$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199097.roa File: AS199097.roa (raw, json) Hash identifier: e6UeROaFsvPDnTz3aJwH8Ed4GwhtdNIH9YpJfb2ZaVU= Subject key identifier: AA:9B:50:DA:E7:1A:13:3E:60:4C:38:11:AB:27:5F:E7:98:DB:2A:44 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 45D5E1645ABD3EB30946D4AAFE132E5E713C9356 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199097.roa Signing time: Fri 04 Jul 2025 06:52:58 +0000 ROA not before: Fri 04 Jul 2025 06:47:58 +0000 ROA not after: Fri 03 Jul 2026 06:52:58 +0000 asID: 199097 IP address blocks: 2a05:dfc1:1100::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:d5:e1:64:5a:bd:3e:b3:09:46:d4:aa:fe:13:2e:5e:71:3c:93:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:47:58 2025 GMT Not After : Jul 3 06:52:58 2026 GMT Subject: CN=AA9B50DAE71A133E604C3811AB275FE798DB2A44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:50:c3:39:2d:2e:9c:db:b3:b4:06:34:10:2c: a7:f3:4f:f1:1d:8c:a5:1e:3d:a1:b1:d1:be:4e:bf: cc:37:9d:26:73:82:8c:07:21:b7:e7:8f:93:b3:4c: 66:6c:fb:cd:f1:2c:cf:81:f0:15:e7:92:e5:68:6f: 6f:9e:38:3e:42:b5:7f:ff:4b:a3:32:4f:a8:7b:c2: b5:e3:47:d8:1a:5c:da:73:39:ce:8c:d7:f8:a0:37: c1:a6:69:eb:d4:81:0f:45:19:b2:50:76:2a:e7:fe: 81:d0:0e:a4:c5:ee:7a:5a:a7:7f:7d:57:b8:01:09: cf:77:dc:d8:31:46:2e:51:13:d3:c7:2e:2a:d3:bf: 5b:5e:f0:29:57:7c:48:84:e7:b4:9f:cd:27:09:82: 8b:7c:a6:df:be:87:7f:29:4d:ad:5d:4a:a6:72:dc: 99:f5:fc:cd:c3:63:b9:a2:05:0f:ca:75:8b:a6:41: a0:8f:5f:54:42:25:fa:cf:60:dc:d5:dd:b2:a4:1a: 46:99:e0:4d:77:5e:4d:b1:fd:bd:2f:8e:09:92:0e: 7f:a4:39:c4:9e:45:0e:bd:96:fc:de:7b:19:68:52: 7c:1d:5e:42:e0:6c:0f:ae:8f:17:4b:15:be:f3:63: fc:2d:96:1d:9d:22:20:d4:cb:19:4e:97:5d:19:7f: 4f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:9B:50:DA:E7:1A:13:3E:60:4C:38:11:AB:27:5F:E7:98:DB:2A:44 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199097.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:1100::/40 Signature Algorithm: sha256WithRSAEncryption 4b:7c:1d:1a:21:79:69:33:a0:7c:4c:f4:82:57:2a:ff:20:63: 7c:89:ba:ab:ff:25:9c:e0:77:1e:90:17:8b:8a:3e:46:a6:c9: 65:a8:18:72:45:6b:61:d6:c4:a2:91:92:75:0b:ea:1d:74:00: 6b:b8:ba:a9:17:f3:ef:b5:32:45:85:a8:1a:59:14:ad:f9:35: 2e:0d:5f:30:93:40:3b:5d:92:67:79:b3:8f:b1:de:c3:f6:61: 1d:c8:f9:3d:b4:94:36:bb:f5:18:40:2c:7c:19:72:8d:ad:00: f8:e3:05:18:13:54:05:17:0e:cf:94:48:36:e3:74:6c:5a:e0: a7:c9:a1:29:f6:10:06:de:5e:c1:59:80:f7:bb:21:b8:df:02: 92:38:67:1d:5b:d9:e8:f7:a9:68:d1:59:16:82:8d:d6:5d:b5: 51:7f:d3:69:73:20:82:cd:a4:77:b6:1f:07:f6:74:76:57:bb: 82:3a:ec:34:63:95:b8:b5:4c:1d:e4:e9:f9:12:2f:73:d7:63: f5:32:da:a6:7b:63:11:44:e3:ea:5c:99:15:2f:0b:08:7d:42: 7f:e2:31:97:73:88:db:02:39:86:dd:fe:1b:99:2d:f7:37:31: f1:b2:9a:36:66:b9:f2:7d:7c:e8:35:83:13:e5:87:9d:47:d1: 93:fd:a1:16 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIURdXhZFq9PrMJRtSq/hMuXnE8k1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ3NThaFw0yNjA3MDMwNjUyNThaMDMxMTAvBgNV BAMTKEFBOUI1MERBRTcxQTEzM0U2MDRDMzgxMUFCMjc1RkU3OThEQjJBNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuUMM5LS6c27O0BjQQLKfzT/Ed jKUePaGx0b5Ov8w3nSZzgowHIbfnj5OzTGZs+83xLM+B8BXnkuVob2+eOD5CtX// S6MyT6h7wrXjR9gaXNpzOc6M1/igN8GmaevUgQ9FGbJQdirn/oHQDqTF7npap399 V7gBCc933NgxRi5RE9PHLirTv1te8ClXfEiE57SfzScJgot8pt++h38pTa1dSqZy 3Jn1/M3DY7miBQ/KdYumQaCPX1RCJfrPYNzV3bKkGkaZ4E13Xk2x/b0vjgmSDn+k OcSeRQ69lvzeexloUnwdXkLgbA+ujxdLFb7zY/wtlh2dIiDUyxlOl10Zf0/rAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUqptQ2ucaEz5gTDgRqydf55jbKkQwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMTk5MDk3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwREwDQYJKoZIhvcNAQELBQADggEBAEt8 HRoheWkzoHxM9IJXKv8gY3yJuqv/JZzgdx6QF4uKPkamyWWoGHJFa2HWxKKRknUL 6h10AGu4uqkX8++1MkWFqBpZFK35NS4NXzCTQDtdkmd5s4+x3sP2YR3I+T20lDa7 9RhALHwZco2tAPjjBRgTVAUXDs+USDbjdGxa4KfJoSn2EAbeXsFZgPe7IbjfApI4 Zx1b2ej3qWjRWRaCjdZdtVF/02lzIILNpHe2Hwf2dHZXu4I67DRjlbi1TB3k6fkS L3PXY/Uy2qZ7YxFE4+pcmRUvCwh9Qn/iMZdziNsCOYbd/huZLfc3MfGymjZmufJ9 fOg1gxPlh51H0ZP9oRY= -----END CERTIFICATE-----Generated at Sat Jul 5 03:51:19 2025 by rpki-client