$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199741.roa File: AS199741.roa (raw, json) Hash identifier: /zUOy1nZt08BtWTcvnpoIS0jZO3HVIs/spFrO2tW8s0= Subject key identifier: 59:4A:D8:8D:7C:3B:A5:59:EF:97:C3:DB:D4:73:8B:BF:98:C4:C5:14 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 41D220A791B480BE93D373E84CDD2282F5D23679 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199741.roa Signing time: Sun 06 Oct 2024 04:45:13 +0000 ROA not before: Sun 06 Oct 2024 04:40:13 +0000 ROA not after: Sun 05 Oct 2025 04:45:13 +0000 asID: 199741 IP address blocks: 2a0a:6040:6300::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:d2:20:a7:91:b4:80:be:93:d3:73:e8:4c:dd:22:82:f5:d2:36:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 6 04:40:13 2024 GMT Not After : Oct 5 04:45:13 2025 GMT Subject: CN=594AD88D7C3BA559EF97C3DBD4738BBF98C4C514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c5:22:0c:a2:d8:26:0f:26:07:b3:a0:d5:1a: c2:79:0e:f5:fd:c9:de:2e:f2:4a:11:a2:a9:c7:93: 41:fa:f9:1f:c4:a0:62:ea:68:92:74:b9:45:ae:07: ee:5b:1e:9a:0e:11:6c:1a:1c:80:03:63:21:06:87: dc:f7:39:a5:fe:87:5b:26:a4:d5:4d:91:8b:a8:9f: 45:9d:ac:7b:7a:07:bd:c6:f7:bd:f9:3c:97:a6:c6: b6:8c:37:ef:d7:9f:e8:9b:02:12:49:5a:0b:0c:4c: 16:68:77:7a:76:58:56:a0:65:c8:3f:b1:40:3f:99: 25:13:43:57:35:3d:1e:a3:cc:08:92:1b:d5:91:4d: e5:53:b5:63:88:43:ce:1c:d0:9e:38:3c:94:e3:50: 69:67:15:41:1d:1f:db:c6:76:27:c0:89:5e:da:6c: be:4b:0b:b3:f8:be:b6:e7:98:51:c3:f2:81:2f:d0: e6:1a:3c:9f:b7:dd:bb:2a:ca:e4:0c:e5:c4:2f:5c: f9:5a:6e:e6:6f:0c:96:60:d5:de:65:d5:a6:2d:be: c3:80:ad:ec:f6:5c:b4:41:b1:0c:77:3f:44:bd:fc: 3c:6e:94:96:40:cb:4e:3c:80:74:56:9f:d7:da:e5: 40:26:29:9b:73:d7:6b:5b:5e:17:73:03:4c:e5:90: fb:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:4A:D8:8D:7C:3B:A5:59:EF:97:C3:DB:D4:73:8B:BF:98:C4:C5:14 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199741.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:6300::/40 Signature Algorithm: sha256WithRSAEncryption 53:d9:9b:be:30:2d:82:9d:e2:c1:07:87:8c:e2:92:00:65:b4: ab:3d:1d:b6:95:b0:85:b6:90:fa:77:f6:d1:6c:11:17:b3:07: 2b:60:50:e5:86:16:a4:6d:20:71:49:0f:4b:15:9e:27:3e:f4: 29:d2:a3:f3:00:b4:92:95:d1:64:13:10:c7:de:28:24:90:e5: 84:1d:51:4a:97:00:53:51:1e:5c:1c:c6:59:d1:b2:12:de:e8: 86:25:89:ca:48:6b:76:de:c9:c3:ed:be:22:eb:3b:f7:01:39: 18:f9:4c:87:8d:e3:9c:3c:d0:dd:1a:84:38:6d:79:27:ac:5a: 87:a1:4f:61:23:7a:80:ab:ec:e0:b5:22:c8:53:ff:c7:ce:59: 51:25:58:ca:1e:9e:c8:ca:83:ff:30:d2:ea:e1:c2:7f:2e:0f: 66:25:f6:a9:1b:38:a2:21:67:a3:88:dd:a7:f8:59:eb:dd:ee: 1f:1a:45:9b:45:5a:be:a1:1b:55:4c:41:79:62:20:2c:f3:57: 5b:34:02:49:51:63:86:cb:d3:ff:b9:59:c8:80:0a:e3:8f:01: 0a:33:4b:44:2f:e4:5a:47:76:c7:95:c4:d3:dd:e9:46:29:11: f4:88:d8:a2:f5:64:11:f9:b6:ad:85:9f:3f:32:e4:a5:de:05: 8e:29:fd:f9 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUQdIgp5G0gL6T03PoTN0igvXSNnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEwMDYwNDQwMTNaFw0yNTEwMDUwNDQ1MTNaMDMxMTAvBgNV BAMTKDU5NEFEODhEN0MzQkE1NTlFRjk3QzNEQkQ0NzM4QkJGOThDNEM1MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWxSIMotgmDyYHs6DVGsJ5DvX9 yd4u8koRoqnHk0H6+R/EoGLqaJJ0uUWuB+5bHpoOEWwaHIADYyEGh9z3OaX+h1sm pNVNkYuon0WdrHt6B73G9735PJemxraMN+/Xn+ibAhJJWgsMTBZod3p2WFagZcg/ sUA/mSUTQ1c1PR6jzAiSG9WRTeVTtWOIQ84c0J44PJTjUGlnFUEdH9vGdifAiV7a bL5LC7P4vrbnmFHD8oEv0OYaPJ+33bsqyuQM5cQvXPlabuZvDJZg1d5l1aYtvsOA rez2XLRBsQx3P0S9/DxulJZAy048gHRWn9fa5UAmKZtz12tbXhdzA0zlkPsFAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUWUrYjXw7pVnvl8Pb1HOLv5jExRQwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMTk5NzQxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQGMwDQYJKoZIhvcNAQELBQADggEBAFPZ m74wLYKd4sEHh4zikgBltKs9HbaVsIW2kPp39tFsERezBytgUOWGFqRtIHFJD0sV nic+9CnSo/MAtJKV0WQTEMfeKCSQ5YQdUUqXAFNRHlwcxlnRshLe6IYlicpIa3be ycPtviLrO/cBORj5TIeN45w80N0ahDhteSesWoehT2EjeoCr7OC1IshT/8fOWVEl WMoensjKg/8w0urhwn8uD2Yl9qkbOKIhZ6OI3af4Wevd7h8aRZtFWr6hG1VMQXli ICzzV1s0AklRY4bL0/+5WciACuOPAQozS0Qv5FpHdseVxNPd6UYpEfSI2KL1ZBH5 tq2Fnz8y5KXeBY4p/fk= -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:45 2024 by rpki-client on console-fra.rpki-client.org