$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199594.roa File: AS199594.roa (raw, json) Hash identifier: FErAxq53tgFGv3x2iU91oplqPqCUb9clQovjaM5+UNQ= Subject key identifier: 0E:EC:42:9E:7E:45:2C:5C:98:91:9C:54:30:A8:A0:97:32:76:EE:AE Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 03521A09CA2A7A4223F3ACC1787518D4C672D21F Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199594.roa Signing time: Fri 04 Jul 2025 06:52:59 +0000 ROA not before: Fri 04 Jul 2025 06:47:59 +0000 ROA not after: Fri 03 Jul 2026 06:52:59 +0000 asID: 199594 IP address blocks: 2a0a:6040:8100::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:52:1a:09:ca:2a:7a:42:23:f3:ac:c1:78:75:18:d4:c6:72:d2:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:47:59 2025 GMT Not After : Jul 3 06:52:59 2026 GMT Subject: CN=0EEC429E7E452C5C98919C5430A8A0973276EEAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5d:94:8b:b9:19:00:70:76:68:cd:13:21:a8: 65:6c:90:6d:5b:5c:0f:87:8b:8b:49:ba:f9:7b:e7: 2c:d9:28:20:14:9a:d5:b5:ae:82:e5:6c:80:97:cc: 06:a2:ac:86:02:e9:56:66:97:a8:73:a0:45:15:d5: c0:42:d1:ca:c8:56:8e:2a:eb:d6:ba:17:cc:77:ce: 07:53:a4:c4:f6:0c:0f:7d:d9:a9:15:21:10:7b:fd: 46:1a:69:70:cd:57:3f:a6:e9:17:a1:fe:97:be:86: 87:03:c9:62:5e:62:65:9f:d1:5f:6f:2b:a2:13:f5: 71:51:10:0b:1a:5e:29:11:21:62:ff:58:9b:2a:0e: 23:bd:8e:ba:1d:01:94:60:ef:e4:d7:35:03:27:1a: b3:7f:69:59:0d:ac:7e:8b:87:f1:11:cc:31:10:87: 87:83:78:12:f4:ef:c7:73:db:ab:f5:7e:64:79:c7: 0a:bb:38:41:76:c7:5a:04:81:2b:42:e8:42:5d:0b: e7:ca:8f:90:0e:f8:98:f5:7e:58:50:15:8e:60:42: 0b:fe:79:2c:a5:13:e2:5f:62:30:0a:04:39:9b:16: 31:b6:d7:09:a7:bf:d2:4b:8a:7a:0e:8f:da:aa:61: b9:cc:93:1e:5a:88:b3:5a:30:a5:63:fa:2c:8c:1b: a4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:EC:42:9E:7E:45:2C:5C:98:91:9C:54:30:A8:A0:97:32:76:EE:AE X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199594.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:8100::/40 Signature Algorithm: sha256WithRSAEncryption de:2c:e0:6f:56:ba:95:ad:dd:b3:10:34:93:59:1b:4a:3d:64: f2:e5:1b:95:47:17:26:82:67:74:88:80:bf:f5:23:b0:fe:a8: 72:0c:bc:7e:aa:8c:d9:83:53:e9:08:4c:37:9b:c8:2f:f4:be: b4:c2:c6:96:0a:bf:d0:8d:98:91:5c:3e:18:6e:00:53:09:8d: 2e:fe:61:de:7d:04:b9:5e:b3:38:e4:0f:71:16:50:6a:aa:8b: 04:94:dd:c1:84:4d:ce:00:55:26:51:d7:91:90:ec:b1:1e:c9: 8e:bf:8e:91:62:54:84:1d:7b:a9:cd:e6:ac:56:a5:c0:cb:3f: e2:73:62:c3:29:f8:52:9a:69:d8:a9:23:b0:92:86:85:a4:18: 86:8c:cd:1b:fe:4e:45:8f:36:c7:a8:43:29:74:c5:97:e8:08: 42:af:28:90:b2:00:36:20:6d:9a:3e:19:91:41:5f:16:1d:9c: 46:da:4e:3a:94:1b:63:5f:8e:7a:dd:26:2d:c5:44:a6:2b:49: 79:de:71:b8:56:76:9a:a1:99:49:6d:a2:0e:46:4d:30:4f:8e: 42:c0:97:82:be:5b:13:b9:65:95:17:db:71:fd:6b:37:16:ef: 30:17:36:49:0a:81:a4:8f:ef:2f:7f:0c:fe:0f:3f:29:8d:dc: 68:4e:fe:d6 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUA1IaCcoqekIj86zBeHUY1MZy0h8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ3NTlaFw0yNjA3MDMwNjUyNTlaMDMxMTAvBgNV BAMTKDBFRUM0MjlFN0U0NTJDNUM5ODkxOUM1NDMwQThBMDk3MzI3NkVFQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgXZSLuRkAcHZozRMhqGVskG1b XA+Hi4tJuvl75yzZKCAUmtW1roLlbICXzAairIYC6VZml6hzoEUV1cBC0crIVo4q 69a6F8x3zgdTpMT2DA992akVIRB7/UYaaXDNVz+m6Reh/pe+hocDyWJeYmWf0V9v K6IT9XFREAsaXikRIWL/WJsqDiO9jrodAZRg7+TXNQMnGrN/aVkNrH6Lh/ERzDEQ h4eDeBL078dz26v1fmR5xwq7OEF2x1oEgStC6EJdC+fKj5AO+Jj1flhQFY5gQgv+ eSylE+JfYjAKBDmbFjG21wmnv9JLinoOj9qqYbnMkx5aiLNaMKVj+iyMG6RzAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUDuxCnn5FLFyYkZxUMKiglzJ27q4wHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMTk5NTk0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQIEwDQYJKoZIhvcNAQELBQADggEBAN4s 4G9WupWt3bMQNJNZG0o9ZPLlG5VHFyaCZ3SIgL/1I7D+qHIMvH6qjNmDU+kITDeb yC/0vrTCxpYKv9CNmJFcPhhuAFMJjS7+Yd59BLleszjkD3EWUGqqiwSU3cGETc4A VSZR15GQ7LEeyY6/jpFiVIQde6nN5qxWpcDLP+JzYsMp+FKaadipI7CShoWkGIaM zRv+TkWPNseoQyl0xZfoCEKvKJCyADYgbZo+GZFBXxYdnEbaTjqUG2NfjnrdJi3F RKYrSXnecbhWdpqhmUltog5GTTBPjkLAl4K+WxO5ZZUX23H9azcW7zAXNkkKgaSP 7y9/DP4PPymN3GhO/tY= -----END CERTIFICATE-----Generated at Sat Jul 5 04:12:47 2025 by rpki-client