$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS201392.roa File: AS201392.roa (raw, json) Hash identifier: BB6tUPC8nn52/Gw9Pu9WLqMXW2gaYuf4VRAxa/+uOTk= Subject key identifier: AA:2F:84:B1:8C:73:3A:72:B7:AC:A9:EC:BF:CD:CC:F3:DA:8C:47:AA Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 34F72E1267D49A3E81EB4ADB70FC3D9592F84C7C Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS201392.roa Signing time: Fri 04 Jul 2025 06:53:28 +0000 ROA not before: Fri 04 Jul 2025 06:48:28 +0000 ROA not after: Fri 03 Jul 2026 06:53:28 +0000 asID: 201392 IP address blocks: 2a0a:6040:fe00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:f7:2e:12:67:d4:9a:3e:81:eb:4a:db:70:fc:3d:95:92:f8:4c:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:28 2025 GMT Not After : Jul 3 06:53:28 2026 GMT Subject: CN=AA2F84B18C733A72B7ACA9ECBFCDCCF3DA8C47AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7f:40:03:f4:d4:5d:17:8c:eb:85:7d:83:60: dd:db:df:97:18:f6:ec:c1:4c:19:59:6f:39:c5:a3: 59:25:e4:27:a5:ce:af:2e:08:97:a6:c7:51:c3:f8: cb:c9:43:74:9d:29:6b:18:b2:b2:46:fc:45:4c:f5: e6:48:61:5c:f5:30:37:90:b5:5d:36:df:e0:9d:ec: 62:e4:b9:1c:64:01:a9:d8:33:a1:3c:7c:45:bd:b9: 48:e8:55:d9:16:b2:86:e5:76:a4:85:bb:35:32:7f: e4:e7:a5:21:b3:5e:5c:cc:8f:fb:7a:d8:ad:2b:71: 5f:2b:fc:39:d4:39:19:45:55:ed:c3:49:58:ac:0b: 9f:38:93:85:12:53:40:fb:68:7b:57:69:c4:ba:53: c4:33:72:aa:88:39:c5:e9:a6:4c:c4:15:24:cf:0f: 7b:78:ef:d3:c3:c1:d4:3d:bb:d8:0a:fc:ee:94:3b: f5:19:38:6b:64:a4:0f:11:56:c4:49:f5:eb:b8:c5: 9c:77:a3:04:b1:c7:a7:c4:62:ed:f3:7e:ec:43:98: b8:12:b7:e8:8e:59:a6:dc:3d:f4:af:cf:39:4b:b7: 7e:8a:5b:f3:31:06:79:a4:58:77:f9:3e:21:c5:0d: 80:85:72:dd:be:90:2b:7a:a0:7e:77:6e:27:d6:15: d1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:2F:84:B1:8C:73:3A:72:B7:AC:A9:EC:BF:CD:CC:F3:DA:8C:47:AA X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS201392.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:fe00::/40 Signature Algorithm: sha256WithRSAEncryption 41:5b:36:1b:d6:2b:85:11:ca:e6:00:6c:c5:e5:62:86:e4:8c: ea:0e:6e:4e:d3:0b:c2:30:bd:b1:dd:49:e1:0d:87:6f:78:28: 5c:39:19:0f:7f:f4:e5:20:b8:c0:91:6a:c0:a8:1a:67:67:94: e1:dc:b2:32:bd:f2:ba:08:26:d1:2a:14:b5:2f:31:62:af:10: f3:f3:ae:0a:37:f9:2f:49:b6:d2:be:62:03:3e:e7:9f:95:2e: 0b:94:ea:35:8b:da:0a:9f:4d:5b:04:98:f7:df:95:ff:a5:58: f1:74:ec:5c:d8:42:53:b6:8a:21:56:e7:cc:33:41:98:cd:f3: 48:53:b1:1b:2b:83:a7:0c:72:bf:a4:c8:65:8e:9b:ca:5e:1c: a4:7b:b1:a4:61:f4:74:d4:d2:87:4b:ec:4e:96:7b:56:6f:a9: 97:fb:38:99:b7:ac:4b:bd:c9:71:43:1f:8e:02:8d:fb:6b:b5: 62:2f:4e:f0:38:5f:40:62:da:db:5a:9b:99:41:13:a7:82:df: 9c:88:72:e6:62:6f:22:e3:0d:3d:25:a7:a6:17:16:78:ac:f7: 14:70:c0:2f:d5:50:81:7e:01:10:6b:72:0e:d4:d1:58:41:43: 1f:85:a9:b6:1e:af:ce:a1:19:94:31:10:c9:4e:14:0b:21:47: 5b:97:5d:00 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUNPcuEmfUmj6B60rbcPw9lZL4THwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MjhaFw0yNjA3MDMwNjUzMjhaMDMxMTAvBgNV BAMTKEFBMkY4NEIxOEM3MzNBNzJCN0FDQTlFQ0JGQ0RDQ0YzREE4QzQ3QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBf0AD9NRdF4zrhX2DYN3b35cY 9uzBTBlZbznFo1kl5Celzq8uCJemx1HD+MvJQ3SdKWsYsrJG/EVM9eZIYVz1MDeQ tV023+Cd7GLkuRxkAanYM6E8fEW9uUjoVdkWsobldqSFuzUyf+TnpSGzXlzMj/t6 2K0rcV8r/DnUORlFVe3DSVisC584k4USU0D7aHtXacS6U8QzcqqIOcXppkzEFSTP D3t479PDwdQ9u9gK/O6UO/UZOGtkpA8RVsRJ9eu4xZx3owSxx6fEYu3zfuxDmLgS t+iOWabcPfSvzzlLt36KW/MxBnmkWHf5PiHFDYCFct2+kCt6oH53bifWFdG5AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUqi+EsYxzOnK3rKnsv83M89qMR6owHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAxMzkyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQP4wDQYJKoZIhvcNAQELBQADggEBAEFb NhvWK4URyuYAbMXlYobkjOoObk7TC8IwvbHdSeENh294KFw5GQ9/9OUguMCRasCo GmdnlOHcsjK98roIJtEqFLUvMWKvEPPzrgo3+S9JttK+YgM+55+VLguU6jWL2gqf TVsEmPfflf+lWPF07FzYQlO2iiFW58wzQZjN80hTsRsrg6cMcr+kyGWOm8peHKR7 saRh9HTU0odL7E6We1ZvqZf7OJm3rEu9yXFDH44CjftrtWIvTvA4X0Bi2ttam5lB E6eC35yIcuZibyLjDT0lp6YXFnis9xRwwC/VUIF+ARBrcg7U0VhBQx+FqbYer86h GZQxEMlOFAshR1uXXQA= -----END CERTIFICATE-----Generated at Sat Jul 5 04:00:55 2025 by rpki-client