$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200255.roa File: AS200255.roa (raw, json) Hash identifier: ps5jUpNdbUyNuiYAaFhG0PWExaGsKGvJxViwEwaY6sI= Subject key identifier: 37:5E:AD:9F:8E:0F:0C:62:6B:25:A6:CD:0E:30:05:DD:CF:41:0B:94 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 5BDB8A31D3232F31EAB350F9F5981839EA2EDFAF Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200255.roa Signing time: Sun 06 Oct 2024 04:45:05 +0000 ROA not before: Sun 06 Oct 2024 04:40:05 +0000 ROA not after: Sun 05 Oct 2025 04:45:05 +0000 asID: 200255 IP address blocks: 2a0a:6040:bf00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:db:8a:31:d3:23:2f:31:ea:b3:50:f9:f5:98:18:39:ea:2e:df:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 6 04:40:05 2024 GMT Not After : Oct 5 04:45:05 2025 GMT Subject: CN=375EAD9F8E0F0C626B25A6CD0E3005DDCF410B94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:25:e2:80:da:9c:cd:4d:12:05:dc:7b:50:30: 22:86:61:f6:00:a8:21:56:21:63:3e:92:dc:da:3d: d7:68:65:54:0d:2b:03:5c:61:f1:55:e1:3c:62:d8: 79:3c:4e:ce:a7:40:45:58:cb:a5:ad:85:e8:fc:48: 2c:f2:25:62:c1:e5:95:78:65:53:c5:3b:10:39:02: 0b:14:d9:73:1e:22:48:48:d4:d0:e4:ee:ef:c6:2f: 41:68:85:49:1c:4a:81:10:5a:ac:08:30:3a:7a:c0: 1b:66:1a:da:f0:e0:bd:66:c5:e3:22:ac:d4:54:a1: 06:32:33:11:55:79:30:68:8f:0e:a1:2f:66:ca:cb: 47:75:f0:c3:14:e5:b9:21:90:8d:f7:9c:c5:3c:9d: f0:08:95:c3:35:b9:cb:d4:e8:ee:e6:b0:05:75:d8: bd:ef:4b:7d:f3:a9:b1:b7:8b:70:d8:35:70:05:e3: 60:4e:ee:41:a0:82:60:4a:99:28:6d:7d:5e:04:99: 0b:62:b2:2e:ba:a8:0a:d7:cc:07:8e:e5:13:da:f5: 5a:af:32:dc:c5:c1:18:ab:db:c8:b4:2b:e0:81:ea: 47:9a:19:3e:ea:5e:66:90:9b:ee:e5:24:00:28:44: f3:af:07:d8:b3:fb:c4:3c:1e:5f:59:f6:51:e3:76: 8b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:5E:AD:9F:8E:0F:0C:62:6B:25:A6:CD:0E:30:05:DD:CF:41:0B:94 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200255.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:bf00::/40 Signature Algorithm: sha256WithRSAEncryption ab:c1:9c:41:61:c7:57:d6:8d:d5:8e:ba:a5:04:bb:b6:67:7d: 6c:9e:c3:b6:31:f9:df:86:e0:10:6b:db:c1:60:87:23:57:3a: 90:e9:6b:28:59:e1:ee:1f:b5:3e:88:cd:e9:03:f2:54:81:85: bc:e9:22:68:ac:08:f4:49:d0:4d:d6:a5:b7:46:d5:11:1a:8e: 41:53:d4:c1:40:88:b9:31:75:4b:12:69:7b:3d:e7:d0:5a:9f: 58:bf:21:c2:52:53:4b:be:f4:d0:86:63:4a:16:f9:eb:4d:27: 3b:f2:d2:46:3f:c4:83:91:dd:d0:0e:29:60:13:f7:9b:f7:cc: a3:97:79:f3:37:74:58:1a:bd:e0:dd:33:aa:a4:9a:9f:86:91: 30:ec:66:38:e1:64:48:56:a9:80:ff:c6:a2:6a:cc:67:5c:9c: 13:3d:4f:53:32:31:eb:8b:5c:27:3e:04:95:19:99:83:b1:3e: 32:da:80:d7:4e:9b:5d:4e:cf:e0:a0:ad:13:ae:ed:eb:0f:02: 42:2d:23:7e:73:ae:68:e5:ac:aa:c9:d3:6f:af:97:39:c9:2e: ba:da:7c:9b:e3:db:1b:82:79:89:f2:0d:f9:2b:50:70:ac:a3: 07:4b:52:57:e8:55:80:3d:ff:14:22:0f:6d:cb:be:06:ff:cf: a2:d4:13:a6 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUW9uKMdMjLzHqs1D59ZgYOeou368wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEwMDYwNDQwMDVaFw0yNTEwMDUwNDQ1MDVaMDMxMTAvBgNV BAMTKDM3NUVBRDlGOEUwRjBDNjI2QjI1QTZDRDBFMzAwNUREQ0Y0MTBCOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7JeKA2pzNTRIF3HtQMCKGYfYA qCFWIWM+ktzaPddoZVQNKwNcYfFV4Txi2Hk8Ts6nQEVYy6Wthej8SCzyJWLB5ZV4 ZVPFOxA5AgsU2XMeIkhI1NDk7u/GL0FohUkcSoEQWqwIMDp6wBtmGtrw4L1mxeMi rNRUoQYyMxFVeTBojw6hL2bKy0d18MMU5bkhkI33nMU8nfAIlcM1ucvU6O7msAV1 2L3vS33zqbG3i3DYNXAF42BO7kGggmBKmShtfV4EmQtisi66qArXzAeO5RPa9Vqv MtzFwRir28i0K+CB6keaGT7qXmaQm+7lJAAoRPOvB9iz+8Q8Hl9Z9lHjdovrAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUN16tn44PDGJrJabNDjAF3c9BC5QwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjAwMjU1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQL8wDQYJKoZIhvcNAQELBQADggEBAKvB nEFhx1fWjdWOuqUEu7ZnfWyew7Yx+d+G4BBr28FghyNXOpDpayhZ4e4ftT6IzekD 8lSBhbzpImisCPRJ0E3WpbdG1REajkFT1MFAiLkxdUsSaXs959Ban1i/IcJSU0u+ 9NCGY0oW+etNJzvy0kY/xIOR3dAOKWAT95v3zKOXefM3dFgaveDdM6qkmp+GkTDs ZjjhZEhWqYD/xqJqzGdcnBM9T1MyMeuLXCc+BJUZmYOxPjLagNdOm11Oz+CgrROu 7esPAkItI35zrmjlrKrJ02+vlznJLrrafJvj2xuCeYnyDfkrUHCsowdLUlfoVYA9 /xQiD23Lvgb/z6LUE6Y= -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:54 2024 by rpki-client on console-ams.rpki-client.org