$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS48818.roa File: AS48818.roa (raw, json) Hash identifier: X5f9P8UvLYtzZkc2ahJcQKYBWrf+7fe82WS2Z945Nmk= Subject key identifier: 4F:87:BF:0F:2B:28:39:7E:D5:59:72:B3:B1:99:51:BA:6E:9D:3D:FA Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 1A36CD9281FE306C55BE0CB46EE6F5C797A2A322 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS48818.roa Signing time: Fri 04 Jul 2025 06:52:55 +0000 ROA not before: Fri 04 Jul 2025 06:47:55 +0000 ROA not after: Fri 03 Jul 2026 06:52:55 +0000 asID: 48818 IP address blocks: 2a0a:6040:7c00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:36:cd:92:81:fe:30:6c:55:be:0c:b4:6e:e6:f5:c7:97:a2:a3:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:47:55 2025 GMT Not After : Jul 3 06:52:55 2026 GMT Subject: CN=4F87BF0F2B28397ED55972B3B19951BA6E9D3DFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d4:47:ec:4a:9e:27:4f:9b:eb:42:e2:ee:85: c3:01:86:33:45:68:b5:65:b3:ed:d9:af:2c:7c:78: ba:b2:05:06:43:d0:73:4d:6e:bd:2c:5d:0c:28:f4: 4e:f0:4d:b3:1e:f1:20:d3:5b:58:dd:ab:7f:1f:18: 35:dc:1c:27:2d:b3:a6:de:3b:8c:8f:3f:d6:0c:b0: d5:ae:ce:9a:9b:7c:28:93:83:68:8c:b4:2a:99:8f: 96:40:81:80:30:9f:e2:5c:01:5a:c0:fb:00:25:f4: 94:4f:9c:d9:f4:83:a9:07:59:d6:bc:a1:6a:be:5c: f9:73:92:e9:5c:83:a5:2a:8d:80:e9:35:fb:38:4b: cb:6e:b6:8b:3c:b7:ad:f9:54:53:0d:63:0c:91:a8: f0:22:cc:af:97:70:c3:b2:05:8f:35:19:3c:7d:53: 1b:27:85:76:b9:a6:1b:81:19:f6:33:ca:9e:f2:01: 18:78:fa:d5:29:95:cc:08:42:2d:7a:09:35:6a:c9: 1c:04:5d:91:2f:27:66:cf:8a:f6:87:70:4f:1d:14: 33:63:41:f5:87:ea:64:01:4f:a3:41:64:59:43:70: 8a:98:dc:3c:a2:4e:9d:c7:87:9a:a6:f0:1f:28:56: 11:16:3c:aa:74:ef:fe:8f:15:e8:e4:29:d2:60:f1: 38:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:87:BF:0F:2B:28:39:7E:D5:59:72:B3:B1:99:51:BA:6E:9D:3D:FA X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS48818.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:7c00::/40 Signature Algorithm: sha256WithRSAEncryption 3b:40:94:31:49:f8:bd:e1:16:27:2a:ba:44:d0:70:06:69:47: 33:de:d4:36:69:45:b5:5e:2b:9d:8a:2c:7e:49:39:92:ab:c2: 80:49:39:83:37:3f:41:2c:40:50:f4:b6:76:e4:fd:cb:85:d8: 89:d5:0b:ed:47:ee:bc:90:9d:ae:76:71:22:bf:35:81:ed:53: 7b:f9:7a:1b:b5:e5:fa:b7:b6:32:aa:ab:21:72:89:c2:7a:c6: 55:a2:b6:e6:f0:bf:60:84:47:ce:5f:78:a5:a5:4e:db:b5:74: c0:64:f9:17:5d:83:5a:03:00:6c:8d:b8:5b:57:d2:cc:52:5b: 6a:2d:20:25:04:7e:7d:24:35:a3:fe:68:f6:ce:98:ba:24:2a: 8d:28:88:7a:04:13:4a:55:5c:fb:46:4c:54:eb:69:4f:a8:49: 8b:bd:de:43:8e:0a:d7:0b:2a:92:53:00:bb:2d:2f:29:c7:76: eb:23:29:47:1b:32:c9:e4:45:2d:78:b0:f5:a6:93:de:b4:bc: 94:2b:df:ad:d6:61:a2:2a:da:ee:62:fe:da:b4:fe:28:35:71: cb:e5:91:5c:c1:2e:53:04:1d:18:b6:d8:4c:8d:f8:fa:7b:54: 7a:14:59:84:2a:e0:2c:6c:26:a2:dd:6a:fc:b9:03:d7:b4:33: 1c:30:e7:da -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUGjbNkoH+MGxVvgy0bub1x5eioyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ3NTVaFw0yNjA3MDMwNjUyNTVaMDMxMTAvBgNV BAMTKDRGODdCRjBGMkIyODM5N0VENTU5NzJCM0IxOTk1MUJBNkU5RDNERkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw1EfsSp4nT5vrQuLuhcMBhjNF aLVls+3Zryx8eLqyBQZD0HNNbr0sXQwo9E7wTbMe8SDTW1jdq38fGDXcHCcts6be O4yPP9YMsNWuzpqbfCiTg2iMtCqZj5ZAgYAwn+JcAVrA+wAl9JRPnNn0g6kHWda8 oWq+XPlzkulcg6UqjYDpNfs4S8tutos8t635VFMNYwyRqPAizK+XcMOyBY81GTx9 UxsnhXa5phuBGfYzyp7yARh4+tUplcwIQi16CTVqyRwEXZEvJ2bPivaHcE8dFDNj QfWH6mQBT6NBZFlDcIqY3DyiTp3Hh5qm8B8oVhEWPKp07/6PFejkKdJg8TiHAgMB AAGjggHzMIIB7zAdBgNVHQ4EFgQUT4e/DysoOX7VWXKzsZlRum6dPfowHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTNDg4MTgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqCmBAfDANBgkqhkiG9w0BAQsFAAOCAQEAO0CU MUn4veEWJyq6RNBwBmlHM97UNmlFtV4rnYosfkk5kqvCgEk5gzc/QSxAUPS2duT9 y4XYidUL7UfuvJCdrnZxIr81ge1Te/l6G7Xl+re2MqqrIXKJwnrGVaK25vC/YIRH zl94paVO27V0wGT5F12DWgMAbI24W1fSzFJbai0gJQR+fSQ1o/5o9s6YuiQqjSiI egQTSlVc+0ZMVOtpT6hJi73eQ44K1wsqklMAuy0vKcd26yMpRxsyyeRFLXiw9aaT 3rS8lCvfrdZhoira7mL+2rT+KDVxy+WRXMEuUwQdGLbYTI34+ntUehRZhCrgLGwm ot1q/LkD17QzHDDn2g== -----END CERTIFICATE-----Generated at Sat Jul 5 06:08:34 2025 by rpki-client