$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS396998.roa File: AS396998.roa (raw, json) Hash identifier: UipH4urmSo5Dn7yM0mxp/aHDQy0lvQ/+wEiuc+jk16Y= Subject key identifier: DF:23:24:97:49:90:17:2A:07:91:33:DC:1C:F4:95:AA:E6:04:79:E7 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 037B0DCAA2CF9C77908513CACEA75106C30FC834 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS396998.roa Signing time: Fri 04 Jul 2025 06:53:28 +0000 ROA not before: Fri 04 Jul 2025 06:48:28 +0000 ROA not after: Fri 03 Jul 2026 06:53:28 +0000 asID: 396998 IP address blocks: 2a0a:6040:fa00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 01:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:7b:0d:ca:a2:cf:9c:77:90:85:13:ca:ce:a7:51:06:c3:0f:c8:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:28 2025 GMT Not After : Jul 3 06:53:28 2026 GMT Subject: CN=DF2324974990172A079133DC1CF495AAE60479E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bc:28:5d:dd:73:ea:8f:61:03:82:a2:f8:67: e4:ed:5b:02:43:50:4a:c3:e1:c0:27:dd:21:1f:4d: a6:1e:d9:cb:bd:90:96:2b:da:cb:f7:02:e2:7a:6e: 22:64:f8:3f:6d:d0:32:da:ca:ab:59:cf:bf:b9:7b: a1:cf:da:d8:87:54:c6:84:b0:e6:8e:8d:f8:4a:f0: e8:c8:4f:53:b5:3b:6b:51:c7:dc:8a:d8:2a:cc:db: 23:62:5c:28:d0:9f:bb:d9:be:16:c3:20:05:af:79: 41:08:85:36:0b:4e:d2:6a:6b:d7:e1:f5:a9:51:1a: 19:fd:63:3d:7d:61:4a:46:e0:27:eb:ad:23:f0:e1: 6f:03:99:31:62:66:2a:d6:8b:12:cd:1d:0a:00:51: 35:35:e4:b1:81:2a:cc:d5:24:f4:52:23:70:7a:e4: de:b1:81:3d:b2:c2:6a:23:13:56:20:48:63:b7:e7: 3e:f5:aa:16:73:9d:67:54:e6:29:fc:71:72:6f:1f: 7f:09:62:75:df:0c:cb:38:29:7d:a7:2a:13:89:dd: 3c:0b:3b:44:6f:1d:3a:25:17:07:06:a5:a7:e5:61: 19:45:84:b2:d5:7d:bb:7c:58:ac:ba:6b:69:87:ea: 2a:60:99:ee:0a:a6:04:87:05:2c:79:2e:a7:dc:32: 24:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:23:24:97:49:90:17:2A:07:91:33:DC:1C:F4:95:AA:E6:04:79:E7 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS396998.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:fa00::/40 Signature Algorithm: sha256WithRSAEncryption 44:64:26:1b:cb:9e:1b:0b:a7:ed:a6:a1:89:40:85:06:2b:03: 13:4a:8a:8a:cd:f9:ae:c0:a0:cf:d3:99:b5:39:68:dc:be:12: 36:8a:15:7c:54:09:ea:21:21:8d:e2:eb:90:04:d9:78:cc:af: d7:2e:bf:be:28:c0:ad:9a:df:11:88:b6:0d:13:e4:c8:f9:e3: 2c:78:26:8c:62:66:0c:bd:4b:d9:29:c7:fc:be:71:92:cd:1c: a9:54:bd:b6:95:21:ed:94:8b:dc:50:90:80:6d:95:5b:8a:01: 37:f5:82:f5:f2:b1:39:2b:6c:6a:06:6b:ca:b1:59:c8:03:4f: 88:4d:68:d2:fa:6f:64:18:ac:6e:0a:69:44:7d:dd:fc:cc:c7: 13:20:0e:0a:92:c9:35:7d:7d:12:74:ed:44:5e:88:4b:c4:78: 6f:1f:0a:56:ba:ab:e9:05:d6:18:a2:bf:91:80:1d:57:c9:5c: db:f5:e6:20:85:47:c3:43:c5:66:34:b3:5f:9f:84:46:d0:74: bb:21:59:1b:11:23:5a:e3:ad:64:ad:f7:24:fc:a6:1f:72:57: 9a:20:3e:3b:1b:b4:10:76:97:53:4c:b6:27:2b:c1:fd:0d:a2: 00:f3:5a:cc:60:ab:52:17:61:e3:10:48:76:34:34:d5:c3:59: e7:bd:74:42 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUA3sNyqLPnHeQhRPKzqdRBsMPyDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MjhaFw0yNjA3MDMwNjUzMjhaMDMxMTAvBgNV BAMTKERGMjMyNDk3NDk5MDE3MkEwNzkxMzNEQzFDRjQ5NUFBRTYwNDc5RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPvChd3XPqj2EDgqL4Z+TtWwJD UErD4cAn3SEfTaYe2cu9kJYr2sv3AuJ6biJk+D9t0DLayqtZz7+5e6HP2tiHVMaE sOaOjfhK8OjIT1O1O2tRx9yK2CrM2yNiXCjQn7vZvhbDIAWveUEIhTYLTtJqa9fh 9alRGhn9Yz19YUpG4CfrrSPw4W8DmTFiZirWixLNHQoAUTU15LGBKszVJPRSI3B6 5N6xgT2ywmojE1YgSGO35z71qhZznWdU5in8cXJvH38JYnXfDMs4KX2nKhOJ3TwL O0RvHTolFwcGpaflYRlFhLLVfbt8WKy6a2mH6ipgme4KpgSHBSx5LqfcMiTHAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU3yMkl0mQFyoHkTPcHPSVquYEeecwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMzk2OTk4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQPowDQYJKoZIhvcNAQELBQADggEBAERk JhvLnhsLp+2moYlAhQYrAxNKiorN+a7AoM/TmbU5aNy+EjaKFXxUCeohIY3i65AE 2XjMr9cuv74owK2a3xGItg0T5Mj54yx4JoxiZgy9S9kpx/y+cZLNHKlUvbaVIe2U i9xQkIBtlVuKATf1gvXysTkrbGoGa8qxWcgDT4hNaNL6b2QYrG4KaUR93fzMxxMg DgqSyTV9fRJ07UReiEvEeG8fCla6q+kF1hiiv5GAHVfJXNv15iCFR8NDxWY0s1+f hEbQdLshWRsRI1rjrWSt9yT8ph9yV5ogPjsbtBB2l1NMticrwf0NogDzWsxgq1IX YeMQSHY0NNXDWee9dEI= -----END CERTIFICATE-----Generated at Sat Jul 5 03:44:16 2025 by rpki-client