$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS201501.roa File: AS201501.roa (raw, json) Hash identifier: nxQ62KkKvRvU0KBxEikfDZbxXQFHUUPoS9XczTK2mIU= Subject key identifier: 0E:9D:20:09:DE:72:0E:0A:CE:C9:66:1E:26:EA:4A:77:6A:C4:6D:00 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 522FBEC5C4D737E1B529EEBF5B18519C7E6CECCD Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS201501.roa Signing time: Fri 04 Jul 2025 06:53:07 +0000 ROA not before: Fri 04 Jul 2025 06:48:07 +0000 ROA not after: Fri 03 Jul 2026 06:53:07 +0000 asID: 201501 IP address blocks: 2a0a:6040:fa00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 01:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:2f:be:c5:c4:d7:37:e1:b5:29:ee:bf:5b:18:51:9c:7e:6c:ec:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:07 2025 GMT Not After : Jul 3 06:53:07 2026 GMT Subject: CN=0E9D2009DE720E0ACEC9661E26EA4A776AC46D00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:21:a6:6f:9e:c1:3e:1e:66:f3:32:31:c1:69: 60:ad:b2:7e:b8:11:e3:15:ae:56:02:a7:65:e7:2c: 80:1c:a0:c3:80:40:90:89:a4:28:e3:e0:ac:a4:16: ae:d9:eb:96:05:63:08:4b:e3:c3:d7:1f:43:24:3a: 1d:06:1f:3a:54:17:6d:e5:f3:7e:06:f4:9c:fa:2d: 1b:b5:2a:c5:ae:7c:d7:33:3c:d5:66:bf:26:4c:8e: cc:06:20:f1:a5:6b:16:b0:f7:98:7d:a0:7a:19:33: 67:28:51:7c:66:27:1c:0a:2b:27:a7:cf:78:1a:c4: f4:4c:dc:06:26:d7:56:27:24:db:8d:67:2f:29:f6: d2:17:5e:83:b5:ab:52:d6:3c:1f:d0:98:c1:2c:b1: 01:ad:2d:e6:3c:15:83:77:6a:11:47:65:e5:7c:f4: 47:20:ec:df:05:bc:36:bb:41:f3:1c:31:8d:dc:fe: ae:f1:6f:cd:eb:35:88:3d:00:46:95:d9:6c:c1:f6: 82:1d:f4:d7:3f:de:62:b0:39:6f:56:8b:44:85:b3: 53:aa:59:8a:4a:d0:fb:a3:6e:7f:26:5c:82:c2:40: 06:bc:7a:4c:38:12:d1:49:db:64:50:c6:42:c9:94: c5:05:dd:01:c8:48:0b:b9:22:00:fe:c3:91:b2:8e: 70:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:9D:20:09:DE:72:0E:0A:CE:C9:66:1E:26:EA:4A:77:6A:C4:6D:00 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS201501.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:fa00::/40 Signature Algorithm: sha256WithRSAEncryption 6e:36:86:52:3a:88:b8:0b:37:46:e1:6b:35:3c:d3:af:32:e3: 14:b0:09:4e:16:a8:9b:62:d6:9f:5e:32:7e:16:43:b0:2c:6f: 42:10:4a:c1:df:5a:fe:e4:0c:2b:52:02:78:2a:12:e4:2e:a5: a6:0d:dc:b5:8b:22:1d:e9:3a:55:00:9b:f3:3a:9c:20:f8:6e: 7e:33:07:eb:b9:44:04:22:17:23:75:44:bb:ae:c2:4a:82:5a: aa:4a:f5:1d:c7:23:67:f7:a0:92:19:3a:73:70:dc:36:e1:c7: bd:f7:17:ae:76:33:5f:0f:d6:81:6c:10:74:aa:d9:29:b4:a5: 49:91:ea:da:00:1b:cd:e9:94:8f:cc:21:15:b7:bf:98:8f:40: ec:c1:6c:52:f0:50:5d:ac:0e:94:33:33:6a:7d:bb:15:de:ae: d2:e4:12:98:6b:c5:91:27:29:d3:df:10:17:27:1f:9e:b6:4f: 39:95:c6:f3:26:b3:c8:c0:4b:fe:be:e0:6b:f6:d4:d8:e0:fb: c0:15:6b:16:ca:3f:50:8d:8c:21:73:4f:d6:90:90:35:92:38: e1:77:84:3d:58:cb:51:a4:24:35:a4:54:86:83:5a:98:9c:42: 47:c2:70:00:3b:a5:42:b4:98:c1:25:db:24:97:bf:39:52:e4: a4:b6:9e:39 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUUi++xcTXN+G1Ke6/WxhRnH5s7M0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MDdaFw0yNjA3MDMwNjUzMDdaMDMxMTAvBgNV BAMTKDBFOUQyMDA5REU3MjBFMEFDRUM5NjYxRTI2RUE0QTc3NkFDNDZEMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4IaZvnsE+HmbzMjHBaWCtsn64 EeMVrlYCp2XnLIAcoMOAQJCJpCjj4KykFq7Z65YFYwhL48PXH0MkOh0GHzpUF23l 834G9Jz6LRu1KsWufNczPNVmvyZMjswGIPGlaxaw95h9oHoZM2coUXxmJxwKKyen z3gaxPRM3AYm11YnJNuNZy8p9tIXXoO1q1LWPB/QmMEssQGtLeY8FYN3ahFHZeV8 9Ecg7N8FvDa7QfMcMY3c/q7xb83rNYg9AEaV2WzB9oId9Nc/3mKwOW9Wi0SFs1Oq WYpK0Pujbn8mXILCQAa8ekw4EtFJ22RQxkLJlMUF3QHISAu5IgD+w5GyjnDzAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUDp0gCd5yDgrOyWYeJupKd2rEbQAwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAxNTAxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQPowDQYJKoZIhvcNAQELBQADggEBAG42 hlI6iLgLN0bhazU8068y4xSwCU4WqJti1p9eMn4WQ7Asb0IQSsHfWv7kDCtSAngq EuQupaYN3LWLIh3pOlUAm/M6nCD4bn4zB+u5RAQiFyN1RLuuwkqCWqpK9R3HI2f3 oJIZOnNw3Dbhx733F652M18P1oFsEHSq2Sm0pUmR6toAG83plI/MIRW3v5iPQOzB bFLwUF2sDpQzM2p9uxXertLkEphrxZEnKdPfEBcnH562TzmVxvMms8jAS/6+4Gv2 1Njg+8AVaxbKP1CNjCFzT9aQkDWSOOF3hD1Yy1GkJDWkVIaDWpicQkfCcAA7pUK0 mMEl2ySXvzlS5KS2njk= -----END CERTIFICATE-----Generated at Sat Jul 5 03:41:31 2025 by rpki-client