$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS131640.roa File: AS131640.roa (raw, json) Hash identifier: URf72bqUyrNG+KqwxVgzFl93a45QaqxSmy0mLYRXiFA= Subject key identifier: B3:30:37:DF:4C:50:3E:D0:4E:CA:A2:56:F3:02:2D:22:C9:EA:BA:77 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 08B261F837D3374187140EEA29FD53997115BD77 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS131640.roa Signing time: Tue 10 Dec 2024 00:45:36 +0000 ROA not before: Tue 10 Dec 2024 00:40:36 +0000 ROA not after: Tue 09 Dec 2025 00:45:36 +0000 asID: 131640 IP address blocks: 2a05:dfc1:8b00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 13:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:b2:61:f8:37:d3:37:41:87:14:0e:ea:29:fd:53:99:71:15:bd:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Dec 10 00:40:36 2024 GMT Not After : Dec 9 00:45:36 2025 GMT Subject: CN=B33037DF4C503ED04ECAA256F3022D22C9EABA77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9f:4f:e5:5f:89:ae:90:5b:0c:7f:ec:f2:5d: c7:cd:b6:95:41:96:6f:83:24:ad:95:5f:38:46:68: 2c:f3:cc:b8:05:59:c2:aa:cc:da:e9:c7:c2:35:63: 6e:93:cb:4a:83:3c:0a:09:95:d2:b5:d7:0c:5d:5d: 57:2d:18:6a:91:4b:53:9d:fe:df:f7:02:2b:90:a9: cc:1d:1e:46:6d:31:2a:2c:8e:ba:c8:f3:b3:17:ab: ed:0e:84:3d:d7:30:d5:d9:b9:9d:f1:96:b7:62:9d: 1f:8c:72:44:bf:ee:a7:4b:ee:e5:35:52:95:d8:b1: 1e:51:9d:0f:dc:83:73:e0:81:9b:44:31:43:38:a5: 6c:c4:ab:ef:ec:7b:e0:f6:6e:9d:85:91:50:28:7e: be:c9:60:d2:9c:6e:7f:74:07:48:29:ee:45:b6:2b: a3:af:75:ac:95:d7:60:36:24:fb:81:cf:fa:7f:81: 48:27:4c:f4:ad:87:00:e9:7e:55:36:e1:9a:0e:0c: d0:89:fb:4d:46:34:f0:cc:46:9f:c7:d0:cb:35:cd: 7a:ce:fb:35:15:d5:4b:c4:2d:d3:9b:17:ed:c9:08: 33:42:ff:c2:a1:93:3f:8f:42:50:85:7b:97:54:75: 79:6a:85:4d:2b:8d:76:3b:75:2a:44:d6:ff:02:c6: 8f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:30:37:DF:4C:50:3E:D0:4E:CA:A2:56:F3:02:2D:22:C9:EA:BA:77 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS131640.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8b00::/40 Signature Algorithm: sha256WithRSAEncryption c1:57:df:98:2c:5c:d9:7e:c0:8b:d9:b7:b5:4a:19:3c:7a:52: d2:82:11:f5:d0:fa:52:09:9e:a1:19:3b:7e:01:28:e6:e9:50: f4:46:2d:31:ba:ca:f9:fb:dc:0c:fc:6e:66:b9:8a:47:1a:f2: e1:da:86:16:bc:c6:bf:7b:24:97:08:6e:99:6b:83:0a:49:00: d6:86:de:a6:21:e0:21:b8:5c:8c:a2:03:2e:69:c6:96:78:ca: 6b:99:b0:d4:71:5c:67:8b:a5:a2:37:c0:09:b5:b9:86:77:ba: 9a:79:a9:b2:aa:55:a7:9d:98:42:6b:e2:40:32:ba:ac:1d:8c: e3:16:b0:92:e7:22:8a:81:59:93:1b:7d:11:27:eb:15:fa:a6: 98:6b:6c:bf:92:54:9c:9a:df:d6:ab:59:e2:f2:9f:1d:9b:b4: 9a:a5:3b:d1:5b:d7:2c:b7:40:0b:7a:65:d1:96:3c:0d:4b:9f: df:ea:1f:53:3f:55:d3:98:d5:91:bb:9c:3c:d1:10:e9:da:da: 20:6b:89:c9:ba:2f:bc:df:07:fc:51:6c:fd:b3:9b:e7:6f:4a: 48:e6:4a:75:82:81:03:90:46:02:b8:ee:7d:9a:ef:e8:46:f7: c2:cc:4e:37:c2:f5:d2:45:9a:3b:63:89:1e:c7:c6:02:98:72: cd:df:33:f8 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUCLJh+DfTN0GHFA7qKf1TmXEVvXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEyMTAwMDQwMzZaFw0yNTEyMDkwMDQ1MzZaMDMxMTAvBgNV BAMTKEIzMzAzN0RGNEM1MDNFRDA0RUNBQTI1NkYzMDIyRDIyQzlFQUJBNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9n0/lX4mukFsMf+zyXcfNtpVB lm+DJK2VXzhGaCzzzLgFWcKqzNrpx8I1Y26Ty0qDPAoJldK11wxdXVctGGqRS1Od /t/3AiuQqcwdHkZtMSosjrrI87MXq+0OhD3XMNXZuZ3xlrdinR+MckS/7qdL7uU1 UpXYsR5RnQ/cg3PggZtEMUM4pWzEq+/se+D2bp2FkVAofr7JYNKcbn90B0gp7kW2 K6OvdayV12A2JPuBz/p/gUgnTPSthwDpflU24ZoODNCJ+01GNPDMRp/H0Ms1zXrO +zUV1UvELdObF+3JCDNC/8Khkz+PQlCFe5dUdXlqhU0rjXY7dSpE1v8Cxo+BAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUszA330xQPtBOyqJW8wItIsnquncwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMTMxNjQwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwYswDQYJKoZIhvcNAQELBQADggEBAMFX 35gsXNl+wIvZt7VKGTx6UtKCEfXQ+lIJnqEZO34BKObpUPRGLTG6yvn73Az8bma5 ikca8uHahha8xr97JJcIbplrgwpJANaG3qYh4CG4XIyiAy5pxpZ4ymuZsNRxXGeL paI3wAm1uYZ3upp5qbKqVaedmEJr4kAyuqwdjOMWsJLnIoqBWZMbfREn6xX6pphr bL+SVJya39arWeLynx2btJqlO9Fb1yy3QAt6ZdGWPA1Ln9/qH1M/VdOY1ZG7nDzR EOna2iBricm6L7zfB/xRbP2zm+dvSkjmSnWCgQOQRgK47n2a7+hG98LMTjfC9dJF mjtjiR7HxgKYcs3fM/g= -----END CERTIFICATE-----Generated at Sat Jun 7 23:37:03 2025 by rpki-client