$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS51087.roa File: AS51087.roa (raw, json) Hash identifier: CepkTAa+AIcWiAZyr5W/k5kJ3pPl4C97RZtnFpxldIY= Subject key identifier: D0:FB:EB:96:DE:53:63:41:FE:FE:74:B4:4E:00:3F:67:E1:D7:20:D2 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 42427E22707A006848BA495F93DB55D9133DED11 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS51087.roa Signing time: Fri 04 Jul 2025 06:53:02 +0000 ROA not before: Fri 04 Jul 2025 06:48:02 +0000 ROA not after: Fri 03 Jul 2026 06:53:02 +0000 asID: 51087 IP address blocks: 2a0a:6040:7d00::/40 maxlen: 48 2a0a:6040:d800::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:42:7e:22:70:7a:00:68:48:ba:49:5f:93:db:55:d9:13:3d:ed:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:02 2025 GMT Not After : Jul 3 06:53:02 2026 GMT Subject: CN=D0FBEB96DE536341FEFE74B44E003F67E1D720D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:76:0f:d5:9f:bc:a6:19:05:da:9f:09:f6:e9: e8:c5:b4:1f:07:24:ad:51:ce:e9:c2:e7:bc:fc:3b: 84:3b:7d:03:1a:30:d4:73:58:24:e5:7b:29:eb:0b: c3:21:a6:ce:c1:0c:af:f7:53:f1:ab:ab:8d:3e:7a: f1:68:d1:51:fd:fe:e7:db:ea:20:35:89:26:7b:83: 61:3b:99:9a:a3:3b:db:4b:19:57:0e:a6:db:dd:a3: f4:d0:6c:b9:1e:35:91:08:53:24:1b:a9:fc:67:39: 7a:00:d5:b2:97:ca:ce:51:82:d3:df:a6:9e:d7:15: 8a:48:f0:16:1c:c3:e7:da:15:b2:68:d9:eb:a6:0c: 67:c3:6a:b5:11:c4:33:39:58:e6:ae:1e:41:12:6a: 37:3f:44:2c:fa:06:53:a8:1e:91:5c:3d:ea:9e:be: dc:25:af:7c:52:d1:3c:4b:04:fe:e6:9f:64:84:85: ae:b6:09:35:2d:fa:29:80:42:24:ba:e3:f8:5b:cb: 07:40:2b:95:69:2e:9a:ae:c8:a6:56:73:65:da:0c: ac:8d:4f:ae:bf:b8:34:3f:5c:f1:22:72:2a:97:3a: 67:d3:a4:00:4a:57:f8:e4:e8:d8:5c:2c:bf:a6:28: 06:f5:01:b0:49:67:87:88:00:90:15:68:94:d5:d1: d9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:FB:EB:96:DE:53:63:41:FE:FE:74:B4:4E:00:3F:67:E1:D7:20:D2 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS51087.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:7d00::/40 2a0a:6040:d800::/40 Signature Algorithm: sha256WithRSAEncryption c7:75:fe:88:6c:9f:2c:65:a9:f9:26:a7:06:cd:f1:ce:a7:91: 09:3c:f0:35:7e:29:9b:07:e4:40:e8:d1:68:e4:27:4d:2c:d4: 8d:5f:4a:39:d6:fb:f2:e5:46:77:b0:79:7e:fd:d3:76:29:5c: e2:fe:64:9b:d8:9c:e6:45:76:25:8b:d5:5f:82:59:23:56:63: 7c:60:7c:f2:aa:03:a6:95:bc:1a:a8:da:62:6e:68:e5:df:0b: 20:94:b7:d8:ce:71:54:f7:ac:d4:b1:5e:76:b0:97:a9:40:34: ea:ad:61:04:88:b3:af:f5:51:d6:a4:12:ff:33:59:fd:67:b2: 9b:9b:07:71:d8:44:32:cb:5c:65:5e:78:96:87:86:0e:7a:63: 5b:05:1e:84:f7:aa:57:85:e3:6e:fc:86:ee:21:51:b7:c5:8a: 81:34:11:01:93:06:47:c4:ae:a9:0f:41:4b:15:20:58:85:d8: 5d:33:87:00:d4:39:f1:b2:74:f3:78:6f:14:17:aa:39:d7:72: 81:31:4a:7f:9e:66:c2:15:60:0b:20:90:f0:23:a7:e7:5c:6f: 3c:de:6d:4d:34:8f:5a:9d:b3:8e:95:9b:d8:4e:44:29:df:02: 52:b9:47:2f:d9:b7:15:c0:6d:e2:b6:68:91:89:58:51:89:83: a5:08:a7:42 -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUQkJ+InB6AGhIuklfk9tV2RM97REwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MDJaFw0yNjA3MDMwNjUzMDJaMDMxMTAvBgNV BAMTKEQwRkJFQjk2REU1MzYzNDFGRUZFNzRCNDRFMDAzRjY3RTFENzIwRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8dg/Vn7ymGQXanwn26ejFtB8H JK1RzunC57z8O4Q7fQMaMNRzWCTleynrC8Mhps7BDK/3U/Grq40+evFo0VH9/ufb 6iA1iSZ7g2E7mZqjO9tLGVcOptvdo/TQbLkeNZEIUyQbqfxnOXoA1bKXys5RgtPf pp7XFYpI8BYcw+faFbJo2eumDGfDarURxDM5WOauHkESajc/RCz6BlOoHpFcPeqe vtwlr3xS0TxLBP7mn2SEha62CTUt+imAQiS64/hbywdAK5VpLpquyKZWc2XaDKyN T66/uDQ/XPEiciqXOmfTpABKV/jk6NhcLL+mKAb1AbBJZ4eIAJAVaJTV0dlzAgMB AAGjggH7MIIB9zAdBgNVHQ4EFgQU0Pvrlt5TY0H+/nS0TgA/Z+HXINIwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTNTEwODcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKQYIKwYBBQUH AQcBAf8EGjAYMBYEAgACMBADBgAqCmBAfQMGACoKYEDYMA0GCSqGSIb3DQEBCwUA A4IBAQDHdf6IbJ8sZan5JqcGzfHOp5EJPPA1fimbB+RA6NFo5CdNLNSNX0o51vvy 5UZ3sHl+/dN2KVzi/mSb2JzmRXYli9VfglkjVmN8YHzyqgOmlbwaqNpibmjl3wsg lLfYznFU96zUsV52sJepQDTqrWEEiLOv9VHWpBL/M1n9Z7Kbmwdx2EQyy1xlXniW h4YOemNbBR6E96pXheNu/IbuIVG3xYqBNBEBkwZHxK6pD0FLFSBYhdhdM4cA1Dnx snTzeG8UF6o513KBMUp/nmbCFWALIJDwI6fnXG883m1NNI9anbOOlZvYTkQp3wJS uUcv2bcVwG3itmiRiVhRiYOlCKdC -----END CERTIFICATE-----Generated at Sat Jul 5 04:08:30 2025 by rpki-client