$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200557.roa File: AS200557.roa (raw, json) Hash identifier: NTuSzPwT+KDTgIBRdJI+7lyX7vXsGaavJqY7o7+aDcM= Subject key identifier: 95:E0:6D:73:99:63:BF:EC:B2:8C:7C:BF:F5:C1:F3:F0:68:D1:84:E7 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 794BA74B90F9395759F8C35359C9DB328049D06A Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200557.roa Signing time: Sun 06 Oct 2024 04:45:00 +0000 ROA not before: Sun 06 Oct 2024 04:40:00 +0000 ROA not after: Sun 05 Oct 2025 04:45:00 +0000 asID: 200557 IP address blocks: 2a0a:6040:1400::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:4b:a7:4b:90:f9:39:57:59:f8:c3:53:59:c9:db:32:80:49:d0:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 6 04:40:00 2024 GMT Not After : Oct 5 04:45:00 2025 GMT Subject: CN=95E06D739963BFECB28C7CBFF5C1F3F068D184E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c5:1a:55:70:db:ec:4b:6a:48:78:ee:dd:ec: 6a:da:ba:ba:ce:71:64:51:b8:6f:98:50:52:23:88: b7:e4:ec:8c:2a:2a:ae:13:48:62:d4:18:e1:d2:d6: 81:5b:2a:98:81:da:87:eb:12:ef:71:56:b9:0c:fd: 56:4b:5b:0b:bc:71:37:d1:91:43:b0:d0:5c:98:60: 09:1d:6e:ff:17:99:87:b4:69:2c:49:a2:b0:ce:06: 4a:1b:c4:70:39:f5:86:6f:2f:07:2d:37:c4:10:01: 12:3f:af:00:8f:61:7a:f3:a4:62:12:00:3b:9d:d8: 28:c5:32:b3:dc:1b:66:31:65:90:e6:4e:b7:e8:4d: 12:42:91:aa:04:f8:42:f6:fd:d3:da:a3:80:b0:00: d3:e0:1c:68:61:99:3c:89:37:c3:fe:8c:36:78:bb: 8f:8a:60:10:e9:19:54:1c:86:38:05:89:5b:b0:3f: 41:88:5c:e8:87:07:b2:5e:7c:dc:28:5a:ea:a9:ea: e1:f4:e9:87:02:ff:7d:4f:55:73:0b:fe:47:a6:94: a4:28:67:d7:6f:0b:0c:2c:e8:d2:4c:7a:40:e9:0b: 67:e4:52:d6:5d:2d:68:4a:9e:cf:00:7e:db:dd:d2: 6a:a7:45:69:b4:b5:72:48:f2:ce:8a:3f:2f:26:05: 72:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E0:6D:73:99:63:BF:EC:B2:8C:7C:BF:F5:C1:F3:F0:68:D1:84:E7 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200557.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:1400::/40 Signature Algorithm: sha256WithRSAEncryption 7f:4e:85:a5:93:b2:66:52:43:ca:af:3b:f7:02:7f:4a:b2:09: dd:0a:04:71:f9:17:59:ae:b3:35:e9:80:f1:f7:8a:8d:d3:68: f5:5b:a9:e5:60:c5:af:b5:9a:56:bd:a9:e4:58:e4:4f:6f:dc: a7:13:41:82:ba:7e:75:6c:a4:27:c0:dd:4d:ef:89:67:ae:3b: 33:4a:bf:af:5a:10:12:1f:2c:87:2e:04:42:52:dc:22:d9:73: 08:23:f2:45:01:bd:0a:02:a0:ec:a6:e0:dc:2c:aa:c9:c0:8d: cb:28:18:c4:6b:9c:84:fe:ee:8e:fe:95:59:c5:98:64:4b:16: 37:f0:3c:c1:54:8b:a9:d4:72:7c:9a:39:21:03:80:b5:1d:4a: 8f:29:bd:21:e6:b6:6a:6b:44:8f:5f:43:60:05:6b:c2:f3:4c: 41:68:c5:70:8c:aa:e4:62:c1:31:b6:51:12:bf:6a:f9:14:75: 20:88:e6:f3:a9:6d:3f:25:ca:cb:7e:51:0b:2c:6e:e9:6c:b3: e2:84:9e:1c:9a:79:35:b2:40:4a:20:12:ee:7f:60:b2:b7:33: 2d:9b:a9:63:57:f7:e4:bd:bb:8e:08:93:a5:a4:fc:d4:b2:1e: 73:52:2a:9a:7a:26:ab:8f:6f:33:40:e1:be:79:6c:0e:c6:12: 32:be:27:ea -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUeUunS5D5OVdZ+MNTWcnbMoBJ0GowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEwMDYwNDQwMDBaFw0yNTEwMDUwNDQ1MDBaMDMxMTAvBgNV BAMTKDk1RTA2RDczOTk2M0JGRUNCMjhDN0NCRkY1QzFGM0YwNjhEMTg0RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDExRpVcNvsS2pIeO7d7GraurrO cWRRuG+YUFIjiLfk7IwqKq4TSGLUGOHS1oFbKpiB2ofrEu9xVrkM/VZLWwu8cTfR kUOw0FyYYAkdbv8XmYe0aSxJorDOBkobxHA59YZvLwctN8QQARI/rwCPYXrzpGIS ADud2CjFMrPcG2YxZZDmTrfoTRJCkaoE+EL2/dPao4CwANPgHGhhmTyJN8P+jDZ4 u4+KYBDpGVQchjgFiVuwP0GIXOiHB7JefNwoWuqp6uH06YcC/31PVXML/kemlKQo Z9dvCwws6NJMekDpC2fkUtZdLWhKns8Aftvd0mqnRWm0tXJI8s6KPy8mBXJVAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUleBtc5ljv+yyjHy/9cHz8GjRhOcwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjAwNTU3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQBQwDQYJKoZIhvcNAQELBQADggEBAH9O haWTsmZSQ8qvO/cCf0qyCd0KBHH5F1muszXpgPH3io3TaPVbqeVgxa+1mla9qeRY 5E9v3KcTQYK6fnVspCfA3U3viWeuOzNKv69aEBIfLIcuBEJS3CLZcwgj8kUBvQoC oOym4NwsqsnAjcsoGMRrnIT+7o7+lVnFmGRLFjfwPMFUi6nUcnyaOSEDgLUdSo8p vSHmtmprRI9fQ2AFa8LzTEFoxXCMquRiwTG2URK/avkUdSCI5vOpbT8lyst+UQss bulss+KEnhyaeTWyQEogEu5/YLK3My2bqWNX9+S9u44Ik6Wk/NSyHnNSKpp6JquP bzNA4b55bA7GEjK+J+o= -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:46 2024 by rpki-client on console-fra.rpki-client.org