$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200201.roa File: AS200201.roa (raw, json) Hash identifier: Qr+axOOwY5n7SSwAVXPt4HHfb5rRULAmgpc/DybJIlg= Subject key identifier: 6E:5A:3B:28:48:84:2A:12:8B:95:26:23:2F:C2:67:7E:CE:61:B2:C2 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 6044DD38022E54922A5B4C3394B5A057C8C725F7 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200201.roa Signing time: Sun 05 Nov 2023 04:07:18 +0000 ROA not before: Sun 05 Nov 2023 04:02:18 +0000 ROA not after: Sun 03 Nov 2024 04:07:18 +0000 asID: 200201 IP address blocks: 2a0a:6040:4600::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 22:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:44:dd:38:02:2e:54:92:2a:5b:4c:33:94:b5:a0:57:c8:c7:25:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 5 04:02:18 2023 GMT Not After : Nov 3 04:07:18 2024 GMT Subject: CN=6E5A3B2848842A128B9526232FC2677ECE61B2C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5c:a1:5c:7c:8b:3c:b3:67:17:36:2f:6d:1c: 96:92:c8:c4:42:88:d0:44:93:a4:eb:27:b7:eb:04: ec:79:9b:ea:79:0b:95:c2:bb:04:3b:40:22:4e:f5: b7:b7:d3:94:a7:1c:69:ce:78:41:7d:dd:2c:d6:c6: dc:9f:e4:7f:37:28:62:c6:7d:a6:05:b8:f8:24:4e: 9c:80:2c:3c:d3:76:94:4c:f0:66:78:7e:36:da:4a: 5e:b3:98:8f:1a:d3:e8:2a:1a:e8:ed:57:f2:8d:bf: 04:76:f4:6a:c2:2e:c2:5f:87:3d:21:f3:b9:1e:6b: 98:61:45:6e:19:21:4a:f5:df:be:f7:cf:eb:13:f3: b5:27:85:a6:d8:61:ce:87:ab:d7:82:a6:05:d7:83: 49:cb:e1:14:36:3d:03:2d:13:4c:1c:fe:6e:fd:38: fc:51:07:6e:3a:46:97:24:c8:a6:0f:79:84:1d:9a: a0:cc:15:8c:1d:0a:c9:89:54:65:8c:e5:11:e8:e9: 38:a7:d3:44:df:24:63:1a:24:7d:58:bb:58:d4:7b: 9f:eb:1b:dd:9d:3a:63:56:11:2e:9d:e3:62:44:88: bf:6b:00:a3:0c:e3:ed:10:46:d2:47:ba:2c:3f:99: cc:c3:9b:da:5f:70:47:7b:3b:66:25:8a:40:6f:52: 53:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:5A:3B:28:48:84:2A:12:8B:95:26:23:2F:C2:67:7E:CE:61:B2:C2 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200201.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:4600::/40 Signature Algorithm: sha256WithRSAEncryption 64:ef:c9:6d:d3:d0:d9:c3:1e:6a:74:00:d6:09:e8:31:2d:89: 7b:e5:f5:fe:cf:3a:a7:ea:dc:c0:05:7d:f3:9a:42:23:93:9e: df:d3:48:d9:23:b0:6e:2b:0c:1c:41:6f:cf:cb:24:b1:dc:20: 66:a4:56:c3:0f:29:92:87:52:58:0d:b3:ff:2d:86:be:44:e7: 52:be:ab:7c:84:b8:7c:6e:1d:7e:c8:a4:39:3b:3c:03:e5:6b: ac:16:6c:75:bf:4d:c9:3f:da:a2:e9:ed:65:19:73:3b:bd:19: 36:36:16:4f:9b:ec:93:96:c7:40:54:86:3d:0e:dc:1a:66:8a: c8:55:10:2b:30:6b:d8:12:c1:cf:82:91:83:0b:1a:2f:2e:7e: bd:65:c7:1e:c9:27:5e:c9:ec:4f:1c:5a:76:ac:03:ef:c0:ce: 93:2d:b4:9f:2d:99:e0:e1:54:ea:1d:b4:46:31:43:31:90:35: b9:65:29:ec:00:77:33:96:07:87:ac:a0:b6:10:ad:e2:10:12: 32:60:15:da:95:4c:5e:78:5e:aa:2f:79:e9:6d:94:92:d0:21: 75:69:63:6b:f1:52:ed:15:68:21:25:8d:c4:c7:bd:03:b2:aa: 3a:d6:ab:dd:24:5d:9a:17:c5:1b:2a:11:f0:58:df:4d:a7:28: 5b:33:e7:1e -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUYETdOAIuVJIqW0wzlLWgV8jHJfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMDUwNDAyMThaFw0yNDExMDMwNDA3MThaMDMxMTAvBgNV BAMTKDZFNUEzQjI4NDg4NDJBMTI4Qjk1MjYyMzJGQzI2NzdFQ0U2MUIyQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNXKFcfIs8s2cXNi9tHJaSyMRC iNBEk6TrJ7frBOx5m+p5C5XCuwQ7QCJO9be305SnHGnOeEF93SzWxtyf5H83KGLG faYFuPgkTpyALDzTdpRM8GZ4fjbaSl6zmI8a0+gqGujtV/KNvwR29GrCLsJfhz0h 87kea5hhRW4ZIUr13773z+sT87UnhabYYc6Hq9eCpgXXg0nL4RQ2PQMtE0wc/m79 OPxRB246RpckyKYPeYQdmqDMFYwdCsmJVGWM5RHo6Tin00TfJGMaJH1Yu1jUe5/r G92dOmNWES6d42JEiL9rAKMM4+0QRtJHuiw/mczDm9pfcEd7O2YlikBvUlNTAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUblo7KEiEKhKLlSYjL8Jnfs5hssIwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjAwMjAxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQEYwDQYJKoZIhvcNAQELBQADggEBAGTv yW3T0NnDHmp0ANYJ6DEtiXvl9f7POqfq3MAFffOaQiOTnt/TSNkjsG4rDBxBb8/L JLHcIGakVsMPKZKHUlgNs/8thr5E51K+q3yEuHxuHX7IpDk7PAPla6wWbHW/Tck/ 2qLp7WUZczu9GTY2Fk+b7JOWx0BUhj0O3BpmishVECswa9gSwc+CkYMLGi8ufr1l xx7JJ17J7E8cWnasA+/AzpMttJ8tmeDhVOodtEYxQzGQNbllKewAdzOWB4esoLYQ reIQEjJgFdqVTF54XqoveeltlJLQIXVpY2vxUu0VaCEljcTHvQOyqjrWq90kXZoX xRsqEfBY302nKFsz5x4= -----END CERTIFICATE-----Generated at Tue May 21 04:45:06 2024 by rpki-client on console-fra.rpki-client.org