$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer File: 3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer (raw, json) Hash identifier: 3kjs2QeEi4YDrObc7wx9KfUSgIzTOdGcajniguySsPQ= Subject key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 63AAF22B0A772149ACAE84EB3431F4709BD55698 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Manifest: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft caRepository: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/ Notify URL: https://rpki-01.pdxnet.uk/rrdp/notification.xml Certificate not before: Tue 11 Mar 2025 23:38:50 +0000 Certificate not after: Tue 10 Mar 2026 23:43:50 +0000 Subordinate resources: IP: 2a05:dfc1:400::/39 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 04:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:aa:f2:2b:0a:77:21:49:ac:ae:84:eb:34:31:f4:70:9b:d5:56:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Mar 11 23:38:50 2025 GMT Not After : Mar 10 23:43:50 2026 GMT Subject: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d1:4e:37:ef:d5:75:b5:b0:2c:3a:97:15:a3: 30:69:66:34:86:98:c4:46:58:54:3d:2d:94:46:3e: 9c:1d:4b:51:45:15:45:76:ac:72:46:c5:8d:66:a1: 41:71:6f:ff:19:37:36:40:1d:51:9e:f3:56:15:49: c6:aa:dd:ad:68:dd:61:13:e0:e7:21:ea:50:6d:60: 4b:f5:e6:ad:45:ac:29:14:99:cb:e3:d9:d6:f1:aa: ff:bf:90:3e:a8:ac:5d:44:1d:d8:75:b9:22:18:47: 9e:8c:00:d8:fe:95:96:65:82:15:fd:21:0f:8d:14: 79:b7:d7:31:3f:10:20:87:ff:64:87:20:e3:5f:f5: 64:e7:a9:f1:7d:7a:58:2b:cf:d0:df:01:82:7b:98: 5d:58:7b:36:37:3b:18:5d:1b:2e:51:81:0b:de:b2: 74:c2:d7:96:04:76:79:72:df:78:fc:47:6d:33:42: 2e:d6:50:f5:e9:f9:cd:b6:ae:fb:d3:f5:b7:4d:8d: 7b:8b:c4:4a:5c:12:28:2e:fc:fd:dc:a0:aa:79:00: b3:c5:49:ce:e5:e2:e0:79:ba:da:5d:93:38:9c:4f: 8f:ce:c6:66:db:ee:4b:49:38:56:e6:df:69:56:69: 82:b9:43:fa:39:27:07:8b:04:c0:f9:eb:9e:40:a2: 5c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: CA Repository - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/ RPKI Manifest - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft RPKI Notify - URI:https://rpki-01.pdxnet.uk/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:400::/39 Signature Algorithm: sha256WithRSAEncryption bb:e8:e3:6a:f1:d1:58:3b:73:db:b6:50:a7:fd:fc:e8:ab:d9: b1:35:dc:67:23:21:01:41:f2:95:02:6a:f9:fa:8f:1c:87:87: 61:d0:9f:a5:4d:b8:90:07:0d:dc:0e:78:7c:ed:d3:84:bc:ac: b2:d7:9e:e1:e1:97:7b:54:61:2c:f8:c4:6e:64:99:7d:88:48: 8b:14:49:56:3b:c4:87:3d:d2:3e:11:4a:63:6e:11:52:fa:c9: 99:f5:93:8b:a9:19:18:f0:6c:2d:a8:a5:04:a3:bc:e4:91:d9: b3:b4:83:15:80:d4:1e:cc:a5:54:18:b9:0d:4c:a7:a0:ce:72: dd:de:8d:0d:2f:d5:b9:be:cc:eb:ed:08:9f:64:60:95:00:73: 77:76:6f:fe:c7:15:a4:72:f3:a1:28:8e:c5:4b:4e:d5:eb:5f: 81:35:a9:17:e5:35:47:96:84:de:6d:32:52:c2:be:d5:cb:de: 70:6a:0c:22:b9:f3:50:cd:87:e4:ff:4d:3a:66:50:8e:c1:a3: ed:40:d0:21:af:26:ce:ff:a1:22:7c:d2:b5:4a:b0:f7:f2:79: 8d:63:a2:cb:f2:75:24:3f:a8:cd:c7:ab:2c:52:ce:c0:8a:38: 1c:42:c6:90:81:5f:3f:62:fc:ff:5a:35:43:3e:a0:36:3a:a1: e4:08:c8:d0 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgIUY6ryKwp3IUmsroTrNDH0cJvVVpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNTAzMTEyMzM4NTBaFw0yNjAzMTAyMzQzNTBaMDMxMTAvBgNV BAMTKDNDNUZFOUQ2QThGREVCQkNEOEVGQkQ0MDI4MEIyODdBMUNEQjJBNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD0U4379V1tbAsOpcVozBpZjSG mMRGWFQ9LZRGPpwdS1FFFUV2rHJGxY1moUFxb/8ZNzZAHVGe81YVScaq3a1o3WET 4Och6lBtYEv15q1FrCkUmcvj2dbxqv+/kD6orF1EHdh1uSIYR56MANj+lZZlghX9 IQ+NFHm31zE/ECCH/2SHIONf9WTnqfF9elgrz9DfAYJ7mF1YezY3OxhdGy5RgQve snTC15YEdnly33j8R20zQi7WUPXp+c22rvvT9bdNjXuLxEpcEigu/P3coKp5ALPF Sc7l4uB5utpdkzicT4/Oxmbb7ktJOFbm32lWaYK5Q/o5JweLBMD5655AolxPAgMB AAGjggKjMIICnzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ8X+nWqP3rvNjv vUAoCyh6HNsqVjAfBgNVHSMEGDAWgBQONX3aBLgQdiYST1LPwkObdtha+TAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvMC8wRTM1N0REQTA0QjgxMDc2 MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi8wRTM1N0REQTA0 QjgxMDc2MjYxMjRGNTJDRkMyNDM5Qjc2RDg1QUY5LmNlcjCB9wYIKwYBBQUHAQsE geowgecwPQYIKwYBBQUHMAWGMXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVw by9wYXJhZG94bmV0d29ya3MvMS8waQYIKwYBBQUHMAqGXXJzeW5jOi8vcnBraS0w MS5wZHhuZXQudWsvcmVwby9wYXJhZG94bmV0d29ya3MvMS8zQzVGRTlENkE4RkRF QkJDRDhFRkJENDAyODBCMjg3QTFDREIyQTU2Lm1mdDA7BggrBgEFBQcwDYYvaHR0 cHM6Ly9ycGtpLTAxLnBkeG5ldC51ay9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw CAMGASoF38EEMA0GCSqGSIb3DQEBCwUAA4IBAQC76ONq8dFYO3PbtlCn/fzoq9mx NdxnIyEBQfKVAmr5+o8ch4dh0J+lTbiQBw3cDnh87dOEvKyy157h4Zd7VGEs+MRu ZJl9iEiLFElWO8SHPdI+EUpjbhFS+smZ9ZOLqRkY8GwtqKUEo7zkkdmztIMVgNQe zKVUGLkNTKegznLd3o0NL9W5vszr7QifZGCVAHN3dm/+xxWkcvOhKI7FS07V61+B NakX5TVHloTebTJSwr7Vy95wagwiufNQzYfk/006ZlCOwaPtQNAhrybO/6EifNK1 SrD38nmNY6LL8nUkP6jNx6ssUs7AijgcQsaQgV8/Yvz/WjVDPqA2OqHkCMjQ -----END CERTIFICATE-----Generated at Tue May 6 11:31:37 2025 by rpki-client