$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200201.roa File: AS200201.roa (raw, json) Hash identifier: VHFRlQJSXE4uuhNT1eszaNrr0TkaJMdWCiecxtJ3/8U= Subject key identifier: 9C:8B:9B:97:4C:2C:B6:F9:68:80:54:9A:7F:90:E4:6B:AC:E1:5E:CF Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 1446CCAB41CCD8F3DE4E310BFAE89FF18C81B741 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200201.roa Signing time: Sun 06 Oct 2024 04:45:18 +0000 ROA not before: Sun 06 Oct 2024 04:40:18 +0000 ROA not after: Sun 05 Oct 2025 04:45:18 +0000 asID: 200201 IP address blocks: 2a0a:6040:4600::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:46:cc:ab:41:cc:d8:f3:de:4e:31:0b:fa:e8:9f:f1:8c:81:b7:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 6 04:40:18 2024 GMT Not After : Oct 5 04:45:18 2025 GMT Subject: CN=9C8B9B974C2CB6F96880549A7F90E46BACE15ECF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:21:5d:01:77:9d:84:56:f8:de:11:ed:82:b9: 7d:57:82:8f:6f:7d:f9:94:4b:f3:f8:01:9d:74:54: d1:a4:34:93:65:3b:a7:37:20:53:ee:d1:ac:57:75: 6a:cd:5a:8f:02:bc:25:52:ef:f6:2f:96:a2:6a:79: cb:03:73:0d:24:39:10:17:9d:14:09:37:5c:13:ad: 2c:16:e8:01:42:48:e0:4c:50:ea:5b:8b:49:73:fa: 87:76:47:d6:c5:67:b1:04:fc:e2:25:6a:44:53:52: 72:b8:4d:6a:54:9f:31:5a:fb:f1:3f:a1:22:2c:cc: 3e:36:91:2f:50:b2:21:66:2d:74:d4:5f:0c:e6:bf: 5c:50:38:fd:a0:ff:b0:b5:b5:1e:41:e4:8f:0e:70: e6:d6:2d:7f:26:fc:6f:1a:2a:fe:43:09:4a:47:68: c7:bb:66:50:05:ba:12:90:28:e7:3a:e4:4a:96:be: 9d:17:7f:9e:e1:02:d2:b2:6b:67:e7:f6:66:af:03: 4d:29:c8:f3:c7:7e:90:84:f7:f3:e7:f2:55:4d:d1: d7:81:4d:42:4c:9b:45:0d:2c:10:d4:4d:59:59:58: f3:e9:87:f0:bf:c0:f9:d2:26:a3:c5:84:1e:44:bd: 69:b7:13:f6:8b:40:a2:3f:c9:2b:78:0c:93:e1:ac: 6f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:8B:9B:97:4C:2C:B6:F9:68:80:54:9A:7F:90:E4:6B:AC:E1:5E:CF X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200201.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:4600::/40 Signature Algorithm: sha256WithRSAEncryption 53:0a:3b:73:03:72:50:e9:ff:1d:48:84:95:b7:b1:31:1c:f4: dd:37:50:1e:96:d5:cf:34:b0:bb:8b:13:90:61:c3:5f:51:3f: 89:71:78:f2:6c:7b:47:ce:19:73:77:7e:d5:72:13:93:b7:4c: 4a:83:64:ef:7d:bf:b2:e1:1a:18:0e:1f:5d:44:8a:34:6c:84: 76:dd:d4:66:f5:f1:91:30:78:0f:22:ca:40:2e:9c:40:7e:13: 67:cd:de:56:d7:00:9f:b3:74:59:2a:3a:bc:b8:15:2d:d9:45: a3:f9:91:66:39:d0:59:c1:d5:b7:ae:5d:0e:73:c6:2c:31:b4: fd:c3:d8:61:59:b1:3d:d0:44:be:28:d9:88:c6:52:98:0d:eb: 58:5a:a8:20:30:47:30:82:07:aa:69:f6:63:39:7c:6a:e5:9f: db:a1:a2:36:03:99:4a:46:90:37:5a:8d:c0:6c:84:be:07:4f: 4c:76:d1:03:53:34:63:e8:8d:a5:b2:02:bb:3a:f6:21:79:c1: d5:2a:22:ec:6a:7c:a0:ec:cc:17:1c:e1:9f:2b:14:40:f8:29: 34:b5:1e:ca:5b:15:85:00:f7:92:24:b5:7c:48:00:e7:ee:e5: 2a:97:37:be:fc:77:c6:a1:16:d7:62:49:98:a8:4a:8a:28:44: 8a:f9:c0:48 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUFEbMq0HM2PPeTjEL+uif8YyBt0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEwMDYwNDQwMThaFw0yNTEwMDUwNDQ1MThaMDMxMTAvBgNV BAMTKDlDOEI5Qjk3NEMyQ0I2Rjk2ODgwNTQ5QTdGOTBFNDZCQUNFMTVFQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5IV0Bd52EVvjeEe2CuX1Xgo9v ffmUS/P4AZ10VNGkNJNlO6c3IFPu0axXdWrNWo8CvCVS7/YvlqJqecsDcw0kORAX nRQJN1wTrSwW6AFCSOBMUOpbi0lz+od2R9bFZ7EE/OIlakRTUnK4TWpUnzFa+/E/ oSIszD42kS9QsiFmLXTUXwzmv1xQOP2g/7C1tR5B5I8OcObWLX8m/G8aKv5DCUpH aMe7ZlAFuhKQKOc65EqWvp0Xf57hAtKya2fn9mavA00pyPPHfpCE9/Pn8lVN0deB TUJMm0UNLBDUTVlZWPPph/C/wPnSJqPFhB5EvWm3E/aLQKI/ySt4DJPhrG/tAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUnIubl0wstvlogFSaf5Dka6zhXs8wHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjAwMjAxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQEYwDQYJKoZIhvcNAQELBQADggEBAFMK O3MDclDp/x1IhJW3sTEc9N03UB6W1c80sLuLE5Bhw19RP4lxePJse0fOGXN3ftVy E5O3TEqDZO99v7LhGhgOH11EijRshHbd1Gb18ZEweA8iykAunEB+E2fN3lbXAJ+z dFkqOry4FS3ZRaP5kWY50FnB1beuXQ5zxiwxtP3D2GFZsT3QRL4o2YjGUpgN61ha qCAwRzCCB6pp9mM5fGrln9uhojYDmUpGkDdajcBshL4HT0x20QNTNGPojaWyArs6 9iF5wdUqIuxqfKDszBcc4Z8rFED4KTS1HspbFYUA95IktXxIAOfu5SqXN778d8ah FtdiSZioSoooRIr5wEg= -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:54 2024 by rpki-client on console-ams.rpki-client.org