$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS48605.roa File: AS48605.roa (raw, json) Hash identifier: jaiZbhEhZtanMPZCUNbjZPvQGIzBpqTt6Ag9EQXXQGM= Subject key identifier: 43:7E:C3:FF:D4:71:0C:07:A8:16:24:32:E4:DF:2A:C2:53:9E:CB:6E Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 6EC6B7519AD3D765687D6E247B8CAE09801814F2 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS48605.roa Signing time: Fri 04 Jul 2025 06:53:11 +0000 ROA not before: Fri 04 Jul 2025 06:48:11 +0000 ROA not after: Fri 03 Jul 2026 06:53:11 +0000 asID: 48605 IP address blocks: 2a05:dfc1:1200::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 01:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:c6:b7:51:9a:d3:d7:65:68:7d:6e:24:7b:8c:ae:09:80:18:14:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:11 2025 GMT Not After : Jul 3 06:53:11 2026 GMT Subject: CN=437EC3FFD4710C07A8162432E4DF2AC2539ECB6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:98:d3:e6:c8:94:0d:2a:94:ee:37:ea:1f:15: 94:90:ca:ef:8a:c4:44:75:f8:68:f5:c0:a2:d3:96: 41:1a:84:d4:94:f7:e7:41:b8:67:aa:4f:d2:af:38: f8:12:2b:5c:0d:01:9e:8c:c5:06:72:4b:22:b7:00: d7:24:04:90:19:47:3a:84:73:fb:c9:1b:1b:22:db: b1:84:14:e3:e1:79:8c:3f:06:f2:9d:69:6b:3b:00: 6e:af:28:6a:15:3a:72:89:77:ca:f8:b2:3f:8f:e2: 3b:91:41:ec:3f:2e:d0:62:bd:0f:ca:b5:89:f4:76: 48:7f:05:2d:52:a1:90:48:b7:80:08:8b:82:a8:11: 5a:4d:1e:f0:15:c0:4d:cf:49:9d:74:b8:0b:11:4c: f4:4c:df:65:9d:d7:fc:81:42:55:04:5f:3d:00:89: 56:e1:38:50:64:0d:85:56:f3:0c:fb:c2:11:20:00: cc:32:d5:9c:f7:d0:c3:02:5a:c1:54:49:ca:47:0c: 72:e4:57:a4:a6:b5:d9:0f:83:bd:68:98:31:72:03: 87:1e:a3:26:25:f7:9e:d6:6c:a7:5a:71:52:90:7a: e2:8c:e8:68:a7:d6:e1:21:7d:24:87:ae:a0:6d:4a: 4f:5f:3d:62:f2:e3:6c:e6:78:ec:37:41:b6:0a:2d: 31:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:7E:C3:FF:D4:71:0C:07:A8:16:24:32:E4:DF:2A:C2:53:9E:CB:6E X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS48605.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:1200::/40 Signature Algorithm: sha256WithRSAEncryption a9:9c:c2:34:c9:9e:f8:36:b0:a9:85:f3:06:d5:be:4f:04:d7: a2:02:eb:81:dd:e6:61:27:44:b7:cf:f2:0f:cc:f1:35:b2:24: 26:9f:0e:29:e0:40:bd:a8:8c:4b:a4:6f:d5:75:01:90:e8:97: 6b:33:46:34:5f:29:f2:52:74:72:64:cb:7a:0d:ef:69:5a:dc: 3d:99:13:33:bd:c7:66:47:bb:9e:e0:5f:9f:fd:0a:9e:8e:b4: 15:c3:b7:08:d9:38:94:ea:6e:8a:21:27:15:39:44:4c:a1:00: a4:31:e1:95:8b:82:d9:fe:20:3c:0c:2f:fe:cb:50:2f:79:41: 05:be:54:f8:4f:c2:7b:85:18:55:56:01:67:7d:65:aa:7e:72: 0c:9f:c4:b3:9e:02:75:b2:db:42:3f:b9:5b:94:a4:58:79:c2: 0e:d6:21:7f:c1:0c:b6:21:8f:13:d6:46:ac:8e:c5:11:0c:9a: f0:7f:9e:ab:ab:ef:65:46:39:8b:de:74:bd:8c:41:99:2f:fc: cb:f8:ea:4b:b0:96:d3:20:83:38:c0:30:f1:0a:76:a9:8a:f0: 1f:3d:f1:8f:fc:35:44:4c:c4:5e:d5:ed:60:66:8e:20:7a:eb: 70:01:7a:2c:f6:66:5b:5e:02:ae:84:0a:85:65:05:8e:91:66: d9:a1:f6:c9 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUbsa3UZrT12VofW4ke4yuCYAYFPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MTFaFw0yNjA3MDMwNjUzMTFaMDMxMTAvBgNV BAMTKDQzN0VDM0ZGRDQ3MTBDMDdBODE2MjQzMkU0REYyQUMyNTM5RUNCNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0mNPmyJQNKpTuN+ofFZSQyu+K xER1+Gj1wKLTlkEahNSU9+dBuGeqT9KvOPgSK1wNAZ6MxQZySyK3ANckBJAZRzqE c/vJGxsi27GEFOPheYw/BvKdaWs7AG6vKGoVOnKJd8r4sj+P4juRQew/LtBivQ/K tYn0dkh/BS1SoZBIt4AIi4KoEVpNHvAVwE3PSZ10uAsRTPRM32Wd1/yBQlUEXz0A iVbhOFBkDYVW8wz7whEgAMwy1Zz30MMCWsFUScpHDHLkV6SmtdkPg71omDFyA4ce oyYl957WbKdacVKQeuKM6Gin1uEhfSSHrqBtSk9fPWLy42zmeOw3QbYKLTGhAgMB AAGjggHzMIIB7zAdBgNVHQ4EFgQUQ37D/9RxDAeoFiQy5N8qwlOey24wHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTNDg2MDUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqBd/BEjANBgkqhkiG9w0BAQsFAAOCAQEAqZzC NMme+DawqYXzBtW+TwTXogLrgd3mYSdEt8/yD8zxNbIkJp8OKeBAvaiMS6Rv1XUB kOiXazNGNF8p8lJ0cmTLeg3vaVrcPZkTM73HZke7nuBfn/0Kno60FcO3CNk4lOpu iiEnFTlETKEApDHhlYuC2f4gPAwv/stQL3lBBb5U+E/Ce4UYVVYBZ31lqn5yDJ/E s54CdbLbQj+5W5SkWHnCDtYhf8EMtiGPE9ZGrI7FEQya8H+eq6vvZUY5i950vYxB mS/8y/jqS7CW0yCDOMAw8Qp2qYrwHz3xj/w1REzEXtXtYGaOIHrrcAF6LPZmW14C roQKhWUFjpFm2aH2yQ== -----END CERTIFICATE-----Generated at Sat Jul 5 03:58:36 2025 by rpki-client