$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS209542.roa File: AS209542.roa (raw, json) Hash identifier: 4VJ8vwMGUWHq917NaHhShDx8/wft4rXdv+dyuq6ajHo= Subject key identifier: 3E:81:F8:0F:2F:BB:B9:36:55:99:83:B5:7D:0D:00:5A:90:8E:91:59 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 29991836C98DBD84D7BA01437E72B0FDC4CEE957 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS209542.roa Signing time: Wed 06 Mar 2024 09:58:14 +0000 ROA not before: Wed 06 Mar 2024 09:53:14 +0000 ROA not after: Wed 05 Mar 2025 09:58:14 +0000 asID: 209542 IP address blocks: 2a05:dfc1:2700::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 07:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:99:18:36:c9:8d:bd:84:d7:ba:01:43:7e:72:b0:fd:c4:ce:e9:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Mar 6 09:53:14 2024 GMT Not After : Mar 5 09:58:14 2025 GMT Subject: CN=3E81F80F2FBBB936559983B57D0D005A908E9159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:28:97:2e:46:ff:3b:11:8e:90:9f:ff:54:55: 6d:d3:fe:8f:26:11:90:39:c2:64:a3:23:ff:3a:0e: e1:07:a6:66:39:ad:95:89:cd:3a:98:ea:e9:e1:ac: 42:73:78:e9:bc:dd:cd:37:fa:23:dd:f7:51:ed:4c: 24:a9:27:06:5a:e4:73:59:01:36:2f:c8:52:04:2d: 7c:d3:2b:a0:8a:67:7b:cf:23:34:2c:8f:2b:16:ac: cb:65:67:64:21:56:cf:cc:d7:fb:4d:75:18:3a:c3: 3d:36:0f:de:fd:d2:6e:a3:da:20:e4:12:21:28:7a: 62:5a:68:e2:93:9f:88:57:28:40:66:87:32:93:b6: f4:4c:a1:10:c1:d8:4e:fc:96:13:5c:ae:69:f3:54: 84:84:07:b8:80:a7:05:07:69:db:fb:04:fd:fe:2d: ee:5b:78:a5:06:99:af:50:0c:a7:1e:5c:cf:e6:5c: 45:dc:b7:45:1e:15:3e:bb:06:ba:51:4d:3d:98:72: 67:ab:5e:18:98:82:12:81:b1:02:eb:a9:1b:93:94: e5:c9:c1:fd:9b:f4:85:40:2b:c0:80:e9:f2:2b:57: a4:29:0d:18:ad:fc:00:7a:8e:0a:39:b4:27:fe:17: 82:48:b9:b1:c2:5f:05:18:ab:b0:31:71:b5:0a:64: d3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:81:F8:0F:2F:BB:B9:36:55:99:83:B5:7D:0D:00:5A:90:8E:91:59 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS209542.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:2700::/40 Signature Algorithm: sha256WithRSAEncryption 8f:14:2d:cd:65:50:60:a5:e1:21:df:98:b6:9e:e8:c6:3c:80: 17:86:95:a8:4a:a9:f6:ce:df:64:9c:e8:9a:d2:eb:26:f4:66: 5c:d4:23:df:d9:5a:f0:14:94:c0:b2:56:c7:9c:a3:f6:63:02: 51:3d:f5:3a:05:7d:a6:14:dc:cb:a2:b3:b6:eb:a5:19:8d:50: a4:05:0e:c2:20:75:ea:dc:a9:d2:56:44:cf:54:9a:02:15:2d: 90:75:16:3e:47:e5:36:c7:d9:45:d9:4e:29:ca:b6:19:c2:d2: cd:d9:2e:47:69:88:0a:55:37:ca:5f:ad:f7:d9:6b:db:e8:7f: 95:e8:f6:0c:25:ed:24:91:d2:82:11:9b:83:b2:c1:82:28:93: 00:89:d8:2a:48:27:61:c0:0d:f6:68:5f:9b:73:22:ec:a5:04: c7:c2:78:a0:fa:52:53:26:3c:12:a3:ee:25:18:52:5e:f2:2c: 44:e2:64:b1:9b:c9:da:81:13:8a:13:57:eb:a9:df:07:a5:83: 04:cf:ce:65:78:78:ff:5a:c1:98:a5:67:ed:98:2b:25:db:30: 32:90:32:73:de:07:91:c5:37:ff:8f:45:9c:3c:cb:2c:53:ca: 53:85:d5:4d:04:68:86:b8:22:10:96:55:6c:84:22:c0:9b:39: bc:8a:93:11 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUKZkYNsmNvYTXugFDfnKw/cTO6VcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDAzMDYwOTUzMTRaFw0yNTAzMDUwOTU4MTRaMDMxMTAvBgNV BAMTKDNFODFGODBGMkZCQkI5MzY1NTk5ODNCNTdEMEQwMDVBOTA4RTkxNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcKJcuRv87EY6Qn/9UVW3T/o8m EZA5wmSjI/86DuEHpmY5rZWJzTqY6unhrEJzeOm83c03+iPd91HtTCSpJwZa5HNZ ATYvyFIELXzTK6CKZ3vPIzQsjysWrMtlZ2QhVs/M1/tNdRg6wz02D9790m6j2iDk EiEoemJaaOKTn4hXKEBmhzKTtvRMoRDB2E78lhNcrmnzVISEB7iApwUHadv7BP3+ Le5beKUGma9QDKceXM/mXEXct0UeFT67BrpRTT2YcmerXhiYghKBsQLrqRuTlOXJ wf2b9IVAK8CA6fIrV6QpDRit/AB6jgo5tCf+F4JIubHCXwUYq7AxcbUKZNMZAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUPoH4Dy+7uTZVmYO1fQ0AWpCOkVkwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjA5NTQyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwScwDQYJKoZIhvcNAQELBQADggEBAI8U Lc1lUGCl4SHfmLae6MY8gBeGlahKqfbO32Sc6JrS6yb0ZlzUI9/ZWvAUlMCyVsec o/ZjAlE99ToFfaYU3Muis7brpRmNUKQFDsIgdercqdJWRM9UmgIVLZB1Fj5H5TbH 2UXZTinKthnC0s3ZLkdpiApVN8pfrffZa9vof5Xo9gwl7SSR0oIRm4OywYIokwCJ 2CpIJ2HADfZoX5tzIuylBMfCeKD6UlMmPBKj7iUYUl7yLETiZLGbydqBE4oTV+up 3welgwTPzmV4eP9awZilZ+2YKyXbMDKQMnPeB5HFN/+PRZw8yyxTylOF1U0EaIa4 IhCWVWyEIsCbObyKkxE= -----END CERTIFICATE-----Generated at Mon May 20 12:06:24 2024 by rpki-client on console-ams.rpki-client.org