$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS209512.roa File: AS209512.roa (raw, json) Hash identifier: 5YFk+AkLQ8KxAtKK9J/NPHAcYxGEhuJBXIQQvIn/IQw= Subject key identifier: 38:A2:6F:E4:63:22:F8:E2:70:E0:F5:A4:CE:9E:9E:29:E9:31:BC:BF Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 4A66C6262A7FF4FB883BF5B980151134F228DE87 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS209512.roa Signing time: Mon 30 Oct 2023 10:20:12 +0000 ROA not before: Mon 30 Oct 2023 10:15:12 +0000 ROA not after: Mon 28 Oct 2024 10:20:12 +0000 asID: 209512 IP address blocks: 2a05:dfc1:c500::/40 maxlen: 48 2a05:dfc1:c600::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 03:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:66:c6:26:2a:7f:f4:fb:88:3b:f5:b9:80:15:11:34:f2:28:de:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 30 10:15:12 2023 GMT Not After : Oct 28 10:20:12 2024 GMT Subject: CN=38A26FE46322F8E270E0F5A4CE9E9E29E931BCBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d4:54:7f:68:d5:4a:b6:3e:d3:0a:63:e6:5d: 9c:8d:70:bb:36:16:3c:ea:d4:fe:e1:b9:b8:27:d3: 63:3e:56:b7:1a:4b:53:5d:b3:49:8a:33:38:85:57: 00:34:8e:45:bd:18:98:bd:a7:98:fc:4c:5d:54:60: b1:70:1e:41:33:45:f4:46:33:df:93:dd:17:da:37: 93:43:fb:74:2d:2a:2f:6c:75:44:f6:5c:c9:f7:e8: 91:f4:2c:b0:10:47:f5:65:b1:e2:ec:d6:9b:72:02: 6c:2b:cd:6a:08:bb:97:b8:76:d4:8b:fd:a4:56:9d: 2f:2f:e6:62:bd:d8:78:0f:9e:a4:c3:ce:db:a2:0a: 64:33:ab:b8:c0:91:35:93:ca:d4:bb:7d:5d:e7:80: 69:a1:06:e4:95:b7:5d:7c:63:49:51:5f:13:6a:a5: 3c:c4:26:6f:85:21:d6:b5:b5:00:18:17:22:84:1d: ef:f0:2e:9c:b1:e1:ed:1a:08:b0:09:74:60:b8:1e: 62:50:e9:67:a3:94:75:13:6c:5e:6c:f0:8b:15:df: b0:e1:52:b5:1c:11:2c:d2:dd:e7:51:16:ad:de:a0: 32:b8:bc:69:b7:5f:07:55:7f:24:81:f0:43:f4:15: fb:c3:54:9f:04:71:82:0d:10:0b:73:b3:f6:0a:b5: 9f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A2:6F:E4:63:22:F8:E2:70:E0:F5:A4:CE:9E:9E:29:E9:31:BC:BF X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS209512.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:c500::-2a05:dfc1:c6ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 75:e1:35:6d:48:6a:fa:20:ee:29:5a:d2:4b:f8:01:30:91:e4: b7:2c:7e:20:8f:5f:c2:72:9f:ed:92:16:70:e3:b6:47:bb:10: 87:52:40:0c:12:ea:83:76:7a:89:6e:28:76:62:68:c4:e4:85: 41:10:f0:1e:42:7c:32:df:a8:f5:06:b9:a1:bc:37:3c:4c:41: b9:e4:4f:7e:35:ec:70:bc:1a:0e:b3:3f:49:a0:ab:70:ec:bf: a9:e2:16:8c:e9:86:ab:ef:b1:66:e6:f4:e9:cc:21:55:82:80: 1d:ff:83:7e:bb:4f:52:34:5a:67:38:7b:5a:9b:13:6b:ab:c9: ad:f5:24:d9:80:7e:b8:b7:66:4d:18:41:73:fc:32:46:9a:68: 35:a6:64:aa:75:95:79:5b:6d:b7:86:15:bb:ac:ad:22:a1:a3: ef:d9:e7:3f:e5:3d:d3:60:d1:85:06:57:c3:38:86:e1:a3:1e: 73:1e:86:7e:26:87:98:ea:d1:d1:cf:cc:75:2a:13:46:58:e6: fd:61:a0:af:90:57:3c:3b:46:3b:f4:11:d4:84:11:cc:b5:b8: 7b:91:55:fa:ad:b3:de:3a:80:e2:80:d8:30:e3:a2:0d:14:64: 48:9a:bc:3c:4b:94:41:ca:a4:48:4b:81:2a:9f:e4:96:2f:91: a8:f0:2f:1c -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUSmbGJip/9PuIO/W5gBURNPIo3ocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzEwMzAxMDE1MTJaFw0yNDEwMjgxMDIwMTJaMDMxMTAvBgNV BAMTKDM4QTI2RkU0NjMyMkY4RTI3MEUwRjVBNENFOUU5RTI5RTkzMUJDQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA1FR/aNVKtj7TCmPmXZyNcLs2 Fjzq1P7hubgn02M+VrcaS1Nds0mKMziFVwA0jkW9GJi9p5j8TF1UYLFwHkEzRfRG M9+T3RfaN5ND+3QtKi9sdUT2XMn36JH0LLAQR/VlseLs1ptyAmwrzWoIu5e4dtSL /aRWnS8v5mK92HgPnqTDztuiCmQzq7jAkTWTytS7fV3ngGmhBuSVt118Y0lRXxNq pTzEJm+FIda1tQAYFyKEHe/wLpyx4e0aCLAJdGC4HmJQ6WejlHUTbF5s8IsV37Dh UrUcESzS3edRFq3eoDK4vGm3XwdVfySB8EP0FfvDVJ8EcYINEAtzs/YKtZ+JAgMB AAGjggH+MIIB+jAdBgNVHQ4EFgQUOKJv5GMi+OJw4PWkzp6eKekxvL8wHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjA5NTEyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAAjASMBADBgAqBd/BxQMGACoF38HGMA0GCSqGSIb3DQEB CwUAA4IBAQB14TVtSGr6IO4pWtJL+AEwkeS3LH4gj1/Ccp/tkhZw47ZHuxCHUkAM EuqDdnqJbih2YmjE5IVBEPAeQnwy36j1BrmhvDc8TEG55E9+NexwvBoOsz9JoKtw 7L+p4haM6Yar77Fm5vTpzCFVgoAd/4N+u09SNFpnOHtamxNrq8mt9STZgH64t2ZN GEFz/DJGmmg1pmSqdZV5W223hhW7rK0ioaPv2ec/5T3TYNGFBlfDOIbhox5zHoZ+ JoeY6tHRz8x1KhNGWOb9YaCvkFc8O0Y79BHUhBHMtbh7kVX6rbPeOoDigNgw46IN FGRImrw8S5RByqRIS4Eqn+SWL5Go8C8c -----END CERTIFICATE-----Generated at Fri May 17 14:07:00 2024 by rpki-client on console-fra.rpki-client.org