$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS207778.roa File: AS207778.roa (raw, json) Hash identifier: RLwT9kF2oTTpSaLBFqKR46DzJZ2/qZjihz2etQlhlbU= Subject key identifier: F8:3D:08:FB:7D:8D:67:F0:D7:AF:DF:AE:28:9B:9E:54:B5:AF:45:06 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 2B8592E1C4147431AE312B74E3368BC01AB74BE8 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS207778.roa Signing time: Fri 04 Jul 2025 06:53:13 +0000 ROA not before: Fri 04 Jul 2025 06:48:13 +0000 ROA not after: Fri 03 Jul 2026 06:53:13 +0000 asID: 207778 IP address blocks: 2a0a:6040:d500::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:85:92:e1:c4:14:74:31:ae:31:2b:74:e3:36:8b:c0:1a:b7:4b:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:13 2025 GMT Not After : Jul 3 06:53:13 2026 GMT Subject: CN=F83D08FB7D8D67F0D7AFDFAE289B9E54B5AF4506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c4:2a:46:d1:b1:54:a8:71:25:fb:d4:33:c2: fd:6b:21:49:ff:84:b2:ca:57:80:92:19:f2:d1:42: db:8a:e6:25:45:27:7e:fa:4c:5d:7b:ef:4f:db:0f: 66:09:b8:41:71:07:e2:3c:5a:9b:df:ff:07:e7:36: 5a:2b:8b:bf:86:f2:b2:f1:01:02:0e:72:6e:87:f1: fc:1a:82:68:fe:4e:a0:ca:db:72:22:f8:2e:be:63: 9f:aa:3d:ce:88:23:a3:55:f6:67:3a:d8:1f:92:3e: e0:34:99:d2:98:b7:96:e8:55:30:76:28:b4:bb:44: ce:94:51:96:e1:82:8a:c9:97:e0:8c:68:00:9a:71: cc:b3:da:39:be:dc:97:6a:34:d6:b9:b3:19:ca:59: 2b:99:95:0d:4f:01:68:77:10:34:6b:73:fb:54:bb: cf:42:2f:81:c2:3d:29:a3:5c:c0:9f:8f:14:48:68: 32:37:17:91:ce:ae:de:0a:8e:21:eb:bd:d3:08:61: cd:cc:a9:0e:ef:97:6a:11:5c:d1:6d:0c:26:0d:1e: 85:40:5d:01:35:70:96:70:4a:14:a8:81:80:bb:8f: 60:3d:69:c3:c8:07:20:25:e0:10:80:44:72:ac:71: e3:ba:2e:41:b8:6c:0b:d2:db:72:33:69:d2:f0:87: 97:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3D:08:FB:7D:8D:67:F0:D7:AF:DF:AE:28:9B:9E:54:B5:AF:45:06 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS207778.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:d500::/40 Signature Algorithm: sha256WithRSAEncryption b1:1c:cb:1c:a7:db:8d:5f:d6:19:13:d9:d0:8b:4d:cd:20:33: 7b:c0:29:6e:78:ac:49:03:31:82:2a:94:df:5a:45:ac:e7:af: 5d:f4:fb:c1:c5:56:fa:a3:52:c5:6a:68:09:64:3c:2e:94:55: 29:f8:26:a0:22:38:b5:21:a1:fb:9b:07:5e:26:20:07:55:68: 92:db:18:99:09:79:bb:13:13:90:6b:1f:29:f7:2e:66:7b:a5: 0e:55:b6:97:ae:8c:a5:10:ee:2b:20:a3:c9:ad:4e:b0:c3:07: d9:f8:96:e9:6b:0f:3f:52:bb:f6:4e:aa:d9:9b:7c:50:c9:25: 7e:40:d3:15:89:c7:da:29:b2:7d:03:7e:e0:7a:f9:24:6f:63: 49:30:e4:ee:6c:4f:59:f3:83:87:65:79:43:3e:af:8a:52:a5: b6:13:d0:c0:62:e9:c6:46:0e:1f:51:c0:96:82:e9:26:5f:b5: cb:50:3f:b9:25:74:ec:d5:36:6f:90:51:f6:a3:16:ba:47:c2: a1:d8:b9:e6:85:63:7a:ac:31:09:05:e3:a1:a4:4c:42:1f:74: 06:14:2d:c3:f6:24:f4:20:e7:77:39:2a:70:14:a0:1e:f8:0d: fc:08:a3:cc:b9:4e:cc:de:c2:f7:b7:29:82:9e:15:d6:54:8b: 55:39:da:a5 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUK4WS4cQUdDGuMSt04zaLwBq3S+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MTNaFw0yNjA3MDMwNjUzMTNaMDMxMTAvBgNV BAMTKEY4M0QwOEZCN0Q4RDY3RjBEN0FGREZBRTI4OUI5RTU0QjVBRjQ1MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3xCpG0bFUqHEl+9Qzwv1rIUn/ hLLKV4CSGfLRQtuK5iVFJ376TF1770/bD2YJuEFxB+I8Wpvf/wfnNlori7+G8rLx AQIOcm6H8fwagmj+TqDK23Ii+C6+Y5+qPc6II6NV9mc62B+SPuA0mdKYt5boVTB2 KLS7RM6UUZbhgorJl+CMaACaccyz2jm+3JdqNNa5sxnKWSuZlQ1PAWh3EDRrc/tU u89CL4HCPSmjXMCfjxRIaDI3F5HOrt4KjiHrvdMIYc3MqQ7vl2oRXNFtDCYNHoVA XQE1cJZwShSogYC7j2A9acPIByAl4BCARHKsceO6LkG4bAvS23IzadLwh5eJAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU+D0I+32NZ/DXr9+uKJueVLWvRQYwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjA3Nzc4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQNUwDQYJKoZIhvcNAQELBQADggEBALEc yxyn241f1hkT2dCLTc0gM3vAKW54rEkDMYIqlN9aRaznr130+8HFVvqjUsVqaAlk PC6UVSn4JqAiOLUhofubB14mIAdVaJLbGJkJebsTE5BrHyn3LmZ7pQ5VtpeujKUQ 7isgo8mtTrDDB9n4lulrDz9Su/ZOqtmbfFDJJX5A0xWJx9opsn0DfuB6+SRvY0kw 5O5sT1nzg4dleUM+r4pSpbYT0MBi6cZGDh9RwJaC6SZftctQP7kldOzVNm+QUfaj FrpHwqHYueaFY3qsMQkF46GkTEIfdAYULcP2JPQg53c5KnAUoB74DfwIo8y5Tsze wve3KYKeFdZUi1U52qU= -----END CERTIFICATE-----Generated at Sat Jul 5 04:15:01 2025 by rpki-client