$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer File: F77F4B82C60F0B0171F0976CDCFADB441829DC83.cer (raw, json) Hash identifier: fbFOYMCvTDqQz+rxcvwwpEwOY0xts3B6jardWgBcMko= Subject key identifier: F7:7F:4B:82:C6:0F:0B:01:71:F0:97:6C:DC:FA:DB:44:18:29:DC:83 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 3895A557075202B1DFB5F9A3F30D142044E4383B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Manifest: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.mft caRepository: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Sun 26 Jan 2025 09:37:33 +0000 Certificate not after: Sun 25 Jan 2026 09:42:33 +0000 Subordinate resources: IP: 2a05:dfc1:1000::/40 IP: 2a0a:6040:4b00::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 07:09:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:95:a5:57:07:52:02:b1:df:b5:f9:a3:f3:0d:14:20:44:e4:38:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Jan 26 09:37:33 2025 GMT Not After : Jan 25 09:42:33 2026 GMT Subject: CN=F77F4B82C60F0B0171F0976CDCFADB441829DC83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fd:9a:2f:3b:8e:2b:28:b5:95:51:ce:e8:94: 4e:0e:7f:c5:f7:e7:fb:82:19:68:9c:ea:1f:03:90: 58:26:a1:e5:9c:2b:7d:9d:6e:a5:41:fe:00:77:fc: 97:9e:f6:0e:82:e2:6b:89:9d:6c:76:99:e1:2b:0e: 24:78:fb:fb:d3:3f:fa:65:c9:2e:9a:5d:0c:7a:3d: a4:84:75:0e:38:06:0a:4a:09:2c:5b:6f:f5:c5:3d: de:f1:b4:48:6d:14:c5:2a:e2:29:ef:d0:9d:72:48: f4:4f:f8:92:66:79:a4:57:46:ac:7a:6e:fd:28:ff: ee:ee:12:3d:0e:a5:b6:3c:93:29:30:b6:89:55:98: 72:cd:b5:29:d5:59:c8:ac:73:87:44:70:0c:24:cd: c6:6a:16:9b:41:04:1e:ab:5b:ee:5d:4d:68:59:8e: 9a:b5:37:b3:60:4a:f4:c9:51:75:47:6d:8f:c8:20: a0:39:c4:02:9a:10:4b:10:7a:59:30:8e:2a:65:b0: 89:59:71:43:fa:c6:25:5d:d4:6a:ff:cc:19:55:b1: e9:dc:e8:d6:da:67:db:0d:7d:dd:7b:7d:c8:0c:96: 93:76:69:98:44:90:a2:79:df:cb:60:50:58:ff:17: 78:67:f5:e0:e2:11:9c:99:c2:0b:4f:a0:c8:ac:f5: 1b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F7:7F:4B:82:C6:0F:0B:01:71:F0:97:6C:DC:FA:DB:44:18:29:DC:83 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/F77F4B82C60F0B0171F0976CDCFADB441829DC83.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:1000::/40 2a0a:6040:4b00::/40 Signature Algorithm: sha256WithRSAEncryption 8f:37:9b:a9:1f:53:51:86:a2:bc:8d:18:54:29:81:93:7c:a8: 35:c5:9c:0f:c4:78:bf:0c:69:74:f6:44:2f:49:b6:37:cc:3f: f8:66:ea:d1:bf:d5:03:be:32:b7:4f:23:e4:37:f9:4b:d1:20: 1f:77:e6:c4:92:6a:47:e3:62:17:6e:18:96:a9:0b:4c:62:e4: 3f:9e:52:6f:13:10:cd:38:df:a0:31:50:5f:4f:98:b0:df:be: 