$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200074.roa File: AS200074.roa (raw, json) Hash identifier: ygZfoC+DlcPwjnrGxsk4ktwPY2B4QFeuttDJOY4HgRA= Subject key identifier: FA:9F:BD:D8:94:EA:3A:6F:66:01:2A:0D:47:8E:5C:C9:A0:EA:80:1E Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 6F38B2E945C8368E40093120764870F854CD1EC1 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200074.roa Signing time: Sun 06 Oct 2024 04:45:05 +0000 ROA not before: Sun 06 Oct 2024 04:40:05 +0000 ROA not after: Sun 05 Oct 2025 04:45:05 +0000 asID: 200074 IP address blocks: 2a0a:6040:1700::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:38:b2:e9:45:c8:36:8e:40:09:31:20:76:48:70:f8:54:cd:1e:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 6 04:40:05 2024 GMT Not After : Oct 5 04:45:05 2025 GMT Subject: CN=FA9FBDD894EA3A6F66012A0D478E5CC9A0EA801E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d1:a0:0a:96:2c:2f:c1:ad:09:ed:5e:6c:dc: c4:49:91:07:f1:cf:13:9c:ad:44:46:8b:96:bf:86: 15:94:8d:57:31:95:42:6b:4e:67:f9:0d:ba:61:c7: fd:a7:8c:32:4c:74:2b:59:8c:07:50:2d:89:07:30: c4:e7:8f:c3:6e:83:09:e8:05:36:e6:40:f6:c1:b0: b0:ad:f7:0d:3d:8d:d8:55:83:b9:ff:8e:74:ea:57: 9d:41:a0:91:62:6b:10:f2:a5:7a:64:66:13:54:bc: 22:f6:46:39:c0:d7:96:d8:3f:26:dc:ba:0d:45:b6: 0f:25:39:c5:f7:be:71:97:bb:cd:a4:c5:f8:d2:3d: 9a:8a:8c:61:47:d9:51:4e:82:89:67:2f:69:c7:10: 9a:5c:b6:c3:7d:9e:1d:38:f7:9d:67:0f:82:57:c9: d8:2d:e3:77:85:1d:1c:73:6f:cf:e4:41:83:c5:b1: a4:57:82:56:d2:50:33:a0:39:d7:8b:21:05:10:84: b0:07:6e:38:ec:3b:ff:05:5d:02:05:fc:8b:57:b2: ad:19:77:a3:68:27:07:cd:3f:61:db:30:42:8e:44: 2e:7d:a0:63:e7:6b:dd:1f:d8:db:da:fa:31:cc:fe: 8f:dd:73:bf:fe:62:58:ce:09:1d:02:f4:62:ae:1e: 01:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9F:BD:D8:94:EA:3A:6F:66:01:2A:0D:47:8E:5C:C9:A0:EA:80:1E X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200074.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:1700::/40 Signature Algorithm: sha256WithRSAEncryption 9b:12:98:34:12:ea:05:bb:a1:fe:e3:e4:4d:ba:fe:ab:32:b1: 63:61:f6:a0:9b:2b:e2:14:67:04:2b:24:2b:4b:47:6c:e9:d5: 77:4c:d9:e7:a8:7e:4e:1c:b0:3c:06:f0:c7:ea:d4:93:7d:f8: e7:37:71:46:01:9f:22:d8:b4:35:ab:a1:5c:56:66:b4:b8:90: 83:8c:03:42:7f:40:10:02:d5:a7:8f:93:11:87:8f:d6:74:f8: db:bf:fc:4c:43:08:54:a8:60:26:5f:94:38:f8:3c:25:16:5f: 50:0f:ec:7f:b3:9b:fa:8b:d6:36:17:49:dc:ef:3c:f7:39:eb: bc:bd:42:8b:72:67:78:3b:ef:b1:74:74:a0:a3:ff:07:fd:3f: bf:9d:98:8f:e0:69:c9:f2:38:bb:c4:e5:e9:44:21:46:b0:5e: 48:b4:43:41:d9:c4:4d:2c:f9:b4:f9:30:ee:17:56:5f:ff:53: fe:b3:ef:7c:af:8b:4b:d9:bb:11:41:71:a0:10:c7:d7:b6:3d: b1:c5:4e:e9:65:7b:ab:d9:36:64:40:05:80:4d:7a:a8:72:60: 2f:45:b0:44:bc:35:99:15:e7:c7:b2:3e:da:40:aa:66:b8:cb: 5e:50:49:43:62:51:ba:cd:47:18:54:b5:e0:b0:59:fd:55:83: 90:43:2b:3d -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUbziy6UXINo5ACTEgdkhw+FTNHsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEwMDYwNDQwMDVaFw0yNTEwMDUwNDQ1MDVaMDMxMTAvBgNV BAMTKEZBOUZCREQ4OTRFQTNBNkY2NjAxMkEwRDQ3OEU1Q0M5QTBFQTgwMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+0aAKliwvwa0J7V5s3MRJkQfx zxOcrURGi5a/hhWUjVcxlUJrTmf5Dbphx/2njDJMdCtZjAdQLYkHMMTnj8Nugwno BTbmQPbBsLCt9w09jdhVg7n/jnTqV51BoJFiaxDypXpkZhNUvCL2RjnA15bYPybc ug1Ftg8lOcX3vnGXu82kxfjSPZqKjGFH2VFOgolnL2nHEJpctsN9nh04951nD4JX ydgt43eFHRxzb8/kQYPFsaRXglbSUDOgOdeLIQUQhLAHbjjsO/8FXQIF/ItXsq0Z d6NoJwfNP2HbMEKORC59oGPna90f2Nva+jHM/o/dc7/+YljOCR0C9GKuHgGvAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU+p+92JTqOm9mASoNR45cyaDqgB4wHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjAwMDc0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQBcwDQYJKoZIhvcNAQELBQADggEBAJsS mDQS6gW7of7j5E26/qsysWNh9qCbK+IUZwQrJCtLR2zp1XdM2eeofk4csDwG8Mfq 1JN9+Oc3cUYBnyLYtDWroVxWZrS4kIOMA0J/QBAC1aePkxGHj9Z0+Nu//ExDCFSo YCZflDj4PCUWX1AP7H+zm/qL1jYXSdzvPPc567y9QotyZ3g777F0dKCj/wf9P7+d mI/gacnyOLvE5elEIUawXki0Q0HZxE0s+bT5MO4XVl//U/6z73yvi0vZuxFBcaAQ x9e2PbHFTulle6vZNmRABYBNeqhyYC9FsES8NZkV58eyPtpAqma4y15QSUNiUbrN RxhUteCwWf1Vg5BDKz0= -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:54 2024 by rpki-client on console-ams.rpki-client.org