$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199501.roa File: AS199501.roa (raw, json) Hash identifier: 28OjDVnE5se5zUCo6TyOcG367ysxkxwwZ8xGn16J5hk= Subject key identifier: 1D:9B:88:57:CC:5A:FF:23:61:1D:3B:12:B2:2D:3F:91:91:D2:59:4F Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 7FECAB0F9D31383A95871E19E79276F77E2208EC Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199501.roa Signing time: Fri 04 Jul 2025 06:53:26 +0000 ROA not before: Fri 04 Jul 2025 06:48:26 +0000 ROA not after: Fri 03 Jul 2026 06:53:26 +0000 asID: 199501 IP address blocks: 2a0a:6040:dc00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 01:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:ec:ab:0f:9d:31:38:3a:95:87:1e:19:e7:92:76:f7:7e:22:08:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:26 2025 GMT Not After : Jul 3 06:53:26 2026 GMT Subject: CN=1D9B8857CC5AFF23611D3B12B22D3F9191D2594F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a6:f6:6d:e6:2b:22:f8:0f:33:3b:58:da:25: c3:00:cb:2a:7e:87:cd:35:94:5f:78:61:09:9f:8c: fc:51:5e:e2:27:b5:20:24:65:2f:eb:87:0f:ae:fc: 1a:57:f4:d6:0f:b3:d0:a2:93:e1:d6:9a:41:2c:ad: 76:3f:f0:5f:70:ed:5a:ab:79:21:ed:f9:23:9a:db: 66:5f:d4:8e:9e:54:32:a6:bb:28:9c:bf:53:64:63: fa:5c:92:52:6a:73:e8:c5:3d:27:1a:53:cb:4d:bb: ee:7f:67:53:fa:ee:e1:21:99:55:a6:28:89:1a:ae: dc:9d:7d:c6:ef:b1:ff:9b:82:9e:cd:a0:c3:4c:4b: 38:cc:64:91:c0:61:1a:cd:04:c5:a8:3f:59:53:31: f4:b3:0b:8c:96:4b:0f:e6:88:43:97:07:75:a8:22: 36:d3:f4:ee:9a:3d:ba:3c:d1:ad:26:ae:29:83:aa: f5:a0:7e:41:7a:c1:73:5b:0f:59:ca:c3:1c:9e:dc: 23:ba:3c:d6:36:24:57:71:ec:05:78:7a:95:55:cd: bd:de:e1:9d:a1:2b:19:48:4e:8f:1c:9d:61:28:61: 38:72:21:fb:90:98:16:24:02:61:76:01:f2:4e:72: fc:cc:c6:18:46:ae:34:f2:e2:3c:98:ca:c3:d7:4a: 58:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:9B:88:57:CC:5A:FF:23:61:1D:3B:12:B2:2D:3F:91:91:D2:59:4F X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199501.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:dc00::/40 Signature Algorithm: sha256WithRSAEncryption ba:eb:19:55:c7:7c:6b:a3:81:e7:1d:81:55:e0:5b:f0:05:b4: b3:8e:a9:d1:db:8d:cb:21:70:f0:02:dc:e6:ee:c3:43:0a:a6: 22:37:6b:fa:a0:16:fb:0c:d0:42:50:32:56:0b:4d:55:48:45: 50:6b:47:c5:1c:11:d1:b9:e7:11:50:89:56:d4:99:e6:2d:de: 03:d2:f5:01:42:99:12:b9:c5:e6:6d:5f:7e:23:eb:2e:bc:6d: bd:79:0a:9a:df:98:cd:37:54:63:22:d2:e7:5d:dd:13:a5:97: 84:8a:2f:14:e3:82:dc:a7:55:35:e6:b0:51:f6:83:90:81:03: 1c:d9:02:ef:91:d2:26:e6:6a:a7:76:f9:4c:26:80:53:9f:92: 5e:30:39:77:f0:f5:3e:7d:8d:04:cc:65:1f:f3:19:92:5f:9c: 0a:1e:d4:42:16:9d:53:4c:dc:c8:f1:12:d2:23:6b:17:1a:bc: 3b:96:69:b7:9c:b6:cd:06:a2:2d:0a:11:08:29:65:c5:c6:68: 61:02:85:9c:a2:fc:ee:1f:8e:8b:52:da:6d:45:64:c5:fa:84: 0a:6f:ff:e5:2a:ef:33:db:68:d7:32:6a:85:ff:7e:ae:b4:02: 65:27:73:0f:c5:c0:0d:8b:f1:aa:ba:cd:52:b6:48:2f:a5:77: 21:20:a0:ab -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUf+yrD50xODqVhx4Z55J2934iCOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MjZaFw0yNjA3MDMwNjUzMjZaMDMxMTAvBgNV BAMTKDFEOUI4ODU3Q0M1QUZGMjM2MTFEM0IxMkIyMkQzRjkxOTFEMjU5NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgpvZt5isi+A8zO1jaJcMAyyp+ h801lF94YQmfjPxRXuIntSAkZS/rhw+u/BpX9NYPs9Cik+HWmkEsrXY/8F9w7Vqr eSHt+SOa22Zf1I6eVDKmuyicv1NkY/pcklJqc+jFPScaU8tNu+5/Z1P67uEhmVWm KIkartydfcbvsf+bgp7NoMNMSzjMZJHAYRrNBMWoP1lTMfSzC4yWSw/miEOXB3Wo IjbT9O6aPbo80a0mrimDqvWgfkF6wXNbD1nKwxye3CO6PNY2JFdx7AV4epVVzb3e 4Z2hKxlITo8cnWEoYThyIfuQmBYkAmF2AfJOcvzMxhhGrjTy4jyYysPXSlh5AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUHZuIV8xa/yNhHTsSsi0/kZHSWU8wHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMTk5NTAxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQNwwDQYJKoZIhvcNAQELBQADggEBALrr GVXHfGujgecdgVXgW/AFtLOOqdHbjcshcPAC3Obuw0MKpiI3a/qgFvsM0EJQMlYL TVVIRVBrR8UcEdG55xFQiVbUmeYt3gPS9QFCmRK5xeZtX34j6y68bb15CprfmM03 VGMi0udd3ROll4SKLxTjgtynVTXmsFH2g5CBAxzZAu+R0ibmaqd2+UwmgFOfkl4w OXfw9T59jQTMZR/zGZJfnAoe1EIWnVNM3MjxEtIjaxcavDuWabects0Goi0KEQgp ZcXGaGEChZyi/O4fjotS2m1FZMX6hApv/+Uq7zPbaNcyaoX/fq60AmUncw/FwA2L 8aq6zVK2SC+ldyEgoKs= -----END CERTIFICATE-----Generated at Sat Jul 5 03:46:39 2025 by rpki-client