$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS205232.roa File: AS205232.roa (raw, json) Hash identifier: K1GKvGxscO5n+0CZf55az8FO0ergWSW/SfsKxitUeXE= Subject key identifier: 45:A8:1B:BC:E1:4F:76:6E:0A:8A:5E:EC:1F:F5:2F:26:D1:61:F3:54 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 4FCF92DC6B2F4CEB3C61C69788C1958474A1CC4D Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS205232.roa Signing time: Sun 06 Oct 2024 04:44:58 +0000 ROA not before: Sun 06 Oct 2024 04:39:58 +0000 ROA not after: Sun 05 Oct 2025 04:44:58 +0000 asID: 205232 IP address blocks: 2a0a:6040:9c00::/40 maxlen: 40 2a0a:6040:a000::/40 maxlen: 48 2a0a:6040:f800::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 11:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:cf:92:dc:6b:2f:4c:eb:3c:61:c6:97:88:c1:95:84:74:a1:cc:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 6 04:39:58 2024 GMT Not After : Oct 5 04:44:58 2025 GMT Subject: CN=45A81BBCE14F766E0A8A5EEC1FF52F26D161F354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:35:7c:6a:12:93:db:21:37:85:6f:78:c8:f6: d5:4e:57:8d:9a:50:e8:da:12:b1:d4:68:c4:05:63: ca:97:b3:37:f5:ef:dd:c6:7f:f8:eb:04:d6:ce:a2: 41:c3:15:cf:e5:d5:37:f4:41:70:bf:ed:28:7d:f9: bf:d3:d6:e7:37:a7:56:d3:b6:e2:34:75:0e:ce:ac: fa:6f:d1:e1:d3:53:6d:12:b1:ad:cb:9b:31:94:7d: 69:80:d5:42:be:31:af:4d:f4:12:56:3f:7b:3c:0f: 6d:8c:6e:7c:fe:b2:13:41:97:14:75:41:84:54:bd: 54:0e:e8:34:45:23:00:a4:85:fd:f7:75:b0:5c:de: b2:08:26:f4:9b:84:cb:2c:42:56:b0:39:f5:e7:4a: ca:61:d9:53:fe:21:5f:9a:80:c4:5c:39:d5:71:8d: 63:db:3b:7a:c0:f2:39:31:86:5c:1b:d3:5c:09:fd: 3b:75:5e:da:22:1d:a7:35:ba:5d:bb:a1:bd:63:1f: fa:84:88:8c:08:c6:68:15:43:8d:5f:60:aa:3b:9f: b2:24:be:b0:dd:45:9c:2b:37:74:00:78:de:ee:3d: 56:b1:1a:83:8e:f3:fd:2f:79:db:be:20:b8:13:98: 34:c4:19:98:ea:b5:18:1f:e4:5a:73:2c:c7:66:70: 64:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A8:1B:BC:E1:4F:76:6E:0A:8A:5E:EC:1F:F5:2F:26:D1:61:F3:54 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS205232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:9c00::/40 2a0a:6040:a000::/40 2a0a:6040:f800::/40 Signature Algorithm: sha256WithRSAEncryption 1e:24:ec:d6:f3:6c:2c:45:94:e5:7f:21:58:8c:31:ad:8b:5c: 92:70:43:73:4d:39:70:7d:d3:93:95:84:3d:b7:e5:06:3e:d1: a1:9f:75:a4:f8:be:f1:13:e3:f9:23:d6:0b:3f:f0:df:5a:1f: a2:3f:ba:5f:bd:ab:84:77:60:f0:bd:66:35:a0:2e:45:8f:93: 7d:42:a1:02:db:89:ef:7f:11:56:dd:c0:32:7e:a6:5a:d7:e7: 16:bb:9d:ac:15:b5:0c:b3:dd:3b:3f:f9:cd:ba:87:6a:9e:2d: ea:17:25:14:1d:6f:84:73:f8:2c:29:69:7d:fd:a9:89:eb:e1: e6:9a:40:78:b1:c7:50:3b:de:7e:f7:39:fa:c4:da:c7:c5:59: b3:97:1a:1a:40:dc:d6:c3:10:70:99:7b:57:aa:f1:bc:d6:07: 5f:fb:ff:dd:15:e3:a2:bd:08:77:95:a7:7c:b3:51:64:30:7f: ba:66:43:75:35:94:02:3b:62:0e:89:43:71:9f:4a:25:61:a1: 2c:6b:74:50:d4:84:d3:82:ea:b9:8e:e1:ce:ea:b9:29:c1:c0: 15:55:c6:6d:b0:ad:b3:34:82:d5:f5:23:7f:c7:85:64:12:72: 70:d5:44:5b:d9:f3:69:73:c0:fd:fe:df:72:14:6c:4a:a1:e2: 36:53:6e:e2 -----BEGIN CERTIFICATE----- MIIE+jCCA+KgAwIBAgIUT8+S3GsvTOs8YcaXiMGVhHShzE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEwMDYwNDM5NThaFw0yNTEwMDUwNDQ0NThaMDMxMTAvBgNV BAMTKDQ1QTgxQkJDRTE0Rjc2NkUwQThBNUVFQzFGRjUyRjI2RDE2MUYzNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzNXxqEpPbITeFb3jI9tVOV42a UOjaErHUaMQFY8qXszf1793Gf/jrBNbOokHDFc/l1Tf0QXC/7Sh9+b/T1uc3p1bT tuI0dQ7OrPpv0eHTU20Ssa3LmzGUfWmA1UK+Ma9N9BJWP3s8D22Mbnz+shNBlxR1 QYRUvVQO6DRFIwCkhf33dbBc3rIIJvSbhMssQlawOfXnSsph2VP+IV+agMRcOdVx jWPbO3rA8jkxhlwb01wJ/Tt1XtoiHac1ul27ob1jH/qEiIwIxmgVQ41fYKo7n7Ik vrDdRZwrN3QAeN7uPVaxGoOO8/0vedu+ILgTmDTEGZjqtRgf5FpzLMdmcGTTAgMB AAGjggIEMIICADAdBgNVHQ4EFgQURagbvOFPdm4Kil7sH/UvJtFh81QwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjA1MjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF BwEHAQH/BCIwIDAeBAIAAjAYAwYAKgpgQJwDBgAqCmBAoAMGACoKYED4MA0GCSqG SIb3DQEBCwUAA4IBAQAeJOzW82wsRZTlfyFYjDGti1yScENzTTlwfdOTlYQ9t+UG PtGhn3Wk+L7xE+P5I9YLP/DfWh+iP7pfvauEd2DwvWY1oC5Fj5N9QqEC24nvfxFW 3cAyfqZa1+cWu52sFbUMs907P/nNuodqni3qFyUUHW+Ec/gsKWl9/amJ6+HmmkB4 scdQO95+9zn6xNrHxVmzlxoaQNzWwxBwmXtXqvG81gdf+//dFeOivQh3lad8s1Fk MH+6ZkN1NZQCO2IOiUNxn0olYaEsa3RQ1ITTguq5juHO6rkpwcAVVcZtsK2zNILV 9SN/x4VkEnJw1URb2fNpc8D9/t9yFGxKoeI2U27i -----END CERTIFICATE-----Generated at Wed May 7 02:02:47 2025 by rpki-client