$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS211562.roa File: AS211562.roa (raw, json) Hash identifier: vPmhPCGa6mKkjESo/qT4wU7P1AzW028L7L75DVvMZ3k= Subject key identifier: 20:35:D7:3E:62:21:C0:B7:10:D1:BB:69:44:3B:90:62:7F:52:04:75 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 16FA96217D45A676E643BCB098D075F8C71B98AF Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS211562.roa Signing time: Mon 23 Dec 2024 23:45:37 +0000 ROA not before: Mon 23 Dec 2024 23:40:37 +0000 ROA not after: Mon 22 Dec 2025 23:45:37 +0000 asID: 211562 IP address blocks: 2a06:9f81:3500::/40 maxlen: 48 2a06:9f81:3600::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 04:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:fa:96:21:7d:45:a6:76:e6:43:bc:b0:98:d0:75:f8:c7:1b:98:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Dec 23 23:40:37 2024 GMT Not After : Dec 22 23:45:37 2025 GMT Subject: CN=2035D73E6221C0B710D1BB69443B90627F520475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b3:ce:38:34:4a:89:40:65:09:24:53:72:e5: 34:e2:2c:96:a4:65:2b:64:32:b8:95:dd:3f:7e:89: 98:d8:72:41:2a:a7:63:ff:b8:27:23:a2:b1:5d:81: 64:4f:17:fe:09:41:ca:c2:20:f7:e9:b5:4a:ae:b9: f6:3c:17:30:ce:53:50:58:d3:01:da:51:54:5e:8a: 53:ef:35:b0:13:69:c4:37:2c:21:14:4b:63:d5:81: f5:4e:cd:4a:de:fa:49:39:62:98:20:26:49:67:b6: aa:d1:7c:1e:07:b9:7f:5c:4b:82:ce:92:2e:22:7f: 60:54:ea:82:ab:93:c0:4e:ac:1a:b5:d0:b7:94:9a: 6b:b1:3e:2c:3c:c5:af:f3:d4:3f:fb:bd:50:e4:98: a6:00:e4:93:14:62:0a:f8:6a:5b:fd:72:b6:00:26: 86:c0:9b:26:87:79:2c:64:8b:1d:83:04:87:dd:80: 2c:b4:30:88:8c:0b:5c:34:18:da:a3:5e:c2:67:6d: 41:f1:30:9e:22:a0:b7:45:43:37:49:e1:a3:e1:6a: 3e:b3:29:9d:51:f5:c0:36:8e:3a:2e:04:9f:8a:7c: 47:a5:73:5f:94:2a:9d:15:31:e4:31:20:c8:2f:ee: fb:39:13:fa:d9:ae:0a:9e:a1:f3:70:15:5b:4d:6d: c5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:35:D7:3E:62:21:C0:B7:10:D1:BB:69:44:3B:90:62:7F:52:04:75 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS211562.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:3500::-2a06:9f81:36ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption af:19:9a:bc:f6:40:da:ae:c6:67:e7:77:2a:fb:43:4c:d9:f2: d0:6b:21:0c:9a:49:00:ad:79:5b:54:37:00:ef:a3:a7:98:4d: 06:2d:95:c7:7f:be:5f:4b:ad:42:1b:2b:36:50:39:94:29:42: a2:a5:48:d0:b3:a0:b1:ee:8b:e4:b4:69:98:4d:48:07:92:92: 43:e4:e3:fe:c8:4f:1c:76:2b:8a:2c:cb:21:0d:80:0a:41:13: ad:da:0e:1b:16:ac:d7:16:3c:2c:4b:53:ac:e8:f2:03:d9:66: ba:c7:db:10:f1:49:e7:7b:fb:59:16:71:9a:4a:d5:41:87:2c: 46:fd:a5:78:2e:16:f0:61:26:43:b6:3a:59:62:1f:91:13:43: 50:52:c9:6b:21:88:95:fe:0d:cf:7d:e2:d3:68:70:b9:f3:fb: b0:12:40:68:22:69:fe:92:4c:a7:98:3c:77:8a:37:f7:a0:39: 17:86:54:8f:23:9a:05:a6:47:46:45:1d:bd:3d:b6:ac:c4:94: 51:7d:f7:04:d4:9f:58:f9:e2:c6:55:69:66:36:74:b5:44:8a: 79:97:ff:59:dd:af:75:57:ae:76:1a:2f:32:f3:9c:49:76:b9: f0:08:d2:5a:e8:1b:ce:be:12:f4:cd:88:3c:3a:37:0a:fb:40: 84:f7:96:18 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUFvqWIX1FpnbmQ7ywmNB1+McbmK8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEyMjMyMzQwMzdaFw0yNTEyMjIyMzQ1MzdaMDMxMTAvBgNV BAMTKDIwMzVENzNFNjIyMUMwQjcxMEQxQkI2OTQ0M0I5MDYyN0Y1MjA0NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCss844NEqJQGUJJFNy5TTiLJak ZStkMriV3T9+iZjYckEqp2P/uCcjorFdgWRPF/4JQcrCIPfptUquufY8FzDOU1BY 0wHaUVReilPvNbATacQ3LCEUS2PVgfVOzUre+kk5YpggJklntqrRfB4HuX9cS4LO ki4if2BU6oKrk8BOrBq10LeUmmuxPiw8xa/z1D/7vVDkmKYA5JMUYgr4alv9crYA JobAmyaHeSxkix2DBIfdgCy0MIiMC1w0GNqjXsJnbUHxMJ4ioLdFQzdJ4aPhaj6z KZ1R9cA2jjouBJ+KfEelc1+UKp0VMeQxIMgv7vs5E/rZrgqeofNwFVtNbcWNAgMB AAGjggH+MIIB+jAdBgNVHQ4EFgQUIDXXPmIhwLcQ0btpRDuQYn9SBHUwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjExNTYyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAAjASMBADBgAqBp+BNQMGACoGn4E2MA0GCSqGSIb3DQEB CwUAA4IBAQCvGZq89kDarsZn53cq+0NM2fLQayEMmkkArXlbVDcA76OnmE0GLZXH f75fS61CGys2UDmUKUKipUjQs6Cx7ovktGmYTUgHkpJD5OP+yE8cdiuKLMshDYAK QROt2g4bFqzXFjwsS1Os6PID2Wa6x9sQ8Unne/tZFnGaStVBhyxG/aV4LhbwYSZD tjpZYh+RE0NQUslrIYiV/g3PfeLTaHC58/uwEkBoImn+kkynmDx3ijf3oDkXhlSP I5oFpkdGRR29PbasxJRRffcE1J9Y+eLGVWlmNnS1RIp5l/9Z3a91V652Gi8y85xJ drnwCNJa6BvOvhL0zYg8OjcK+0CE95YY -----END CERTIFICATE-----Generated at Mon Apr 28 13:15:33 2025 by rpki-client