$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198804.roa File: AS198804.roa (raw, json) Hash identifier: SM3EccyAKUdmaKHUZHU7jWTZhMTzMvUPF9coHzbE2Ew= Subject key identifier: F8:59:98:BA:FA:50:8A:E5:0F:41:AB:81:50:36:DF:E8:B5:94:85:CF Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 42E76B7CDE8C62EA3A54D01DB227D468C7380725 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198804.roa Signing time: Thu 20 Feb 2025 12:45:52 +0000 ROA not before: Thu 20 Feb 2025 12:40:52 +0000 ROA not after: Thu 19 Feb 2026 12:45:52 +0000 asID: 198804 IP address blocks: 2a05:dfc1:2e00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 02:10:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:e7:6b:7c:de:8c:62:ea:3a:54:d0:1d:b2:27:d4:68:c7:38:07:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Feb 20 12:40:52 2025 GMT Not After : Feb 19 12:45:52 2026 GMT Subject: CN=F85998BAFA508AE50F41AB815036DFE8B59485CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2e:76:d3:e3:5c:26:29:99:b8:3a:50:ea:d0: 0f:4c:95:1d:6f:c4:d1:01:f3:7a:5c:1f:ea:41:a7: 20:3e:e8:8a:3f:34:31:6f:90:41:29:a3:40:31:dd: ae:ba:2d:f0:2d:31:05:df:bd:15:4a:11:9e:9f:d8: d3:a7:fc:09:fe:ba:c3:5b:94:62:a7:ef:9b:ef:04: f1:bf:83:5b:d9:60:80:96:d1:df:25:03:b6:8f:1b: aa:c3:62:ac:db:5a:b1:db:20:cc:3d:84:a9:0f:be: e0:ad:e9:b8:7a:c8:3a:03:3f:5a:2f:25:14:c0:49: 6c:88:e5:72:ab:97:30:3e:3a:8e:bd:2d:84:9a:bc: d5:c9:1a:b5:8a:82:b3:7e:ca:51:91:54:95:50:46: 01:13:06:80:73:1c:6d:be:b0:0e:96:a1:b0:ca:b8: 7b:02:af:9e:0a:2e:32:c7:11:f4:6a:5e:27:c7:51: 42:6f:cb:6c:5f:1e:68:ab:94:3b:1c:68:06:75:a1: c5:02:ee:b1:ed:a8:07:fc:e1:f5:ff:bc:21:3e:8b: 97:d4:78:ae:a1:d5:58:6c:6b:4e:ec:9f:10:9e:94: 22:73:c2:45:00:2f:03:c7:2c:bd:e8:92:88:c9:33: 4e:78:8c:0e:c6:76:46:41:31:b4:bb:e8:a6:48:33: c3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:59:98:BA:FA:50:8A:E5:0F:41:AB:81:50:36:DF:E8:B5:94:85:CF X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198804.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:2e00::/40 Signature Algorithm: sha256WithRSAEncryption c4:b1:b2:04:32:3f:29:89:59:21:e0:b7:8c:ed:de:98:00:4c: 5d:1b:b4:54:9b:ea:d1:ca:a5:3e:b0:9c:b1:0a:c0:f1:88:b6: eb:53:93:3d:73:0b:a5:52:8a:19:13:0e:2c:31:19:0f:21:2a: c3:e3:f3:a1:62:27:cb:40:e7:c9:a4:eb:95:cc:87:1f:11:f5: 54:10:df:45:fc:78:b6:d3:af:bc:fe:4e:b5:c0:4d:c9:48:0b: ef:11:4e:ad:49:d3:e5:db:39:ce:9b:d0:97:9d:3b:7e:1b:b0: c5:f8:f4:a3:e7:aa:af:7b:75:ee:fc:da:3c:66:68:6e:cb:a9: 26:ec:76:8c:71:8e:26:cf:c9:4f:2d:75:ca:c2:62:14:8f:fb: a2:3e:80:f3:ec:2f:28:18:e5:82:e1:12:13:16:64:3e:36:05: 45:fc:2a:72:8d:98:3d:d5:b8:25:4a:b3:c4:96:5e:74:80:2f: 4c:58:59:c7:82:c3:59:79:58:ec:aa:77:19:53:b3:d5:7c:a9: 3b:b2:d6:65:52:1f:a5:a7:ad:8a:3f:41:4c:43:88:eb:af:fe: 48:46:ed:f0:83:fd:27:3a:ae:7c:2f:ef:c4:f9:31:88:3f:e0: fe:31:84:cc:70:1b:5f:fc:7d:77:25:15:c0:b9:91:6b:23:a9: 03:57:03:89 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUQudrfN6MYuo6VNAdsifUaMc4ByUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNTAyMjAxMjQwNTJaFw0yNjAyMTkxMjQ1NTJaMDMxMTAvBgNV BAMTKEY4NTk5OEJBRkE1MDhBRTUwRjQxQUI4MTUwMzZERkU4QjU5NDg1Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2LnbT41wmKZm4OlDq0A9MlR1v xNEB83pcH+pBpyA+6Io/NDFvkEEpo0Ax3a66LfAtMQXfvRVKEZ6f2NOn/An+usNb lGKn75vvBPG/g1vZYICW0d8lA7aPG6rDYqzbWrHbIMw9hKkPvuCt6bh6yDoDP1ov JRTASWyI5XKrlzA+Oo69LYSavNXJGrWKgrN+ylGRVJVQRgETBoBzHG2+sA6WobDK uHsCr54KLjLHEfRqXifHUUJvy2xfHmirlDscaAZ1ocUC7rHtqAf84fX/vCE+i5fU eK6h1Vhsa07snxCelCJzwkUALwPHLL3okojJM054jA7GdkZBMbS76KZIM8M1AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU+FmYuvpQiuUPQauBUDbf6LWUhc8wHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMTk4ODA0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwS4wDQYJKoZIhvcNAQELBQADggEBAMSx sgQyPymJWSHgt4zt3pgATF0btFSb6tHKpT6wnLEKwPGItutTkz1zC6VSihkTDiwx GQ8hKsPj86FiJ8tA58mk65XMhx8R9VQQ30X8eLbTr7z+TrXATclIC+8RTq1J0+Xb Oc6b0JedO34bsMX49KPnqq97de782jxmaG7LqSbsdoxxjibPyU8tdcrCYhSP+6I+ gPPsLygY5YLhEhMWZD42BUX8KnKNmD3VuCVKs8SWXnSAL0xYWceCw1l5WOyqdxlT s9V8qTuy1mVSH6WnrYo/QUxDiOuv/khG7fCD/Sc6rnwv78T5MYg/4P4xhMxwG1/8 fXclFcC5kWsjqQNXA4k= -----END CERTIFICATE-----Generated at Fri Apr 4 17:03:22 2025 by rpki-client