$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200210.roa File: AS200210.roa (raw, json) Hash identifier: DcjV3Zl5Vra43n1mSBt6qlXg9JLE2BmTPt0x649YlmQ= Subject key identifier: CB:1E:F1:DB:C1:A6:54:02:A9:C5:64:13:02:42:D3:2C:3C:52:95:DA Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 4E9DEC4B6AD32636F07B95BF145C611492F0C3A0 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200210.roa Signing time: Sun 05 Nov 2023 04:06:58 +0000 ROA not before: Sun 05 Nov 2023 04:01:58 +0000 ROA not after: Sun 03 Nov 2024 04:06:58 +0000 asID: 200210 IP address blocks: 2a0a:6040:1a00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 07:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:9d:ec:4b:6a:d3:26:36:f0:7b:95:bf:14:5c:61:14:92:f0:c3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 5 04:01:58 2023 GMT Not After : Nov 3 04:06:58 2024 GMT Subject: CN=CB1EF1DBC1A65402A9C564130242D32C3C5295DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e4:fc:bf:fc:b6:e5:eb:f6:0e:d2:ae:63:84: fd:6f:71:9b:c4:fe:3a:01:d0:bd:b4:8a:9b:3d:18: b8:c5:48:82:3a:01:39:82:b5:6f:dd:e8:6a:bd:8f: 35:45:40:b4:11:61:ee:17:d3:5d:81:47:61:bb:1b: 2e:a6:6d:ba:88:2b:93:3a:d1:86:30:5b:25:99:32: 2b:06:eb:9f:d6:50:31:6d:83:0a:be:c9:05:d2:21: 3c:c1:36:4d:ec:c5:c4:bc:cd:25:1b:07:e0:d6:3b: d4:29:96:2e:9d:04:4a:3f:93:ac:73:8b:cc:16:75: d1:da:23:7a:4a:e2:17:4a:49:b9:01:d0:fd:20:99: e9:89:0b:1d:4b:3c:5a:43:72:44:76:ac:e1:6a:aa: d7:52:b8:1f:45:a8:90:a3:87:64:1c:be:06:ef:24: e6:51:31:28:2a:01:92:98:62:8d:cb:1e:e2:70:a5: 69:1e:45:58:24:da:9b:c2:94:ad:23:c7:3d:61:93: 0b:96:e6:af:0c:02:43:6b:6e:30:ad:47:0d:fd:58: 94:d6:78:93:7b:21:f2:31:be:60:16:40:85:89:e6: f0:62:00:6d:b3:6b:4c:ae:4a:a2:71:81:48:29:d1: b7:2c:13:51:6c:dc:d6:16:70:15:55:1a:39:88:ca: 26:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:1E:F1:DB:C1:A6:54:02:A9:C5:64:13:02:42:D3:2C:3C:52:95:DA X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200210.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:1a00::/40 Signature Algorithm: sha256WithRSAEncryption 67:4e:60:d4:57:05:b6:16:0f:01:98:6d:8d:5c:52:fc:c6:5c: 69:f8:dc:79:d2:af:af:d7:d9:f8:81:ee:c9:f7:45:dd:fa:99: 62:6e:57:96:97:41:e5:e6:5f:a1:0b:49:d9:38:e2:8d:39:7e: 2d:dd:98:d6:d3:a9:fe:aa:7b:45:4c:65:d6:44:ff:b5:88:26: 18:c2:e6:d6:62:d6:13:1c:98:bf:0c:d6:9b:16:2a:80:3b:a7: b6:ea:b5:9e:26:c2:46:aa:e6:04:b3:3f:0c:cb:a9:f6:98:20: d2:02:26:bc:9c:08:af:9b:36:51:d8:b2:f6:fa:72:e6:78:4e: 8a:00:e2:44:7f:c8:95:02:d0:af:70:41:b4:ff:61:4a:3d:e5: 7e:9f:2f:a1:ad:8c:fd:5c:e7:fd:0a:0c:43:b4:88:d0:08:59: 92:f8:5d:b3:34:0f:32:0b:ac:6d:dd:14:8e:4a:e6:40:40:14: 8c:e6:40:ef:9c:2e:9e:41:1e:5e:20:9e:d8:6e:68:dd:6e:e5: 5b:f8:7b:26:cc:65:7a:c6:a6:ec:a0:ef:c6:35:8c:19:a2:2e: bc:48:f3:1d:53:93:4b:f1:f4:5d:f4:3a:66:3f:dd:3b:ad:06: ea:43:48:7d:8e:65:9f:35:5e:3f:10:42:83:ee:5b:59:47:b4: 46:2a:e6:74 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUTp3sS2rTJjbwe5W/FFxhFJLww6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMDUwNDAxNThaFw0yNDExMDMwNDA2NThaMDMxMTAvBgNV BAMTKENCMUVGMURCQzFBNjU0MDJBOUM1NjQxMzAyNDJEMzJDM0M1Mjk1REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs5Py//Lbl6/YO0q5jhP1vcZvE /joB0L20ips9GLjFSII6ATmCtW/d6Gq9jzVFQLQRYe4X012BR2G7Gy6mbbqIK5M6 0YYwWyWZMisG65/WUDFtgwq+yQXSITzBNk3sxcS8zSUbB+DWO9Qpli6dBEo/k6xz i8wWddHaI3pK4hdKSbkB0P0gmemJCx1LPFpDckR2rOFqqtdSuB9FqJCjh2Qcvgbv JOZRMSgqAZKYYo3LHuJwpWkeRVgk2pvClK0jxz1hkwuW5q8MAkNrbjCtRw39WJTW eJN7IfIxvmAWQIWJ5vBiAG2za0yuSqJxgUgp0bcsE1Fs3NYWcBVVGjmIyiZdAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUyx7x28GmVAKpxWQTAkLTLDxSldowHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjAwMjEwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQBowDQYJKoZIhvcNAQELBQADggEBAGdO YNRXBbYWDwGYbY1cUvzGXGn43HnSr6/X2fiB7sn3Rd36mWJuV5aXQeXmX6ELSdk4 4o05fi3dmNbTqf6qe0VMZdZE/7WIJhjC5tZi1hMcmL8M1psWKoA7p7bqtZ4mwkaq 5gSzPwzLqfaYINICJrycCK+bNlHYsvb6cuZ4TooA4kR/yJUC0K9wQbT/YUo95X6f L6GtjP1c5/0KDEO0iNAIWZL4XbM0DzILrG3dFI5K5kBAFIzmQO+cLp5BHl4gnthu aN1u5Vv4eybMZXrGpuyg78Y1jBmiLrxI8x1Tk0vx9F30OmY/3TutBupDSH2OZZ81 Xj8QQoPuW1lHtEYq5nQ= -----END CERTIFICATE-----Generated at Mon May 20 12:06:23 2024 by rpki-client on console-ams.rpki-client.org