$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216266.roa File: AS216266.roa (raw, json) Hash identifier: urXBhGKFwEEgZpiyADRpCgppq4aBNTtGMbS6hkk9N50= Subject key identifier: 1F:8C:33:84:96:B5:2F:06:4B:8F:80:C3:CE:F5:98:FE:BC:E3:B2:FF Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 4DEB79ED4C618DCB65F794CC4F09CED1BEC00B17 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216266.roa Signing time: Fri 20 Oct 2023 22:59:56 +0000 ROA not before: Fri 20 Oct 2023 22:54:56 +0000 ROA not after: Fri 18 Oct 2024 22:59:56 +0000 asID: 216266 IP address blocks: 2a05:dfc1:b800::/40 maxlen: 48 2a05:dfc1:b900::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 03:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:eb:79:ed:4c:61:8d:cb:65:f7:94:cc:4f:09:ce:d1:be:c0:0b:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 20 22:54:56 2023 GMT Not After : Oct 18 22:59:56 2024 GMT Subject: CN=1F8C338496B52F064B8F80C3CEF598FEBCE3B2FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:00:95:5e:75:24:3e:3b:2f:bb:8c:db:70:55: b8:04:1c:04:e4:37:45:62:96:12:99:e0:cf:a1:71: 19:67:de:57:a0:5f:ec:e5:17:77:d8:9f:c7:7e:a7: de:9e:7e:da:c8:9d:6f:b3:e2:af:84:14:2f:8c:c5: 5e:9f:f9:51:31:96:7d:d0:23:b9:c2:82:58:4c:d3: 8b:5d:a7:3b:e0:47:a3:27:aa:da:80:59:94:16:b0: 35:42:d3:5c:8a:d8:0e:29:f0:58:5a:d9:9b:bf:de: 1f:a4:fd:ee:9f:9e:8d:6d:0d:37:9e:bf:ed:8f:98: c8:b1:a6:d6:08:6c:5f:02:2a:a9:44:0d:70:ac:e4: c0:3e:6c:6c:0b:1c:b4:b7:7c:4a:4f:dc:93:6e:d1: 63:3a:e1:01:1c:d9:b3:35:bc:01:f2:53:73:59:60: c5:ba:ba:8c:9a:93:2a:19:dd:1f:a7:f7:f0:d4:d8: 51:da:42:8e:c7:d4:0e:b9:5e:70:2e:80:84:4c:4f: ad:73:2d:fa:5a:9b:d1:14:0c:28:28:29:c0:2a:8f: e3:f3:fe:40:f3:ae:f6:16:f9:6b:16:e0:42:7f:41: a9:cf:bc:18:73:ac:46:7a:9e:92:9d:4c:f8:2b:54: 92:c6:14:46:77:6c:f4:73:1d:ab:c1:f5:18:3c:6d: 30:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:8C:33:84:96:B5:2F:06:4B:8F:80:C3:CE:F5:98:FE:BC:E3:B2:FF X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216266.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:b800::/39 Signature Algorithm: sha256WithRSAEncryption 31:36:0b:94:f9:8a:5e:08:17:a4:0f:e8:a0:9b:02:49:cb:22: 6f:6b:70:73:53:ec:e9:af:4c:06:96:84:71:5f:64:7f:95:9f: ae:35:8c:e0:73:b4:70:d4:59:23:81:f8:88:e5:f9:78:5d:e0: 40:19:a8:5e:56:91:ab:b2:72:8d:09:8e:1c:bb:7a:4e:4e:b8: 3c:4d:43:a6:a3:c9:0b:9a:0a:11:39:42:67:f2:e2:34:8a:d0: ea:41:72:c5:2b:df:cc:fe:b5:4b:37:70:9c:0c:e8:d0:11:fd: be:58:e5:d9:46:7a:f9:4b:79:5f:8f:39:32:0a:12:18:cc:d3: 07:e8:d5:ae:d8:42:5c:73:de:29:47:42:47:ae:37:3f:25:d7: 09:49:68:3e:c8:6f:90:ba:54:31:ce:ed:b0:ed:77:8d:30:0b: da:5f:be:bc:96:fe:93:65:ff:64:1d:74:c3:db:cc:14:4d:40: 64:ba:87:50:c7:3a:2e:eb:34:ab:cd:3a:15:f5:01:6d:4b:f5: d9:c3:46:93:79:19:1c:da:56:a8:84:69:04:ba:0e:6e:e1:ed: 89:90:42:51:ce:3d:71:9c:64:64:1e:c7:41:7a:c6:fe:52:1c: fe:92:b7:b5:46:6c:42:81:86:fc:95:f0:0b:f4:44:fe:22:af: fe:1b:c4:12 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUTet57Uxhjctl95TMTwnO0b7ACxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzEwMjAyMjU0NTZaFw0yNDEwMTgyMjU5NTZaMDMxMTAvBgNV BAMTKDFGOEMzMzg0OTZCNTJGMDY0QjhGODBDM0NFRjU5OEZFQkNFM0IyRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGAJVedSQ+Oy+7jNtwVbgEHATk N0VilhKZ4M+hcRln3legX+zlF3fYn8d+p96eftrInW+z4q+EFC+MxV6f+VExln3Q I7nCglhM04tdpzvgR6MnqtqAWZQWsDVC01yK2A4p8Fha2Zu/3h+k/e6fno1tDTee v+2PmMixptYIbF8CKqlEDXCs5MA+bGwLHLS3fEpP3JNu0WM64QEc2bM1vAHyU3NZ YMW6uoyakyoZ3R+n9/DU2FHaQo7H1A65XnAugIRMT61zLfpam9EUDCgoKcAqj+Pz /kDzrvYW+WsW4EJ/QanPvBhzrEZ6npKdTPgrVJLGFEZ3bPRzHavB9Rg8bTApAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUH4wzhJa1LwZLj4DDzvWY/rzjsv8wHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjE2MjY2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYBKgXfwbgwDQYJKoZIhvcNAQELBQADggEBADE2 C5T5il4IF6QP6KCbAknLIm9rcHNT7OmvTAaWhHFfZH+Vn641jOBztHDUWSOB+Ijl +Xhd4EAZqF5Wkauyco0Jjhy7ek5OuDxNQ6ajyQuaChE5Qmfy4jSK0OpBcsUr38z+ tUs3cJwM6NAR/b5Y5dlGevlLeV+POTIKEhjM0wfo1a7YQlxz3ilHQkeuNz8l1wlJ aD7Ib5C6VDHO7bDtd40wC9pfvryW/pNl/2QddMPbzBRNQGS6h1DHOi7rNKvNOhX1 AW1L9dnDRpN5GRzaVqiEaQS6Dm7h7YmQQlHOPXGcZGQex0F6xv5SHP6St7VGbEKB hvyV8Av0RP4ir/4bxBI= -----END CERTIFICATE-----Generated at Fri May 17 13:11:27 2024 by rpki-client on console-ams.rpki-client.org