11:74:9c:93:31:57:eb:65:90:47:6c:d8:04:a8:28:d9:a0:fc: 19:23:1b:c6:ab:77:3b:85:d6:7f:c9:32:1f:07:c8:d4:ad:e0: 86:66:cf:4d:d1:18:54:b3:e4:18:da:8b:cd:98:5f:62:22:e7: 0d:1e:ff:65:dc:43:2e:69:22:d6:2b:96:2b:61:6c:90:1f:89: f9:97:fd:1c:37:8b:8a:ea:4a:36:3b:f0:7f:97:79:8e:8a:20: 65:79:78:d0:7a:60:10:6e:02:da:73:17:d2:e4:f0:b3:79:0f: a5:e3:88:72:61:f4:ab:3a:07:8a:fc:9a:64:1e:a7:bb:e7:33: f6:04:33:ed:c3:8a:75:4d:9f:11:58:3a:41:85:84:47:c4:e4: ba:13:c4:58:df:86:00:96:69:cf:ab:e6:11:f8:22:ca:4d:b9: a5:e8:ee:c2 -----BEGIN CERTIFICATE----- MIIFzjCCBLagAwIBAgIUOJWlVwdSArHftfmj8w0UIETkODswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNTAxMjYwOTM3MzNaFw0yNjAxMjUwOTQyMzNaMDMxMTAvBgNV BAMTKEY3N0Y0QjgyQzYwRjBCMDE3MUYwOTc2Q0RDRkFEQjQ0MTgyOURDODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN/ZovO44rKLWVUc7olE4Of8X3 5/uCGWic6h8DkFgmoeWcK32dbqVB/gB3/Jee9g6C4muJnWx2meErDiR4+/vTP/pl yS6aXQx6PaSEdQ44BgpKCSxbb/XFPd7xtEhtFMUq4inv0J1ySPRP+JJmeaRXRqx6 bv0o/+7uEj0OpbY8kykwtolVmHLNtSnVWcisc4dEcAwkzcZqFptBBB6rW+5dTWhZ jpq1N7NgSvTJUXVHbY/IIKA5xAKaEEsQelkwjiplsIlZcUP6xiVd1Gr/zBlVsenc 6NbaZ9sNfd17fcgMlpN2aZhEkKJ538tgUFj/F3hn9eDiEZyZwgtPoMis9RuFAgMB AAGjggLYMIIC1DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT3f0uCxg8LAXHw l2zc+ttEGCncgzAfBgNVHSMEGDAWgBQONX3aBLgQdiYST1LPwkObdtha+TAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvMC8wRTM1N0REQTA0QjgxMDc2 MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi8wRTM1N0REQTA0 QjgxMDc2MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNlcjCCASMGCCsGAQUFBwEL BIIBFTCCAREwVAYIKwYBBQUHMAWGSHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv cmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTBjOWZlZWMxMjQ5ZS8zLzCB gAYIKwYBBQUHMAqGdHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9y eS84YTg0OGFkZTg4ZTM5YmZhMDE4OTBjOWZlZWMxMjQ5ZS8zL0Y3N0Y0QjgyQzYw RjBCMDE3MUYwOTc2Q0RDRkFEQjQ0MTgyOURDODMubWZ0MDYGCCsGAQUFBzANhipo dHRwczovL3JyZHAtcnBzLmFyaW4ubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjApBggrBgEFBQcBBwEB/wQaMBgwFgQCAAIwEAMG ACoF38EQAwYAKgpgQEswDQYJKoZIhvcNAQELBQADggEBAI83m6kfU1GGoryNGFQp gZN8qDXFnA/EeL8MaXT2RC9JtjfMP/hm6tG/1QO+MrdPI+Q3+UvRIB935sSSakfj YhduGJapC0xi5D+eUm8TEM0436AxUF9PmLDfvhF0nJMxV+tlkEds2ASoKNmg/Bkj G8ardzuF1n/JMh8HyNSt4IZmz03RGFSz5Bjai82YX2Ii5w0e/2XcQy5pItYrlith bJAfifmX/Rw3i4rqSjY78H+XeY6KIGV5eNB6YBBuAtpzF9Lk8LN5D6XjiHJh9Ks6 B4r8mmQep7vnM/YEM+3DinVNnxFYOkGFhEfE5LoTxFjfhgCWac+r5hH4IspNuaXo 7sI= -----END CERTIFICATE-----Generated at Sat Apr 26 17:58:22 2025 by rpki-client