$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199488.roa File: AS199488.roa (raw, json) Hash identifier: P+8KLSLy399J/P9/Kx07C8etC9G7dHUBnLQDy020qMw= Subject key identifier: 01:D2:DC:89:C5:A9:B1:39:18:81:EF:D4:31:19:33:45:43:DC:4E:0F Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 16CD2D36265D8352F226D8B5BAC57ADDEFEEAC5D Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199488.roa Signing time: Sun 05 Nov 2023 04:07:18 +0000 ROA not before: Sun 05 Nov 2023 04:02:18 +0000 ROA not after: Sun 03 Nov 2024 04:07:18 +0000 asID: 199488 IP address blocks: 2a0a:6040:8500::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 22:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:cd:2d:36:26:5d:83:52:f2:26:d8:b5:ba:c5:7a:dd:ef:ee:ac:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 5 04:02:18 2023 GMT Not After : Nov 3 04:07:18 2024 GMT Subject: CN=01D2DC89C5A9B1391881EFD43119334543DC4E0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d2:34:e2:e9:18:b4:5a:c2:20:7f:de:0b:cb: aa:8b:9e:f9:0f:d1:7b:a3:91:66:03:52:a7:36:12: 23:c8:94:a4:d5:60:64:4a:79:4d:6e:c9:85:58:31: 6b:b1:52:de:12:8a:d0:f6:47:0b:32:8d:0b:37:5b: d4:28:47:9a:b3:51:6d:6c:af:83:1d:d9:4f:31:a1: 09:30:78:73:34:6c:93:a3:ef:64:d0:fe:1e:d6:57: 48:63:d6:c4:44:d8:97:74:50:e5:e4:69:7d:28:bd: 7c:8b:c2:57:f9:e4:bb:ef:32:a0:96:82:90:62:07: ba:ed:b1:ff:3a:f6:77:89:2f:0a:7d:f6:9c:de:cb: e6:d6:2c:b2:8e:ea:63:b8:d1:44:d9:ec:17:6a:f3: 7e:52:90:90:23:75:1e:3f:fb:7e:13:08:9a:7b:9a: 09:92:7b:95:c8:27:94:60:b1:77:be:05:e6:81:2d: 6f:e7:39:6d:02:f1:2b:64:19:3e:be:57:20:a6:e5: 63:76:ed:c6:9f:85:14:c8:ce:c5:db:4c:22:f9:ae: 73:56:c2:ab:a5:01:da:bd:3c:c2:62:c9:ce:22:11: b0:bd:50:0e:14:31:8e:ba:14:8b:91:26:f0:ea:d1: 55:9a:8a:e4:ee:61:bd:4d:bd:98:30:45:41:78:1d: 9d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:D2:DC:89:C5:A9:B1:39:18:81:EF:D4:31:19:33:45:43:DC:4E:0F X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199488.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:8500::/40 Signature Algorithm: sha256WithRSAEncryption 19:1a:a7:fe:a4:46:06:1a:10:97:bb:14:65:ab:a0:0e:20:ea: a0:d1:c6:94:58:59:c4:ca:53:49:8d:5b:73:fc:52:14:d9:57: 0d:a5:cd:62:d5:fc:22:65:cd:d9:37:83:f6:00:aa:ab:c4:b2: b2:e1:cd:b5:0b:fd:ac:96:7c:b9:48:26:b2:4b:87:bb:f2:41: 02:52:fb:fd:5d:e8:99:e4:07:40:2e:75:48:ff:ed:4c:20:d1: 28:e3:d0:43:57:bd:d0:b6:93:01:b4:8f:47:a2:8a:6a:26:c2: f4:81:8d:76:f5:6f:19:4d:dc:5e:60:a0:af:1a:00:1e:50:40: ce:15:e8:4d:40:b7:c3:1f:f6:f1:17:04:1d:73:6f:25:23:cc: b7:52:03:f9:c8:a4:94:87:6f:14:6e:3b:b4:77:47:1f:41:f4: ce:87:b3:d3:95:e0:b8:98:ae:d9:1d:af:f4:0e:26:ad:07:0e: a1:19:df:fa:6a:99:fc:33:7f:4d:4c:3f:3a:ee:2b:80:87:45: 44:67:b2:ed:4b:d4:92:b5:bb:bb:b3:59:1e:43:45:13:e1:bd: 12:12:62:8d:62:6e:53:58:60:46:4a:75:1f:4e:64:ec:4e:2c: fb:c5:f8:27:67:e5:0d:b8:76:b8:53:63:f8:25:dd:7e:08:9c: c7:8d:49:98 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUFs0tNiZdg1LyJti1usV63e/urF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMDUwNDAyMThaFw0yNDExMDMwNDA3MThaMDMxMTAvBgNV BAMTKDAxRDJEQzg5QzVBOUIxMzkxODgxRUZENDMxMTkzMzQ1NDNEQzRFMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG0jTi6Ri0WsIgf94Ly6qLnvkP 0XujkWYDUqc2EiPIlKTVYGRKeU1uyYVYMWuxUt4SitD2RwsyjQs3W9QoR5qzUW1s r4Md2U8xoQkweHM0bJOj72TQ/h7WV0hj1sRE2Jd0UOXkaX0ovXyLwlf55LvvMqCW gpBiB7rtsf869neJLwp99pzey+bWLLKO6mO40UTZ7Bdq835SkJAjdR4/+34TCJp7 mgmSe5XIJ5RgsXe+BeaBLW/nOW0C8StkGT6+VyCm5WN27cafhRTIzsXbTCL5rnNW wqulAdq9PMJiyc4iEbC9UA4UMY66FIuRJvDq0VWaiuTuYb1NvZgwRUF4HZ27AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUAdLcicWpsTkYge/UMRkzRUPcTg8wHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMTk5NDg4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQIUwDQYJKoZIhvcNAQELBQADggEBABka p/6kRgYaEJe7FGWroA4g6qDRxpRYWcTKU0mNW3P8UhTZVw2lzWLV/CJlzdk3g/YA qqvEsrLhzbUL/ayWfLlIJrJLh7vyQQJS+/1d6JnkB0AudUj/7Uwg0Sjj0ENXvdC2 kwG0j0eiimomwvSBjXb1bxlN3F5goK8aAB5QQM4V6E1At8Mf9vEXBB1zbyUjzLdS A/nIpJSHbxRuO7R3Rx9B9M6Hs9OV4LiYrtkdr/QOJq0HDqEZ3/pqmfwzf01MPzru K4CHRURnsu1L1JK1u7uzWR5DRRPhvRISYo1iblNYYEZKdR9OZOxOLPvF+Cdn5Q24 drhTY/gl3X4InMeNSZg= -----END CERTIFICATE-----Generated at Tue May 21 05:34:01 2024 by rpki-client on console-ams.rpki-client.org