$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS212271.roa File: AS212271.roa (raw, json) Hash identifier: p3J9c28lbxL6hZT/ZHRtNN0X/tPkLfGqezxRzBrCXak= Subject key identifier: 80:01:11:B9:B1:DF:E8:D7:39:1D:A4:73:8C:48:3F:DC:52:BD:D3:2E Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 37DE48E645EF570A10F470FD3E9F19FF46AD054C Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS212271.roa Signing time: Mon 09 Dec 2024 23:45:36 +0000 ROA not before: Mon 09 Dec 2024 23:40:36 +0000 ROA not after: Mon 08 Dec 2025 23:45:36 +0000 asID: 212271 IP address blocks: 2a05:dfc1:3c00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 04:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:de:48:e6:45:ef:57:0a:10:f4:70:fd:3e:9f:19:ff:46:ad:05:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Dec 9 23:40:36 2024 GMT Not After : Dec 8 23:45:36 2025 GMT Subject: CN=800111B9B1DFE8D7391DA4738C483FDC52BDD32E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d9:0a:b3:84:08:69:0f:c3:62:d9:12:ad:61: e3:f9:d4:de:e7:9b:ab:29:17:57:c9:81:42:c2:8e: 65:8b:67:8c:51:02:27:7a:9e:02:06:38:09:54:d2: c8:7e:bb:dd:d1:50:92:44:48:8c:af:4b:01:60:63: 49:51:10:c5:45:1f:ac:7a:df:58:2a:e2:97:b6:8d: e2:c7:d6:a3:8c:71:48:17:93:b3:dc:bf:f4:c4:b6: d4:8f:37:c8:27:4a:2e:65:08:63:38:70:b0:31:fe: 4f:1b:f8:0e:40:78:4d:be:ac:5d:ad:e3:b6:5f:21: 3e:7b:af:66:bf:19:54:c9:34:cf:02:7b:3a:94:9a: 79:8a:99:f8:7b:95:fc:da:f1:cd:85:22:1a:6c:e4: eb:27:63:45:c8:83:d6:4f:d0:da:86:70:7f:14:0d: 29:4a:87:bf:89:92:e5:f3:35:f7:53:25:d8:10:48: 3b:4f:c9:10:8d:90:d1:36:df:1f:37:b2:8c:a9:53: 96:f9:9f:3c:72:46:9f:b6:12:c8:6d:56:4a:e8:15: c9:d9:72:02:26:c3:66:93:a2:d1:19:0d:97:89:33: f4:e2:e5:ff:5d:c0:73:63:83:b1:f4:6b:ad:4a:9a: 6d:60:cf:bd:b9:3b:31:c6:81:12:96:d3:74:f0:0a: 7d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:01:11:B9:B1:DF:E8:D7:39:1D:A4:73:8C:48:3F:DC:52:BD:D3:2E X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS212271.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:3c00::/40 Signature Algorithm: sha256WithRSAEncryption 09:c1:d7:ea:2c:55:19:5f:56:51:2a:8f:a3:28:e0:a2:e7:26: 17:03:da:43:3a:60:6e:42:b5:f5:aa:f3:2f:ba:35:0c:b8:7c: 4f:3a:5b:30:36:f9:95:ff:10:25:9c:47:c7:0d:a8:f1:07:10: 32:7a:7e:53:de:fc:dd:9d:f4:e0:b5:b8:2d:d8:34:9d:a4:be: 2e:74:6f:76:95:84:88:41:71:d5:b2:9c:91:d4:27:b6:5c:fd: 1c:46:e4:7d:52:6c:dc:69:47:4b:58:ee:8f:8e:78:da:d4:a3: 84:b8:b4:de:f8:f8:ca:41:98:39:ac:18:b2:68:58:bc:fc:87: 38:6a:bc:27:f8:10:ba:be:5d:8f:c3:d1:2d:c3:1f:fe:3c:4c: 10:9e:7c:14:40:90:1d:38:dd:9b:12:24:e8:1d:97:d6:30:b4: 3c:cd:1a:e7:46:be:cc:6c:a6:88:d7:76:a3:86:53:63:98:41: 47:8d:e1:48:2f:fd:2b:39:1f:a9:ae:a5:6b:a1:4e:07:72:0d: 8e:85:a5:1f:56:44:7c:90:a5:28:3d:3b:5a:90:3b:73:b6:f7: 91:93:4d:38:d6:8c:0d:ab:8d:f6:7f:7e:0b:71:63:3b:58:0d: 92:8f:88:ec:5d:90:9d:11:ab:39:cd:4e:a5:2d:76:bc:de:1e: 83:d6:ee:32 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUN95I5kXvVwoQ9HD9Pp8Z/0atBUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEyMDkyMzQwMzZaFw0yNTEyMDgyMzQ1MzZaMDMxMTAvBgNV BAMTKDgwMDExMUI5QjFERkU4RDczOTFEQTQ3MzhDNDgzRkRDNTJCREQzMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr2QqzhAhpD8Ni2RKtYeP51N7n m6spF1fJgULCjmWLZ4xRAid6ngIGOAlU0sh+u93RUJJESIyvSwFgY0lREMVFH6x6 31gq4pe2jeLH1qOMcUgXk7Pcv/TEttSPN8gnSi5lCGM4cLAx/k8b+A5AeE2+rF2t 47ZfIT57r2a/GVTJNM8CezqUmnmKmfh7lfza8c2FIhps5OsnY0XIg9ZP0NqGcH8U DSlKh7+JkuXzNfdTJdgQSDtPyRCNkNE23x83soypU5b5nzxyRp+2EshtVkroFcnZ cgImw2aTotEZDZeJM/Ti5f9dwHNjg7H0a61Kmm1gz725OzHGgRKW03TwCn13AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUgAERubHf6Nc5HaRzjEg/3FK90y4wHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjEyMjcxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwTwwDQYJKoZIhvcNAQELBQADggEBAAnB 1+osVRlfVlEqj6Mo4KLnJhcD2kM6YG5CtfWq8y+6NQy4fE86WzA2+ZX/ECWcR8cN qPEHEDJ6flPe/N2d9OC1uC3YNJ2kvi50b3aVhIhBcdWynJHUJ7Zc/RxG5H1SbNxp R0tY7o+OeNrUo4S4tN74+MpBmDmsGLJoWLz8hzhqvCf4ELq+XY/D0S3DH/48TBCe fBRAkB043ZsSJOgdl9YwtDzNGudGvsxspojXdqOGU2OYQUeN4Ugv/Ss5H6mupWuh TgdyDY6FpR9WRHyQpSg9O1qQO3O295GTTTjWjA2rjfZ/fgtxYztYDZKPiOxdkJ0R qznNTqUtdrzeHoPW7jI= -----END CERTIFICATE-----Generated at Tue May 6 13:42:25 2025 by rpki-client