$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS198025.roa File: AS198025.roa (raw, json) Hash identifier: VmeiFn/FmakNj/48VdFTpfOasZYDpfP6TOTqTgyk4Jg= Subject key identifier: F4:DA:95:1E:24:1B:B5:1E:7F:53:CB:A1:A0:67:19:0D:0F:24:4F:F6 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 3C5952F14D618CBB4DA4A424671012C0B5FEE968 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS198025.roa Signing time: Fri 04 Jul 2025 06:53:08 +0000 ROA not before: Fri 04 Jul 2025 06:48:08 +0000 ROA not after: Fri 03 Jul 2026 06:53:08 +0000 asID: 198025 IP address blocks: 2a05:dfc1:5900::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:59:52:f1:4d:61:8c:bb:4d:a4:a4:24:67:10:12:c0:b5:fe:e9:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:08 2025 GMT Not After : Jul 3 06:53:08 2026 GMT Subject: CN=F4DA951E241BB51E7F53CBA1A067190D0F244FF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8f:b4:f2:3c:31:83:19:48:e9:ac:43:c1:d8: 85:e9:95:5a:77:7c:c5:e0:3e:3f:6f:99:11:96:ec: 63:58:6c:75:ae:58:61:14:34:64:cf:e3:4f:66:9f: 23:da:d2:26:2f:96:2c:7d:76:21:03:c6:95:70:9e: 5c:cc:e8:d6:c3:a6:a5:a1:7f:6d:b0:37:4f:a6:1d: b8:af:51:a4:d0:47:6a:a3:7e:c8:ef:18:26:08:d7: 10:44:49:8b:0e:43:1b:95:9f:81:9c:d9:15:80:7b: 82:e2:fb:62:52:a6:4f:40:56:b0:48:24:37:37:a4: d3:a6:16:ce:16:e9:d0:43:18:24:23:3d:c3:d0:18: 16:e3:dc:1c:20:ae:11:d9:76:9d:6f:ca:24:08:3c: f0:1b:0f:c4:4a:91:cf:d8:ae:f7:4d:f8:83:8d:79: 58:d8:48:31:29:83:26:0e:f0:0b:ee:e8:33:73:ca: 47:43:af:f4:bd:7b:24:f7:35:72:9c:15:78:6e:f2: a7:ad:bf:e7:ab:34:9f:6f:da:d1:2f:0e:f2:ce:8b: da:96:2a:1d:a4:3e:7e:60:81:3e:3a:83:4a:71:02: 9d:e9:b9:c5:36:90:96:2c:b5:88:6d:68:68:fc:6e: e7:7b:cc:40:e6:47:85:4a:8c:57:aa:ed:41:bc:f1: 78:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:DA:95:1E:24:1B:B5:1E:7F:53:CB:A1:A0:67:19:0D:0F:24:4F:F6 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS198025.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:5900::/40 Signature Algorithm: sha256WithRSAEncryption 07:67:68:b3:45:63:5b:d4:d4:ad:0d:23:cd:7e:b6:09:be:2d: 34:b9:03:bb:3e:e5:10:49:21:c8:ba:f8:13:60:1a:7d:5c:46: 9c:54:d3:68:63:42:eb:57:9a:46:6f:52:c0:fb:30:d9:4e:fe: 3e:0b:a8:c6:07:00:c0:41:69:86:83:c0:4f:0a:85:a6:b8:4e: 8b:1a:49:79:c4:8c:aa:3e:bd:e7:08:f6:0d:f6:49:d2:4a:e0: 4d:84:3d:ab:0f:c2:25:7b:3d:2e:94:8c:14:fd:bf:e2:c0:a6: d8:30:5c:99:fb:75:2b:b4:f9:0d:f5:f6:26:b3:5c:56:c7:b8: 49:23:66:ed:d3:88:fa:37:dd:ff:de:4d:e7:35:04:07:34:c4: 27:fd:c3:17:b1:fa:04:f1:5d:f2:ce:67:60:8f:b9:86:76:8c: eb:8f:b2:a0:8b:a3:6e:e2:7a:47:4b:1c:9c:26:fa:b4:bd:6e: bd:a7:ec:cd:06:96:3b:58:9c:61:7b:16:03:4b:4f:ab:09:15: ce:cf:f9:42:be:f5:c8:0a:2e:fb:77:82:30:b9:c8:d1:e9:28: 3f:08:52:5c:98:2f:f1:56:e8:36:63:d6:e3:42:b0:aa:71:fc: a8:75:59:08:f0:ad:f8:78:4a:38:a9:cf:c3:05:b6:2b:5b:a7: 3e:61:12:4d -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUPFlS8U1hjLtNpKQkZxASwLX+6WgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MDhaFw0yNjA3MDMwNjUzMDhaMDMxMTAvBgNV BAMTKEY0REE5NTFFMjQxQkI1MUU3RjUzQ0JBMUEwNjcxOTBEMEYyNDRGRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+j7TyPDGDGUjprEPB2IXplVp3 fMXgPj9vmRGW7GNYbHWuWGEUNGTP409mnyPa0iYvlix9diEDxpVwnlzM6NbDpqWh f22wN0+mHbivUaTQR2qjfsjvGCYI1xBESYsOQxuVn4Gc2RWAe4Li+2JSpk9AVrBI JDc3pNOmFs4W6dBDGCQjPcPQGBbj3BwgrhHZdp1vyiQIPPAbD8RKkc/YrvdN+ION eVjYSDEpgyYO8Avu6DNzykdDr/S9eyT3NXKcFXhu8qetv+erNJ9v2tEvDvLOi9qW Kh2kPn5ggT46g0pxAp3pucU2kJYstYhtaGj8bud7zEDmR4VKjFeq7UG88XjvAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU9NqVHiQbtR5/U8uhoGcZDQ8kT/YwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMTk4MDI1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwVkwDQYJKoZIhvcNAQELBQADggEBAAdn aLNFY1vU1K0NI81+tgm+LTS5A7s+5RBJIci6+BNgGn1cRpxU02hjQutXmkZvUsD7 MNlO/j4LqMYHAMBBaYaDwE8Khaa4TosaSXnEjKo+vecI9g32SdJK4E2EPasPwiV7 PS6UjBT9v+LAptgwXJn7dSu0+Q319iazXFbHuEkjZu3TiPo33f/eTec1BAc0xCf9 wxex+gTxXfLOZ2CPuYZ2jOuPsqCLo27iekdLHJwm+rS9br2n7M0GljtYnGF7FgNL T6sJFc7P+UK+9cgKLvt3gjC5yNHpKD8IUlyYL/FW6DZj1uNCsKpx/Kh1WQjwrfh4 Sjipz8MFtitbpz5hEk0= -----END CERTIFICATE-----Generated at Sat Jul 5 04:17:45 2025 by rpki-client