$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS209542.roa File: AS209542.roa (raw, json) Hash identifier: zpjjUtS5nPbN7YaQX5wuhWXnG27O2dU/fOAgCp+PvdI= Subject key identifier: 01:CC:55:FB:31:B7:D5:6B:68:23:1F:9A:BB:58:17:2B:F2:01:1F:47 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 384B5CEC8C3EF3ECDBEF09FD54C03B6C363BADE2 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS209542.roa Signing time: Wed 05 Feb 2025 10:45:50 +0000 ROA not before: Wed 05 Feb 2025 10:40:50 +0000 ROA not after: Wed 04 Feb 2026 10:45:50 +0000 asID: 209542 IP address blocks: 2a05:dfc1:2700::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 07:09:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:4b:5c:ec:8c:3e:f3:ec:db:ef:09:fd:54:c0:3b:6c:36:3b:ad:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Feb 5 10:40:50 2025 GMT Not After : Feb 4 10:45:50 2026 GMT Subject: CN=01CC55FB31B7D56B68231F9ABB58172BF2011F47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a7:6d:b9:63:e8:63:14:c3:52:59:80:96:39: 0a:ad:23:3a:0e:67:d4:68:19:d0:3c:41:c7:cb:7e: d6:aa:72:06:5f:95:f1:a8:26:f5:ba:4e:9a:17:07: ab:e1:3b:ca:9b:f4:2c:23:3c:c6:e1:3e:b6:1c:39: 65:bf:40:b7:74:74:cf:b6:e6:5a:9c:37:f6:34:a1: a2:95:bd:a2:0e:53:d0:9a:c0:67:04:3c:ab:0d:e6: 6d:a9:c6:05:34:cc:6f:d2:78:75:8d:f8:7b:41:01: 0d:8d:29:ac:43:9f:a3:77:32:cb:0c:4a:1e:e9:6a: 0f:a0:df:b6:2a:20:7c:3f:e1:0a:68:d2:4d:77:a9: e7:84:01:05:0a:c8:e4:be:84:5c:6e:cd:d6:2d:94: ae:3a:ce:65:69:e3:ce:ef:3c:a1:66:8b:bf:8d:9e: 28:b8:8f:cd:66:94:7a:b4:17:c8:1a:8c:96:b4:65: a2:30:86:50:65:b4:45:49:17:28:f9:a8:fc:63:0b: d1:99:f8:7b:6b:1f:df:25:fa:f3:06:40:ed:ab:5b: df:76:76:ad:36:74:db:c1:c4:5e:8f:26:e8:5a:5d: 05:2b:3e:3c:54:bd:27:4d:d0:bb:7c:a9:cb:2f:41: bb:e7:c6:0f:98:d4:cb:76:16:52:eb:62:e0:26:27: 46:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:CC:55:FB:31:B7:D5:6B:68:23:1F:9A:BB:58:17:2B:F2:01:1F:47 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS209542.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:2700::/40 Signature Algorithm: sha256WithRSAEncryption 0a:04:d6:39:c8:8a:8a:a6:66:a9:96:13:04:e1:13:17:38:97: 3b:dd:5a:68:78:52:62:a8:bb:c3:8a:c4:6b:ea:24:bc:77:fd: 83:75:4b:83:a8:04:9c:c9:bf:1b:7e:ae:ac:93:58:ca:57:5f: ad:96:48:f5:39:83:d3:f6:fc:e1:07:c0:f5:fd:c4:c2:4d:e7: 40:8e:66:01:ef:a1:d1:c8:ad:da:ea:1b:33:75:9b:e1:bc:02: bc:01:d1:9b:86:72:2c:5a:aa:af:55:c3:10:99:7a:93:71:38: 95:ce:c4:16:27:a9:ba:34:59:53:b0:4c:19:f8:3a:3c:31:df: 02:59:7c:cb:34:9d:64:45:9d:4a:47:b3:80:ba:7d:b7:29:cd: 33:89:c5:98:b9:1b:37:05:7b:49:00:99:39:9a:62:76:1f:3c: 13:3c:ce:32:db:2f:ff:ad:2c:b5:4a:b2:7b:61:15:8b:61:4a: 08:6c:1c:5b:7d:66:9f:29:72:ce:16:c5:59:97:00:52:8e:4c: f2:18:1c:7a:98:16:5a:02:66:3d:46:a7:c4:7f:02:4e:26:83: 6d:c0:d9:fa:70:bd:6f:71:c2:8e:06:ef:a4:02:a8:24:10:3e: da:f5:2f:83:3b:ab:b7:32:2b:7b:cd:d9:ed:88:b7:b2:f1:5f: 73:0f:c8:c0 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUOEtc7Iw+8+zb7wn9VMA7bDY7reIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNTAyMDUxMDQwNTBaFw0yNjAyMDQxMDQ1NTBaMDMxMTAvBgNV BAMTKDAxQ0M1NUZCMzFCN0Q1NkI2ODIzMUY5QUJCNTgxNzJCRjIwMTFGNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDp225Y+hjFMNSWYCWOQqtIzoO Z9RoGdA8QcfLftaqcgZflfGoJvW6TpoXB6vhO8qb9CwjPMbhPrYcOWW/QLd0dM+2 5lqcN/Y0oaKVvaIOU9CawGcEPKsN5m2pxgU0zG/SeHWN+HtBAQ2NKaxDn6N3MssM Sh7pag+g37YqIHw/4Qpo0k13qeeEAQUKyOS+hFxuzdYtlK46zmVp487vPKFmi7+N nii4j81mlHq0F8gajJa0ZaIwhlBltEVJFyj5qPxjC9GZ+HtrH98l+vMGQO2rW992 dq02dNvBxF6PJuhaXQUrPjxUvSdN0Lt8qcsvQbvnxg+Y1Mt2FlLrYuAmJ0aJAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUAcxV+zG31WtoIx+au1gXK/IBH0cwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjA5NTQyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwScwDQYJKoZIhvcNAQELBQADggEBAAoE 1jnIioqmZqmWEwThExc4lzvdWmh4UmKou8OKxGvqJLx3/YN1S4OoBJzJvxt+rqyT WMpXX62WSPU5g9P2/OEHwPX9xMJN50COZgHvodHIrdrqGzN1m+G8ArwB0ZuGcixa qq9VwxCZepNxOJXOxBYnqbo0WVOwTBn4Ojwx3wJZfMs0nWRFnUpHs4C6fbcpzTOJ xZi5GzcFe0kAmTmaYnYfPBM8zjLbL/+tLLVKsnthFYthSghsHFt9Zp8pcs4WxVmX AFKOTPIYHHqYFloCZj1Gp8R/Ak4mg23A2fpwvW9xwo4G76QCqCQQPtr1L4M7q7cy K3vN2e2It7LxX3MPyMA= -----END CERTIFICATE-----Generated at Sun Apr 27 00:27:28 2025 by rpki-client