$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS208076.roa File: AS208076.roa (raw, json) Hash identifier: clYmGG0WC8E669C8jLBRkYINczF/d1QajCFFeyh01fA= Subject key identifier: 8F:91:1E:79:4E:E1:2C:83:F3:4A:76:FD:15:9D:24:B1:22:66:EA:A2 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 339A01EC16BEAA3236E233B5E6455BF8569EBCE7 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS208076.roa Signing time: Wed 29 Nov 2023 02:52:48 +0000 ROA not before: Wed 29 Nov 2023 02:47:48 +0000 ROA not after: Wed 27 Nov 2024 02:52:48 +0000 asID: 208076 IP address blocks: 2a06:9f81:2700::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 22:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:9a:01:ec:16:be:aa:32:36:e2:33:b5:e6:45:5b:f8:56:9e:bc:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 29 02:47:48 2023 GMT Not After : Nov 27 02:52:48 2024 GMT Subject: CN=8F911E794EE12C83F34A76FD159D24B12266EAA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6a:3d:85:9e:c8:84:e7:9b:12:63:0e:3b:39: f5:26:62:3f:3a:6a:53:3b:c3:81:c2:cd:15:dc:14: c3:02:55:d9:47:56:a1:4a:64:34:81:77:01:8b:d7: 45:0a:12:f1:ff:78:0a:b6:e2:1b:c9:50:d4:5b:ff: 67:cd:6b:f7:7c:e8:e3:43:80:6f:ca:72:2b:16:a6: 7c:a3:3a:fe:d5:06:6b:6d:45:12:30:bb:04:30:0e: f4:74:28:0c:c9:54:e2:cb:32:07:77:cd:b0:38:f9: b2:36:09:b2:17:5e:1c:55:77:b8:1f:cd:0e:30:ef: d3:bf:6f:0a:fb:75:fd:52:83:9b:a2:d2:d8:8f:55: 24:b2:a7:f0:29:2f:d6:51:99:be:ed:b8:81:76:a1: 2c:ad:b7:34:1e:4b:86:7b:be:c4:b2:bd:ec:bb:8b: d5:ae:f7:10:75:18:b9:0f:cc:c1:80:24:62:20:5a: f4:4c:0a:ed:e2:5a:c4:b7:a8:c3:3b:b4:56:b7:83: f7:1f:49:e4:4f:82:c5:2e:fa:e5:88:61:ac:e7:0c: 7c:27:f6:6c:32:90:dd:72:d9:95:75:77:9e:6d:81: 57:68:d8:e0:c4:3b:87:07:a3:1d:f1:97:40:db:bd: 11:90:51:45:6f:ef:59:c2:da:29:41:2b:e0:57:f9: a4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:91:1E:79:4E:E1:2C:83:F3:4A:76:FD:15:9D:24:B1:22:66:EA:A2 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS208076.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:2700::/40 Signature Algorithm: sha256WithRSAEncryption 61:63:66:da:55:42:07:80:95:f1:c9:75:74:1c:02:e7:3d:f4: c4:d3:44:47:40:0b:da:8f:c0:c5:af:70:73:fa:e8:7d:3b:df: f9:10:4a:42:c3:43:0d:f1:53:2f:ee:8f:ba:fd:92:d9:2b:51: 26:b0:78:98:8e:b0:63:65:64:bc:83:13:07:33:0f:af:f8:53: 84:39:b7:96:18:43:60:60:ff:d1:56:58:a4:7b:b3:d9:9b:eb: e7:77:01:76:8d:95:ef:0c:b4:07:8c:4f:7e:cd:82:57:88:9e: 36:a9:83:df:f5:4c:49:c2:a7:8b:30:04:98:b9:df:64:95:2c: 22:27:95:f7:0b:7c:39:80:94:f4:10:ad:98:5f:6a:c1:51:4f: a7:99:6e:83:29:70:2f:96:81:38:6e:60:a8:1e:09:8d:14:11: ce:31:25:ef:b5:d9:66:8f:c9:ca:f1:d0:6c:08:19:b2:b5:47: 88:75:dd:16:8b:00:cd:30:ca:98:71:58:df:39:ce:b4:e1:7f: 40:d9:77:36:ad:97:15:2b:90:e2:96:4d:8c:b8:e5:e5:49:bd: 0e:b8:e5:06:2e:4c:9f:e2:05:15:12:8b:d8:0c:fe:b8:e8:e5: 12:f5:eb:a3:fe:be:b3:cc:e3:99:df:9a:81:a9:df:e8:b8:89: 8e:6d:d7:0f -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUM5oB7Ba+qjI24jO15kVb+FaevOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMjkwMjQ3NDhaFw0yNDExMjcwMjUyNDhaMDMxMTAvBgNV BAMTKDhGOTExRTc5NEVFMTJDODNGMzRBNzZGRDE1OUQyNEIxMjI2NkVBQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9aj2FnsiE55sSYw47OfUmYj86 alM7w4HCzRXcFMMCVdlHVqFKZDSBdwGL10UKEvH/eAq24hvJUNRb/2fNa/d86OND gG/KcisWpnyjOv7VBmttRRIwuwQwDvR0KAzJVOLLMgd3zbA4+bI2CbIXXhxVd7gf zQ4w79O/bwr7df1Sg5ui0tiPVSSyp/ApL9ZRmb7tuIF2oSyttzQeS4Z7vsSyvey7 i9Wu9xB1GLkPzMGAJGIgWvRMCu3iWsS3qMM7tFa3g/cfSeRPgsUu+uWIYaznDHwn 9mwykN1y2ZV1d55tgVdo2ODEO4cHox3xl0DbvRGQUUVv71nC2ilBK+BX+aSbAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUj5EeeU7hLIPzSnb9FZ0ksSJm6qIwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjA4MDc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgafgScwDQYJKoZIhvcNAQELBQADggEBAGFj ZtpVQgeAlfHJdXQcAuc99MTTREdAC9qPwMWvcHP66H073/kQSkLDQw3xUy/uj7r9 ktkrUSaweJiOsGNlZLyDEwczD6/4U4Q5t5YYQ2Bg/9FWWKR7s9mb6+d3AXaNle8M tAeMT37NgleInjapg9/1TEnCp4swBJi532SVLCInlfcLfDmAlPQQrZhfasFRT6eZ boMpcC+WgThuYKgeCY0UEc4xJe+12WaPycrx0GwIGbK1R4h13RaLAM0wyphxWN85 zrThf0DZdzatlxUrkOKWTYy45eVJvQ645QYuTJ/iBRUSi9gM/rjo5RL166P+vrPM 45nfmoGp3+i4iY5t1w8= -----END CERTIFICATE-----Generated at Tue May 21 05:34:02 2024 by rpki-client on console-ams.rpki-client.org