$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS202201.roa File: AS202201.roa (raw, json) Hash identifier: BX2CqARMgjDS+bIoMABzNdyOYujiQDsplVa/rtBQWxg= Subject key identifier: 69:22:EF:EB:A3:5A:57:78:0F:D1:3D:C2:E3:BA:5E:0E:C8:63:6D:73 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 6153AC1ADF3B12F4EF35737C71ED8580248062CF Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS202201.roa Signing time: Fri 04 Jul 2025 06:53:05 +0000 ROA not before: Fri 04 Jul 2025 06:48:05 +0000 ROA not after: Fri 03 Jul 2026 06:53:05 +0000 asID: 202201 IP address blocks: 2a0a:6040:5400::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:53:ac:1a:df:3b:12:f4:ef:35:73:7c:71:ed:85:80:24:80:62:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:05 2025 GMT Not After : Jul 3 06:53:05 2026 GMT Subject: CN=6922EFEBA35A57780FD13DC2E3BA5E0EC8636D73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e7:e9:08:7f:be:7e:98:14:fa:18:ad:55:bd: 0b:0c:b5:fb:ea:e7:63:f5:10:58:da:5d:0b:7d:4f: 7c:f6:44:4e:39:f4:90:f7:14:38:3b:2e:52:7a:46: 5e:32:72:7e:aa:de:7c:c9:02:6c:8b:6f:a6:89:c8: ba:03:72:5e:05:54:d1:4c:9a:9e:c1:f1:a9:17:d2: 76:6a:95:0c:39:72:34:71:e3:be:17:e0:7c:37:69: c3:4a:f3:73:78:84:13:65:95:d2:04:38:fa:c6:c1: a6:5e:a9:49:07:b3:e6:4d:4d:ce:93:e3:70:96:f7: ed:91:b0:5d:5d:93:83:c7:d2:39:18:1c:75:f9:1b: 2d:e0:01:8d:c9:2b:73:4b:cc:fb:05:0c:5f:44:d6: d1:b8:91:65:53:c8:62:b4:b7:c7:7e:7d:75:7f:f1: b8:11:9b:65:b5:16:74:57:ec:7b:dd:8b:0c:c8:66: e4:c0:f9:bb:93:c5:a2:92:b7:55:89:ed:ae:6c:e6: 70:9b:a0:c7:4c:1a:7b:41:82:77:73:8f:3f:5d:eb: 01:32:b9:53:a7:58:e5:6f:6a:80:37:4b:c3:85:1b: d3:9b:b3:c9:1f:fe:27:05:01:4c:b7:d6:5b:12:36: a4:b7:18:c2:1f:c6:6c:d4:43:cb:1b:59:ef:1e:9c: 5a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:22:EF:EB:A3:5A:57:78:0F:D1:3D:C2:E3:BA:5E:0E:C8:63:6D:73 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS202201.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:5400::/40 Signature Algorithm: sha256WithRSAEncryption 64:17:1f:55:93:d3:22:39:63:04:6c:df:6c:b5:96:23:aa:bf: fe:8e:66:c5:5b:98:08:93:2f:60:c0:4f:3c:a1:1b:4a:ad:42: f2:94:92:45:af:8d:2b:ea:00:d4:75:b5:45:4a:15:8c:66:28: ca:80:7d:a6:5e:d7:bd:01:33:71:f0:40:b2:4c:9e:60:27:db: b1:60:08:57:a0:9f:4a:f3:6d:49:76:09:5d:d2:8a:62:4c:29: b4:16:04:08:48:20:34:e1:2f:47:a1:f6:79:13:8b:83:0d:6e: f9:16:49:33:81:9b:f7:cf:8a:ea:bb:e5:6f:92:26:08:d3:a4: e4:82:3f:30:34:53:a7:63:e5:16:93:8a:66:11:85:e8:24:80: e8:16:51:63:6e:69:ce:f5:40:de:90:56:e8:aa:c6:ef:48:97: 43:9e:44:74:20:9c:d3:6a:9b:09:4a:dc:b9:6d:54:97:d7:37: ba:bb:e6:8a:c9:99:bb:01:4a:6e:d6:9b:f0:dc:ba:a6:f2:c4: dd:8a:e3:11:fe:7f:82:fc:41:cb:94:5a:6f:25:65:b4:87:f8: 5e:80:42:8b:18:4b:15:dc:56:fc:3f:3f:5d:ab:0c:b1:c0:b3: 2c:a6:74:70:f7:44:28:4b:38:6b:f7:7d:72:b2:5a:4f:a5:b3: b2:e8:c7:ca -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUYVOsGt87EvTvNXN8ce2FgCSAYs8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MDVaFw0yNjA3MDMwNjUzMDVaMDMxMTAvBgNV BAMTKDY5MjJFRkVCQTM1QTU3NzgwRkQxM0RDMkUzQkE1RTBFQzg2MzZENzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx5+kIf75+mBT6GK1VvQsMtfvq 52P1EFjaXQt9T3z2RE459JD3FDg7LlJ6Rl4ycn6q3nzJAmyLb6aJyLoDcl4FVNFM mp7B8akX0nZqlQw5cjRx474X4Hw3acNK83N4hBNlldIEOPrGwaZeqUkHs+ZNTc6T 43CW9+2RsF1dk4PH0jkYHHX5Gy3gAY3JK3NLzPsFDF9E1tG4kWVTyGK0t8d+fXV/ 8bgRm2W1FnRX7HvdiwzIZuTA+buTxaKSt1WJ7a5s5nCboMdMGntBgndzjz9d6wEy uVOnWOVvaoA3S8OFG9Obs8kf/icFAUy31lsSNqS3GMIfxmzUQ8sbWe8enFpBAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUaSLv66NaV3gP0T3C47peDshjbXMwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAyMjAxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQFQwDQYJKoZIhvcNAQELBQADggEBAGQX H1WT0yI5YwRs32y1liOqv/6OZsVbmAiTL2DATzyhG0qtQvKUkkWvjSvqANR1tUVK FYxmKMqAfaZe170BM3HwQLJMnmAn27FgCFegn0rzbUl2CV3SimJMKbQWBAhIIDTh L0eh9nkTi4MNbvkWSTOBm/fPiuq75W+SJgjTpOSCPzA0U6dj5RaTimYRhegkgOgW UWNuac71QN6QVuiqxu9Il0OeRHQgnNNqmwlK3LltVJfXN7q75orJmbsBSm7Wm/Dc uqbyxN2K4xH+f4L8QcuUWm8lZbSH+F6AQosYSxXcVvw/P12rDLHAsyymdHD3RChL OGv3fXKyWk+ls7Lox8o= -----END CERTIFICATE-----Generated at Sat Jul 5 06:09:11 2025 by rpki-client