$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200210.roa File: AS200210.roa (raw, json) Hash identifier: D9uGAG+f4Tf4AvzeZhsBzmXOenLbj6wr38jwi9gC0so= Subject key identifier: D2:6C:BA:D7:EB:40:38:8A:51:C7:86:70:57:6D:B3:B2:BE:A5:56:FF Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 7ED5B2BE04A3B0F85DDB59D7FFE0CB93CA112B10 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200210.roa Signing time: Sun 06 Oct 2024 04:44:56 +0000 ROA not before: Sun 06 Oct 2024 04:39:56 +0000 ROA not after: Sun 05 Oct 2025 04:44:56 +0000 asID: 200210 IP address blocks: 2a0a:6040:1a00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:d5:b2:be:04:a3:b0:f8:5d:db:59:d7:ff:e0:cb:93:ca:11:2b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 6 04:39:56 2024 GMT Not After : Oct 5 04:44:56 2025 GMT Subject: CN=D26CBAD7EB40388A51C78670576DB3B2BEA556FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:24:37:7f:f1:31:c4:65:f4:a8:1e:32:9f:35: d3:dc:ab:35:8e:a6:94:8f:4a:12:8f:00:0a:87:53: 6a:2b:a0:6d:95:3a:b5:a4:7a:3f:89:66:c1:46:a1: 8b:7d:4f:d9:9e:60:10:d2:e3:f5:4b:1d:a1:87:d6: 8e:0f:97:87:a2:92:5b:ae:2c:b1:05:6c:28:db:02: ca:2f:b4:3b:c9:a4:b7:c1:8a:76:66:91:5f:32:48: c8:71:63:a0:f3:14:53:ea:6a:f4:3b:67:7d:6d:54: 13:16:72:b0:9b:be:6b:aa:44:ed:7e:4d:bb:c0:55: 4d:a5:84:c3:15:22:48:f9:b4:23:12:38:cb:7d:bf: 16:0f:53:b9:2c:39:43:2c:6b:21:0c:32:f6:77:a5: e1:56:11:f2:75:fa:e7:b8:b0:51:cb:17:f5:7c:d3: ca:57:6e:9b:92:ef:57:b2:66:81:45:6f:6f:a5:14: ec:3b:2b:a4:ca:8b:37:04:b8:61:53:72:49:e4:93: 04:25:fd:58:8d:27:77:61:a8:fa:6c:bb:77:ee:8a: 42:92:a0:62:f8:03:89:8b:0a:9e:24:1e:f5:ff:f6: fc:b1:f1:72:db:55:2c:11:74:f8:a6:30:53:16:ef: c9:2d:18:b6:68:f1:45:f2:47:a6:b8:a6:a6:e7:68: ad:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:6C:BA:D7:EB:40:38:8A:51:C7:86:70:57:6D:B3:B2:BE:A5:56:FF X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200210.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:1a00::/40 Signature Algorithm: sha256WithRSAEncryption 17:11:58:4f:7d:2a:e9:68:b7:07:38:ed:45:15:6e:dc:91:d8: fb:30:89:23:9a:40:e5:ea:44:a3:08:60:cc:0d:47:6d:e4:2c: 3e:1a:71:73:a5:15:8b:7a:dd:45:2d:0a:40:c0:3a:98:3f:1f: b7:86:00:46:b1:42:d2:e9:47:d1:89:4f:30:65:77:61:16:0a: 56:b1:1b:72:33:46:01:c8:a4:8a:d1:74:44:84:ec:1b:9b:31: 97:fa:d3:eb:b7:5e:61:03:64:13:62:7e:22:25:ab:0c:21:3e: 76:c4:8a:00:0d:3f:60:8e:2a:39:86:5f:92:82:ab:f9:c1:39: 00:23:8d:fd:bc:a8:14:81:2a:1a:e5:89:8c:d1:cd:5d:27:31: 8d:37:c3:e1:8b:82:7d:bd:7e:07:b2:9c:cf:7e:d1:64:0b:65: 30:63:07:18:74:ab:48:e7:e4:e1:e3:e4:ac:83:8d:4f:83:5c: fc:a3:07:ad:51:a1:03:0d:7a:e3:a8:75:40:1a:2d:f2:96:6d: 83:99:29:df:33:56:55:60:61:09:97:02:c4:23:f2:24:b5:70: 8a:1e:84:91:8c:66:8d:07:10:b3:74:ed:01:4a:6e:0c:7b:33: 0c:41:f5:bd:2f:e1:49:59:10:0a:07:2f:d4:90:e6:83:e0:ba: 46:26:2c:14 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUftWyvgSjsPhd21nX/+DLk8oRKxAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEwMDYwNDM5NTZaFw0yNTEwMDUwNDQ0NTZaMDMxMTAvBgNV BAMTKEQyNkNCQUQ3RUI0MDM4OEE1MUM3ODY3MDU3NkRCM0IyQkVBNTU2RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqJDd/8THEZfSoHjKfNdPcqzWO ppSPShKPAAqHU2oroG2VOrWkej+JZsFGoYt9T9meYBDS4/VLHaGH1o4Pl4eikluu LLEFbCjbAsovtDvJpLfBinZmkV8ySMhxY6DzFFPqavQ7Z31tVBMWcrCbvmuqRO1+ TbvAVU2lhMMVIkj5tCMSOMt9vxYPU7ksOUMsayEMMvZ3peFWEfJ1+ue4sFHLF/V8 08pXbpuS71eyZoFFb2+lFOw7K6TKizcEuGFTcknkkwQl/ViNJ3dhqPpsu3fuikKS oGL4A4mLCp4kHvX/9vyx8XLbVSwRdPimMFMW78ktGLZo8UXyR6a4pqbnaK2zAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU0my61+tAOIpRx4ZwV22zsr6lVv8wHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjAwMjEwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQBowDQYJKoZIhvcNAQELBQADggEBABcR WE99Kulotwc47UUVbtyR2PswiSOaQOXqRKMIYMwNR23kLD4acXOlFYt63UUtCkDA Opg/H7eGAEaxQtLpR9GJTzBld2EWClaxG3IzRgHIpIrRdESE7BubMZf60+u3XmED ZBNifiIlqwwhPnbEigANP2COKjmGX5KCq/nBOQAjjf28qBSBKhrliYzRzV0nMY03 w+GLgn29fgeynM9+0WQLZTBjBxh0q0jn5OHj5KyDjU+DXPyjB61RoQMNeuOodUAa LfKWbYOZKd8zVlVgYQmXAsQj8iS1cIoehJGMZo0HELN07QFKbgx7MwxB9b0v4UlZ EAoHL9SQ5oPgukYmLBQ= -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:54 2024 by rpki-client on console-ams.rpki-client.org