$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS134478.roa File: AS134478.roa (raw, json) Hash identifier: GTPzkEFIJsRbrT5XwoMP8Zkoekb6GJg8EFAW7RPLm7g= Subject key identifier: C9:02:85:F9:E7:26:73:64:F3:E6:D3:21:8E:3B:E5:DC:70:CC:7C:86 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 01A2463F45C0378F49EEF245B0B5C156439119F0 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS134478.roa Signing time: Fri 04 Jul 2025 06:53:15 +0000 ROA not before: Fri 04 Jul 2025 06:48:15 +0000 ROA not after: Fri 03 Jul 2026 06:53:15 +0000 asID: 134478 IP address blocks: 2a0a:6040:7e00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a2:46:3f:45:c0:37:8f:49:ee:f2:45:b0:b5:c1:56:43:91:19:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:15 2025 GMT Not After : Jul 3 06:53:15 2026 GMT Subject: CN=C90285F9E7267364F3E6D3218E3BE5DC70CC7C86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5b:c2:02:27:dd:10:8f:88:50:f5:ac:66:7c: 3e:e7:25:8c:4f:e9:8d:43:1e:30:cb:18:3a:cc:cc: c7:fe:ae:89:b6:39:1c:e8:38:d6:ef:d6:43:be:50: 4c:f9:28:f1:da:c6:8d:7c:68:21:64:ae:30:bc:69: d5:59:d0:f4:64:77:04:52:c1:df:3a:c3:9e:2b:cf: 80:ab:bb:f1:a7:d5:d7:bf:6c:91:13:14:7e:e2:91: 18:dd:5c:ff:69:9e:cd:b0:6a:66:9f:95:c6:de:c3: 2b:ef:b1:86:ae:ac:99:89:ee:dd:8b:80:29:21:57: 3c:c3:38:46:15:c1:91:e4:ed:2a:97:66:b0:0a:6a: 08:f6:91:91:08:38:c8:89:77:93:e1:f2:69:cf:66: 40:d7:1d:aa:d6:bf:7d:0b:d9:9b:f5:7c:79:f5:d4: 01:db:f7:bb:6d:47:ba:89:8f:dd:e9:a8:24:35:7f: ef:88:b8:d5:29:6c:c0:60:08:71:66:03:aa:22:72: 88:3c:97:e5:9d:c0:95:93:a0:3f:60:db:83:6c:02: 82:b3:7e:1f:3f:09:c0:da:63:c2:b5:4d:4d:b1:14: 21:c2:ab:05:1d:ae:76:5b:70:70:79:6c:d0:c1:db: 82:8e:4e:ca:1d:53:8e:e5:ad:b4:0b:44:07:77:f7: 32:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:02:85:F9:E7:26:73:64:F3:E6:D3:21:8E:3B:E5:DC:70:CC:7C:86 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS134478.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:7e00::/40 Signature Algorithm: sha256WithRSAEncryption 1a:66:42:73:38:28:09:28:71:64:8d:f0:77:d7:07:3b:f3:0f: b2:37:78:6f:71:4c:70:b6:ff:fd:eb:20:65:12:b8:79:99:99: cd:64:aa:16:7b:6e:d3:27:c2:c7:7b:8e:c0:fe:3e:f8:8a:0d: 5a:12:19:3f:6f:07:dd:7f:56:19:d9:f3:fd:d1:87:de:a2:81: dd:00:f6:6d:a6:b1:6b:f7:58:05:bc:98:77:cd:a8:82:96:1c: 90:e8:db:4e:4e:35:14:54:7a:f1:96:0f:34:bc:c1:a0:9f:48: df:08:a8:28:64:86:69:34:95:2a:b6:0c:f0:19:65:b7:3b:af: 66:4c:c2:e9:b3:b5:c0:54:11:db:ec:6a:c0:9d:d7:02:c5:77: 7f:24:43:cb:9b:76:c8:0c:88:d3:b1:a4:7a:dd:1c:fb:ed:28: 90:47:09:c3:5b:0e:50:98:3d:5d:49:a3:4f:75:ba:32:25:fe: bf:1f:b4:ff:48:4c:fa:c8:64:7f:9b:29:9a:3e:17:fa:5c:be: 14:87:e9:51:3a:04:67:31:6b:76:e8:08:60:55:eb:4e:7a:e5: 4e:ac:f8:bf:19:82:32:0f:f8:15:33:50:b5:02:44:a0:36:a3: 18:f4:21:59:9e:51:ef:28:91:4e:b4:af:95:dc:1f:df:7b:b5: b0:72:6d:85 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUAaJGP0XAN49J7vJFsLXBVkORGfAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MTVaFw0yNjA3MDMwNjUzMTVaMDMxMTAvBgNV BAMTKEM5MDI4NUY5RTcyNjczNjRGM0U2RDMyMThFM0JFNURDNzBDQzdDODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiW8ICJ90Qj4hQ9axmfD7nJYxP 6Y1DHjDLGDrMzMf+rom2ORzoONbv1kO+UEz5KPHaxo18aCFkrjC8adVZ0PRkdwRS wd86w54rz4Cru/Gn1de/bJETFH7ikRjdXP9pns2wamaflcbewyvvsYaurJmJ7t2L gCkhVzzDOEYVwZHk7SqXZrAKagj2kZEIOMiJd5Ph8mnPZkDXHarWv30L2Zv1fHn1 1AHb97ttR7qJj93pqCQ1f++IuNUpbMBgCHFmA6oicog8l+WdwJWToD9g24NsAoKz fh8/CcDaY8K1TU2xFCHCqwUdrnZbcHB5bNDB24KOTsodU47lrbQLRAd39zJvAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUyQKF+ecmc2Tz5tMhjjvl3HDMfIYwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMTM0NDc4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQH4wDQYJKoZIhvcNAQELBQADggEBABpm QnM4KAkocWSN8HfXBzvzD7I3eG9xTHC2//3rIGUSuHmZmc1kqhZ7btMnwsd7jsD+ PviKDVoSGT9vB91/VhnZ8/3Rh96igd0A9m2msWv3WAW8mHfNqIKWHJDo205ONRRU evGWDzS8waCfSN8IqChkhmk0lSq2DPAZZbc7r2ZMwumztcBUEdvsasCd1wLFd38k Q8ubdsgMiNOxpHrdHPvtKJBHCcNbDlCYPV1Jo091ujIl/r8ftP9ITPrIZH+bKZo+ F/pcvhSH6VE6BGcxa3boCGBV60565U6s+L8ZgjIP+BUzULUCRKA2oxj0IVmeUe8o kU60r5XcH997tbBybYU= -----END CERTIFICATE-----Generated at Sat Jul 5 04:15:07 2025 by rpki-client