$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS49975.roa File: AS49975.roa (raw, json) Hash identifier: MB/yAdB7RmMNLn03fVGmZZY1R7PBDYGdYlxJwgMoS18= Subject key identifier: 4E:DC:D6:92:D4:E6:A4:67:D7:9D:53:A2:B3:6C:A4:37:DF:33:71:DF Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 6C846AD2E67244CF54A701A1A4B4FC74FD3B14E8 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS49975.roa Signing time: Sun 06 Oct 2024 04:45:08 +0000 ROA not before: Sun 06 Oct 2024 04:40:08 +0000 ROA not after: Sun 05 Oct 2025 04:45:08 +0000 asID: 49975 IP address blocks: 2a0a:6040:6d00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:84:6a:d2:e6:72:44:cf:54:a7:01:a1:a4:b4:fc:74:fd:3b:14:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 6 04:40:08 2024 GMT Not After : Oct 5 04:45:08 2025 GMT Subject: CN=4EDCD692D4E6A467D79D53A2B36CA437DF3371DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8c:ac:0c:ba:4b:af:e6:2e:93:d0:14:14:cf: db:be:94:61:94:4d:78:f9:94:a2:b1:e4:dd:ed:ea: c9:e0:90:f8:7f:f4:56:31:4a:d7:a2:4a:fc:64:01: 1c:d2:2f:52:de:42:96:02:64:23:76:ae:a5:f9:db: 22:59:a8:dc:92:f5:c5:bd:91:ce:19:a1:04:b3:a9: e8:c1:c3:0a:f6:86:47:9c:6f:f0:95:40:8f:ce:a6: fd:36:9e:e8:c0:69:5d:2e:d0:eb:3f:c8:cb:2e:42: 42:5c:00:fb:52:c7:68:4a:a0:7c:c0:35:77:09:6e: ff:10:2f:ac:77:e4:59:fe:59:31:8d:23:0c:cf:31: d8:57:71:c2:64:1c:51:d9:94:42:11:a8:42:ae:ad: e9:78:21:cc:66:dc:54:d0:75:d8:12:58:03:d3:52: ac:91:2f:1a:5e:17:b1:7c:03:32:3b:82:4f:d0:8b: c0:98:2a:73:bb:1f:5a:bd:7e:41:b8:b7:ec:0c:79: 25:81:a7:71:18:f2:54:af:95:b3:b4:81:b1:b1:0e: 32:3f:8d:70:cd:ec:86:fd:80:ec:4c:9a:c9:23:7a: 41:2a:31:53:db:ae:bd:c5:53:a2:bd:12:9f:63:24: a3:a5:dc:f3:ba:98:11:b8:e7:34:b2:c7:9b:40:2a: bf:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:DC:D6:92:D4:E6:A4:67:D7:9D:53:A2:B3:6C:A4:37:DF:33:71:DF X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS49975.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:6d00::/40 Signature Algorithm: sha256WithRSAEncryption b9:1d:d5:2a:77:a7:1a:98:3b:85:4a:ab:4d:9c:83:28:45:b1: 0b:ae:40:59:b3:cb:68:1c:c2:80:b6:a2:59:ea:44:18:95:ef: 72:04:aa:6e:28:9d:f9:9e:73:bf:36:e4:82:94:74:a8:b7:f2: ed:48:77:46:d6:a1:f8:02:90:d8:67:40:da:55:85:9a:b9:80: b4:f3:9b:7c:ad:cb:3c:41:3b:aa:5e:2c:1a:73:ae:07:53:d6: fe:fd:74:4c:6e:08:73:6a:16:a8:0a:17:7b:66:04:47:89:d0: 03:d4:5c:44:90:4c:45:fb:12:3b:9f:93:3f:47:02:f9:07:12: 38:eb:83:0c:4e:f4:61:48:18:72:5f:82:79:2e:62:3e:11:4f: e6:70:a1:83:73:bf:1e:37:e7:20:9f:01:52:e7:35:4b:f3:2b: 03:e8:ed:bf:a6:76:6b:fb:00:4e:12:fc:f3:e7:f6:14:48:72: 00:48:91:eb:16:ed:54:4e:90:3b:a2:e5:f2:8c:72:aa:28:fb: 95:36:85:17:22:84:01:79:28:36:5c:53:99:92:bc:c1:8b:8a: 57:87:1f:b6:ab:91:14:2e:f4:7f:61:16:2f:ba:31:34:f6:36: a7:16:18:48:fa:dc:9b:c8:09:e8:6e:23:ce:6c:67:f4:3a:fa: cc:30:61:6f -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUbIRq0uZyRM9UpwGhpLT8dP07FOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEwMDYwNDQwMDhaFw0yNTEwMDUwNDQ1MDhaMDMxMTAvBgNV BAMTKDRFRENENjkyRDRFNkE0NjdENzlENTNBMkIzNkNBNDM3REYzMzcxREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMjKwMukuv5i6T0BQUz9u+lGGU TXj5lKKx5N3t6sngkPh/9FYxSteiSvxkARzSL1LeQpYCZCN2rqX52yJZqNyS9cW9 kc4ZoQSzqejBwwr2hkecb/CVQI/Opv02nujAaV0u0Os/yMsuQkJcAPtSx2hKoHzA NXcJbv8QL6x35Fn+WTGNIwzPMdhXccJkHFHZlEIRqEKurel4Icxm3FTQddgSWAPT UqyRLxpeF7F8AzI7gk/Qi8CYKnO7H1q9fkG4t+wMeSWBp3EY8lSvlbO0gbGxDjI/ jXDN7Ib9gOxMmskjekEqMVPbrr3FU6K9Ep9jJKOl3PO6mBG45zSyx5tAKr/BAgMB AAGjggHzMIIB7zAdBgNVHQ4EFgQUTtzWktTmpGfXnVOis2ykN98zcd8wHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTNDk5NzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqCmBAbTANBgkqhkiG9w0BAQsFAAOCAQEAuR3V KnenGpg7hUqrTZyDKEWxC65AWbPLaBzCgLaiWepEGJXvcgSqbiid+Z5zvzbkgpR0 qLfy7Uh3Rtah+AKQ2GdA2lWFmrmAtPObfK3LPEE7ql4sGnOuB1PW/v10TG4Ic2oW qAoXe2YER4nQA9RcRJBMRfsSO5+TP0cC+QcSOOuDDE70YUgYcl+CeS5iPhFP5nCh g3O/HjfnIJ8BUuc1S/MrA+jtv6Z2a/sAThL88+f2FEhyAEiR6xbtVE6QO6Ll8oxy qij7lTaFFyKEAXkoNlxTmZK8wYuKV4cftquRFC70f2EWL7oxNPY2pxYYSPrcm8gJ 6G4jzmxn9Dr6zDBhbw== -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:55 2024 by rpki-client on console-ams.rpki-client.org