$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200536.roa File: AS200536.roa (raw, json) Hash identifier: XIbrK+ofua2NhNSoaacHP/9H4Y6sWuHlqOCDbnVRqw4= Subject key identifier: 26:80:FD:14:3E:0B:28:62:EC:C1:00:0F:AF:B0:EA:8D:17:AB:05:91 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 698E98426CC15DF657983EF04E7A94DB862277A7 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200536.roa Signing time: Sun 06 Oct 2024 04:45:07 +0000 ROA not before: Sun 06 Oct 2024 04:40:07 +0000 ROA not after: Sun 05 Oct 2025 04:45:07 +0000 asID: 200536 IP address blocks: 2a0a:6040:a900::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:8e:98:42:6c:c1:5d:f6:57:98:3e:f0:4e:7a:94:db:86:22:77:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 6 04:40:07 2024 GMT Not After : Oct 5 04:45:07 2025 GMT Subject: CN=2680FD143E0B2862ECC1000FAFB0EA8D17AB0591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6c:c6:35:ba:24:90:b0:6f:76:da:e4:81:10: 98:f7:5c:18:2e:f4:99:23:c4:83:89:c7:d4:e9:9e: b7:fc:9b:a4:f8:e8:64:a8:eb:fe:4b:76:14:1b:46: 90:eb:96:31:4d:dd:10:bd:49:d3:8a:38:9a:f1:7d: 05:34:03:aa:31:f5:89:6c:ae:40:c8:c7:5c:1e:03: 39:a2:7f:10:d8:df:b4:8c:a7:22:d1:61:76:fd:53: 2b:bb:65:54:5b:20:69:b8:84:8d:92:32:50:a2:1d: c2:ce:b8:2e:b5:05:25:a7:e9:d9:d2:cd:d5:e9:01: b3:de:c6:76:00:6f:35:4d:ce:50:f7:df:fa:a0:44: 95:64:7e:ed:fa:c7:9c:e5:8f:0a:32:11:fc:5b:2e: 82:22:d0:ba:a8:e0:58:77:9b:96:4d:90:7f:1c:bc: c7:cb:54:b6:62:38:2d:f1:4a:11:4f:dc:33:d0:53: f7:62:41:b4:38:61:80:dd:d3:bd:45:57:54:90:9f: e2:04:05:96:fa:c6:d9:7b:94:8d:33:92:e5:cc:9a: 9d:5e:67:c8:6d:88:4d:f3:ef:db:db:59:bc:6e:28: 18:0b:52:5d:42:5c:d0:aa:7d:b8:12:98:58:34:62: e4:77:31:ed:47:ee:74:21:61:cd:1f:94:d5:8d:e4: 68:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:80:FD:14:3E:0B:28:62:EC:C1:00:0F:AF:B0:EA:8D:17:AB:05:91 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:a900::/40 Signature Algorithm: sha256WithRSAEncryption 6c:96:1d:42:d1:be:c9:2b:2c:b2:80:6e:2c:ff:cf:ba:22:9a: ba:46:45:a8:a4:fa:d7:7f:5d:47:39:90:3e:50:65:b9:46:be: 99:19:75:f5:5a:0a:3c:6d:7b:08:69:24:33:63:cb:8a:6e:73: ca:7b:63:7c:11:3c:52:1d:42:15:82:8b:76:e5:eb:4e:c0:bb: e8:55:f6:d1:76:46:a2:43:4f:0b:61:76:e8:d1:d2:5e:e7:d6: f7:32:66:05:4a:4f:05:5c:52:27:f8:6e:50:4a:db:0d:87:c8: c9:2b:ea:e4:c9:dd:b4:a8:7e:01:95:36:be:2a:82:49:84:cb: f8:6a:b7:c0:55:d6:0e:48:cf:01:d8:f7:64:00:17:a5:18:0c: 02:69:e5:69:b0:a0:23:60:88:89:72:ed:e4:0b:cf:15:cf:0a: ae:e7:6d:76:98:30:d9:c9:e8:54:51:c7:f3:68:03:57:2e:0c: 1e:31:5b:a3:dd:16:31:63:13:cc:8f:6b:d9:01:72:d1:f0:45: 97:0c:5d:fb:69:c0:6f:af:53:fe:af:0f:64:f4:b7:fa:b0:e3: a3:3c:9f:b3:bb:d8:c0:bb:06:11:77:43:72:96:e3:8d:7b:cf: ac:ac:b7:f1:82:c3:f6:07:15:79:85:b3:a3:55:98:03:6a:0b: e4:56:69:1c -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUaY6YQmzBXfZXmD7wTnqU24Yid6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEwMDYwNDQwMDdaFw0yNTEwMDUwNDQ1MDdaMDMxMTAvBgNV BAMTKDI2ODBGRDE0M0UwQjI4NjJFQ0MxMDAwRkFGQjBFQThEMTdBQjA1OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHbMY1uiSQsG922uSBEJj3XBgu 9JkjxIOJx9Tpnrf8m6T46GSo6/5LdhQbRpDrljFN3RC9SdOKOJrxfQU0A6ox9Yls rkDIx1weAzmifxDY37SMpyLRYXb9Uyu7ZVRbIGm4hI2SMlCiHcLOuC61BSWn6dnS zdXpAbPexnYAbzVNzlD33/qgRJVkfu36x5zljwoyEfxbLoIi0Lqo4Fh3m5ZNkH8c vMfLVLZiOC3xShFP3DPQU/diQbQ4YYDd071FV1SQn+IEBZb6xtl7lI0zkuXMmp1e Z8htiE3z79vbWbxuKBgLUl1CXNCqfbgSmFg0YuR3Me1H7nQhYc0flNWN5GinAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUJoD9FD4LKGLswQAPr7DqjRerBZEwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjAwNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQKkwDQYJKoZIhvcNAQELBQADggEBAGyW HULRvskrLLKAbiz/z7oimrpGRaik+td/XUc5kD5QZblGvpkZdfVaCjxtewhpJDNj y4puc8p7Y3wRPFIdQhWCi3bl607Au+hV9tF2RqJDTwthdujR0l7n1vcyZgVKTwVc Uif4blBK2w2HyMkr6uTJ3bSofgGVNr4qgkmEy/hqt8BV1g5IzwHY92QAF6UYDAJp 5WmwoCNgiIly7eQLzxXPCq7nbXaYMNnJ6FRRx/NoA1cuDB4xW6PdFjFjE8yPa9kB ctHwRZcMXftpwG+vU/6vD2T0t/qw46M8n7O72MC7BhF3Q3KW4417z6yst/GCw/YH FXmFs6NVmANqC+RWaRw= -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:46 2024 by rpki-client on console-fra.rpki-client.org