$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS49975.roa File: AS49975.roa (raw, json) Hash identifier: Tds3vY2gE+TolJRQsVhyD6KCnd+SBsBzm2GH0lypthE= Subject key identifier: FB:E2:11:4D:CA:D5:8D:BE:B4:6C:20:EF:8B:2C:41:67:AF:52:BE:88 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 261DBED10A82368FC0B529AD2F4BCDC9278BD5D6 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS49975.roa Signing time: Sun 05 Nov 2023 04:07:03 +0000 ROA not before: Sun 05 Nov 2023 04:02:03 +0000 ROA not after: Sun 03 Nov 2024 04:07:03 +0000 asID: 49975 IP address blocks: 2a0a:6040:6d00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 04 May 2024 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:1d:be:d1:0a:82:36:8f:c0:b5:29:ad:2f:4b:cd:c9:27:8b:d5:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 5 04:02:03 2023 GMT Not After : Nov 3 04:07:03 2024 GMT Subject: CN=FBE2114DCAD58DBEB46C20EF8B2C4167AF52BE88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:20:5b:63:2f:16:96:3c:fe:48:d3:6d:4f:5b: fc:67:4c:c0:bb:0d:ed:b9:60:1d:45:ea:91:92:c5: d5:5d:36:2d:dd:4a:0a:89:5a:3a:d4:48:59:6e:1b: 8d:2e:ac:51:64:9b:34:d0:8e:81:85:8b:cb:c6:b3: 96:b8:66:03:d5:4b:ca:53:7b:3a:e1:5a:9f:a0:d9: 3c:03:5c:f9:bd:99:bb:03:4f:58:bd:4f:9e:db:d4: 23:29:09:c3:63:c1:1e:5b:87:cb:bc:06:9c:02:5f: 88:00:4d:4e:08:37:70:03:ed:6a:62:77:e4:9a:04: 22:62:ff:28:95:f0:d5:5d:81:d0:60:2b:c3:77:ba: 77:0b:cb:4a:50:f3:47:b4:b4:12:50:70:6c:88:ab: 70:8e:62:4e:ad:23:bd:52:5c:55:65:34:31:c4:32: 4a:f8:7c:19:df:45:67:a4:81:cd:03:10:d0:b8:27: 53:5e:e4:54:2e:93:48:89:21:0a:52:9d:e0:a0:7d: 33:df:81:1b:6c:b1:95:9c:e3:03:ef:03:5e:27:e7: 42:ab:3e:29:1c:7f:26:71:81:2b:de:46:7e:a5:0e: 92:00:52:d8:58:df:59:04:8b:97:2e:b7:e9:b9:48: ea:40:1f:6e:07:8c:ac:30:c5:e1:73:e3:fa:81:c5: 7f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E2:11:4D:CA:D5:8D:BE:B4:6C:20:EF:8B:2C:41:67:AF:52:BE:88 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS49975.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:6d00::/40 Signature Algorithm: sha256WithRSAEncryption ac:d6:b1:81:89:da:c7:03:03:11:f2:2d:ae:02:f6:69:ab:f0: 24:45:ab:e8:44:dc:96:f6:98:be:2b:18:08:3b:c3:53:ac:b4: f5:83:fb:2d:20:20:0c:d4:da:9a:43:96:c1:99:d9:f2:35:3f: 6e:cc:18:52:bc:f0:48:08:4f:68:de:1e:c7:31:60:90:68:ac: 67:62:9d:1f:ae:1b:f6:e0:1e:83:6e:53:e2:5a:35:45:1b:96: 67:c6:b2:4f:87:e3:72:14:7e:88:e9:6e:a1:cc:d2:61:37:2a: 84:11:45:a9:b7:d0:4e:49:ca:4c:c0:26:d8:02:e1:87:0a:92: 8a:36:30:55:6f:60:31:24:92:03:dd:da:22:1f:1b:b9:d9:ec: dd:bf:d9:05:54:c0:f1:68:79:40:ce:c3:fa:26:b8:bb:e4:70: 9c:75:97:0d:13:3b:1b:46:06:34:0c:f9:87:40:75:93:cc:27: 90:35:87:3f:32:e1:1b:69:9c:67:a3:b2:04:cb:b2:2a:28:90: a3:6f:82:37:0c:bc:64:3c:a6:a5:08:ac:09:2d:0a:73:ba:20: 40:1e:a3:11:9c:1b:2e:31:f2:85:1a:c7:ed:93:b2:2a:05:c8: 21:bc:c1:b2:a3:f8:86:91:9a:22:bb:12:e8:cf:21:a9:b3:60: 39:8d:d0:98 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUJh2+0QqCNo/AtSmtL0vNySeL1dYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMDUwNDAyMDNaFw0yNDExMDMwNDA3MDNaMDMxMTAvBgNV BAMTKEZCRTIxMTREQ0FENThEQkVCNDZDMjBFRjhCMkM0MTY3QUY1MkJFODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvIFtjLxaWPP5I021PW/xnTMC7 De25YB1F6pGSxdVdNi3dSgqJWjrUSFluG40urFFkmzTQjoGFi8vGs5a4ZgPVS8pT ezrhWp+g2TwDXPm9mbsDT1i9T57b1CMpCcNjwR5bh8u8BpwCX4gATU4IN3AD7Wpi d+SaBCJi/yiV8NVdgdBgK8N3uncLy0pQ80e0tBJQcGyIq3COYk6tI71SXFVlNDHE Mkr4fBnfRWekgc0DENC4J1Ne5FQuk0iJIQpSneCgfTPfgRtssZWc4wPvA14n50Kr PikcfyZxgSveRn6lDpIAUthY31kEi5cut+m5SOpAH24HjKwwxeFz4/qBxX+/AgMB AAGjggHzMIIB7zAdBgNVHQ4EFgQU++IRTcrVjb60bCDviyxBZ69SvogwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTNDk5NzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqCmBAbTANBgkqhkiG9w0BAQsFAAOCAQEArNax gYnaxwMDEfItrgL2aavwJEWr6ETclvaYvisYCDvDU6y09YP7LSAgDNTamkOWwZnZ 8jU/bswYUrzwSAhPaN4exzFgkGisZ2KdH64b9uAeg25T4lo1RRuWZ8ayT4fjchR+ iOluoczSYTcqhBFFqbfQTknKTMAm2ALhhwqSijYwVW9gMSSSA93aIh8budns3b/Z BVTA8Wh5QM7D+ia4u+RwnHWXDRM7G0YGNAz5h0B1k8wnkDWHPzLhG2mcZ6OyBMuy KiiQo2+CNwy8ZDympQisCS0Kc7ogQB6jEZwbLjHyhRrH7ZOyKgXIIbzBsqP4hpGa IrsS6M8hqbNgOY3QmA== -----END CERTIFICATE-----Generated at Fri May 3 17:55:16 2024 by rpki-client on console-ams.rpki-client.org