$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199607.roa File: AS199607.roa (raw, json) Hash identifier: JrHfEGBf8/WWJvdTIk5yGtnbOwxjzo9UlxrboA7sJy4= Subject key identifier: 7F:E0:BF:C5:BE:51:7B:72:4A:91:F5:90:32:CF:B3:99:C8:52:28:10 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 184E4E9539DD33D99BC76C2CDE2CF93ED5BC7D7B Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199607.roa Signing time: Sun 06 Oct 2024 04:45:21 +0000 ROA not before: Sun 06 Oct 2024 04:40:21 +0000 ROA not after: Sun 05 Oct 2025 04:45:21 +0000 asID: 199607 IP address blocks: 2a0a:6040:7f00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:4e:4e:95:39:dd:33:d9:9b:c7:6c:2c:de:2c:f9:3e:d5:bc:7d:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 6 04:40:21 2024 GMT Not After : Oct 5 04:45:21 2025 GMT Subject: CN=7FE0BFC5BE517B724A91F59032CFB399C8522810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2a:03:a7:4c:e2:74:d7:1f:6d:8f:81:ab:ff: 65:91:bd:61:a2:d8:b9:ed:fa:0b:4d:a2:0e:67:c4: c1:55:5f:2e:35:e6:49:59:72:a4:38:9d:1e:37:60: e8:ec:b4:7c:32:6b:4e:81:14:b3:26:84:77:41:f1: 7c:6a:c1:0d:ad:30:0f:f9:ec:b7:d2:01:53:be:ce: dc:ec:85:fd:69:8e:fe:62:ef:b3:73:f1:3e:c5:af: 5b:c1:e1:0b:f0:92:94:5c:f3:dc:71:cf:46:ba:1b: 98:07:a0:5f:32:ce:24:7f:b7:92:c3:03:da:b7:59: 4f:42:df:eb:70:df:75:fb:87:08:0a:2e:b0:a8:37: a2:be:a8:db:48:79:a9:38:f0:3b:f5:73:d9:91:49: f9:93:3c:b5:ac:58:06:bb:3e:bf:7c:0a:bb:1c:c1: 34:0c:bf:e4:72:c7:67:c0:fb:7d:bc:8e:ff:3c:a7: 01:e3:b0:bf:65:ba:b6:6d:1b:d0:55:ce:93:11:d9: b6:c5:ae:20:f1:04:06:15:8a:aa:38:ee:aa:3c:21: de:64:62:af:d1:93:23:b5:32:0d:20:1a:a5:23:d6: 24:4a:13:bb:d4:c4:e8:ba:fa:69:80:eb:1a:5b:64: 7d:12:62:7b:32:e5:50:25:a4:ad:8a:e3:81:fb:7b: 28:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E0:BF:C5:BE:51:7B:72:4A:91:F5:90:32:CF:B3:99:C8:52:28:10 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199607.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:7f00::/40 Signature Algorithm: sha256WithRSAEncryption 1c:24:b2:15:e2:00:ae:c7:f9:46:c2:cf:50:cc:35:68:12:24: c0:d9:14:ab:ee:38:e8:0f:4a:c1:14:5b:4f:47:73:e4:59:e5: 94:1e:96:7c:0a:12:61:38:3d:67:d5:87:46:04:c2:8d:5d:95: 49:1e:0f:72:8d:77:9c:f0:a4:e2:f8:32:77:3b:f8:b4:ee:a6: 12:90:c0:12:ea:eb:15:50:c5:7e:da:da:ba:e5:aa:b9:bd:ad: f1:51:df:20:51:5d:6f:be:6c:67:00:50:eb:71:2f:9a:8b:aa: 32:b3:cc:d9:d0:66:77:b9:5c:28:81:4c:f4:50:74:71:3e:cf: 25:f2:13:53:0d:06:6c:25:ad:6e:44:6a:70:c8:08:ff:e6:90: db:0d:b9:fb:f1:04:e7:35:ec:4e:48:d0:70:b0:35:1f:6c:59: 6b:4d:67:af:fb:bf:52:a9:f9:6e:5d:16:4e:ff:46:0d:b9:51: 53:fb:64:c2:68:03:d6:d6:a1:07:42:2d:20:e2:bd:92:4c:e0: 7f:b8:ee:9c:af:0d:03:23:d6:84:46:f7:d3:b0:24:1a:f2:8d: 63:75:49:d4:0f:48:d9:6b:2d:42:42:bb:e1:fc:ea:b3:7a:d1: c8:77:8c:13:8f:ad:6e:58:db:f5:da:62:0b:6a:5a:47:1f:0d: c7:d8:a2:aa -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUGE5OlTndM9mbx2ws3iz5PtW8fXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEwMDYwNDQwMjFaFw0yNTEwMDUwNDQ1MjFaMDMxMTAvBgNV BAMTKDdGRTBCRkM1QkU1MTdCNzI0QTkxRjU5MDMyQ0ZCMzk5Qzg1MjI4MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuKgOnTOJ01x9tj4Gr/2WRvWGi 2Lnt+gtNog5nxMFVXy415klZcqQ4nR43YOjstHwya06BFLMmhHdB8XxqwQ2tMA/5 7LfSAVO+ztzshf1pjv5i77Nz8T7Fr1vB4QvwkpRc89xxz0a6G5gHoF8yziR/t5LD A9q3WU9C3+tw33X7hwgKLrCoN6K+qNtIeak48Dv1c9mRSfmTPLWsWAa7Pr98Crsc wTQMv+Ryx2fA+328jv88pwHjsL9lurZtG9BVzpMR2bbFriDxBAYViqo47qo8Id5k Yq/RkyO1Mg0gGqUj1iRKE7vUxOi6+mmA6xpbZH0SYnsy5VAlpK2K44H7eyg/AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUf+C/xb5Re3JKkfWQMs+zmchSKBAwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMTk5NjA3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQH8wDQYJKoZIhvcNAQELBQADggEBABwk shXiAK7H+UbCz1DMNWgSJMDZFKvuOOgPSsEUW09Hc+RZ5ZQelnwKEmE4PWfVh0YE wo1dlUkeD3KNd5zwpOL4Mnc7+LTuphKQwBLq6xVQxX7a2rrlqrm9rfFR3yBRXW++ bGcAUOtxL5qLqjKzzNnQZne5XCiBTPRQdHE+zyXyE1MNBmwlrW5EanDICP/mkNsN ufvxBOc17E5I0HCwNR9sWWtNZ6/7v1Kp+W5dFk7/Rg25UVP7ZMJoA9bWoQdCLSDi vZJM4H+47pyvDQMj1oRG99OwJBryjWN1SdQPSNlrLUJCu+H86rN60ch3jBOPrW5Y 2/XaYgtqWkcfDcfYoqo= -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:54 2024 by rpki-client on console-ams.rpki-client.org