$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200690.roa File: AS200690.roa (raw, json) Hash identifier: Q5Oic705mczadHzYtM6cDOyYq0fy2YcqPZ/k/8XpsqM= Subject key identifier: E4:C1:C0:9A:EE:EA:DF:9F:83:EE:31:75:80:AB:06:91:AF:F4:39:8F Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 3D78D360C087B1EE8D3156486D359D359A1DB58E Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200690.roa Signing time: Sun 05 Nov 2023 04:07:13 +0000 ROA not before: Sun 05 Nov 2023 04:02:13 +0000 ROA not after: Sun 03 Nov 2024 04:07:13 +0000 asID: 200690 IP address blocks: 2a0a:6040:a300::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 03:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:78:d3:60:c0:87:b1:ee:8d:31:56:48:6d:35:9d:35:9a:1d:b5:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 5 04:02:13 2023 GMT Not After : Nov 3 04:07:13 2024 GMT Subject: CN=E4C1C09AEEEADF9F83EE317580AB0691AFF4398F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:00:c0:f4:b9:9c:7b:c9:6f:39:18:4d:36:cc: bc:f2:a8:c3:56:0f:e5:d8:59:7f:22:df:f7:be:ab: d9:e5:24:a5:92:1e:29:49:e1:48:98:cf:1d:95:d6: cd:b9:b7:8d:d1:f3:14:f9:10:e5:f1:6a:e6:f4:36: a9:a7:a4:56:4e:36:7c:75:95:33:f8:d1:09:76:f2: 6e:09:e6:e9:c6:be:00:d1:97:04:cc:b7:8c:a6:ad: c6:19:a5:17:a0:d3:3f:2b:23:df:0e:07:61:62:c4: 6d:e3:08:94:65:71:74:03:d1:71:4b:02:7f:a3:5e: d4:5c:87:68:09:d1:7d:48:08:10:a7:b0:80:0f:ea: a8:d5:bb:5f:e2:a4:10:56:97:bb:29:00:c7:f5:c6: 32:06:8a:8a:0c:6d:8a:46:5d:43:a7:53:92:97:bb: 45:92:d3:b4:dd:91:5f:c8:47:68:d5:04:88:3b:65: 25:b6:ad:76:8a:45:ac:67:d6:11:73:df:d4:13:93: eb:b1:6b:43:24:a8:47:2e:5f:89:3f:e4:99:06:4b: 68:10:5c:0a:6e:25:01:32:c6:29:24:67:11:c3:c7: cb:e5:65:e9:d9:5d:84:ce:d0:19:a1:95:63:24:7a: 83:ca:79:85:15:c8:22:b8:d6:33:65:08:a2:f9:ca: 7a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C1:C0:9A:EE:EA:DF:9F:83:EE:31:75:80:AB:06:91:AF:F4:39:8F X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200690.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:a300::/40 Signature Algorithm: sha256WithRSAEncryption 40:3b:70:ad:3c:32:e6:ed:c3:29:9c:5f:da:d1:31:b6:ea:c9: 2d:3b:c1:1c:da:94:f2:f9:95:68:eb:ce:c7:bd:8a:60:3f:8d: e6:a1:61:f7:d9:22:93:6f:e8:25:9f:88:f3:29:28:21:9e:6e: 4d:ab:a2:97:cf:b4:75:84:9a:00:90:17:04:e7:64:8f:4d:e2: 7c:03:f4:29:10:6d:1f:4c:f8:76:ee:07:26:31:f3:b6:f3:ed: 82:d3:bc:f6:67:d3:76:20:86:a1:2c:ad:20:c0:3f:78:47:64: 72:ff:8d:38:75:3b:29:c7:56:1f:2d:96:5f:d5:79:b4:14:6b: 22:d1:be:53:dc:cb:7f:0b:52:07:04:40:72:56:aa:1e:25:79: ad:3b:db:7f:61:c8:b1:39:eb:4f:6f:62:8d:fa:44:8d:fc:64: b3:57:f2:b5:52:47:8b:01:8c:8d:8f:90:e2:f7:f7:f1:f3:57: c8:c1:38:3c:b4:95:d3:0d:7b:5c:3e:62:20:ae:bf:f6:dd:01: 9b:4f:da:52:25:34:bc:99:58:8c:8b:83:07:5a:07:bd:cb:9e: 69:cf:04:3b:d2:5b:87:ce:43:63:17:1b:87:bb:32:dd:c5:f2: 3c:a1:45:f6:8a:72:74:e0:2e:1b:80:62:18:15:d3:ab:eb:4c: 9b:fb:8d:7d -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUPXjTYMCHse6NMVZIbTWdNZodtY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMDUwNDAyMTNaFw0yNDExMDMwNDA3MTNaMDMxMTAvBgNV BAMTKEU0QzFDMDlBRUVFQURGOUY4M0VFMzE3NTgwQUIwNjkxQUZGNDM5OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGAMD0uZx7yW85GE02zLzyqMNW D+XYWX8i3/e+q9nlJKWSHilJ4UiYzx2V1s25t43R8xT5EOXxaub0NqmnpFZONnx1 lTP40Ql28m4J5unGvgDRlwTMt4ymrcYZpReg0z8rI98OB2FixG3jCJRlcXQD0XFL An+jXtRch2gJ0X1ICBCnsIAP6qjVu1/ipBBWl7spAMf1xjIGiooMbYpGXUOnU5KX u0WS07TdkV/IR2jVBIg7ZSW2rXaKRaxn1hFz39QTk+uxa0MkqEcuX4k/5JkGS2gQ XApuJQEyxikkZxHDx8vlZenZXYTO0BmhlWMkeoPKeYUVyCK41jNlCKL5ynp7AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU5MHAmu7q35+D7jF1gKsGka/0OY8wHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjAwNjkwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQKMwDQYJKoZIhvcNAQELBQADggEBAEA7 cK08MubtwymcX9rRMbbqyS07wRzalPL5lWjrzse9imA/jeahYffZIpNv6CWfiPMp KCGebk2ropfPtHWEmgCQFwTnZI9N4nwD9CkQbR9M+HbuByYx87bz7YLTvPZn03Yg hqEsrSDAP3hHZHL/jTh1OynHVh8tll/VebQUayLRvlPcy38LUgcEQHJWqh4lea07 239hyLE5609vYo36RI38ZLNX8rVSR4sBjI2PkOL39/HzV8jBODy0ldMNe1w+YiCu v/bdAZtP2lIlNLyZWIyLgwdaB73LnmnPBDvSW4fOQ2MXG4e7Mt3F8jyhRfaKcnTg LhuAYhgV06vrTJv7jX0= -----END CERTIFICATE-----Generated at Fri May 17 13:11:27 2024 by rpki-client on console-ams.rpki-client.org