$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS202939.roa File: AS202939.roa (raw, json) Hash identifier: V5eMZBXIAbEoMmDHj+b2UNSnAhhjJnAImuHCIzAXRBE= Subject key identifier: EA:9C:CF:E7:1C:87:D6:37:33:46:FB:2B:CC:2D:E3:F1:44:37:1F:EE Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 0BDE4EA76DED4F7D8F72703A38024A6E44D6EB1C Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS202939.roa Signing time: Fri 04 Jul 2025 06:53:27 +0000 ROA not before: Fri 04 Jul 2025 06:48:27 +0000 ROA not after: Fri 03 Jul 2026 06:53:27 +0000 asID: 202939 IP address blocks: 2a0a:6040:3500::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 01:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:de:4e:a7:6d:ed:4f:7d:8f:72:70:3a:38:02:4a:6e:44:d6:eb:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:27 2025 GMT Not After : Jul 3 06:53:27 2026 GMT Subject: CN=EA9CCFE71C87D6373346FB2BCC2DE3F144371FEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0d:33:96:3e:39:ee:a9:2b:23:b5:b9:87:a8: f6:c3:98:c7:92:1b:08:3f:ba:82:84:9b:36:3b:35: 44:4c:7d:95:47:cd:0a:e8:15:88:3f:eb:f2:0c:7f: 53:a7:d0:a2:41:c3:c3:b6:c0:1c:1c:8b:97:11:8c: fe:c1:9a:33:aa:a7:71:06:01:33:be:bd:67:0b:2d: aa:00:94:ce:9e:80:54:d0:bd:fd:f8:84:72:bb:80: e9:41:0f:3c:84:b9:48:a5:6b:1c:1f:bf:3d:8e:32: cb:9b:05:81:cf:c9:e0:60:a4:16:31:29:7e:ad:9c: 41:22:fa:70:e4:4b:72:49:e1:49:4b:57:a0:a9:76: 1c:a5:72:e4:bf:07:b1:6b:11:e7:54:84:3f:f7:ee: 64:02:43:0f:5b:64:21:b6:f8:ba:d3:89:63:fd:00: 03:c4:ae:e6:f5:a1:3e:42:d1:ce:88:0c:1a:39:f4: 0a:88:05:b2:ac:7e:e0:37:c7:cb:af:2e:6b:1d:e3: d0:ef:4a:63:92:69:94:ef:85:f8:4c:65:0f:d4:9f: 6f:bf:de:1e:83:99:d3:47:84:d9:c4:fd:46:8f:8f: 8a:68:96:49:f4:f7:01:10:52:cc:90:f2:7f:f1:d1: e3:d9:98:db:b4:05:00:7e:ed:83:ae:47:b5:56:9c: 67:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9C:CF:E7:1C:87:D6:37:33:46:FB:2B:CC:2D:E3:F1:44:37:1F:EE X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS202939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:3500::/40 Signature Algorithm: sha256WithRSAEncryption 9e:0d:b4:e1:b7:bd:d3:08:30:9c:9e:ea:90:b6:58:cb:7d:00: 24:54:41:fd:da:24:3c:8d:67:6e:f6:fe:10:a4:9d:5a:b5:31: d0:48:ca:ac:6c:da:bd:d4:bf:81:2f:92:fc:7f:59:27:93:37: 2b:62:91:55:08:24:d4:7d:4e:6b:1d:ea:1b:ae:89:45:e8:9e: 2c:45:bd:dc:53:e7:e2:3a:7d:46:3c:7c:03:10:4e:53:a6:22: 17:ca:86:6d:ce:c2:b5:d5:37:12:bc:c4:f4:7c:37:de:e7:91: e2:d6:41:60:3c:9c:cb:e2:a7:1e:4c:53:82:7e:cd:3d:68:98: 80:ee:b2:5e:5b:e9:13:82:e1:4d:8b:e7:d0:e3:5d:3c:b9:84: b1:eb:71:3a:00:f7:ef:01:42:87:b8:82:2f:1c:b7:1e:12:46: 12:9b:c0:a1:c1:22:87:be:ed:10:d2:18:ac:a9:ca:08:62:54: 1c:10:a4:a3:6d:3d:6f:6b:dd:35:f2:b1:49:f8:2c:39:52:84: 54:e2:0a:3e:f4:81:c6:cb:04:45:65:be:fe:29:92:33:4c:16: 43:cf:c5:c3:32:ce:34:13:8b:c3:4d:a1:41:9f:a8:fa:0f:7c: 00:99:e3:7e:db:2d:23:44:32:01:ec:1d:26:12:0b:df:ed:8c: 7e:13:09:47 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUC95Op23tT32PcnA6OAJKbkTW6xwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MjdaFw0yNjA3MDMwNjUzMjdaMDMxMTAvBgNV BAMTKEVBOUNDRkU3MUM4N0Q2MzczMzQ2RkIyQkNDMkRFM0YxNDQzNzFGRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcDTOWPjnuqSsjtbmHqPbDmMeS Gwg/uoKEmzY7NURMfZVHzQroFYg/6/IMf1On0KJBw8O2wBwci5cRjP7BmjOqp3EG ATO+vWcLLaoAlM6egFTQvf34hHK7gOlBDzyEuUilaxwfvz2OMsubBYHPyeBgpBYx KX6tnEEi+nDkS3JJ4UlLV6CpdhylcuS/B7FrEedUhD/37mQCQw9bZCG2+LrTiWP9 AAPErub1oT5C0c6IDBo59AqIBbKsfuA3x8uvLmsd49DvSmOSaZTvhfhMZQ/Un2+/ 3h6DmdNHhNnE/UaPj4polkn09wEQUsyQ8n/x0ePZmNu0BQB+7YOuR7VWnGc3AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU6pzP5xyH1jczRvsrzC3j8UQ3H+4wHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAyOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQDUwDQYJKoZIhvcNAQELBQADggEBAJ4N tOG3vdMIMJye6pC2WMt9ACRUQf3aJDyNZ272/hCknVq1MdBIyqxs2r3Uv4Evkvx/ WSeTNytikVUIJNR9Tmsd6huuiUXonixFvdxT5+I6fUY8fAMQTlOmIhfKhm3OwrXV NxK8xPR8N97nkeLWQWA8nMvipx5MU4J+zT1omIDusl5b6ROC4U2L59DjXTy5hLHr cToA9+8BQoe4gi8ctx4SRhKbwKHBIoe+7RDSGKypyghiVBwQpKNtPW9r3TXysUn4 LDlShFTiCj70gcbLBEVlvv4pkjNMFkPPxcMyzjQTi8NNoUGfqPoPfACZ437bLSNE MgHsHSYSC9/tjH4TCUc= -----END CERTIFICATE-----Generated at Sat Jul 5 04:15:03 2025 by rpki-client