$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200103.roa File: AS200103.roa (raw, json) Hash identifier: vBTnTrhTJj8XCT/qhmGCI30JTtHG5u2Dqq/VdAYv9mU= Subject key identifier: A2:89:81:D8:57:85:F0:4F:72:04:7D:2C:C6:3C:43:C8:36:2B:7E:62 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 2B582555FF7ADBAB4127F9F98C313979AB2BD299 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200103.roa Signing time: Sun 06 Oct 2024 04:45:10 +0000 ROA not before: Sun 06 Oct 2024 04:40:10 +0000 ROA not after: Sun 05 Oct 2025 04:45:10 +0000 asID: 200103 IP address blocks: 2a0a:6040:5500::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:58:25:55:ff:7a:db:ab:41:27:f9:f9:8c:31:39:79:ab:2b:d2:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 6 04:40:10 2024 GMT Not After : Oct 5 04:45:10 2025 GMT Subject: CN=A28981D85785F04F72047D2CC63C43C8362B7E62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f2:37:eb:d6:b5:06:0a:34:71:6d:e8:42:01: 88:68:b4:ca:99:b9:06:9d:dd:a1:ed:08:c7:d8:22: 89:79:73:4d:2a:b9:fb:f8:ad:ad:01:86:79:83:ce: 37:cf:48:98:f3:a0:99:5d:0a:d7:04:69:3f:51:23: 5e:76:85:d2:ec:3e:88:4c:ef:bc:06:de:34:78:5c: cf:27:e4:8d:a2:a5:75:9d:eb:6b:0d:4b:6a:17:ef: ae:38:7a:5a:fa:e0:a2:28:c5:8a:91:ef:57:36:61: f2:2e:a6:b8:7f:43:d5:f3:e5:69:b2:ab:d2:17:0b: 14:6a:8e:44:5c:e8:dd:91:93:11:87:2a:b9:fc:9b: 14:1a:ad:12:5b:c8:6f:59:a8:cb:ce:d2:9f:24:c7: e6:cf:99:3c:94:b0:a5:e3:a5:17:ad:44:90:2b:64: d8:e3:1d:bc:7d:04:c4:2b:f3:df:0e:30:95:02:af: e5:e5:03:18:fb:77:95:2b:ca:a3:66:8b:5f:69:d3: f7:a8:76:39:cb:f5:a4:20:64:f6:5e:7a:f7:cb:12: 75:6b:6b:8b:57:a0:ae:8e:fe:82:99:3d:c3:2d:e0: f7:5e:e9:e2:f0:48:b8:de:44:27:59:a0:2e:70:79: 02:c5:30:21:87:03:74:90:04:f7:3e:a0:f8:3a:cf: 0c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:89:81:D8:57:85:F0:4F:72:04:7D:2C:C6:3C:43:C8:36:2B:7E:62 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200103.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:5500::/40 Signature Algorithm: sha256WithRSAEncryption 5a:4d:91:7e:14:d3:8a:85:7c:94:48:b3:fb:7e:d8:f0:18:b2: 73:fb:13:95:4d:38:14:c6:03:1b:f7:ae:7d:c7:8a:2a:6b:af: 55:6f:57:7c:2b:cb:24:16:fd:34:b1:14:a4:b2:39:e0:2b:4a: 82:a7:f0:fc:34:91:fc:37:fd:4e:28:54:fc:05:71:97:30:ce: f4:9b:e0:23:e2:31:dd:47:1a:ef:21:14:d1:fd:7d:9a:53:cb: 7e:79:15:c0:48:a7:0b:92:4c:83:5b:b3:b5:b0:50:d7:5e:a5: 02:2d:11:2d:b1:d1:cb:c2:49:e2:7c:46:fc:4f:66:e8:de:28: 4e:7f:31:b9:72:f0:ba:e2:fc:3d:a7:32:1b:ae:fc:92:b1:32: 13:c5:c8:28:12:16:d6:01:8f:36:d8:80:97:8a:f0:72:28:7b: 6d:a4:17:ca:c0:8d:45:b9:4c:66:55:24:7e:10:b1:47:f7:03: e8:5e:dd:af:44:e6:c3:27:f9:23:66:81:9c:b6:a4:26:90:18: 5e:4c:71:14:2e:22:98:a9:e3:e0:b7:19:e3:c0:cb:72:3d:13: e9:33:20:0e:dd:3d:1b:40:2c:9f:8f:26:e5:c8:ea:df:21:18: dd:b2:a9:78:1b:5f:41:27:87:32:52:d0:70:4a:3a:aa:f5:c7: 13:9b:78:ba -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUK1glVf9626tBJ/n5jDE5easr0pkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEwMDYwNDQwMTBaFw0yNTEwMDUwNDQ1MTBaMDMxMTAvBgNV BAMTKEEyODk4MUQ4NTc4NUYwNEY3MjA0N0QyQ0M2M0M0M0M4MzYyQjdFNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe8jfr1rUGCjRxbehCAYhotMqZ uQad3aHtCMfYIol5c00qufv4ra0BhnmDzjfPSJjzoJldCtcEaT9RI152hdLsPohM 77wG3jR4XM8n5I2ipXWd62sNS2oX7644elr64KIoxYqR71c2YfIuprh/Q9Xz5Wmy q9IXCxRqjkRc6N2RkxGHKrn8mxQarRJbyG9ZqMvO0p8kx+bPmTyUsKXjpRetRJAr ZNjjHbx9BMQr898OMJUCr+XlAxj7d5UryqNmi19p0/eodjnL9aQgZPZeevfLEnVr a4tXoK6O/oKZPcMt4Pde6eLwSLjeRCdZoC5weQLFMCGHA3SQBPc+oPg6zwy1AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUoomB2FeF8E9yBH0sxjxDyDYrfmIwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjAwMTAzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQFUwDQYJKoZIhvcNAQELBQADggEBAFpN kX4U04qFfJRIs/t+2PAYsnP7E5VNOBTGAxv3rn3Hiiprr1VvV3wryyQW/TSxFKSy OeArSoKn8Pw0kfw3/U4oVPwFcZcwzvSb4CPiMd1HGu8hFNH9fZpTy355FcBIpwuS TINbs7WwUNdepQItES2x0cvCSeJ8RvxPZujeKE5/Mbly8Lri/D2nMhuu/JKxMhPF yCgSFtYBjzbYgJeK8HIoe22kF8rAjUW5TGZVJH4QsUf3A+he3a9E5sMn+SNmgZy2 pCaQGF5McRQuIpip4+C3GePAy3I9E+kzIA7dPRtALJ+PJuXI6t8hGN2yqXgbX0En hzJS0HBKOqr1xxObeLo= -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:45 2024 by rpki-client on console-fra.rpki-client.org