$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200782.roa File: AS200782.roa (raw, json) Hash identifier: T0aPNcDikHJhm8P67bZjKvaqrRTaGmCb/X5oFAxtJyo= Subject key identifier: 33:31:28:52:41:E4:C7:D0:2D:13:DF:2E:E8:07:72:95:AD:9C:D9:5E Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 2677560FDD3B7E1B4F2FA51837D1B0B06E3C476C Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200782.roa Signing time: Sun 06 Oct 2024 04:45:08 +0000 ROA not before: Sun 06 Oct 2024 04:40:08 +0000 ROA not after: Sun 05 Oct 2025 04:45:08 +0000 asID: 200782 IP address blocks: 2a0a:6040:ce00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:77:56:0f:dd:3b:7e:1b:4f:2f:a5:18:37:d1:b0:b0:6e:3c:47:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 6 04:40:08 2024 GMT Not After : Oct 5 04:45:08 2025 GMT Subject: CN=3331285241E4C7D02D13DF2EE8077295AD9CD95E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e8:dd:20:7c:f3:59:7b:e0:56:71:c7:fd:f5: f9:e2:aa:1d:50:3d:15:b7:a9:57:43:b2:28:1b:ac: 1c:91:9a:61:74:62:b1:e4:96:a9:6b:7f:f8:b3:67: c5:f0:9d:44:f8:a2:af:20:56:34:d2:64:0f:75:11: 8b:87:85:96:42:f0:d4:7e:07:d9:1e:cb:da:45:04: dc:0b:ae:cc:cd:2e:35:7d:6f:c9:c2:8f:fe:72:3a: 2f:c0:df:2d:40:a8:eb:0f:a1:7c:ea:83:f4:1c:02: c0:21:37:2a:d7:9d:2f:55:8f:ac:8a:3f:12:f4:4c: 7e:3b:1d:48:6a:9a:3b:3a:1e:bb:c5:72:93:d5:83: 9c:de:35:1a:46:63:7b:18:e4:06:2b:ba:44:4d:b2: 83:7d:52:56:c2:67:18:7d:1b:d9:34:34:7e:96:bf: cd:46:c5:6e:e9:f3:7b:08:ad:44:22:58:2c:b8:a2: 27:fa:8e:e4:43:f0:af:83:a4:ca:c8:71:c3:f2:e6: 3b:72:4a:03:b5:86:ed:e5:dd:ca:f9:fc:7b:b2:e7: 47:67:62:bd:fa:47:76:18:1a:2b:44:5d:0d:a2:27: 7c:ae:0a:5e:a6:a0:69:d9:85:8a:10:e3:ab:c9:9f: 30:ac:9d:c3:9d:be:09:94:7b:f3:09:89:88:0d:d9: 71:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:31:28:52:41:E4:C7:D0:2D:13:DF:2E:E8:07:72:95:AD:9C:D9:5E X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200782.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:ce00::/40 Signature Algorithm: sha256WithRSAEncryption 91:07:93:0e:e6:b9:ea:69:d1:2f:28:7e:7b:f2:d9:1b:4c:91: f7:35:6c:53:8c:c1:56:a6:3d:86:fe:30:be:7b:5e:36:8c:a8: d3:ba:56:45:36:63:2c:cd:e3:ce:47:5e:f9:de:05:7e:83:33: dd:76:22:a9:cb:e4:4a:d9:9c:65:1c:fa:67:ed:4b:6a:58:ab: 84:a9:b8:b8:c1:8b:d7:c8:5b:55:fc:b5:69:1f:7b:e7:c7:8f: 0c:1e:4a:d8:45:ef:a5:2d:54:e6:9a:32:31:30:31:21:9e:84: b4:8c:ab:c4:13:62:de:0d:dd:75:8c:8f:11:bf:42:b4:d3:2b: 33:40:12:36:46:37:b6:a3:a9:ff:05:af:37:fa:de:8e:d6:5b: 46:f1:90:9a:d8:8d:44:db:ff:f6:37:91:9b:f4:c0:ce:54:08: 1a:c0:db:fe:82:fb:95:9b:7d:92:f7:a2:54:e1:ab:3a:1a:ba: ed:c8:72:70:b9:a9:8a:8e:6d:0e:9e:71:e2:67:ed:e8:49:28: 11:a7:58:0a:25:8b:84:4e:21:c0:77:1a:05:fd:e7:57:70:63: 07:cb:36:ac:dc:e5:d6:86:52:f5:a4:06:c3:b8:be:43:2e:fe: b2:0b:31:49:38:d4:02:13:f1:a2:5c:ec:91:9b:d3:87:1b:de: 70:c9:57:ba -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUJndWD907fhtPL6UYN9GwsG48R2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEwMDYwNDQwMDhaFw0yNTEwMDUwNDQ1MDhaMDMxMTAvBgNV BAMTKDMzMzEyODUyNDFFNEM3RDAyRDEzREYyRUU4MDc3Mjk1QUQ5Q0Q5NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP6N0gfPNZe+BWccf99fniqh1Q PRW3qVdDsigbrByRmmF0YrHklqlrf/izZ8XwnUT4oq8gVjTSZA91EYuHhZZC8NR+ B9key9pFBNwLrszNLjV9b8nCj/5yOi/A3y1AqOsPoXzqg/QcAsAhNyrXnS9Vj6yK PxL0TH47HUhqmjs6HrvFcpPVg5zeNRpGY3sY5AYrukRNsoN9UlbCZxh9G9k0NH6W v81GxW7p83sIrUQiWCy4oif6juRD8K+DpMrIccPy5jtySgO1hu3l3cr5/Huy50dn Yr36R3YYGitEXQ2iJ3yuCl6moGnZhYoQ46vJnzCsncOdvgmUe/MJiYgN2XGTAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUMzEoUkHkx9AtE98u6Adyla2c2V4wHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjAwNzgyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQM4wDQYJKoZIhvcNAQELBQADggEBAJEH kw7muepp0S8ofnvy2RtMkfc1bFOMwVamPYb+ML57XjaMqNO6VkU2YyzN485HXvne BX6DM912IqnL5ErZnGUc+mftS2pYq4SpuLjBi9fIW1X8tWkfe+fHjwweSthF76Ut VOaaMjEwMSGehLSMq8QTYt4N3XWMjxG/QrTTKzNAEjZGN7ajqf8Frzf63o7WW0bx kJrYjUTb//Y3kZv0wM5UCBrA2/6C+5WbfZL3olThqzoauu3IcnC5qYqObQ6eceJn 7ehJKBGnWAoli4ROIcB3GgX951dwYwfLNqzc5daGUvWkBsO4vkMu/rILMUk41AIT 8aJc7JGb04cb3nDJV7o= -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:55 2024 by rpki-client on console-ams.rpki-client.org