$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200882.roa File: AS200882.roa (raw, json) Hash identifier: pRtZ0m6NJuXlDuB4oOE2AABME5nigLWyHnHuK9S7azA= Subject key identifier: CE:CD:D3:6C:D7:3E:7A:40:9D:12:E5:5C:83:64:EA:5D:87:D4:FF:7F Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 3EF150B487ABF59668A75AF44B10B3CF0CA285A2 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200882.roa Signing time: Sun 05 Nov 2023 04:07:00 +0000 ROA not before: Sun 05 Nov 2023 04:02:00 +0000 ROA not after: Sun 03 Nov 2024 04:07:00 +0000 asID: 200882 IP address blocks: 2a0a:6040:e600::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 22:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:f1:50:b4:87:ab:f5:96:68:a7:5a:f4:4b:10:b3:cf:0c:a2:85:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 5 04:02:00 2023 GMT Not After : Nov 3 04:07:00 2024 GMT Subject: CN=CECDD36CD73E7A409D12E55C8364EA5D87D4FF7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:35:49:13:e5:fb:8d:b8:03:8e:32:58:f1:07: 16:a4:6d:fe:d1:21:25:c5:f6:54:c5:d4:74:75:77: 74:3d:03:e6:a8:ad:47:3b:e5:bf:f0:e9:5d:4d:ce: a9:81:7f:4a:58:8a:6d:6c:b2:6b:d1:97:56:0d:5d: 7f:7d:88:ae:00:5c:86:fb:8f:c4:b1:9b:81:e1:9c: cd:ba:a5:16:fb:ff:13:ee:b8:19:98:e5:c1:22:e7: dd:db:61:21:4f:c1:56:0b:8a:f2:ae:0e:53:5f:c3: db:5f:d9:46:0d:3f:7d:cf:c1:8a:dd:8c:b1:f5:49: 06:12:c7:30:e4:b1:60:41:ec:f7:82:10:ab:fe:ae: 21:0c:78:b8:22:0d:fc:53:6e:85:32:e3:15:90:b5: e6:e1:c4:91:6a:cb:d2:1f:34:6e:b5:6e:73:7f:98: 89:b4:56:41:00:2d:af:50:98:e1:c9:93:6a:a4:c0: db:87:0b:4c:91:28:f1:18:76:f8:bf:68:c4:1c:ed: 4e:97:d9:f6:1e:3b:4a:ea:61:a9:43:f2:4b:c7:23: 31:95:54:ca:fb:5b:d0:40:18:74:51:2e:e1:65:f6: 4a:f2:71:86:0a:6f:9a:80:d6:3d:ce:d1:c0:10:4a: b3:8c:12:74:3c:2b:68:af:29:4d:0d:2c:cc:3e:ec: 41:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:CD:D3:6C:D7:3E:7A:40:9D:12:E5:5C:83:64:EA:5D:87:D4:FF:7F X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200882.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:e600::/40 Signature Algorithm: sha256WithRSAEncryption 86:29:3e:86:2d:1c:08:f2:89:62:99:7e:38:fb:61:1d:d6:cf: 4e:98:7d:2d:57:3b:ff:12:c7:9e:b6:00:03:02:7a:24:27:93: 60:cc:cd:cc:de:0f:1d:db:b3:49:30:15:5f:bd:fb:37:c9:8c: 92:36:9e:4b:b3:b9:29:2b:ef:b0:cc:04:39:66:a7:ed:ae:72: 89:42:eb:d1:07:bf:58:8d:c6:05:36:9f:2f:f5:4a:49:b0:56: f8:91:6a:3c:c5:4b:4e:6f:eb:82:99:de:2e:6d:c0:c2:d3:4d: 0a:fe:65:45:8f:38:67:d0:6d:20:d6:b9:e4:62:5f:df:d7:1a: 92:80:2d:92:27:db:49:08:a1:95:21:3b:85:58:69:e7:31:c5: 52:2d:82:41:86:7a:9b:20:1f:7d:e2:1a:69:ea:c6:9d:4e:3c: ff:ed:e8:47:f2:8c:b3:e7:3d:58:c7:cc:d9:31:13:25:9c:ef: d5:05:58:df:18:5e:58:0c:1b:80:15:95:6e:6a:5e:2f:4a:42: 86:30:59:c4:85:5e:ea:4f:7b:4c:0e:80:89:b6:e9:ff:43:87: 28:12:d1:f2:21:a2:25:58:30:4f:11:5f:26:a2:68:2d:a5:39: 2b:ce:14:3b:47:73:61:cd:28:25:5f:6c:01:6c:e0:17:b6:30: e3:b1:8d:2e -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUPvFQtIer9ZZop1r0SxCzzwyihaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMDUwNDAyMDBaFw0yNDExMDMwNDA3MDBaMDMxMTAvBgNV BAMTKENFQ0REMzZDRDczRTdBNDA5RDEyRTU1QzgzNjRFQTVEODdENEZGN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSNUkT5fuNuAOOMljxBxakbf7R ISXF9lTF1HR1d3Q9A+aorUc75b/w6V1NzqmBf0pYim1ssmvRl1YNXX99iK4AXIb7 j8Sxm4HhnM26pRb7/xPuuBmY5cEi593bYSFPwVYLivKuDlNfw9tf2UYNP33PwYrd jLH1SQYSxzDksWBB7PeCEKv+riEMeLgiDfxTboUy4xWQtebhxJFqy9IfNG61bnN/ mIm0VkEALa9QmOHJk2qkwNuHC0yRKPEYdvi/aMQc7U6X2fYeO0rqYalD8kvHIzGV VMr7W9BAGHRRLuFl9krycYYKb5qA1j3O0cAQSrOMEnQ8K2ivKU0NLMw+7EEjAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUzs3TbNc+ekCdEuVcg2TqXYfU/38wHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjAwODgyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQOYwDQYJKoZIhvcNAQELBQADggEBAIYp PoYtHAjyiWKZfjj7YR3Wz06YfS1XO/8Sx562AAMCeiQnk2DMzczeDx3bs0kwFV+9 +zfJjJI2nkuzuSkr77DMBDlmp+2ucolC69EHv1iNxgU2ny/1SkmwVviRajzFS05v 64KZ3i5twMLTTQr+ZUWPOGfQbSDWueRiX9/XGpKALZIn20kIoZUhO4VYaecxxVIt gkGGepsgH33iGmnqxp1OPP/t6EfyjLPnPVjHzNkxEyWc79UFWN8YXlgMG4AVlW5q Xi9KQoYwWcSFXupPe0wOgIm26f9DhygS0fIhoiVYME8RXyaiaC2lOSvOFDtHc2HN KCVfbAFs4Be2MOOxjS4= -----END CERTIFICATE-----Generated at Tue May 21 05:34:02 2024 by rpki-client on console-ams.rpki-client.org