$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200261.roa File: AS200261.roa (raw, json) Hash identifier: TqO6Umet2W4V6Dvf+7d0DLK4JYOTgrhJ0uycmimstRw= Subject key identifier: 6C:D7:7B:04:ED:B6:64:1A:E4:25:85:B5:E6:18:F7:32:8D:24:42:5F Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 4294C0AA5C082D53814E71C6E3848D48ECE49B9A Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200261.roa Signing time: Sun 06 Oct 2024 04:45:06 +0000 ROA not before: Sun 06 Oct 2024 04:40:06 +0000 ROA not after: Sun 05 Oct 2025 04:45:06 +0000 asID: 200261 IP address blocks: 2a0a:6040:1f00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:94:c0:aa:5c:08:2d:53:81:4e:71:c6:e3:84:8d:48:ec:e4:9b:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 6 04:40:06 2024 GMT Not After : Oct 5 04:45:06 2025 GMT Subject: CN=6CD77B04EDB6641AE42585B5E618F7328D24425F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:60:6a:3e:b6:a9:49:c9:94:b8:9d:08:1e:34: 97:a7:85:ae:fc:09:d3:59:76:08:cf:76:3e:67:61: 21:43:ca:2f:38:68:0b:e8:a4:d3:7d:ec:a0:67:c2: a9:09:60:e0:88:53:ee:83:f8:80:91:50:2b:00:70: 8a:8c:9a:c6:3e:22:01:44:2a:ea:df:a4:7d:ec:38: b6:a2:8f:d0:fe:35:76:4f:5b:6e:1d:26:0b:79:6d: b3:41:ef:c0:88:89:63:a5:f9:7e:fa:cf:7e:ce:e7: 78:0a:da:1d:34:20:fd:f4:cf:0d:7a:74:ae:30:89: 75:3a:2d:21:e2:03:0c:ac:51:e8:26:43:b2:cc:c0: 2b:42:d9:c0:e6:9f:d1:46:c0:ce:c8:49:cd:63:74: e3:7d:4d:65:0b:16:92:54:e9:cd:cc:a2:e8:11:3d: d5:90:23:c2:7b:78:5b:93:8b:2d:ec:04:8b:1c:e1: 1a:bf:96:69:28:3a:18:21:a4:23:6c:e8:3f:34:22: 91:fb:db:ec:99:82:78:74:00:99:ba:19:e0:61:6d: 95:e9:21:a9:0b:09:45:4e:7b:17:a3:ac:19:16:a3: 79:66:5c:71:c2:82:53:75:1d:94:48:6d:b5:d1:a1: 45:dd:9a:37:35:11:4d:66:6c:36:8a:f6:40:cd:2e: e0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D7:7B:04:ED:B6:64:1A:E4:25:85:B5:E6:18:F7:32:8D:24:42:5F X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200261.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:1f00::/40 Signature Algorithm: sha256WithRSAEncryption 12:24:df:67:90:13:95:3e:05:d2:68:10:5e:a2:a8:3c:0e:81: 52:98:6a:f2:7a:a0:fd:db:e6:b9:df:28:60:a6:a1:30:ba:69: f1:c7:f6:08:53:e1:80:95:b8:74:36:b5:60:a5:99:28:ad:71: 76:bd:dd:89:41:71:6e:40:e5:c8:cd:13:42:27:a4:3f:45:ca: 92:40:ad:3e:6b:ec:a4:a2:7b:27:05:e2:6a:9e:5e:e2:5b:c3: 17:d7:9f:1d:c3:37:2f:e9:55:25:b4:15:91:15:28:6f:33:0a: dc:6e:a2:57:85:f8:22:fc:51:08:49:a7:49:74:47:c9:d9:7a: a1:7f:e3:d7:97:83:10:ea:ad:ba:3e:32:f8:fc:be:75:c2:b6: a6:53:48:f2:a2:f2:59:cb:21:ac:fc:aa:c6:f0:06:bf:be:ed: 89:ae:27:be:41:ae:ce:b4:43:62:23:2c:3c:2e:06:43:01:a0: 59:69:f3:e7:de:98:e3:00:08:a9:93:d2:eb:b9:4e:33:e0:27: 9a:5f:88:18:2f:0a:6d:84:47:91:95:93:99:8f:c2:33:61:21: a6:17:2c:cb:a7:7b:49:70:9c:db:f2:14:1a:fb:93:bb:c7:d9: a1:0c:70:67:d5:e9:7e:57:a1:74:7d:c3:24:e3:9b:0a:1a:cc: c7:59:eb:4f -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUQpTAqlwILVOBTnHG44SNSOzkm5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEwMDYwNDQwMDZaFw0yNTEwMDUwNDQ1MDZaMDMxMTAvBgNV BAMTKDZDRDc3QjA0RURCNjY0MUFFNDI1ODVCNUU2MThGNzMyOEQyNDQyNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEYGo+tqlJyZS4nQgeNJenha78 CdNZdgjPdj5nYSFDyi84aAvopNN97KBnwqkJYOCIU+6D+ICRUCsAcIqMmsY+IgFE KurfpH3sOLaij9D+NXZPW24dJgt5bbNB78CIiWOl+X76z37O53gK2h00IP30zw16 dK4wiXU6LSHiAwysUegmQ7LMwCtC2cDmn9FGwM7ISc1jdON9TWULFpJU6c3MougR PdWQI8J7eFuTiy3sBIsc4Rq/lmkoOhghpCNs6D80IpH72+yZgnh0AJm6GeBhbZXp IakLCUVOexejrBkWo3lmXHHCglN1HZRIbbXRoUXdmjc1EU1mbDaK9kDNLuCrAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUbNd7BO22ZBrkJYW15hj3Mo0kQl8wHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjAwMjYxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQB8wDQYJKoZIhvcNAQELBQADggEBABIk 32eQE5U+BdJoEF6iqDwOgVKYavJ6oP3b5rnfKGCmoTC6afHH9ghT4YCVuHQ2tWCl mSitcXa93YlBcW5A5cjNE0InpD9FypJArT5r7KSieycF4mqeXuJbwxfXnx3DNy/p VSW0FZEVKG8zCtxuoleF+CL8UQhJp0l0R8nZeqF/49eXgxDqrbo+Mvj8vnXCtqZT SPKi8lnLIaz8qsbwBr++7YmuJ75Brs60Q2IjLDwuBkMBoFlp8+femOMACKmT0uu5 TjPgJ5pfiBgvCm2ER5GVk5mPwjNhIaYXLMune0lwnNvyFBr7k7vH2aEMcGfV6X5X oXR9wyTjmwoazMdZ608= -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:45 2024 by rpki-client on console-fra.rpki-client.org