$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200570.roa File: AS200570.roa (raw, json) Hash identifier: lFGTKLxziCRi87RpfTyKaq5BjjuwRszckxkawjlUAC4= Subject key identifier: D0:5A:75:6C:59:BD:1F:77:3E:6B:EE:B6:08:32:A5:70:B5:18:38:AA Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 7BA8227231D067A3D0EE69CEB6794985D257511B Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200570.roa Signing time: Sun 06 Oct 2024 04:45:05 +0000 ROA not before: Sun 06 Oct 2024 04:40:05 +0000 ROA not after: Sun 05 Oct 2025 04:45:05 +0000 asID: 200570 IP address blocks: 2a0a:6040:ee00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:a8:22:72:31:d0:67:a3:d0:ee:69:ce:b6:79:49:85:d2:57:51:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 6 04:40:05 2024 GMT Not After : Oct 5 04:45:05 2025 GMT Subject: CN=D05A756C59BD1F773E6BEEB60832A570B51838AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9f:16:fb:33:d7:ca:ca:c2:c4:d3:3a:da:0f: d8:d1:57:f6:7d:3a:c2:ff:c5:5b:f0:cf:e2:98:6e: 44:5a:75:02:c3:c6:c0:c8:83:07:23:fb:b0:a3:cc: bc:3d:67:2a:72:f9:c6:d6:40:22:22:79:f1:cc:d3: 2e:2c:9b:de:07:5f:1a:9a:ac:5d:2f:34:07:f5:d6: f2:ef:6e:5e:e8:74:42:43:8d:b1:2b:77:3e:24:d1: f2:29:26:e2:6b:31:c2:bd:67:32:8f:8a:17:c5:5a: 62:2f:07:c9:ba:52:37:44:aa:59:16:8d:99:04:fb: 3e:98:55:77:49:8a:1c:11:70:93:f9:0f:10:16:5c: ea:11:76:38:a4:98:61:1a:e0:fa:f4:bd:56:d0:ab: af:73:fd:9e:c7:46:5c:d1:9a:de:31:ba:64:5e:af: 18:f7:f8:7a:b8:f7:49:9b:73:eb:9a:13:96:eb:de: 6f:27:04:31:30:9b:c8:1f:61:83:38:ff:4b:f0:5a: 0d:90:9c:94:e2:ce:42:fc:69:13:28:ef:ec:74:66: b9:c5:ed:5c:42:b2:a0:c7:86:6c:ac:80:b1:aa:3a: b5:13:03:7e:f6:36:4a:04:dc:8d:f5:2f:87:a4:97: bc:f8:0c:5d:6c:4d:50:fb:f5:fe:b5:f8:27:82:f4: 2e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:5A:75:6C:59:BD:1F:77:3E:6B:EE:B6:08:32:A5:70:B5:18:38:AA X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200570.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:ee00::/40 Signature Algorithm: sha256WithRSAEncryption 80:f0:6b:03:58:63:b7:d8:db:bc:ed:c0:8e:08:5c:78:c9:bb: ba:d6:c7:ab:4d:53:08:e3:c1:49:9b:b8:55:15:de:7c:54:35: 1d:e6:54:7c:00:71:ed:26:e4:8e:07:f9:fc:57:f2:cf:72:25: 04:d4:d2:b5:cd:f8:05:e6:c5:c5:b9:36:e0:76:ce:5a:d7:29: 29:3d:cd:bf:aa:2c:e5:49:22:fd:f1:59:fc:75:be:5a:57:2a: 9f:9d:4b:70:88:38:85:3d:16:a7:47:28:53:29:62:c7:7b:54: 96:86:23:8d:6e:3c:46:e8:02:69:34:b7:2c:28:9c:46:99:2e: 35:16:1d:68:88:02:58:fd:a2:42:b7:d3:b2:a3:22:b5:dc:ae: 4d:dc:c5:9a:f7:6b:32:fa:e0:0c:28:de:b5:b9:92:52:48:1a: aa:aa:b3:c0:2f:9c:db:31:c8:0a:f6:2b:f2:7b:06:7b:cb:48: 2a:e1:01:15:a1:cb:91:60:74:44:89:a9:aa:96:73:d6:b1:6e: 36:8a:1a:f3:14:8b:9b:ed:ad:11:63:54:a6:21:f5:84:ac:80: 24:93:c6:99:0a:78:ad:c0:a2:d5:54:3d:8f:78:21:6e:58:18: 10:97:54:c7:d0:f5:1f:34:de:29:55:2e:3f:c9:a7:13:f8:95: 93:3b:a9:9f -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUe6gicjHQZ6PQ7mnOtnlJhdJXURswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEwMDYwNDQwMDVaFw0yNTEwMDUwNDQ1MDVaMDMxMTAvBgNV BAMTKEQwNUE3NTZDNTlCRDFGNzczRTZCRUVCNjA4MzJBNTcwQjUxODM4QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3nxb7M9fKysLE0zraD9jRV/Z9 OsL/xVvwz+KYbkRadQLDxsDIgwcj+7CjzLw9Zypy+cbWQCIiefHM0y4sm94HXxqa rF0vNAf11vLvbl7odEJDjbErdz4k0fIpJuJrMcK9ZzKPihfFWmIvB8m6UjdEqlkW jZkE+z6YVXdJihwRcJP5DxAWXOoRdjikmGEa4Pr0vVbQq69z/Z7HRlzRmt4xumRe rxj3+Hq490mbc+uaE5br3m8nBDEwm8gfYYM4/0vwWg2QnJTizkL8aRMo7+x0ZrnF 7VxCsqDHhmysgLGqOrUTA372NkoE3I31L4ekl7z4DF1sTVD79f61+CeC9C4/AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU0Fp1bFm9H3c+a+62CDKlcLUYOKowHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjAwNTcwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQO4wDQYJKoZIhvcNAQELBQADggEBAIDw awNYY7fY27ztwI4IXHjJu7rWx6tNUwjjwUmbuFUV3nxUNR3mVHwAce0m5I4H+fxX 8s9yJQTU0rXN+AXmxcW5NuB2zlrXKSk9zb+qLOVJIv3xWfx1vlpXKp+dS3CIOIU9 FqdHKFMpYsd7VJaGI41uPEboAmk0tywonEaZLjUWHWiIAlj9okK307KjIrXcrk3c xZr3azL64Awo3rW5klJIGqqqs8AvnNsxyAr2K/J7BnvLSCrhARWhy5FgdESJqaqW c9axbjaKGvMUi5vtrRFjVKYh9YSsgCSTxpkKeK3AotVUPY94IW5YGBCXVMfQ9R80 3ilVLj/JpxP4lZM7qZ8= -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:54 2024 by rpki-client on console-ams.rpki-client.org