$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200536.roa File: AS200536.roa (raw, json) Hash identifier: QJ/6/7rPCYb1ulSLZLNVAp6hNDiefTr89RWjwwgpSiw= Subject key identifier: 04:A1:55:15:8D:53:C4:58:98:19:83:00:FF:45:D4:35:3E:E4:04:A0 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 79AAB9B628F569BBF26FB3B15C7B73106310B1A7 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200536.roa Signing time: Sun 05 Nov 2023 04:06:59 +0000 ROA not before: Sun 05 Nov 2023 04:01:59 +0000 ROA not after: Sun 03 Nov 2024 04:06:59 +0000 asID: 200536 IP address blocks: 2a0a:6040:a900::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 07:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:aa:b9:b6:28:f5:69:bb:f2:6f:b3:b1:5c:7b:73:10:63:10:b1:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 5 04:01:59 2023 GMT Not After : Nov 3 04:06:59 2024 GMT Subject: CN=04A155158D53C45898198300FF45D4353EE404A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5d:c3:b8:a2:3c:b0:a7:13:38:74:79:c5:5d: 8f:07:15:69:3b:a0:f6:02:29:6f:1d:02:96:29:3c: fe:d8:24:8d:35:d9:3d:d5:c3:6e:84:4c:64:59:48: 29:a6:b7:e6:75:d4:9e:60:93:8a:ff:48:91:6b:59: f8:36:18:b3:ee:ce:be:5d:30:b8:ee:2b:11:7d:a0: 57:52:58:e6:4b:5c:60:d1:48:91:68:48:5a:3d:db: 4e:b8:c7:5a:8c:56:d2:8f:cb:e1:e7:7d:77:87:32: 53:28:f2:ad:4f:9e:96:13:ef:8e:7c:2f:bd:8c:22: 75:7e:87:d5:2d:7d:dd:70:9c:11:38:bf:6c:ee:d7: b5:bc:89:9a:ad:4d:1f:ea:ca:53:f5:16:d5:0f:57: 69:10:1e:42:ed:09:3f:60:ac:ee:1d:8f:a6:d8:5f: 35:9b:b9:9f:27:a5:18:f6:75:6a:26:93:b8:d4:81: 6d:11:37:2c:20:a2:45:66:24:54:2f:c9:17:6c:e7: d1:87:bd:35:a1:dd:4c:0b:a6:d9:51:74:65:50:1e: fa:66:4b:ad:35:9a:08:83:49:a4:e3:47:8e:dd:42: 11:db:20:67:70:53:8d:bf:6e:8e:8b:4e:0a:92:9a: ed:ab:d2:ba:2a:c9:a9:fe:c6:a5:07:46:93:b1:2d: 96:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A1:55:15:8D:53:C4:58:98:19:83:00:FF:45:D4:35:3E:E4:04:A0 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:a900::/40 Signature Algorithm: sha256WithRSAEncryption 5d:3b:20:23:49:cb:59:3a:a5:08:88:4b:ab:79:54:95:8c:14: 54:11:9b:f6:99:b4:a8:c3:ef:a5:d3:4f:21:15:a0:d9:30:a0: b6:0c:f1:eb:d5:89:03:9b:db:e2:56:b3:4e:2e:c8:0f:97:1e: f5:e3:fd:da:02:04:8d:66:b0:28:40:ee:05:b4:62:45:3d:14: b4:6f:4b:cd:09:39:00:b8:e2:ef:d3:35:3a:5a:bc:0d:59:16: 26:0c:72:34:eb:2f:a0:06:f6:16:d3:07:b5:74:b7:0a:aa:99: e6:82:bc:24:36:77:2a:bd:db:6a:16:9e:3e:57:ed:3b:f3:f7: 68:df:cb:f5:1b:19:8b:5a:26:9e:44:c6:d2:c5:a6:71:dc:0b: 77:42:21:56:b2:ae:be:4e:c1:98:f9:67:83:86:09:67:1b:67: 68:f3:5a:62:69:81:fb:68:04:02:5a:c5:88:da:e3:f4:e6:e0: 06:98:a5:32:56:77:2a:2e:68:04:39:b0:a4:c2:a7:87:5f:2d: f0:c4:67:89:a9:af:1f:61:35:93:98:54:93:81:cc:f7:3d:a2: 3d:8e:0b:a1:c4:83:40:a7:b2:29:46:59:8e:17:19:8d:73:18: c4:dd:b8:e9:24:0c:ba:90:39:b9:7e:83:fa:6f:14:8d:ba:d8: dc:7d:b5:65 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUeaq5tij1abvyb7OxXHtzEGMQsacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMDUwNDAxNTlaFw0yNDExMDMwNDA2NTlaMDMxMTAvBgNV BAMTKDA0QTE1NTE1OEQ1M0M0NTg5ODE5ODMwMEZGNDVENDM1M0VFNDA0QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPXcO4ojywpxM4dHnFXY8HFWk7 oPYCKW8dApYpPP7YJI012T3Vw26ETGRZSCmmt+Z11J5gk4r/SJFrWfg2GLPuzr5d MLjuKxF9oFdSWOZLXGDRSJFoSFo92064x1qMVtKPy+HnfXeHMlMo8q1PnpYT7458 L72MInV+h9Utfd1wnBE4v2zu17W8iZqtTR/qylP1FtUPV2kQHkLtCT9grO4dj6bY XzWbuZ8npRj2dWomk7jUgW0RNywgokVmJFQvyRds59GHvTWh3UwLptlRdGVQHvpm S601mgiDSaTjR47dQhHbIGdwU42/bo6LTgqSmu2r0roqyan+xqUHRpOxLZYNAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUBKFVFY1TxFiYGYMA/0XUNT7kBKAwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjAwNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQKkwDQYJKoZIhvcNAQELBQADggEBAF07 ICNJy1k6pQiIS6t5VJWMFFQRm/aZtKjD76XTTyEVoNkwoLYM8evViQOb2+JWs04u yA+XHvXj/doCBI1msChA7gW0YkU9FLRvS80JOQC44u/TNTpavA1ZFiYMcjTrL6AG 9hbTB7V0twqqmeaCvCQ2dyq922oWnj5X7Tvz92jfy/UbGYtaJp5ExtLFpnHcC3dC IVayrr5OwZj5Z4OGCWcbZ2jzWmJpgftoBAJaxYja4/Tm4AaYpTJWdyouaAQ5sKTC p4dfLfDEZ4mprx9hNZOYVJOBzPc9oj2OC6HEg0CnsilGWY4XGY1zGMTduOkkDLqQ Obl+g/pvFI262Nx9tWU= -----END CERTIFICATE-----Generated at Mon May 20 13:08:21 2024 by rpki-client on console-fra.rpki-client.org