$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199767.roa File: AS199767.roa (raw, json) Hash identifier: mJByD5dSYJrkSqAs9R/E2rmFmeFavWPQVfgauK3Ticg= Subject key identifier: 12:A0:67:2A:37:4C:38:C1:04:F5:8E:42:60:04:8C:51:9D:70:33:D4 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 147CF5E00004D2D908E50AD14B848C4299E581E4 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199767.roa Signing time: Fri 04 Jul 2025 06:53:04 +0000 ROA not before: Fri 04 Jul 2025 06:48:04 +0000 ROA not after: Fri 03 Jul 2026 06:53:04 +0000 asID: 199767 IP address blocks: 2a0a:6040:4f00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:7c:f5:e0:00:04:d2:d9:08:e5:0a:d1:4b:84:8c:42:99:e5:81:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:04 2025 GMT Not After : Jul 3 06:53:04 2026 GMT Subject: CN=12A0672A374C38C104F58E4260048C519D7033D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:80:65:33:17:c4:62:1a:35:f9:fd:46:a1:b2: 35:5c:6c:fa:13:e9:e1:b4:50:74:df:39:df:a9:a0: 5a:36:84:a3:a2:33:5b:ca:5d:3e:c0:ed:fc:64:b6: a5:e5:eb:e4:ef:f9:53:d8:86:78:73:03:f9:73:bd: 1e:ca:ba:9c:30:f6:98:c2:33:ef:76:cb:22:d9:41: 44:ec:33:24:21:7a:ad:64:4d:46:ed:d8:86:58:ef: 6c:90:de:97:dc:89:7c:43:91:21:ad:40:84:0f:b1: 0a:5d:e0:f5:6b:e4:fe:e4:12:e0:54:3b:98:f2:1a: 50:97:7c:17:10:87:bb:ce:81:1b:89:da:7b:6a:f8: c2:f3:19:60:96:fc:a5:f8:8e:12:9c:1a:3c:7f:6c: ce:66:cf:73:85:3a:79:0d:d6:bb:d8:cc:80:6d:d3: f8:10:7b:b2:71:ec:a4:b5:45:fc:36:8d:2e:f5:16: ec:9e:65:d0:b1:28:ea:15:17:36:63:cb:84:1c:e3: 78:7f:b9:98:45:34:5d:8b:d3:3b:dc:59:4e:20:a7: 87:8a:31:c4:42:a2:1e:40:8f:d9:c2:2f:f9:92:8c: 13:dc:b6:79:c2:24:b8:12:21:7b:ed:90:2f:b2:47: a8:e1:0a:81:e6:1d:18:5a:66:07:98:7b:df:f7:7c: 8e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A0:67:2A:37:4C:38:C1:04:F5:8E:42:60:04:8C:51:9D:70:33:D4 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199767.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:4f00::/40 Signature Algorithm: sha256WithRSAEncryption 48:b9:c9:b3:0b:da:67:c4:2a:17:b9:20:e9:45:06:3f:50:95: e0:a7:72:9c:44:fd:6e:2c:58:c5:ed:ba:1e:30:24:80:43:57: a4:87:4e:e9:b6:3b:3c:2c:00:13:f1:ea:b7:53:c8:ee:5d:7f: 99:77:8c:fe:cd:c9:78:9c:7b:b6:21:7d:4c:b2:26:7d:ec:e8: 8f:73:54:b0:94:e4:2f:63:49:34:f9:80:31:e4:c5:14:92:f2: f0:59:7e:a0:f2:0e:91:2b:a1:f0:60:e1:03:a1:92:61:9a:1e: 06:40:e7:ad:8c:54:7a:35:2f:16:7c:c2:f4:17:32:73:2e:c5: 1f:6a:c2:b8:e9:a3:48:6e:06:bb:96:23:09:4b:08:da:e2:ed: 93:02:3b:4f:ba:94:53:d2:e0:b3:6a:1e:c4:8b:e3:c7:f3:44: 12:27:e0:a1:28:4a:e4:15:f6:25:9d:8b:d4:51:94:45:53:ec: b2:d3:4d:a9:54:7d:37:dc:f6:85:e1:f7:93:7f:04:e8:e0:22: 8f:61:e1:08:0e:92:c6:a0:cb:12:d6:69:ca:f5:4c:fb:a6:69: 77:cf:b6:06:c5:d3:91:f5:27:bc:7a:14:c2:38:d3:6d:ee:21: 14:ad:8b:2e:71:29:1b:68:23:f7:ee:17:d2:3d:85:1f:6b:12: ff:b8:76:fb -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUFHz14AAE0tkI5QrRS4SMQpnlgeQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MDRaFw0yNjA3MDMwNjUzMDRaMDMxMTAvBgNV BAMTKDEyQTA2NzJBMzc0QzM4QzEwNEY1OEU0MjYwMDQ4QzUxOUQ3MDMzRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAgGUzF8RiGjX5/UahsjVcbPoT 6eG0UHTfOd+poFo2hKOiM1vKXT7A7fxktqXl6+Tv+VPYhnhzA/lzvR7Kupww9pjC M+92yyLZQUTsMyQheq1kTUbt2IZY72yQ3pfciXxDkSGtQIQPsQpd4PVr5P7kEuBU O5jyGlCXfBcQh7vOgRuJ2ntq+MLzGWCW/KX4jhKcGjx/bM5mz3OFOnkN1rvYzIBt 0/gQe7Jx7KS1Rfw2jS71FuyeZdCxKOoVFzZjy4Qc43h/uZhFNF2L0zvcWU4gp4eK McRCoh5Aj9nCL/mSjBPctnnCJLgSIXvtkC+yR6jhCoHmHRhaZgeYe9/3fI4TAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUEqBnKjdMOMEE9Y5CYASMUZ1wM9QwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMTk5NzY3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQE8wDQYJKoZIhvcNAQELBQADggEBAEi5 ybML2mfEKhe5IOlFBj9QleCncpxE/W4sWMXtuh4wJIBDV6SHTum2OzwsABPx6rdT yO5df5l3jP7NyXice7YhfUyyJn3s6I9zVLCU5C9jSTT5gDHkxRSS8vBZfqDyDpEr ofBg4QOhkmGaHgZA562MVHo1LxZ8wvQXMnMuxR9qwrjpo0huBruWIwlLCNri7ZMC O0+6lFPS4LNqHsSL48fzRBIn4KEoSuQV9iWdi9RRlEVT7LLTTalUfTfc9oXh95N/ BOjgIo9h4QgOksagyxLWacr1TPumaXfPtgbF05H1J7x6FMI4023uIRStiy5xKRto I/fuF9I9hR9rEv+4dvs= -----END CERTIFICATE-----Generated at Sat Jul 5 06:09:44 2025 by rpki-client