkjuD+nZeuJVNFVs8hp9TAZi+rUjlwZAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUhzHyOAjsCAdcoM7uOOkAs7MOQ7UwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMTk5Mzc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQDAwDQYJKoZIhvcNAQELBQADggEBACTe WcQhKvZFbs60rBl8dJpbJWcaHGIxJORjuqJJbpeJy1J8b+CkW5nFekk4I9yuyrzN 7O1P5WQzMlsOshtG81EWhrKnFOo1QcO6a1b8MGkI2Iftcc4RxW8JiNw1o+WGBo50 S0KFPzrLAZkL/ZJEUMTYqTrmHDHGUhu+TepbJT8Ivj8EQXQ8KSDWzqJxou61QRRR c/eLZhRwSAmB1roQoS9xfx3wJb5bA6UTfp+U1s6OcKj5gbB27+yDTvGTvkUija+W k6T6+lwGVDlvVaZx6ZxxsQGfq43R8zgLnMZevVNFYKkVQF5zhpN4zSm0siDXF3Hr spmGPaa26sLoDzT4+D0= -----END CERTIFICATE-----Generated at Sat Nov 23 06:10:59 2024 by rpki-client on console-ams.rpki-client.org