$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS58212.roa File: AS58212.roa (raw, json) Hash identifier: xYHMl0j7eJ99kJpHcgK51Y53TS0yVMU63q7k8BVyEkw= Subject key identifier: 6D:DE:38:2B:43:7A:08:3E:E3:32:93:BE:38:C7:4A:FA:9B:A7:95:BE Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 6DD9A44FF01A4408E0A9851F3B18EAF82A06006A Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS58212.roa Signing time: Wed 27 Nov 2024 10:45:33 +0000 ROA not before: Wed 27 Nov 2024 10:40:33 +0000 ROA not after: Wed 26 Nov 2025 10:45:33 +0000 asID: 58212 IP address blocks: 2a05:dfc1:5800::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 04:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:d9:a4:4f:f0:1a:44:08:e0:a9:85:1f:3b:18:ea:f8:2a:06:00:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 27 10:40:33 2024 GMT Not After : Nov 26 10:45:33 2025 GMT Subject: CN=6DDE382B437A083EE33293BE38C74AFA9BA795BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:58:6c:66:20:1a:52:c3:0b:4a:de:ce:55:55: d7:19:e0:b8:62:78:89:30:69:1f:0d:6e:bd:4a:0f: a1:22:c5:91:04:a4:f0:05:d7:71:c1:d1:7e:89:2c: 1f:5c:9a:49:92:35:7e:ea:4a:ff:ea:b6:0a:df:5b: 5a:8a:1b:8f:54:10:1a:68:12:7c:82:b5:13:0e:b5: 76:2b:5e:2f:00:5d:1f:84:60:fa:f7:f5:0f:70:f8: 38:1c:32:f4:7b:f7:1c:3c:1b:ee:28:fd:a8:83:13: f7:a8:09:9b:42:fb:f7:81:fb:b3:d5:1d:a8:b8:ae: 84:c8:63:d6:ad:00:6c:27:c5:39:e1:84:49:c6:ce: 44:c2:3a:b7:da:de:73:73:8d:d8:23:5f:dc:c1:74: 95:e6:77:1a:59:fb:70:31:39:af:fc:40:7c:2b:46: cd:7b:e3:ca:fc:8b:87:a3:4b:e5:6b:84:99:55:f4: fa:7e:1a:56:9b:b5:78:20:b1:f1:c6:13:96:35:e6: b9:00:50:7d:31:c1:df:5f:36:49:c5:f7:c4:ad:6d: 68:d6:0e:7d:1f:23:1b:6d:b1:5b:e7:2e:83:d4:47: af:af:63:d3:b7:16:8c:d0:02:88:5b:55:14:34:af: fa:de:b0:2c:2d:42:a9:7d:58:11:1b:b7:c3:f7:b1: f5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:DE:38:2B:43:7A:08:3E:E3:32:93:BE:38:C7:4A:FA:9B:A7:95:BE X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS58212.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:5800::/40 Signature Algorithm: sha256WithRSAEncryption 17:e2:7f:b2:c2:98:b8:2c:07:62:28:81:dd:4d:48:6a:32:93: 24:ba:2f:4f:ed:94:ad:3b:45:76:a1:73:69:28:f0:0c:d7:58: 62:1a:42:67:ab:54:34:10:b3:b1:8f:13:59:09:1d:0d:c1:78: b1:5f:bb:4f:6d:7c:99:fb:74:08:6f:8d:25:02:7c:7a:17:ec: 51:98:1e:40:32:3b:f6:50:92:e5:f2:5e:ed:89:a5:5a:f7:b9: 21:7c:d2:45:56:54:2f:9c:5c:08:ed:d6:28:a3:5b:fd:07:cf: 3e:c2:82:44:c2:0f:15:9c:66:7e:4d:e6:8c:99:08:17:d9:0d: df:c7:2c:a4:6f:7b:e6:2f:b3:b1:ac:53:ef:da:71:f3:18:4e: 93:5b:c9:a1:51:68:15:5e:18:b6:53:4d:93:f1:a9:46:23:ef: 13:80:d5:aa:42:45:c8:d6:76:22:25:95:e0:23:29:cc:b6:16: 97:f9:fc:6a:6b:bc:1c:24:fb:9c:61:1f:7d:6e:ac:90:2a:2c: d1:56:6d:dd:f6:f3:8e:ec:2d:c2:81:70:0f:15:1d:99:db:98: 8f:5b:32:60:e9:be:aa:e1:59:50:80:78:b1:42:85:83:2b:d5: c7:37:f4:3c:38:cb:fe:89:1f:6a:b5:47:d7:a0:1d:78:bf:70: 71:57:07:2a -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUbdmkT/AaRAjgqYUfOxjq+CoGAGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDExMjcxMDQwMzNaFw0yNTExMjYxMDQ1MzNaMDMxMTAvBgNV BAMTKDZEREUzODJCNDM3QTA4M0VFMzMyOTNCRTM4Qzc0QUZBOUJBNzk1QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhWGxmIBpSwwtK3s5VVdcZ4Lhi eIkwaR8Nbr1KD6EixZEEpPAF13HB0X6JLB9cmkmSNX7qSv/qtgrfW1qKG49UEBpo EnyCtRMOtXYrXi8AXR+EYPr39Q9w+DgcMvR79xw8G+4o/aiDE/eoCZtC+/eB+7PV Hai4roTIY9atAGwnxTnhhEnGzkTCOrfa3nNzjdgjX9zBdJXmdxpZ+3AxOa/8QHwr Rs1748r8i4ejS+VrhJlV9Pp+GlabtXggsfHGE5Y15rkAUH0xwd9fNknF98StbWjW Dn0fIxttsVvnLoPUR6+vY9O3FozQAohbVRQ0r/resCwtQql9WBEbt8P3sfUhAgMB AAGjggHzMIIB7zAdBgNVHQ4EFgQUbd44K0N6CD7jMpO+OMdK+punlb4wHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTNTgyMTIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqBd/BWDANBgkqhkiG9w0BAQsFAAOCAQEAF+J/ ssKYuCwHYiiB3U1IajKTJLovT+2UrTtFdqFzaSjwDNdYYhpCZ6tUNBCzsY8TWQkd DcF4sV+7T218mft0CG+NJQJ8ehfsUZgeQDI79lCS5fJe7YmlWve5IXzSRVZUL5xc CO3WKKNb/QfPPsKCRMIPFZxmfk3mjJkIF9kN38cspG975i+zsaxT79px8xhOk1vJ oVFoFV4YtlNNk/GpRiPvE4DVqkJFyNZ2IiWV4CMpzLYWl/n8amu8HCT7nGEffW6s kCos0VZt3fbzjuwtwoFwDxUdmduYj1syYOm+quFZUIB4sUKFgyvVxzf0PDjL/okf arVH16AdeL9wcVcHKg== -----END CERTIFICATE-----Generated at Tue May 6 13:42:53 2025 by rpki-client