$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS198308.roa File: AS198308.roa (raw, json) Hash identifier: pvFnv647ESNaTiA03A97qnhp87i4OWWklzpc9AARp6s= Subject key identifier: 23:3D:BD:BD:17:35:29:D0:86:9D:90:07:F2:8C:F4:0A:56:44:31:CA Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 4FAAA888DD6B3B2C09119D837F19F9E6517ADA7D Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS198308.roa Signing time: Fri 04 Jul 2025 06:52:59 +0000 ROA not before: Fri 04 Jul 2025 06:47:59 +0000 ROA not after: Fri 03 Jul 2026 06:52:59 +0000 asID: 198308 IP address blocks: 2a05:dfc1:4d00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 01:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:aa:a8:88:dd:6b:3b:2c:09:11:9d:83:7f:19:f9:e6:51:7a:da:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:47:59 2025 GMT Not After : Jul 3 06:52:59 2026 GMT Subject: CN=233DBDBD173529D0869D9007F28CF40A564431CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:87:b1:46:9a:8f:a3:8c:bb:b0:5b:5d:83:b5: b1:a1:46:11:b0:3a:33:21:03:0c:24:12:1a:6e:19: b6:24:6f:f4:c2:4e:98:04:61:f4:3f:98:50:65:05: 93:5c:1e:75:04:dc:45:f2:38:6e:20:86:d3:06:85: 36:f1:ec:f4:37:b4:2e:c9:04:5c:54:01:46:b9:b7: 5f:22:80:a1:18:7e:cb:d5:59:85:ff:7f:7e:bd:12: 0b:80:ae:be:90:c5:01:b8:a9:b9:7f:a5:35:fb:a3: 04:4c:6d:7e:df:cc:25:41:ba:c5:df:98:a1:05:7a: ba:85:43:bc:7e:c7:5a:0a:46:ac:10:5b:18:e3:11: 97:49:4f:5c:e1:e2:be:ad:86:72:00:cf:a3:d1:88: 27:6a:dd:80:20:12:ff:9b:aa:5c:9d:15:ce:db:a2: 77:1b:5f:6d:d0:5f:7e:e8:58:04:06:78:4b:96:0a: b6:50:d4:83:ce:b1:a9:27:06:4a:be:d1:6a:7f:e3: 04:d0:46:f2:38:63:82:13:ea:90:5d:20:b5:42:8c: 7f:59:41:36:98:5f:4e:e5:b9:a6:a6:53:25:8d:3d: 9a:84:c9:37:af:5e:4b:cb:23:1e:c9:18:f7:28:e1: 6a:11:19:78:1a:72:32:de:94:16:73:9b:59:47:a6: 30:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:3D:BD:BD:17:35:29:D0:86:9D:90:07:F2:8C:F4:0A:56:44:31:CA X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS198308.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:4d00::/40 Signature Algorithm: sha256WithRSAEncryption d6:66:81:37:4e:9c:d7:6a:80:92:25:08:1c:7d:1c:dc:08:a2: 7e:a4:52:55:59:4a:48:57:4d:04:39:9c:4f:b2:c3:87:a7:54: 4f:ca:9f:02:e1:a7:8d:e8:7d:19:66:50:9b:57:21:2f:82:90: da:c5:fb:11:b9:22:e3:0d:93:fe:45:61:a6:59:ee:e2:58:29: 44:07:b9:cf:72:d3:40:9f:3d:cb:0b:ce:c1:c6:e6:94:69:a3: ff:a9:ef:fc:d1:5b:b5:b8:53:0f:d9:72:1e:9f:2f:3f:6f:21: 15:0d:95:9d:4b:62:71:99:8d:77:97:eb:84:45:68:b5:39:96: 8b:db:11:3f:07:07:bf:e9:24:ba:89:a1:86:c9:83:7c:f7:cf: 91:da:86:5d:4b:a0:e7:77:74:db:ae:09:48:fc:07:a7:a7:e9: 6c:7e:f4:4d:f3:96:14:c4:c0:03:19:41:3d:f4:2c:37:ad:1f: 77:e1:2f:cb:05:64:96:7a:a2:85:2b:bc:22:af:ee:88:ac:fe: 8d:90:f0:7e:bc:3f:29:d9:ee:a4:d4:15:ce:11:49:34:7d:d8: b9:58:9b:6c:43:02:79:31:19:e8:9f:9d:e4:12:05:d5:d0:74: 20:5e:4f:3e:d7:bd:9c:c9:f9:41:ed:a1:9c:00:6e:a0:39:37: ee:6f:5f:1e -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUT6qoiN1rOywJEZ2Dfxn55lF62n0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ3NTlaFw0yNjA3MDMwNjUyNTlaMDMxMTAvBgNV BAMTKDIzM0RCREJEMTczNTI5RDA4NjlEOTAwN0YyOENGNDBBNTY0NDMxQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCph7FGmo+jjLuwW12DtbGhRhGw OjMhAwwkEhpuGbYkb/TCTpgEYfQ/mFBlBZNcHnUE3EXyOG4ghtMGhTbx7PQ3tC7J BFxUAUa5t18igKEYfsvVWYX/f369EguArr6QxQG4qbl/pTX7owRMbX7fzCVBusXf mKEFerqFQ7x+x1oKRqwQWxjjEZdJT1zh4r6thnIAz6PRiCdq3YAgEv+bqlydFc7b oncbX23QX37oWAQGeEuWCrZQ1IPOsaknBkq+0Wp/4wTQRvI4Y4IT6pBdILVCjH9Z QTaYX07luaamUyWNPZqEyTevXkvLIx7JGPco4WoRGXgacjLelBZzm1lHpjCdAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUIz29vRc1KdCGnZAH8oz0ClZEMcowHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMTk4MzA4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwU0wDQYJKoZIhvcNAQELBQADggEBANZm gTdOnNdqgJIlCBx9HNwIon6kUlVZSkhXTQQ5nE+yw4enVE/KnwLhp43ofRlmUJtX IS+CkNrF+xG5IuMNk/5FYaZZ7uJYKUQHuc9y00CfPcsLzsHG5pRpo/+p7/zRW7W4 Uw/Zch6fLz9vIRUNlZ1LYnGZjXeX64RFaLU5lovbET8HB7/pJLqJoYbJg3z3z5Ha hl1LoOd3dNuuCUj8B6en6Wx+9E3zlhTEwAMZQT30LDetH3fhL8sFZJZ6ooUrvCKv 7ois/o2Q8H68PynZ7qTUFc4RSTR92LlYm2xDAnkxGeifneQSBdXQdCBeTz7XvZzJ +UHtoZwAbqA5N+5vXx4= -----END CERTIFICATE-----Generated at Sat Jul 5 04:12:30 2025 by rpki-client