$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200975.roa File: AS200975.roa (raw, json) Hash identifier: C5lU3q4ZFhHA8K9PlHC56pns9AVrXH0f7KiKaThrMnI= Subject key identifier: 46:6E:0A:AD:3B:A2:4C:E3:FB:6C:54:D4:C8:4F:3F:EB:D1:E1:1E:A8 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 0846AE1C6BBA530932A6C6770BD721BDDA4A8F6E Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200975.roa Signing time: Sun 06 Oct 2024 04:45:08 +0000 ROA not before: Sun 06 Oct 2024 04:40:08 +0000 ROA not after: Sun 05 Oct 2025 04:45:08 +0000 asID: 200975 IP address blocks: 2a0a:6040:f500::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:46:ae:1c:6b:ba:53:09:32:a6:c6:77:0b:d7:21:bd:da:4a:8f:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 6 04:40:08 2024 GMT Not After : Oct 5 04:45:08 2025 GMT Subject: CN=466E0AAD3BA24CE3FB6C54D4C84F3FEBD1E11EA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d7:98:61:cc:8f:ad:95:c5:5d:e3:df:a3:0a: 83:ca:07:94:a8:72:94:e8:e3:2c:0a:9f:86:74:a6: a6:70:f6:c2:e1:02:69:39:7c:61:1a:9c:b6:61:76: 02:ca:93:7f:fc:6e:95:11:8c:fd:db:67:fb:77:41: 69:3c:d3:17:80:0b:3f:54:ea:16:49:6e:61:ad:79: fa:4b:f0:72:fd:0c:c4:c1:31:fc:0d:8a:21:7f:64: b1:51:7c:0a:7f:04:75:d8:e4:02:46:f8:e4:a5:d0: 7a:8f:fa:a7:09:a8:16:f8:f8:00:66:38:9a:78:f9: b6:b0:47:7c:3c:f0:d6:49:f0:2d:6b:26:a0:6d:67: 26:12:b0:ea:3f:79:e0:e1:de:0c:2b:8f:05:81:54: f0:63:35:96:35:e8:59:c8:2a:93:f8:87:33:9b:23: 86:08:4e:2d:00:86:aa:54:25:96:33:60:db:0d:d6: 53:95:66:7e:37:c9:44:a8:c2:8e:d7:01:20:b4:c4: 07:c9:29:7b:57:2c:0a:c5:ff:61:f0:80:fa:f4:ac: 08:8c:09:7a:0b:c0:a6:c2:d8:7f:d6:0f:09:e7:0c: d0:e0:44:5d:de:db:5b:ca:3c:5c:0d:75:74:f4:de: 2d:a1:20:c8:cf:c7:f7:42:08:39:33:ce:ec:28:4e: 76:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:6E:0A:AD:3B:A2:4C:E3:FB:6C:54:D4:C8:4F:3F:EB:D1:E1:1E:A8 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200975.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:f500::/40 Signature Algorithm: sha256WithRSAEncryption ba:66:76:af:ef:3f:59:15:44:97:c2:a9:cc:bc:41:db:04:31: 93:9d:b2:92:d7:46:5f:da:8d:de:b9:8b:8f:ee:46:5e:47:b9: bd:06:97:25:fd:71:fd:10:2e:5a:49:c9:1d:e9:00:24:db:32: b3:56:23:b8:1a:2a:27:6d:28:0f:00:77:a5:bb:9b:7d:2e:62: bf:cd:3c:05:6f:48:1d:9c:6f:97:bf:84:a0:7c:cf:d9:9a:44: 80:df:d3:b7:83:3d:8d:fe:0c:d2:29:a2:fe:c7:59:34:63:f2: 95:f0:b6:04:0e:11:d6:f7:b0:3f:35:13:2e:80:57:3e:17:ec: 1f:bd:fa:96:18:70:39:5f:b5:87:55:a4:3e:9f:a6:ba:0b:c9: a8:e5:f7:00:be:33:c4:af:7d:dc:b5:da:f3:a6:55:97:19:58: 68:2b:e5:40:0d:41:a5:ab:fe:fa:9c:3d:ff:6d:de:a1:a8:a2: ca:4e:d4:a3:9a:e7:a4:9c:b3:55:ee:db:37:d3:9d:f1:fa:a8: 3b:c1:14:a9:3b:8b:a8:0c:3e:e6:3c:fa:9e:d1:28:9f:5d:87: 7c:44:a9:36:9f:4f:3e:78:c7:23:97:5a:52:d7:b2:21:dd:e2: 8d:51:3c:09:1a:12:d0:0d:12:d6:be:af:d2:c9:03:3b:44:d1: 66:af:df:b2 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUCEauHGu6UwkypsZ3C9chvdpKj24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEwMDYwNDQwMDhaFw0yNTEwMDUwNDQ1MDhaMDMxMTAvBgNV BAMTKDQ2NkUwQUFEM0JBMjRDRTNGQjZDNTRENEM4NEYzRkVCRDFFMTFFQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/15hhzI+tlcVd49+jCoPKB5So cpTo4ywKn4Z0pqZw9sLhAmk5fGEanLZhdgLKk3/8bpURjP3bZ/t3QWk80xeACz9U 6hZJbmGtefpL8HL9DMTBMfwNiiF/ZLFRfAp/BHXY5AJG+OSl0HqP+qcJqBb4+ABm OJp4+bawR3w88NZJ8C1rJqBtZyYSsOo/eeDh3gwrjwWBVPBjNZY16FnIKpP4hzOb I4YITi0AhqpUJZYzYNsN1lOVZn43yUSowo7XASC0xAfJKXtXLArF/2HwgPr0rAiM CXoLwKbC2H/WDwnnDNDgRF3e21vKPFwNdXT03i2hIMjPx/dCCDkzzuwoTnZlAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQURm4KrTuiTOP7bFTUyE8/69HhHqgwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjAwOTc1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQPUwDQYJKoZIhvcNAQELBQADggEBALpm dq/vP1kVRJfCqcy8QdsEMZOdspLXRl/ajd65i4/uRl5Hub0GlyX9cf0QLlpJyR3p ACTbMrNWI7gaKidtKA8Ad6W7m30uYr/NPAVvSB2cb5e/hKB8z9maRIDf07eDPY3+ DNIpov7HWTRj8pXwtgQOEdb3sD81Ey6AVz4X7B+9+pYYcDlftYdVpD6fproLyajl 9wC+M8Svfdy12vOmVZcZWGgr5UANQaWr/vqcPf9t3qGoospO1KOa56Scs1Xu2zfT nfH6qDvBFKk7i6gMPuY8+p7RKJ9dh3xEqTafTz54xyOXWlLXsiHd4o1RPAkaEtAN Eta+r9LJAztE0Wav37I= -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:55 2024 by rpki-client on console-ams.rpki-client.org