$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200283.roa File: AS200283.roa (raw, json) Hash identifier: cQaQNwYQ1/wF4/HnDdFPfGK/gjbHX+N5iQaGZdV1vMA= Subject key identifier: CF:3D:78:22:A1:AE:10:BC:70:B2:C5:21:60:F2:30:77:21:C6:52:9C Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 11473CA9F1B4F41F751B8A1DEA38D276872AE330 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200283.roa Signing time: Sun 06 Oct 2024 04:45:07 +0000 ROA not before: Sun 06 Oct 2024 04:40:07 +0000 ROA not after: Sun 05 Oct 2025 04:45:07 +0000 asID: 200283 IP address blocks: 2a0a:6040:ab00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:47:3c:a9:f1:b4:f4:1f:75:1b:8a:1d:ea:38:d2:76:87:2a:e3:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 6 04:40:07 2024 GMT Not After : Oct 5 04:45:07 2025 GMT Subject: CN=CF3D7822A1AE10BC70B2C52160F2307721C6529C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d8:79:0b:ca:f1:c4:c7:bc:f8:6a:fc:5a:9c: 33:8a:d9:48:3e:b1:1b:91:b1:7b:db:34:1a:a2:02: bb:cf:23:e5:95:f5:1c:d8:01:d1:6d:15:76:79:06: bf:72:15:ec:09:7f:d4:30:e3:06:f8:2d:a3:10:02: 43:b8:0a:22:53:dd:d1:6a:13:6b:81:e0:52:8c:41: 48:ed:35:a3:57:42:d1:82:49:63:fc:29:b2:5c:4a: 3a:86:bf:e3:7c:78:d9:73:72:9c:97:ed:38:de:d3: 21:d0:fe:42:07:0d:58:92:32:db:90:28:81:14:8a: 7f:f7:e4:00:22:fb:9d:39:d6:f9:d4:64:12:20:ed: 9f:0e:41:ed:c9:04:85:3a:9d:5b:4b:d5:1f:07:8e: a9:7f:61:62:d6:ff:37:c6:5f:c7:66:e9:b4:af:ae: ca:52:70:07:cf:ab:06:92:e7:96:e2:fd:10:24:c7: 55:68:54:83:bf:3b:9a:18:60:f9:f7:53:e8:24:41: 84:7d:61:ec:32:ee:d4:62:f0:6b:65:bc:9a:89:3a: 83:46:23:59:a8:99:49:85:71:80:ee:20:0f:ce:5c: 37:65:31:6e:52:4c:03:7d:57:29:aa:90:e2:6b:b6: 4d:bc:81:8d:28:13:70:25:b1:c6:fc:62:31:28:0e: 9e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3D:78:22:A1:AE:10:BC:70:B2:C5:21:60:F2:30:77:21:C6:52:9C X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200283.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:ab00::/40 Signature Algorithm: sha256WithRSAEncryption 12:45:66:2e:6a:9e:2e:3d:1d:06:ed:fe:5c:3b:87:c6:36:60: f1:95:34:2e:e4:f2:f6:f5:9b:79:4e:75:fb:b7:07:99:a1:d9: 16:be:c2:2b:61:de:ca:74:49:ff:7c:8f:e8:d5:9d:22:93:e1: 11:3f:cf:79:08:71:28:a7:e5:dd:11:da:11:00:fd:d4:1e:8b: 9e:e2:50:25:6c:68:a8:f4:65:ec:e5:d4:3c:df:45:c6:46:80: 7c:e4:35:d1:4c:3b:19:f6:29:46:a0:8a:9e:a5:df:a1:0c:3a: 3e:5f:dd:3a:a4:c5:56:ab:b3:c4:fc:d5:ed:84:db:93:9f:35: 95:49:db:0f:98:31:80:d5:84:a6:b6:0d:54:22:e7:ad:25:39: 17:76:8c:14:41:fd:eb:c1:5e:46:1e:bb:a2:0c:5a:ea:eb:89: 4c:90:f5:bb:d9:9a:99:3b:4c:da:8a:14:03:d0:52:d5:ab:a8: 95:a1:a9:90:91:66:5a:7b:af:1d:09:d8:dc:00:cf:17:fa:3c: 10:a1:29:c1:ef:9c:b6:79:47:45:b8:65:77:00:49:86:40:66: 66:26:30:98:4a:5e:43:fe:59:78:84:ff:ad:9f:2c:8c:6a:b7: 4e:ed:b7:bf:fd:c2:14:03:2a:6b:f9:39:21:ed:ad:28:c6:b3: 95:72:b3:ef -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUEUc8qfG09B91G4od6jjSdocq4zAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEwMDYwNDQwMDdaFw0yNTEwMDUwNDQ1MDdaMDMxMTAvBgNV BAMTKENGM0Q3ODIyQTFBRTEwQkM3MEIyQzUyMTYwRjIzMDc3MjFDNjUyOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF2HkLyvHEx7z4avxanDOK2Ug+ sRuRsXvbNBqiArvPI+WV9RzYAdFtFXZ5Br9yFewJf9Qw4wb4LaMQAkO4CiJT3dFq E2uB4FKMQUjtNaNXQtGCSWP8KbJcSjqGv+N8eNlzcpyX7Tje0yHQ/kIHDViSMtuQ KIEUin/35AAi+5051vnUZBIg7Z8OQe3JBIU6nVtL1R8Hjql/YWLW/zfGX8dm6bSv rspScAfPqwaS55bi/RAkx1VoVIO/O5oYYPn3U+gkQYR9Yewy7tRi8GtlvJqJOoNG I1momUmFcYDuIA/OXDdlMW5STAN9VymqkOJrtk28gY0oE3Alscb8YjEoDp6tAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUzz14IqGuELxwssUhYPIwdyHGUpwwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjAwMjgzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQKswDQYJKoZIhvcNAQELBQADggEBABJF Zi5qni49HQbt/lw7h8Y2YPGVNC7k8vb1m3lOdfu3B5mh2Ra+with3sp0Sf98j+jV nSKT4RE/z3kIcSin5d0R2hEA/dQei57iUCVsaKj0Zezl1DzfRcZGgHzkNdFMOxn2 KUagip6l36EMOj5f3TqkxVars8T81e2E25OfNZVJ2w+YMYDVhKa2DVQi560lORd2 jBRB/evBXkYeu6IMWurriUyQ9bvZmpk7TNqKFAPQUtWrqJWhqZCRZlp7rx0J2NwA zxf6PBChKcHvnLZ5R0W4ZXcASYZAZmYmMJhKXkP+WXiE/62fLIxqt07tt7/9whQD Kmv5OSHtrSjGs5Vys+8= -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:54 2024 by rpki-client on console-ams.rpki-client.org