$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer File: A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer (raw, json) Hash identifier: 3R9N9tC6HRX1JFzd6OKvL4c7Vv647hSgbWIuV+uipnw= Subject key identifier: A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 20638DA55A71BA605F6E9152D1BF96F4E1631996 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 10 Jan 2025 21:11:55 +0000 Certificate not after: Fri 09 Jan 2026 21:16:55 +0000 Subordinate resources: IP: 2a05:dfc1:c00::/40 IP: 2a05:dfc1:9300::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 04:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:63:8d:a5:5a:71:ba:60:5f:6e:91:52:d1:bf:96:f4:e1:63:19:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Jan 10 21:11:55 2025 GMT Not After : Jan 9 21:16:55 2026 GMT Subject: CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:16:56:85:56:24:de:6a:14:a3:6b:3d:a5:18: 7a:f4:54:f3:0c:0e:73:0e:45:ba:d2:e4:f7:23:70: 03:38:9f:ea:e2:1a:8b:3c:41:c6:d2:ed:29:b4:28: 0e:e3:2e:52:98:1d:6e:2a:20:92:91:46:9b:f2:42: e4:1c:bf:0d:05:4a:94:86:4a:14:ef:63:b3:c5:98: 13:bc:87:3b:23:81:9a:de:9c:e5:b6:fc:64:fc:b7: 3d:a4:aa:0c:4a:e3:a0:fe:f7:9e:f3:d2:c7:af:2e: b5:60:29:a3:46:3c:cd:aa:6a:47:87:18:ed:e3:c5: 5c:c6:7d:38:74:d3:2c:94:7d:81:f5:5a:1e:0a:1b: 90:12:13:61:62:14:75:16:a7:86:7b:1b:82:5f:29: 2d:3a:8c:b0:6a:f6:ec:ee:77:fa:9e:4e:28:44:6d: 0b:0c:d2:55:1f:a5:a2:33:6e:d2:d9:13:27:b5:b8: b9:75:ac:8a:43:39:af:a3:ce:2b:83:45:e1:0c:90: 9d:29:d2:e4:90:f1:e3:7e:91:98:1e:ad:c4:62:13: b2:94:9a:1b:f7:c4:b3:63:be:e9:07:20:28:29:67: f1:11:86:90:e8:ca:77:a8:77:6c:54:b8:0d:07:1d: f3:bc:89:a0:96:c4:cf:20:c0:cb:54:1d:e9:97:90: b3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:c00::/40 2a05:dfc1:9300::/40 Signature Algorithm: sha256WithRSAEncryption 87:77:66:59:7a:0d:d9:3f:6a:bb:db:11:ed:01:d7:b8:ea:d7: 38:d5:24:90:df:7e:1a:37:f1:ce:89:4b:f7:f7:32:1a:df:ab: e6:4b:68:41:f8:63:96:a2:83:52:24:e3:28:c5:ba:2c:03:50: 2b:8e:74:c9:0c:b5:9a:eb:ad:e4:9c:90:23:33:c8:80:6e:cc: 93:01:9c:d4:20:3f:b0:94:a7:ba:99:33:a6:55:d7:7d:31:2f: b4:39:3e:9b:f4:b1:51:8d:ea:c5:ca:50:a6:74:79:4e:f0:ca: 37:db:3b:25:71:2a:4c:f1:3b:ad:88:c4:bf:7d:1d:2e:62:a2: f5:34:ca:06:dd:c9:3e:c9:3d:70:f7:4a:74:a7:b5:81:7a:43: f0:61:ba:4c:5f:5d:c2:44:2e:76:5b:1d:0d:77:ed:e3:99:7c: b6:6f:a1:e7:06:26:b3:98:2f:96:bf:19:6c:b1:c1:1a:6b:ed: d4:b1:46:c2:40:6e:46:85:9a:6b:45:d4:51:c9:2e:62:3b:55: 25:23:28:aa:32:16:ab:ab:83:76:2d:b4:34:77:97:70:1e:e5: e6:de:ca:d5:70:35:b4:77:80:b8:39:56:cc:e3:35:96:ef:a1: d6:9e:9d:6d:26:64:42:a5:1a:1b:ec:16:8a:fa:63:14:8c:f1: 3e:c9:47:e1 -----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgIUIGONpVpxumBfbpFS0b+W9OFjGZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNTAxMTAyMTExNTVaFw0yNjAxMDkyMTE2NTVaMDMxMTAvBgNV BAMTKEEwQkRDRDRDRUYwMkI5QUEzQ0JEMEE4Mzc2NjY3MTYzOTcxOThCRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaFlaFViTeahSjaz2lGHr0VPMM DnMORbrS5PcjcAM4n+riGos8QcbS7Sm0KA7jLlKYHW4qIJKRRpvyQuQcvw0FSpSG ShTvY7PFmBO8hzsjgZrenOW2/GT8tz2kqgxK46D+957z0sevLrVgKaNGPM2qakeH GO3jxVzGfTh00yyUfYH1Wh4KG5ASE2FiFHUWp4Z7G4JfKS06jLBq9uzud/qeTihE bQsM0lUfpaIzbtLZEye1uLl1rIpDOa+jziuDReEMkJ0p0uSQ8eN+kZgercRiE7KU mhv3xLNjvukHICgpZ/ERhpDoyneod2xUuA0HHfO8iaCWxM8gwMtUHemXkLPrAgMB AAGjggL0MIIC8DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSgvc1M7wK5qjy9 CoN2ZnFjlxmL/TAfBgNVHSMEGDAWgBQONX3aBLgQdiYST1LPwkObdtha+TAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvMC8wRTM1N0REQTA0QjgxMDc2 MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi8wRTM1N0REQTA0 QjgxMDc2MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNlcjCCAT8GCCsGAQUFBwEL BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZh M2U5MjQzLzEvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS8yOGNkNjIyNC1hM2IwLTQ2OGUtYWEzNy04MmNh NmEzZTkyNDMvMS9BMEJEQ0Q0Q0VGMDJCOUFBM0NCRDBBODM3NjY2NzE2Mzk3MTk4 QkZELm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw KQYIKwYBBQUHAQcBAf8EGjAYMBYEAgACMBADBgAqBd/BDAMGACoF38GTMA0GCSqG SIb3DQEBCwUAA4IBAQCHd2ZZeg3ZP2q72xHtAde46tc41SSQ334aN/HOiUv39zIa 36vmS2hB+GOWooNSJOMoxbosA1ArjnTJDLWa663knJAjM8iAbsyTAZzUID+wlKe6 mTOmVdd9MS+0OT6b9LFRjerFylCmdHlO8Mo32zslcSpM8TutiMS/fR0uYqL1NMoG 3ck+yT1w90p0p7WBekPwYbpMX13CRC52Wx0Nd+3jmXy2b6HnBiazmC+WvxlsscEa a+3UsUbCQG5GhZprRdRRyS5iO1UlIyiqMharq4N2LbQ0d5dwHuXm3srVcDW0d4C4 OVbM4zWW76HWnp1tJmRCpRob7BaK+mMUjPE+yUfh -----END CERTIFICATE-----Generated at Mon Apr 28 13:15:08 2025 by rpki-client