$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199832.roa File: AS199832.roa (raw, json) Hash identifier: 4nbr1AojINEmMjjAIsiu5eTbw0VVn7NmlpD3iAELlcw= Subject key identifier: C9:06:2C:57:7F:59:D0:EA:E9:42:8E:20:5A:27:57:1E:2C:B7:2A:0E Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 29AE35CC576616D88F96B2FE534F28017E7081CB Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199832.roa Signing time: Fri 04 Jul 2025 06:53:08 +0000 ROA not before: Fri 04 Jul 2025 06:48:08 +0000 ROA not after: Fri 03 Jul 2026 06:53:08 +0000 asID: 199832 IP address blocks: 2a0a:6040:2200::/39 maxlen: 48 2a0a:6040:2200::/40 maxlen: 48 2a0a:6040:2300::/40 maxlen: 48 2a0a:6040:6600::/40 maxlen: 48 2a0a:6040:8800::/40 maxlen: 48 2a0a:6040:a400::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:ae:35:cc:57:66:16:d8:8f:96:b2:fe:53:4f:28:01:7e:70:81:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:08 2025 GMT Not After : Jul 3 06:53:08 2026 GMT Subject: CN=C9062C577F59D0EAE9428E205A27571E2CB72A0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f7:59:fd:69:1e:f6:d3:94:c8:4a:dc:b4:9b: 98:7e:67:92:14:18:4f:19:6f:ee:a5:45:93:22:73: e1:8a:c5:52:28:29:b2:00:f9:b1:eb:f8:71:de:f2: de:5e:38:c1:a9:9e:29:30:27:37:98:1e:61:90:07: 6b:93:fa:0f:a1:9f:b0:66:09:cc:79:96:8f:2d:56: 06:a1:68:6b:b1:eb:e6:9f:af:a5:73:ad:13:ce:5b: 55:0a:12:19:3c:a8:43:60:aa:a5:10:d1:2f:7b:98: c1:21:ce:d1:ca:f7:08:c3:cd:4f:16:24:1d:af:22: ba:cb:4d:04:f2:3a:5f:5f:b5:b3:bb:8e:24:ee:c3: fe:07:89:3a:6d:f1:c3:34:12:3e:0f:cf:66:64:af: 85:1b:1a:16:d9:b8:62:69:7b:09:d5:a2:0d:a2:99: 37:a8:80:6b:ed:45:eb:47:b4:2c:ee:5e:21:36:10: f4:54:15:68:97:c9:7a:4a:3c:32:c3:a1:3d:3a:07: 51:39:d9:b3:4a:de:a9:a8:93:22:45:e7:77:38:e2: df:f6:76:0b:ba:98:04:56:ef:a0:37:52:61:e5:f0: 82:65:91:65:6f:1f:3a:e7:6c:ab:98:c7:4b:4a:b4: 92:47:10:41:9b:67:cd:53:81:15:84:d6:87:0a:d7: d8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:06:2C:57:7F:59:D0:EA:E9:42:8E:20:5A:27:57:1E:2C:B7:2A:0E X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:2200::/39 2a0a:6040:6600::/40 2a0a:6040:8800::/40 2a0a:6040:a400::/40 Signature Algorithm: sha256WithRSAEncryption 6f:05:48:08:fc:33:79:8a:2f:ce:4f:93:2e:33:ab:82:bc:e1: e9:6a:a3:f0:bb:53:30:2c:bb:26:29:11:e8:4c:ee:c5:3f:d3: 3d:80:37:d3:69:23:c3:b5:95:b8:1f:50:55:77:cb:8b:81:3d: 0c:c9:36:53:d0:df:64:7b:c3:ec:91:7c:dd:7e:0c:92:4a:57: 1e:1d:de:4f:dd:a4:02:65:57:28:3d:79:be:c3:4b:fd:9d:c8: 46:64:6d:de:8d:ff:c2:a9:7b:d8:fc:cc:65:e3:ba:aa:63:a2: 06:f5:7e:35:ad:bc:42:b8:29:b6:5d:96:4a:14:13:fd:a7:b3: af:14:23:0b:71:91:ed:65:78:0f:63:c4:51:be:5c:db:67:f9: f1:df:9b:6e:6b:d2:2f:d3:15:f1:82:e7:d1:a8:b2:91:73:e7: 3a:95:1e:24:10:75:fa:03:ca:79:72:ea:d4:25:1f:4f:e4:58: 56:a4:31:cc:05:66:f8:b0:46:c6:f2:1d:d1:6d:ec:fe:b2:4a: 5b:b2:ba:59:ad:65:0b:2f:7c:6b:2b:f2:05:cb:3c:69:c6:c0: 7c:b1:db:db:94:dd:fd:99:d4:39:39:eb:a0:cc:ea:6d:d7:da: 1a:a5:90:d2:17:ce:2e:de:43:b6:e6:f4:96:c8:66:1e:d5:43: dd:82:ae:98 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUKa41zFdmFtiPlrL+U08oAX5wgcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MDhaFw0yNjA3MDMwNjUzMDhaMDMxMTAvBgNV BAMTKEM5MDYyQzU3N0Y1OUQwRUFFOTQyOEUyMDVBMjc1NzFFMkNCNzJBMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC91n9aR7205TISty0m5h+Z5IU GE8Zb+6lRZMic+GKxVIoKbIA+bHr+HHe8t5eOMGpnikwJzeYHmGQB2uT+g+hn7Bm Ccx5lo8tVgahaGux6+afr6VzrRPOW1UKEhk8qENgqqUQ0S97mMEhztHK9wjDzU8W JB2vIrrLTQTyOl9ftbO7jiTuw/4HiTpt8cM0Ej4Pz2Zkr4UbGhbZuGJpewnVog2i mTeogGvtRetHtCzuXiE2EPRUFWiXyXpKPDLDoT06B1E52bNK3qmokyJF53c44t/2 dgu6mARW76A3UmHl8IJlkWVvHzrnbKuYx0tKtJJHEEGbZ81TgRWE1ocK19hBAgMB AAGjggIMMIICCDAdBgNVHQ4EFgQUyQYsV39Z0OrpQo4gWidXHiy3Kg4wHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMTk5ODMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDkGCCsGAQUF BwEHAQH/BCowKDAmBAIAAjAgAwYBKgpgQCIDBgAqCmBAZgMGACoKYECIAwYAKgpg QKQwDQYJKoZIhvcNAQELBQADggEBAG8FSAj8M3mKL85Pky4zq4K84elqo/C7UzAs uyYpEehM7sU/0z2AN9NpI8O1lbgfUFV3y4uBPQzJNlPQ32R7w+yRfN1+DJJKVx4d 3k/dpAJlVyg9eb7DS/2dyEZkbd6N/8Kpe9j8zGXjuqpjogb1fjWtvEK4KbZdlkoU E/2ns68UIwtxke1leA9jxFG+XNtn+fHfm25r0i/TFfGC59GospFz5zqVHiQQdfoD ynly6tQlH0/kWFakMcwFZviwRsbyHdFt7P6ySluyulmtZQsvfGsr8gXLPGnGwHyx 29uU3f2Z1Dk566DM6m3X2hqlkNIXzi7eQ7bm9JbIZh7VQ92Crpg= -----END CERTIFICATE-----Generated at Sat Jul 5 06:07:07 2025 by rpki-client