$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200256.roa File: AS200256.roa (raw, json) Hash identifier: n+XTLxcYlJDFMjbGBBPpO9PlQ2US7Tt3S12WWVXjxEo= Subject key identifier: 30:5E:CF:61:FC:63:13:26:A0:0F:78:A6:02:F0:7C:05:7E:5B:9B:BF Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 1C1D46937FD8336DE11ED99077ED8525FC74F347 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200256.roa Signing time: Sun 05 Nov 2023 04:07:18 +0000 ROA not before: Sun 05 Nov 2023 04:02:18 +0000 ROA not after: Sun 03 Nov 2024 04:07:18 +0000 asID: 200256 IP address blocks: 2a0a:6040:2d00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 03:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:1d:46:93:7f:d8:33:6d:e1:1e:d9:90:77:ed:85:25:fc:74:f3:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 5 04:02:18 2023 GMT Not After : Nov 3 04:07:18 2024 GMT Subject: CN=305ECF61FC631326A00F78A602F07C057E5B9BBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:db:82:4c:9e:35:4b:d2:12:ef:14:31:49:f9: c9:c7:f5:82:37:02:96:28:96:2e:56:be:74:5e:ca: 1e:04:0d:51:78:f9:38:08:d5:d2:e8:be:85:d0:17: 3e:ee:69:5f:ad:6d:2b:7e:0e:dd:7b:bc:1e:b0:98: 3b:00:24:e8:2a:cb:da:57:e6:58:a8:b2:ec:67:d9: 7f:2d:b7:b7:b7:6b:4e:05:75:24:fe:0a:ea:97:2a: cb:e2:52:7a:d4:80:0d:5a:87:8c:9e:38:9e:54:4e: 58:0d:dc:2d:36:7f:3d:5d:59:c2:70:f8:34:7f:07: 67:91:29:c1:db:78:c7:ab:64:c9:de:85:4e:21:36: 84:9c:0e:36:76:18:a5:3d:c7:69:3e:a8:11:04:a3: 31:fb:02:13:a4:59:f7:9c:83:22:65:a5:d5:6b:3a: d7:7f:84:f2:c2:7c:7d:10:51:40:9b:ab:83:2a:f0: a8:5c:aa:67:54:ab:6d:32:d5:f0:cc:5a:91:6b:53: 9f:c1:d5:bf:20:5f:46:8f:33:06:cb:c4:ed:88:a8: cb:ee:ef:c5:4e:c2:1a:9d:e0:a0:12:e2:4a:d5:b2: 28:00:e8:b8:05:7c:f1:72:b9:57:46:95:0c:4f:ad: 64:86:25:0d:bf:c0:19:47:30:d5:1d:4a:f8:58:d7: 31:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:5E:CF:61:FC:63:13:26:A0:0F:78:A6:02:F0:7C:05:7E:5B:9B:BF X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200256.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:2d00::/40 Signature Algorithm: sha256WithRSAEncryption 14:97:27:3a:6d:09:ef:73:1e:9c:2a:9b:73:02:63:d8:35:5f: b9:39:1f:a0:18:9e:b4:c0:e1:ae:d8:8a:e1:4a:d1:d4:47:a9: ed:fe:8d:a1:de:62:ef:14:95:da:88:a0:97:e6:03:1c:7f:cd: ef:0e:dd:b2:7c:64:46:95:04:3c:9d:ab:9f:82:15:37:b4:94: e2:f9:92:41:48:10:ed:5a:9c:65:03:9b:16:da:6e:db:6a:cf: 7e:a6:5b:ab:4f:c6:51:b0:36:93:e0:6f:5a:bf:0a:b0:23:47: 48:cd:1f:f4:7a:95:7e:bc:aa:91:34:09:a9:23:f0:0f:d6:5a: 5a:bb:0f:cf:f5:8d:f8:d0:da:51:57:10:cb:de:51:8b:58:f3: 7e:fc:3b:13:ba:53:1b:40:0c:64:0a:12:aa:2a:0e:74:62:b4: 48:b6:57:77:4a:56:3c:5b:1f:c5:f1:0c:b2:fe:42:b8:b0:2b: 15:c2:0b:f9:ab:01:88:e2:9d:6d:e0:fe:5e:98:8d:4d:2d:62: 2d:e4:70:e9:a8:13:1a:32:16:93:46:dc:63:18:fb:71:10:a5: 41:a3:00:03:85:b1:81:ab:9f:47:7e:b4:2a:37:da:ff:03:36: f6:68:63:a9:a5:93:5e:68:26:85:64:2e:82:66:01:74:77:b2: e4:a3:c7:d0 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUHB1Gk3/YM23hHtmQd+2FJfx080cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMDUwNDAyMThaFw0yNDExMDMwNDA3MThaMDMxMTAvBgNV BAMTKDMwNUVDRjYxRkM2MzEzMjZBMDBGNzhBNjAyRjA3QzA1N0U1QjlCQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh24JMnjVL0hLvFDFJ+cnH9YI3 ApYoli5WvnReyh4EDVF4+TgI1dLovoXQFz7uaV+tbSt+Dt17vB6wmDsAJOgqy9pX 5liosuxn2X8tt7e3a04FdST+CuqXKsviUnrUgA1ah4yeOJ5UTlgN3C02fz1dWcJw +DR/B2eRKcHbeMerZMnehU4hNoScDjZ2GKU9x2k+qBEEozH7AhOkWfecgyJlpdVr Otd/hPLCfH0QUUCbq4Mq8KhcqmdUq20y1fDMWpFrU5/B1b8gX0aPMwbLxO2IqMvu 78VOwhqd4KAS4krVsigA6LgFfPFyuVdGlQxPrWSGJQ2/wBlHMNUdSvhY1zHpAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUMF7PYfxjEyagD3imAvB8BX5bm78wHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjAwMjU2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQC0wDQYJKoZIhvcNAQELBQADggEBABSX JzptCe9zHpwqm3MCY9g1X7k5H6AYnrTA4a7YiuFK0dRHqe3+jaHeYu8UldqIoJfm Axx/ze8O3bJ8ZEaVBDydq5+CFTe0lOL5kkFIEO1anGUDmxbabttqz36mW6tPxlGw NpPgb1q/CrAjR0jNH/R6lX68qpE0Cakj8A/WWlq7D8/1jfjQ2lFXEMveUYtY8378 OxO6UxtADGQKEqoqDnRitEi2V3dKVjxbH8XxDLL+QriwKxXCC/mrAYjinW3g/l6Y jU0tYi3kcOmoExoyFpNG3GMY+3EQpUGjAAOFsYGrn0d+tCo32v8DNvZoY6mlk15o JoVkLoJmAXR3suSjx9A= -----END CERTIFICATE-----Generated at Fri May 17 13:11:27 2024 by rpki-client on console-ams.rpki-client.org