$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS58270.roa File: AS58270.roa (raw, json) Hash identifier: FOD2Kg+psrEZE+W0AQA41LfiiVS/zLOfBj2UV6juCEg= Subject key identifier: 1E:90:DF:78:83:5C:F0:B9:D9:53:75:25:FA:9A:19:B8:54:60:D1:C7 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 3FF005A707A41A38B94DCE9396CD967D5CC753BA Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS58270.roa Signing time: Fri 04 Jul 2025 06:53:08 +0000 ROA not before: Fri 04 Jul 2025 06:48:08 +0000 ROA not after: Fri 03 Jul 2026 06:53:08 +0000 asID: 58270 IP address blocks: 2a0a:6040:5200::/40 maxlen: 48 2a0a:6040:6200::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:f0:05:a7:07:a4:1a:38:b9:4d:ce:93:96:cd:96:7d:5c:c7:53:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:08 2025 GMT Not After : Jul 3 06:53:08 2026 GMT Subject: CN=1E90DF78835CF0B9D9537525FA9A19B85460D1C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:dd:49:7a:fa:7c:19:b5:f4:94:ca:ac:9b:13: 17:6c:4d:70:fe:ef:88:fb:8c:d0:f1:1c:66:10:5d: 0a:47:88:24:ce:96:3c:8c:fb:8d:53:88:e5:34:8c: d2:fe:36:ee:c9:55:ce:b6:7a:b2:8e:93:d4:2c:d7: f0:d7:b1:90:61:7f:3b:71:08:aa:0f:f1:b2:98:40: ac:09:c5:52:7f:b1:84:11:41:57:4a:1f:c5:bd:05: 54:54:a9:ed:4e:27:2a:89:47:fe:f0:b3:e8:32:7a: 32:4a:58:0f:a4:a5:8e:fd:13:e8:55:92:6e:bf:55: 06:d9:70:45:57:96:ac:43:4a:cb:c2:07:02:5a:cf: 96:f8:27:ca:10:65:40:17:bb:4e:2f:1c:63:a1:f8: 7f:e1:25:b3:8a:ec:6c:3e:d5:f6:58:09:06:b6:c1: 91:85:55:b4:2e:5a:d6:93:c6:3a:9b:c3:36:72:a4: ce:e1:e9:de:7d:cc:6f:c8:a1:67:7c:ce:95:1c:b5: f1:a5:3c:c6:b9:82:b8:45:f8:20:8a:dd:eb:a4:38: 08:0f:4c:72:79:89:c5:b0:01:fe:b4:f2:64:79:bb: e2:4c:8d:17:59:4e:a8:3a:5f:a5:1e:2f:82:00:20: 6c:7b:1c:bc:91:5a:e5:c8:71:6a:d8:27:f2:59:27: 2b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:90:DF:78:83:5C:F0:B9:D9:53:75:25:FA:9A:19:B8:54:60:D1:C7 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS58270.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:5200::/40 2a0a:6040:6200::/40 Signature Algorithm: sha256WithRSAEncryption 89:fa:82:7d:93:f3:be:9f:60:1f:14:db:55:69:dc:65:7b:b6: 5b:e9:e3:77:0a:86:25:64:70:6b:6b:32:4b:0c:71:4b:c0:62: d4:6e:21:0c:ca:49:56:5b:34:4c:24:a6:57:2b:71:b8:72:69: 4c:71:88:0c:70:fa:ad:52:47:fc:fc:24:d6:60:c7:b8:3d:c0: 35:c3:47:32:90:57:e4:4b:fb:7f:e0:35:51:00:b6:58:85:4c: 44:dd:98:6c:71:d7:0b:48:d5:72:58:e6:c0:82:9d:1d:b7:46: 6f:7b:e6:5a:c2:2a:1e:c9:27:2f:f2:94:48:c2:5d:8e:dd:01: d4:e1:d5:52:99:05:2f:b1:71:9f:16:e4:0c:01:a8:3a:fa:53: 12:87:80:3f:f2:c2:94:41:bf:ac:ca:56:e7:e8:73:20:8a:73: c3:70:50:b8:c3:e7:99:86:e5:a2:bb:d0:42:c5:a0:4d:f7:6e: 53:fe:6f:ee:4c:11:32:30:bb:0c:f9:98:bd:14:a9:36:93:c1: 3b:a6:c4:9e:c8:be:41:06:c3:1d:53:8c:62:f2:0e:55:d3:be: 19:b4:d1:6d:ef:4d:cd:ef:f6:62:db:97:ab:d9:f6:18:13:f8: 12:3d:48:1b:4f:5f:f6:39:26:c5:5d:fc:e0:75:b8:98:1e:6e: 93:69:94:32 -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUP/AFpwekGji5Tc6Tls2WfVzHU7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MDhaFw0yNjA3MDMwNjUzMDhaMDMxMTAvBgNV BAMTKDFFOTBERjc4ODM1Q0YwQjlEOTUzNzUyNUZBOUExOUI4NTQ2MEQxQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC43Ul6+nwZtfSUyqybExdsTXD+ 74j7jNDxHGYQXQpHiCTOljyM+41TiOU0jNL+Nu7JVc62erKOk9Qs1/DXsZBhfztx CKoP8bKYQKwJxVJ/sYQRQVdKH8W9BVRUqe1OJyqJR/7ws+gyejJKWA+kpY79E+hV km6/VQbZcEVXlqxDSsvCBwJaz5b4J8oQZUAXu04vHGOh+H/hJbOK7Gw+1fZYCQa2 wZGFVbQuWtaTxjqbwzZypM7h6d59zG/IoWd8zpUctfGlPMa5grhF+CCK3eukOAgP THJ5icWwAf608mR5u+JMjRdZTqg6X6UeL4IAIGx7HLyRWuXIcWrYJ/JZJyt7AgMB AAGjggH7MIIB9zAdBgNVHQ4EFgQUHpDfeINc8LnZU3Ul+poZuFRg0ccwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTNTgyNzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKQYIKwYBBQUH AQcBAf8EGjAYMBYEAgACMBADBgAqCmBAUgMGACoKYEBiMA0GCSqGSIb3DQEBCwUA A4IBAQCJ+oJ9k/O+n2AfFNtVadxle7Zb6eN3CoYlZHBrazJLDHFLwGLUbiEMyklW WzRMJKZXK3G4cmlMcYgMcPqtUkf8/CTWYMe4PcA1w0cykFfkS/t/4DVRALZYhUxE 3ZhscdcLSNVyWObAgp0dt0Zve+ZawioeyScv8pRIwl2O3QHU4dVSmQUvsXGfFuQM Aag6+lMSh4A/8sKUQb+sylbn6HMginPDcFC4w+eZhuWiu9BCxaBN925T/m/uTBEy MLsM+Zi9FKk2k8E7psSeyL5BBsMdU4xi8g5V074ZtNFt703N7/Zi25er2fYYE/gS PUgbT1/2OSbFXfzgdbiYHm6TaZQy -----END CERTIFICATE-----Generated at Sat Jul 5 06:08:33 2025 by rpki-client