$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS202732.roa File: AS202732.roa (raw, json) Hash identifier: vxpOay2fzEgbAF782pELEu2xTqiYqGFMawngDI3ZiFg= Subject key identifier: EA:D3:36:9F:CB:25:64:2C:2D:9D:31:DD:8B:B6:7F:A9:13:BB:52:62 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 13FD25E250BBEE768763DFD1622CC4EA1D3F1193 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS202732.roa Signing time: Sun 05 Nov 2023 04:07:20 +0000 ROA not before: Sun 05 Nov 2023 04:02:20 +0000 ROA not after: Sun 03 Nov 2024 04:07:20 +0000 asID: 202732 IP address blocks: 2a0a:6040:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 03:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:fd:25:e2:50:bb:ee:76:87:63:df:d1:62:2c:c4:ea:1d:3f:11:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 5 04:02:20 2023 GMT Not After : Nov 3 04:07:20 2024 GMT Subject: CN=EAD3369FCB25642C2D9D31DD8BB67FA913BB5262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:20:40:2a:e1:76:3d:df:46:07:ac:a5:cc:e0: 8d:4b:b2:38:ef:6d:91:f0:e7:4b:ec:2f:9f:35:77: 9a:be:62:b4:fd:5d:5f:4a:1f:6e:7b:db:dc:1a:ab: 95:4a:1e:e9:13:2b:da:26:4a:53:6f:eb:12:39:85: b2:ad:d6:31:4d:e2:59:07:18:77:f6:fa:49:15:3d: da:f6:b2:c5:dd:b7:e9:2a:af:9b:60:30:96:14:48: 87:ef:d4:47:e7:05:81:56:69:2b:78:ff:aa:88:dc: fe:46:0c:87:9d:c8:ae:f4:1a:4e:6b:69:ec:95:1c: db:b8:2f:fe:74:d9:0d:f2:38:67:3f:fb:29:ae:3b: 5b:4c:28:28:31:58:9a:8f:de:09:0b:3b:7e:70:df: 80:ea:29:64:9c:0a:1e:55:2d:84:d7:3d:0f:f6:b6: 0b:95:4f:11:a5:71:79:8a:5a:92:7d:76:81:d4:22: a4:8a:bd:07:b3:98:78:29:ae:80:82:a0:f4:1d:c2: 4a:f4:77:18:53:64:aa:1d:38:0e:b9:34:a9:4d:af: d2:42:08:47:5b:6b:e4:27:2b:23:0d:91:55:cb:57: 90:45:d6:9a:f3:4c:13:74:e6:7a:b7:d1:93:fe:c5: 3f:4d:56:5a:8a:74:04:7e:df:5c:9c:c9:c1:ee:15: 23:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D3:36:9F:CB:25:64:2C:2D:9D:31:DD:8B:B6:7F:A9:13:BB:52:62 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS202732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:c800::/40 Signature Algorithm: sha256WithRSAEncryption 5a:1f:dc:00:9c:31:50:c5:fa:6d:b4:3f:2e:8c:09:09:13:2a: 00:f2:1e:94:dd:ed:c9:1c:00:77:f3:0c:3f:e1:e5:4e:77:83: a8:68:fd:42:4c:0e:43:4f:ad:c9:9f:99:31:c3:87:0d:53:42: 5b:4e:d4:c4:6f:c3:d5:f6:1d:cd:26:5b:ca:b9:51:ee:37:f0: 8c:ec:ab:7d:38:ca:f2:03:39:89:0d:4e:3e:91:22:5c:2f:76: be:af:ca:72:e5:57:c0:ee:da:96:94:05:20:27:6f:7c:a6:92: 06:c3:3f:67:67:91:98:ff:ba:b3:43:5d:98:8b:94:79:04:41: 7d:3f:1d:65:67:58:74:35:ea:22:2b:9a:a9:0e:5d:0a:a6:f4: cf:6d:38:14:43:a1:c4:64:34:b1:48:c2:e2:a6:c0:5a:f6:35: 61:26:33:f2:d2:21:4d:57:08:b4:a3:3c:46:28:ba:75:55:b3: 3b:f8:b8:4f:ff:a1:1a:d3:b9:00:b8:1a:35:5e:0d:c7:f8:0b: 08:ca:80:d5:13:9d:a8:8c:af:21:a1:86:ed:24:63:af:3d:f2: 8c:09:8d:e2:25:dc:b4:cd:3f:59:c8:e1:bd:0b:18:d6:a2:5b: d1:51:99:4e:0e:da:91:0e:98:85:25:e3:69:3d:73:15:00:e4: b2:70:30:6c -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUE/0l4lC77naHY9/RYizE6h0/EZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMDUwNDAyMjBaFw0yNDExMDMwNDA3MjBaMDMxMTAvBgNV BAMTKEVBRDMzNjlGQ0IyNTY0MkMyRDlEMzFERDhCQjY3RkE5MTNCQjUyNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCIEAq4XY930YHrKXM4I1Lsjjv bZHw50vsL581d5q+YrT9XV9KH25729waq5VKHukTK9omSlNv6xI5hbKt1jFN4lkH GHf2+kkVPdr2ssXdt+kqr5tgMJYUSIfv1EfnBYFWaSt4/6qI3P5GDIedyK70Gk5r aeyVHNu4L/502Q3yOGc/+ymuO1tMKCgxWJqP3gkLO35w34DqKWScCh5VLYTXPQ/2 tguVTxGlcXmKWpJ9doHUIqSKvQezmHgproCCoPQdwkr0dxhTZKodOA65NKlNr9JC CEdba+QnKyMNkVXLV5BF1przTBN05nq30ZP+xT9NVlqKdAR+31ycycHuFSMBAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU6tM2n8slZCwtnTHdi7Z/qRO7UmIwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjAyNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQMgwDQYJKoZIhvcNAQELBQADggEBAFof 3ACcMVDF+m20Py6MCQkTKgDyHpTd7ckcAHfzDD/h5U53g6ho/UJMDkNPrcmfmTHD hw1TQltO1MRvw9X2Hc0mW8q5Ue438Izsq304yvIDOYkNTj6RIlwvdr6vynLlV8Du 2paUBSAnb3ymkgbDP2dnkZj/urNDXZiLlHkEQX0/HWVnWHQ16iIrmqkOXQqm9M9t OBRDocRkNLFIwuKmwFr2NWEmM/LSIU1XCLSjPEYounVVszv4uE//oRrTuQC4GjVe Dcf4CwjKgNUTnaiMryGhhu0kY6898owJjeIl3LTNP1nI4b0LGNaiW9FRmU4O2pEO mIUl42k9cxUA5LJwMGw= -----END CERTIFICATE-----Generated at Fri May 17 13:11:27 2024 by rpki-client on console-ams.rpki-client.org