$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200246.roa File: AS200246.roa (raw, json) Hash identifier: 7hRy3NSaXqLR3vlWx9zvqbny8Oawl9P8+Kgs5JxtXUw= Subject key identifier: 10:ED:90:DF:8D:84:11:CC:0A:73:8C:EA:6B:16:AF:64:FC:92:B5:AA Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 3205D2FC4ACCBE03352439F153CF9DDD6AD4A1E2 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200246.roa Signing time: Sun 05 Nov 2023 04:07:22 +0000 ROA not before: Sun 05 Nov 2023 04:02:22 +0000 ROA not after: Sun 03 Nov 2024 04:07:22 +0000 asID: 200246 IP address blocks: 2a0a:6040:2e00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 07:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:05:d2:fc:4a:cc:be:03:35:24:39:f1:53:cf:9d:dd:6a:d4:a1:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 5 04:02:22 2023 GMT Not After : Nov 3 04:07:22 2024 GMT Subject: CN=10ED90DF8D8411CC0A738CEA6B16AF64FC92B5AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d9:87:90:1f:c7:de:a8:bd:6c:fc:9a:1b:7d: 67:2b:dd:02:32:25:49:69:60:9a:57:56:be:1f:53: 47:63:2d:58:91:5a:e1:66:1b:58:2b:69:0c:fa:c6: a8:c7:46:d1:54:48:75:61:d3:89:5a:30:dd:20:97: 74:29:ac:73:ba:be:5f:bf:ae:39:bf:6b:e3:3b:ab: 91:19:81:54:f4:37:15:1a:ad:01:db:84:05:b3:da: 65:36:06:f1:1b:c5:06:69:77:a3:9c:af:b3:50:cb: b0:1d:34:24:d3:00:b7:22:8a:fd:b0:20:6b:53:01: de:ad:df:0d:90:1f:77:73:69:7b:a5:15:59:19:fe: e2:79:a6:8f:c7:82:c7:ad:bc:de:8f:8e:83:12:f6: 0f:5e:3b:3a:86:b7:45:79:38:41:8d:86:b0:42:5e: e5:70:5d:b8:e3:0d:37:b0:73:54:21:3e:93:80:a0: 3d:58:33:d1:33:78:34:a4:65:39:74:ed:32:0f:65: 0e:3d:e2:bb:c9:5f:ed:17:37:07:2b:1c:ae:66:21: e2:3b:14:cc:3f:5d:6d:bb:84:7e:cf:d2:19:ab:e6: 0c:1f:43:00:9f:a8:65:64:fe:8d:9a:90:c9:b7:65: fc:68:9b:b3:cc:ba:62:23:1d:06:9f:ad:28:8a:0e: 37:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:ED:90:DF:8D:84:11:CC:0A:73:8C:EA:6B:16:AF:64:FC:92:B5:AA X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200246.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:2e00::/40 Signature Algorithm: sha256WithRSAEncryption 6b:be:13:fa:bc:17:df:f2:b5:aa:35:d2:a3:76:00:17:b5:91: 32:12:01:4b:3f:6f:0d:f6:7e:67:46:c2:0b:f0:d9:b2:8c:e2: 81:e5:89:b7:d1:08:34:aa:f8:28:9f:c2:a1:cb:15:dd:8c:8c: 9c:68:9b:ec:48:94:49:a3:4b:7c:9f:d3:57:fb:b3:81:49:d1: 17:a6:ce:17:80:5e:c5:36:71:d3:08:e2:e2:ff:f7:e5:db:63: 99:a3:1b:75:bc:1c:6d:9c:24:44:f3:6b:2d:42:dc:27:db:35: 75:a0:60:35:d7:15:aa:3a:19:c1:98:c5:61:51:77:ed:0d:34: 6b:db:40:d0:a8:21:fe:c3:86:8c:3b:08:13:d8:5c:83:d8:85: f5:f5:76:bc:ed:38:fb:da:5b:f5:69:2c:31:ec:74:39:61:bf: fe:54:e8:29:9c:3f:c0:fb:8b:9e:b4:10:74:3a:0f:5a:59:1b: 16:d8:6f:4c:b1:1f:35:a1:6c:a9:93:9a:34:19:dc:b6:9b:6e: 3e:36:34:0c:5c:32:5d:eb:cc:01:77:b6:72:7a:4d:6b:87:33: 52:32:3a:3a:43:25:17:98:7b:61:68:d0:66:7b:e5:24:02:3c: ad:5f:95:70:1e:ea:c0:5c:3a:a7:51:b5:20:72:3d:89:76:43: 01:fa:9a:c3 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUMgXS/ErMvgM1JDnxU8+d3WrUoeIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMDUwNDAyMjJaFw0yNDExMDMwNDA3MjJaMDMxMTAvBgNV BAMTKDEwRUQ5MERGOEQ4NDExQ0MwQTczOENFQTZCMTZBRjY0RkM5MkI1QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO2YeQH8feqL1s/JobfWcr3QIy JUlpYJpXVr4fU0djLViRWuFmG1graQz6xqjHRtFUSHVh04laMN0gl3QprHO6vl+/ rjm/a+M7q5EZgVT0NxUarQHbhAWz2mU2BvEbxQZpd6Ocr7NQy7AdNCTTALciiv2w IGtTAd6t3w2QH3dzaXulFVkZ/uJ5po/HgsetvN6PjoMS9g9eOzqGt0V5OEGNhrBC XuVwXbjjDTewc1QhPpOAoD1YM9EzeDSkZTl07TIPZQ494rvJX+0XNwcrHK5mIeI7 FMw/XW27hH7P0hmr5gwfQwCfqGVk/o2akMm3Zfxom7PMumIjHQafrSiKDjdLAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUEO2Q342EEcwKc4zqaxavZPyStaowHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjAwMjQ2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQC4wDQYJKoZIhvcNAQELBQADggEBAGu+ E/q8F9/ytao10qN2ABe1kTISAUs/bw32fmdGwgvw2bKM4oHlibfRCDSq+CifwqHL Fd2MjJxom+xIlEmjS3yf01f7s4FJ0RemzheAXsU2cdMI4uL/9+XbY5mjG3W8HG2c JETzay1C3CfbNXWgYDXXFao6GcGYxWFRd+0NNGvbQNCoIf7Dhow7CBPYXIPYhfX1 drztOPvaW/VpLDHsdDlhv/5U6CmcP8D7i560EHQ6D1pZGxbYb0yxHzWhbKmTmjQZ 3Labbj42NAxcMl3rzAF3tnJ6TWuHM1IyOjpDJReYe2Fo0GZ75SQCPK1flXAe6sBc OqdRtSByPYl2QwH6msM= -----END CERTIFICATE-----Generated at Mon May 20 12:06:23 2024 by rpki-client on console-ams.rpki-client.org