$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS151194.roa File: AS151194.roa (raw, json) Hash identifier: BTKLSkH0vM5vUfbX88sfl2WoNPJw7lRuLHmDsHTkKqg= Subject key identifier: 4C:0E:48:AE:46:99:9C:38:97:46:80:49:91:0C:46:36:7D:07:00:36 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 7819262DD44987DF3DC56E93CEBBDDD2908B4473 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS151194.roa Signing time: Fri 04 Jul 2025 06:53:04 +0000 ROA not before: Fri 04 Jul 2025 06:48:04 +0000 ROA not after: Fri 03 Jul 2026 06:53:04 +0000 asID: 151194 IP address blocks: 2a05:dfc1:5980::/41 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:19:26:2d:d4:49:87:df:3d:c5:6e:93:ce:bb:dd:d2:90:8b:44:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:04 2025 GMT Not After : Jul 3 06:53:04 2026 GMT Subject: CN=4C0E48AE46999C3897468049910C46367D070036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ef:c4:f9:8c:11:bd:33:57:0d:a8:e5:27:6e: cf:ea:ec:1c:ee:9e:cb:4b:d9:10:d7:19:af:10:08: 0f:32:33:a7:5d:9a:5b:b3:e9:1f:70:91:3c:6c:9d: b6:6e:b8:34:3f:9c:75:83:2d:9f:98:f8:e5:0f:08: ed:d8:64:cf:b8:f3:9d:5e:ba:98:e1:da:43:85:ce: ef:95:d4:77:26:7d:63:5d:21:97:42:23:b2:d7:9f: 3d:4a:fd:34:b9:2e:fa:f2:62:f4:6f:d4:f2:2b:f5: f8:fd:3f:3d:73:2e:c8:60:44:b4:83:19:b0:e0:28: 02:22:78:c5:34:cd:6c:90:4a:44:ef:06:96:c5:52: 0c:5d:eb:24:73:33:d5:ed:35:2b:67:c4:4f:aa:d8: 70:20:30:c6:cd:ef:5e:01:58:8e:27:2a:69:da:2f: c3:86:3a:b9:6a:a6:90:38:00:17:a3:9c:96:b1:79: fe:51:9b:7d:26:36:fb:cf:35:2d:93:ff:a8:f4:24: b8:c6:a9:5b:96:93:bb:74:a3:62:5d:b6:2e:ef:1c: df:d4:1e:32:95:a4:04:8d:99:56:62:2d:17:42:e4: c2:59:29:46:16:24:ee:c2:ef:a2:32:14:79:3f:4a: a9:fb:8f:5a:1c:dc:c9:3f:6b:2d:90:cc:9b:3e:84: 12:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:0E:48:AE:46:99:9C:38:97:46:80:49:91:0C:46:36:7D:07:00:36 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS151194.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:5980::/41 Signature Algorithm: sha256WithRSAEncryption a6:2a:06:90:f8:aa:c9:15:f4:1d:09:f9:d8:43:ca:0d:9c:dc: b4:b2:5a:ba:3e:15:77:6a:18:92:eb:c5:73:0a:5a:ef:81:5c: 87:84:0c:3c:e0:c8:20:36:6f:eb:b3:7a:18:2f:7f:a5:d6:be: 6f:73:e9:01:49:9b:f2:ab:9f:46:0a:d2:42:91:74:c9:21:d5: 6f:76:a8:f5:f3:ea:eb:83:97:4f:34:c1:f5:fa:8e:1f:8a:1a: 88:e5:1a:ff:b9:f6:ed:42:9b:af:a6:c1:94:07:2d:ad:d0:00: ed:e4:4e:72:7d:d1:4e:e1:cb:cf:0a:7d:dd:a4:61:04:fa:f5: 4f:6f:1f:d5:4c:39:20:16:79:b3:8c:b9:ce:60:f2:c1:4f:50: 74:54:0e:05:23:4c:5f:92:d8:88:c8:01:e7:83:ef:0d:0e:43: 8f:01:ca:9b:ba:9e:28:86:3d:dc:4d:ce:0a:30:bc:dd:62:c8: 08:eb:a7:7c:fa:16:b5:97:e3:01:21:5d:50:a0:27:e7:b1:46: 93:f4:bb:89:fc:02:f1:ba:62:a7:75:15:2e:73:03:93:9e:ac: b5:6c:38:b1:4a:44:05:41:f7:d3:2d:24:59:a2:04:a2:0e:c1: 9e:89:4b:63:d1:72:c5:d9:ea:f5:e5:fb:f4:f1:9c:26:ca:87: 77:11:cc:59 -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgIUeBkmLdRJh989xW6Tzrvd0pCLRHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MDRaFw0yNjA3MDMwNjUzMDRaMDMxMTAvBgNV BAMTKDRDMEU0OEFFNDY5OTlDMzg5NzQ2ODA0OTkxMEM0NjM2N0QwNzAwMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC478T5jBG9M1cNqOUnbs/q7Bzu nstL2RDXGa8QCA8yM6ddmluz6R9wkTxsnbZuuDQ/nHWDLZ+Y+OUPCO3YZM+4851e upjh2kOFzu+V1HcmfWNdIZdCI7LXnz1K/TS5LvryYvRv1PIr9fj9Pz1zLshgRLSD GbDgKAIieMU0zWyQSkTvBpbFUgxd6yRzM9XtNStnxE+q2HAgMMbN714BWI4nKmna L8OGOrlqppA4ABejnJaxef5Rm30mNvvPNS2T/6j0JLjGqVuWk7t0o2Jdti7vHN/U HjKVpASNmVZiLRdC5MJZKUYWJO7C76IyFHk/Sqn7j1oc3Mk/ay2QzJs+hBL/AgMB AAGjggH1MIIB8TAdBgNVHQ4EFgQUTA5IrkaZnDiXRoBJkQxGNn0HADYwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMTUxMTk0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcHKgXfwVmAMA0GCSqGSIb3DQEBCwUAA4IBAQCm KgaQ+KrJFfQdCfnYQ8oNnNy0slq6PhV3ahiS68VzClrvgVyHhAw84MggNm/rs3oY L3+l1r5vc+kBSZvyq59GCtJCkXTJIdVvdqj18+rrg5dPNMH1+o4fihqI5Rr/ufbt QpuvpsGUBy2t0ADt5E5yfdFO4cvPCn3dpGEE+vVPbx/VTDkgFnmzjLnOYPLBT1B0 VA4FI0xfktiIyAHng+8NDkOPAcqbup4ohj3cTc4KMLzdYsgI66d8+ha1l+MBIV1Q oCfnsUaT9LuJ/ALxumKndRUucwOTnqy1bDixSkQFQffTLSRZogSiDsGeiUtj0XLF 2er15fv08Zwmyod3EcxZ -----END CERTIFICATE-----Generated at Sat Jul 5 04:11:45 2025 by rpki-client