$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS139311.roa File: AS139311.roa (raw, json) Hash identifier: CmxrBHvKMFUKQhEWuzSFwLolPGnro8K5LuukmuOzkfw= Subject key identifier: 81:BB:9F:24:DC:D8:21:21:36:ED:62:30:A2:BE:9E:EB:C0:A1:F7:C3 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 5B328D91217DE26F6165E6C73CD587B7A439329C Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS139311.roa Signing time: Sat 24 May 2025 13:46:23 +0000 ROA not before: Sat 24 May 2025 13:41:23 +0000 ROA not after: Sat 23 May 2026 13:46:23 +0000 asID: 139311 IP address blocks: 2a06:9f81:5200::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 21:10:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:32:8d:91:21:7d:e2:6f:61:65:e6:c7:3c:d5:87:b7:a4:39:32:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: May 24 13:41:23 2025 GMT Not After : May 23 13:46:23 2026 GMT Subject: CN=81BB9F24DCD8212136ED6230A2BE9EEBC0A1F7C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:40:63:ef:75:65:ef:2f:8a:49:ff:77:81:92: 02:72:da:dd:35:79:0f:18:50:c3:36:6d:a6:af:09: dc:8c:7d:bd:85:de:d8:f9:a9:ed:9c:a1:88:79:c2: d8:b2:59:20:93:6e:09:a5:94:83:de:36:59:79:f3: d3:51:88:7e:21:da:4d:db:fe:2e:5e:9a:9c:5d:62: e9:d6:ec:be:70:cf:4d:67:65:e7:02:d2:6b:35:0b: b4:d1:fc:51:55:3f:99:15:c7:f2:25:d4:e6:05:53: f3:21:1e:86:21:84:ba:77:e1:ab:86:4b:02:0a:1e: d8:bb:8e:94:06:93:c2:fb:af:b9:da:1d:42:ef:b5: eb:f3:a4:fa:44:0c:a8:1a:d8:78:9f:fa:d1:71:dd: e1:a1:d9:04:b2:9d:98:6d:39:96:ac:94:b4:a4:10: 8c:4a:1c:40:bb:6f:f3:c1:31:f5:9a:85:71:10:42: 27:e2:dc:f3:a7:f1:b1:2b:2a:96:54:f4:8c:c6:0d: f8:1c:0c:58:47:ae:4c:38:ca:4e:10:c0:56:fc:24: f2:a2:63:b6:cd:7e:cf:e3:9b:4e:ed:89:ec:01:f3: bd:3d:c4:d3:9e:02:df:d6:6b:08:b2:9b:7c:a9:7b: ce:e0:31:1a:78:f5:88:55:c7:17:97:6c:c1:8e:8c: fd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:BB:9F:24:DC:D8:21:21:36:ED:62:30:A2:BE:9E:EB:C0:A1:F7:C3 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS139311.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:5200::/40 Signature Algorithm: sha256WithRSAEncryption c3:2b:f2:6c:e5:fb:c1:ee:54:8b:a1:e7:fc:0e:78:17:29:0b: 43:c0:03:54:fb:01:f0:dd:4f:f2:69:74:3d:08:c3:a5:21:89: 4a:dc:39:36:32:62:2d:d9:dc:85:27:91:95:80:c1:04:09:09: 43:35:82:65:c7:58:8e:b8:a7:65:14:e5:24:20:74:91:03:91: a4:c3:b9:8a:b1:40:fb:43:1c:d6:e7:23:c1:01:6f:f4:ee:13: 1d:cf:65:90:95:c1:8f:e8:42:ec:14:dd:e4:91:ee:cf:19:80: a3:35:52:82:38:02:09:3f:ad:e6:5f:3a:46:3d:5f:0d:b2:9a: 7d:48:ef:9f:a2:24:4d:dd:b4:5d:89:65:b7:ad:63:22:ce:a8: bf:f1:76:91:a6:00:0a:1c:37:af:80:78:ad:73:d5:a2:f1:5c: 2b:fd:f9:23:0a:27:18:ed:1b:49:fa:23:21:88:72:71:80:e6: 55:80:e3:d0:9d:79:5f:73:e2:e4:37:cc:84:8d:ef:f1:0b:a8: 78:82:f1:d2:8a:c8:6c:62:86:e6:e3:b3:d4:2b:98:14:50:15: 89:58:76:63:0b:bc:0b:43:d9:55:45:d2:07:45:48:63:25:1d: 14:95:e1:36:b2:84:ac:33:7f:8c:cb:ba:d1:12:59:63:4e:86: 39:54:00:16 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUWzKNkSF94m9hZebHPNWHt6Q5MpwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNTA1MjQxMzQxMjNaFw0yNjA1MjMxMzQ2MjNaMDMxMTAvBgNV BAMTKDgxQkI5RjI0RENEODIxMjEzNkVENjIzMEEyQkU5RUVCQzBBMUY3QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9QGPvdWXvL4pJ/3eBkgJy2t01 eQ8YUMM2baavCdyMfb2F3tj5qe2coYh5wtiyWSCTbgmllIPeNll589NRiH4h2k3b /i5empxdYunW7L5wz01nZecC0ms1C7TR/FFVP5kVx/Il1OYFU/MhHoYhhLp34auG SwIKHti7jpQGk8L7r7naHULvtevzpPpEDKga2Hif+tFx3eGh2QSynZhtOZaslLSk EIxKHEC7b/PBMfWahXEQQifi3POn8bErKpZU9IzGDfgcDFhHrkw4yk4QwFb8JPKi Y7bNfs/jm07tiewB8709xNOeAt/Wawiym3ype87gMRp49YhVxxeXbMGOjP2ZAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUgbufJNzYISE27WIwor6e68Ch98MwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMTM5MzExLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgafgVIwDQYJKoZIhvcNAQELBQADggEBAMMr 8mzl+8HuVIuh5/wOeBcpC0PAA1T7AfDdT/JpdD0Iw6UhiUrcOTYyYi3Z3IUnkZWA wQQJCUM1gmXHWI64p2UU5SQgdJEDkaTDuYqxQPtDHNbnI8EBb/TuEx3PZZCVwY/o QuwU3eSR7s8ZgKM1UoI4Agk/reZfOkY9Xw2ymn1I75+iJE3dtF2JZbetYyLOqL/x dpGmAAocN6+AeK1z1aLxXCv9+SMKJxjtG0n6IyGIcnGA5lWA49CdeV9z4uQ3zISN 7/ELqHiC8dKKyGxihubjs9QrmBRQFYlYdmMLvAtD2VVF0gdFSGMlHRSV4TayhKwz f4zLutESWWNOhjlUABY= -----END CERTIFICATE-----Generated at Sat Jun 7 11:29:10 2025 by rpki-client