$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS60391.roa File: AS60391.roa (raw, json) Hash identifier: lHND2m8znuGguXGlEvBi0nS/0Y8ERlx4Ht0Kzyjm+7E= Subject key identifier: 4A:76:2A:A0:69:73:A0:F4:3F:90:1B:A4:69:87:76:67:76:83:D6:C5 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 6C8E4833571A7712C6F3E1741300976A5DB03E92 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS60391.roa Signing time: Sun 06 Oct 2024 04:45:10 +0000 ROA not before: Sun 06 Oct 2024 04:40:10 +0000 ROA not after: Sun 05 Oct 2025 04:45:10 +0000 asID: 60391 IP address blocks: 2a0a:6040:9e00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:8e:48:33:57:1a:77:12:c6:f3:e1:74:13:00:97:6a:5d:b0:3e:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 6 04:40:10 2024 GMT Not After : Oct 5 04:45:10 2025 GMT Subject: CN=4A762AA06973A0F43F901BA4698776677683D6C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:91:0e:68:fc:82:0c:26:6a:64:21:16:e8:86: 84:10:b6:09:60:9e:40:4a:d3:8d:2e:a2:42:3d:c1: 2d:91:e2:61:ba:1c:92:f6:96:ed:53:85:74:33:c0: 09:d7:22:ec:80:d6:2e:12:c8:60:c5:a9:0c:9a:35: ce:cd:7d:c4:06:04:1b:7d:c6:7e:00:57:6a:b5:13: 6b:fc:4b:58:e0:ff:7e:f0:af:bf:3e:c8:0f:62:a8: b2:d1:ca:08:b2:fc:3f:7f:9f:52:c2:0f:6c:4b:ad: c8:a7:e1:eb:de:2a:0d:aa:89:18:78:a5:10:3b:7a: e0:a6:dd:95:6c:ee:bd:72:dd:80:85:e3:5c:a2:cb: af:15:02:4e:6a:ac:72:86:ab:cc:c8:fb:f1:3a:69: 4a:bd:5f:cd:9b:b4:a3:6d:1a:d4:20:2d:6e:25:44: 11:51:1b:13:8a:43:1f:92:37:00:3e:b4:06:b8:4c: 2e:ac:59:86:66:2c:6b:37:a8:2d:d1:27:c3:63:0d: c9:03:69:0a:0d:19:ff:bf:90:91:18:fb:77:84:a8: 80:41:36:f7:07:aa:0f:97:7e:43:58:2b:c6:02:de: a7:ba:e9:40:1f:25:ce:f2:81:34:ad:e9:2c:a5:e5: 18:96:f1:54:d7:8e:29:48:e3:3d:d6:9f:94:ed:d8: 38:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:76:2A:A0:69:73:A0:F4:3F:90:1B:A4:69:87:76:67:76:83:D6:C5 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS60391.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:9e00::/40 Signature Algorithm: sha256WithRSAEncryption 8e:1a:31:31:dc:33:8b:a0:c6:42:c6:3a:cc:8e:9d:08:ef:48: c7:8b:1a:50:cc:75:a1:ed:2b:a6:7d:26:ff:3d:45:cf:d1:cc: 8e:98:ea:ee:d8:b8:d3:7c:82:ef:9e:34:ee:05:4d:cc:cf:a8: 34:34:cb:60:53:66:c4:bf:b5:32:d1:a0:ec:05:6f:a2:55:de: 4e:f1:ed:7f:60:0c:9e:ab:53:85:4e:78:5d:94:d1:c0:04:7d: 6f:cb:a7:18:56:d2:38:4e:38:a7:ab:a8:41:79:20:a8:68:9e: d7:e1:e3:ef:af:1a:bb:74:67:b6:f5:5e:69:02:9d:40:54:70: 7a:fe:c4:aa:59:b3:ad:17:32:7d:f0:f2:d8:1e:fe:2f:f3:a0: 1d:2e:4c:f8:15:95:a9:4f:18:37:52:12:7d:47:5d:b3:d8:6c: 9b:54:2b:61:e8:25:e1:32:8e:fc:af:40:c5:89:de:8b:50:2e: 54:de:dd:c9:5d:3b:a0:f0:bb:d6:b9:2e:81:72:db:2d:f8:2c: 49:ed:fd:c6:72:7c:0d:a5:fe:ce:f0:f6:25:8b:15:52:ae:77: 87:81:d3:11:45:d5:b0:14:92:83:23:ea:72:92:84:d8:2e:c4: db:aa:ac:fc:2b:2d:aa:c2:ee:0f:56:95:77:b6:22:b9:20:eb: 2c:0c:9f:5f -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUbI5IM1cadxLG8+F0EwCXal2wPpIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEwMDYwNDQwMTBaFw0yNTEwMDUwNDQ1MTBaMDMxMTAvBgNV BAMTKDRBNzYyQUEwNjk3M0EwRjQzRjkwMUJBNDY5ODc3NjY3NzY4M0Q2QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmkQ5o/IIMJmpkIRbohoQQtglg nkBK040uokI9wS2R4mG6HJL2lu1ThXQzwAnXIuyA1i4SyGDFqQyaNc7NfcQGBBt9 xn4AV2q1E2v8S1jg/37wr78+yA9iqLLRygiy/D9/n1LCD2xLrcin4eveKg2qiRh4 pRA7euCm3ZVs7r1y3YCF41yiy68VAk5qrHKGq8zI+/E6aUq9X82btKNtGtQgLW4l RBFRGxOKQx+SNwA+tAa4TC6sWYZmLGs3qC3RJ8NjDckDaQoNGf+/kJEY+3eEqIBB NvcHqg+XfkNYK8YC3qe66UAfJc7ygTSt6Syl5RiW8VTXjilI4z3Wn5Tt2Dh5AgMB AAGjggHzMIIB7zAdBgNVHQ4EFgQUSnYqoGlzoPQ/kBukaYd2Z3aD1sUwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTNjAzOTEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqCmBAnjANBgkqhkiG9w0BAQsFAAOCAQEAjhox Mdwzi6DGQsY6zI6dCO9Ix4saUMx1oe0rpn0m/z1Fz9HMjpjq7ti403yC75407gVN zM+oNDTLYFNmxL+1MtGg7AVvolXeTvHtf2AMnqtThU54XZTRwAR9b8unGFbSOE44 p6uoQXkgqGie1+Hj768au3RntvVeaQKdQFRwev7EqlmzrRcyffDy2B7+L/OgHS5M +BWVqU8YN1ISfUdds9hsm1QrYegl4TKO/K9AxYnei1AuVN7dyV07oPC71rkugXLb LfgsSe39xnJ8DaX+zvD2JYsVUq53h4HTEUXVsBSSgyPqcpKE2C7E26qs/CstqsLu D1aVd7YiuSDrLAyfXw== -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:55 2024 by rpki-client on console-ams.rpki-client.org