$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200262.roa File: AS200262.roa (raw, json) Hash identifier: oE3ZNcDfdL7ibPjAr2caxyQuoFDZ35N6qWmv2DheSsw= Subject key identifier: 9A:25:CD:62:73:E1:7D:36:AF:E7:FB:A9:68:6C:9F:FB:BC:75:46:EB Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 05D69A8A9806EDC2FF54A51404B027F7DE0696CC Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200262.roa Signing time: Sun 05 Nov 2023 04:07:08 +0000 ROA not before: Sun 05 Nov 2023 04:02:08 +0000 ROA not after: Sun 03 Nov 2024 04:07:08 +0000 asID: 200262 IP address blocks: 2a0a:6040:ae00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 22:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:d6:9a:8a:98:06:ed:c2:ff:54:a5:14:04:b0:27:f7:de:06:96:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 5 04:02:08 2023 GMT Not After : Nov 3 04:07:08 2024 GMT Subject: CN=9A25CD6273E17D36AFE7FBA9686C9FFBBC7546EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:88:12:67:a5:4d:a8:68:d9:bf:8f:d4:2b:2c: 09:59:96:f9:27:7f:3c:f7:14:ea:53:61:18:f2:e9: 2b:a0:b4:ef:58:a2:eb:69:5d:0c:7b:c4:fb:21:50: 43:ae:74:37:10:96:c6:25:a3:92:1f:bb:79:1e:e2: 8b:d1:f9:f1:3e:17:15:23:dd:58:c5:be:9d:62:17: 80:b7:11:09:08:77:89:c8:89:ec:e3:d1:d7:11:ec: 55:0f:9b:cd:d1:6e:e9:5c:d6:ce:db:84:eb:af:69: 69:dc:3a:08:71:3f:0b:53:eb:7c:1a:15:3e:3a:42: 77:0c:48:87:db:58:bf:51:cc:26:63:10:57:95:71: e1:eb:e9:1c:73:9b:c7:a8:a6:6b:8f:a4:c8:39:77: fb:ea:b2:8f:52:b4:1e:8c:21:87:97:e3:41:be:f4: de:c9:97:a1:36:4a:21:67:01:11:3d:6e:fa:b9:1c: 67:2b:bf:72:b2:7c:34:ff:14:b4:f9:d9:4d:87:47: d9:92:83:cb:08:3d:f9:3f:7d:c2:c0:c7:52:6d:5f: 0a:4f:0b:ca:56:13:26:9a:23:92:b6:9d:ac:12:bc: dc:f9:f4:37:91:d9:71:6d:ea:bf:d5:c7:42:51:a1: 6b:9c:6a:63:cc:c9:0d:10:4e:81:ff:2a:52:e0:d3: 8f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:25:CD:62:73:E1:7D:36:AF:E7:FB:A9:68:6C:9F:FB:BC:75:46:EB X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200262.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:ae00::/40 Signature Algorithm: sha256WithRSAEncryption a3:1a:c6:fd:64:71:38:b6:60:a3:ce:90:f4:53:03:6f:62:1b: 11:75:68:aa:83:b6:24:83:42:33:f9:d8:36:bd:a6:c1:e9:75: 9a:43:99:8c:38:9d:3d:35:e9:ae:99:fd:ae:50:dd:8d:d9:0f: cd:b0:c1:52:c4:df:26:20:25:65:1c:f7:5e:0f:a3:b5:41:33: 54:27:90:57:7a:c7:91:5a:a5:75:78:d0:41:29:0b:ea:20:11: 11:06:00:36:e8:85:b8:6f:bd:98:02:4d:b4:5b:93:20:71:96: 7d:1e:23:33:4c:1f:10:b2:47:62:03:be:bf:2f:30:25:f3:32: 8a:33:77:df:d0:14:97:15:39:6c:11:af:27:a8:a2:2b:bd:69: 16:41:1c:fa:79:7d:b9:c6:f8:dc:c0:89:76:89:2a:12:29:e6: d6:b2:71:8a:f3:98:87:c0:1c:84:0f:3e:bd:cc:85:0a:02:20: 96:2f:76:96:72:59:1c:bd:dd:f7:8b:2b:7f:ee:94:2d:92:bf: 3e:14:84:a9:3e:c9:4c:4d:11:47:5e:43:90:43:35:26:55:dd: 56:61:42:5b:30:54:7e:33:2c:4a:10:58:22:64:16:3d:75:5e: 8a:05:a7:3c:a6:e7:3d:e9:4c:c5:ea:8b:69:24:1d:17:b8:11: 99:1d:ee:ca -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUBdaaipgG7cL/VKUUBLAn994GlswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMDUwNDAyMDhaFw0yNDExMDMwNDA3MDhaMDMxMTAvBgNV BAMTKDlBMjVDRDYyNzNFMTdEMzZBRkU3RkJBOTY4NkM5RkZCQkM3NTQ2RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyiBJnpU2oaNm/j9QrLAlZlvkn fzz3FOpTYRjy6SugtO9YoutpXQx7xPshUEOudDcQlsYlo5Ifu3ke4ovR+fE+FxUj 3VjFvp1iF4C3EQkId4nIiezj0dcR7FUPm83Rbulc1s7bhOuvaWncOghxPwtT63wa FT46QncMSIfbWL9RzCZjEFeVceHr6Rxzm8eopmuPpMg5d/vqso9StB6MIYeX40G+ 9N7Jl6E2SiFnARE9bvq5HGcrv3KyfDT/FLT52U2HR9mSg8sIPfk/fcLAx1JtXwpP C8pWEyaaI5K2nawSvNz59DeR2XFt6r/Vx0JRoWucamPMyQ0QToH/KlLg048VAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUmiXNYnPhfTav5/upaGyf+7x1RuswHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjAwMjYyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQK4wDQYJKoZIhvcNAQELBQADggEBAKMa xv1kcTi2YKPOkPRTA29iGxF1aKqDtiSDQjP52Da9psHpdZpDmYw4nT016a6Z/a5Q 3Y3ZD82wwVLE3yYgJWUc914Po7VBM1QnkFd6x5FapXV40EEpC+ogEREGADbohbhv vZgCTbRbkyBxln0eIzNMHxCyR2IDvr8vMCXzMoozd9/QFJcVOWwRryeooiu9aRZB HPp5fbnG+NzAiXaJKhIp5taycYrzmIfAHIQPPr3MhQoCIJYvdpZyWRy93feLK3/u lC2Svz4UhKk+yUxNEUdeQ5BDNSZV3VZhQlswVH4zLEoQWCJkFj11XooFpzym5z3p TMXqi2kkHRe4EZkd7so= -----END CERTIFICATE-----Generated at Tue May 21 05:34:02 2024 by rpki-client on console-ams.rpki-client.org