$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS36369.roa File: AS36369.roa (raw, json) Hash identifier: z5FoeCG9dkLmfQHfBzzA2zocBBSuoD9yyOkN+0sX1WY= Subject key identifier: 34:1E:6D:FC:00:DD:74:05:E8:F0:BB:11:2E:14:5B:96:BA:2B:D9:F1 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 22C58386D807355A19A4712B19146C75EF15DF3C Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS36369.roa Signing time: Wed 27 Mar 2024 05:58:26 +0000 ROA not before: Wed 27 Mar 2024 05:53:26 +0000 ROA not after: Wed 26 Mar 2025 05:58:26 +0000 asID: 36369 IP address blocks: 2a05:dfc1:3b00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 03:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:c5:83:86:d8:07:35:5a:19:a4:71:2b:19:14:6c:75:ef:15:df:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Mar 27 05:53:26 2024 GMT Not After : Mar 26 05:58:26 2025 GMT Subject: CN=341E6DFC00DD7405E8F0BB112E145B96BA2BD9F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:dc:f0:8c:9d:5a:53:8f:f4:38:e9:88:a3:8f: 40:35:35:58:a4:60:69:61:2e:fd:02:5d:77:12:bb: 66:09:3c:33:16:06:1f:fa:35:0f:14:f7:3b:a1:53: 91:4b:35:e0:e7:c6:c2:4a:3f:62:e3:ab:aa:c2:87: d4:9a:fe:67:07:33:29:cf:e8:5a:11:a2:8a:f1:db: 55:0a:e9:18:5a:6f:3e:2b:ec:7d:0d:30:e8:2e:f6: bf:a4:f0:82:a0:aa:d7:77:50:63:1d:54:66:37:83: 2f:c3:08:5e:f9:ce:50:f2:07:8e:20:0b:84:8a:1d: 9f:5f:2c:2e:af:f0:b5:98:32:17:9f:42:b2:43:d7: 7b:09:17:06:85:69:5b:0e:5c:4f:45:59:a6:0f:9a: 20:ec:a8:ed:a2:2e:25:45:76:2f:12:6b:66:a6:78: 15:b5:68:a6:79:f5:01:53:a0:bc:4f:7d:7f:7b:96: fb:ba:f3:cc:3a:63:ff:c2:d8:82:ef:b4:cb:bc:ca: f1:e5:e1:31:16:67:b0:1d:d8:ff:20:20:d4:63:a0: e4:b4:b0:0d:aa:ca:68:b9:41:52:9e:1d:01:81:7a: f5:4b:93:27:97:6d:18:a7:98:9f:70:cf:42:93:29: d0:49:62:c5:24:2f:25:02:3f:81:ca:cd:2e:62:bd: fe:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:1E:6D:FC:00:DD:74:05:E8:F0:BB:11:2E:14:5B:96:BA:2B:D9:F1 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS36369.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:3b00::/40 Signature Algorithm: sha256WithRSAEncryption 78:d7:ee:6b:75:a9:79:0b:19:67:f5:e8:1e:ec:84:d2:ad:d4: bc:53:47:f1:f8:1a:96:17:78:d9:9d:96:f9:35:3d:00:28:a0: e9:84:74:d1:3f:b3:e9:a2:77:4d:43:7e:da:b0:99:df:c5:1d: 4b:49:a9:0e:02:1e:9c:2e:17:fa:0d:08:f3:09:1f:f5:6a:cd: ec:2b:91:ee:f4:94:1b:9f:57:81:7b:4c:bf:53:2e:b2:2e:4a: 19:06:bf:b1:42:97:c2:9d:07:4d:d1:42:d1:e6:03:e9:18:c0: d6:22:66:4d:d9:7d:78:75:20:69:02:89:c4:57:e1:75:d4:b1: cb:25:72:c7:d8:fc:81:c7:39:b3:74:4c:67:fa:15:ad:82:dc: fc:fa:06:28:91:ae:be:82:67:d7:e4:c4:93:45:7f:d2:8e:ee: 4c:f9:56:c2:82:03:68:71:f6:d9:a5:85:07:98:e4:ac:05:ea: 46:1b:12:e7:be:9b:7b:7d:0d:ba:83:2c:a8:70:f3:af:76:09: f6:ee:b4:d9:67:ac:22:a2:62:dc:a7:a8:12:82:21:17:d1:47: 87:cf:a7:af:93:56:01:e9:a9:99:e2:00:f6:8b:20:5a:17:61: c0:a5:9f:1f:fb:63:ab:9e:b6:a5:7a:40:25:c9:52:14:91:3b: 0e:af:d0:9c -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUIsWDhtgHNVoZpHErGRRsde8V3zwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDAzMjcwNTUzMjZaFw0yNTAzMjYwNTU4MjZaMDMxMTAvBgNV BAMTKDM0MUU2REZDMDBERDc0MDVFOEYwQkIxMTJFMTQ1Qjk2QkEyQkQ5RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB3PCMnVpTj/Q46Yijj0A1NVik YGlhLv0CXXcSu2YJPDMWBh/6NQ8U9zuhU5FLNeDnxsJKP2Ljq6rCh9Sa/mcHMynP 6FoRoorx21UK6Rhabz4r7H0NMOgu9r+k8IKgqtd3UGMdVGY3gy/DCF75zlDyB44g C4SKHZ9fLC6v8LWYMhefQrJD13sJFwaFaVsOXE9FWaYPmiDsqO2iLiVFdi8Sa2am eBW1aKZ59QFToLxPfX97lvu688w6Y//C2ILvtMu8yvHl4TEWZ7Ad2P8gINRjoOS0 sA2qymi5QVKeHQGBevVLkyeXbRinmJ9wz0KTKdBJYsUkLyUCP4HKzS5ivf5zAgMB AAGjggHzMIIB7zAdBgNVHQ4EFgQUNB5t/ADddAXo8LsRLhRblror2fEwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMzYzNjkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqBd/BOzANBgkqhkiG9w0BAQsFAAOCAQEAeNfu a3WpeQsZZ/XoHuyE0q3UvFNH8fgalhd42Z2W+TU9ACig6YR00T+z6aJ3TUN+2rCZ 38UdS0mpDgIenC4X+g0I8wkf9WrN7CuR7vSUG59XgXtMv1Musi5KGQa/sUKXwp0H TdFC0eYD6RjA1iJmTdl9eHUgaQKJxFfhddSxyyVyx9j8gcc5s3RMZ/oVrYLc/PoG KJGuvoJn1+TEk0V/0o7uTPlWwoIDaHH22aWFB5jkrAXqRhsS576be30NuoMsqHDz r3YJ9u602WesIqJi3KeoEoIhF9FHh8+nr5NWAempmeIA9osgWhdhwKWfH/tjq562 pXpAJclSFJE7Dq/QnA== -----END CERTIFICATE-----Generated at Fri May 17 14:07:00 2024 by rpki-client on console-fra.rpki-client.org