$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198092.roa File: AS198092.roa (raw, json) Hash identifier: tpJgWNyqRysOzui4OLta+rQqnM1/8mV0x7xQyVPfxyg= Subject key identifier: 80:5A:D2:E8:9E:E2:04:01:5D:5C:46:26:7D:4A:64:67:62:F6:03:A4 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 084C5EFCA7ADF871E2A2B814A68708E7AEC506EE Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198092.roa Signing time: Fri 18 Apr 2025 12:46:10 +0000 ROA not before: Fri 18 Apr 2025 12:41:10 +0000 ROA not after: Fri 17 Apr 2026 12:46:10 +0000 asID: 198092 IP address blocks: 2a05:dfc1:5800::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 07:09:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:4c:5e:fc:a7:ad:f8:71:e2:a2:b8:14:a6:87:08:e7:ae:c5:06:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Apr 18 12:41:10 2025 GMT Not After : Apr 17 12:46:10 2026 GMT Subject: CN=805AD2E89EE204015D5C46267D4A646762F603A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c2:02:4a:b0:3b:9b:b9:08:8c:19:db:49:d1: 1a:4a:9e:63:16:27:11:15:65:0a:a3:54:c2:5a:19: 71:3c:f5:a2:f1:2e:04:5d:be:ee:8a:2f:32:77:d6: 83:ac:95:3e:a3:f2:29:fc:74:2b:84:85:a7:22:9a: af:73:6e:15:71:d6:66:dd:01:79:1f:16:55:b9:cb: ec:71:3c:29:a4:53:c2:6c:84:6b:df:98:a9:98:10: 90:c8:b3:da:a9:1f:fa:bc:f8:29:c9:2b:96:9f:df: ef:b0:0f:b3:ff:9c:28:9f:18:08:7c:dc:46:12:61: b5:2d:ed:f5:62:da:bd:fd:51:e7:10:d0:61:7b:7e: 7c:bc:32:0d:29:49:2d:f4:76:e3:8d:bc:d3:c8:86: 29:49:fd:9a:d5:3a:e5:9e:64:84:b1:37:af:35:52: 4c:f3:cc:79:7c:d2:75:08:6c:67:01:f9:74:a1:8d: 6a:a5:06:01:93:38:59:72:ae:b0:8a:cc:c9:cb:ad: 6d:ef:d6:06:2e:76:99:2a:e8:36:01:76:7a:b7:83: ef:f4:20:23:bb:45:c5:c2:69:9f:4f:55:6a:e9:ab: 1d:50:ef:b0:10:b1:d2:09:c2:14:0d:2c:55:d4:08: 94:98:1c:6a:80:83:8e:58:05:e5:fc:75:ba:96:62: bc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:5A:D2:E8:9E:E2:04:01:5D:5C:46:26:7D:4A:64:67:62:F6:03:A4 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198092.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:5800::/40 Signature Algorithm: sha256WithRSAEncryption 4e:90:73:ec:ed:ab:b4:e9:eb:1f:59:17:1c:f1:02:b7:f3:5d: 7c:6f:43:cc:69:76:7d:01:2f:f1:e6:64:68:20:ad:62:38:ae: 10:a9:cb:ba:38:f7:14:99:22:6b:52:6a:fa:b8:7a:16:1e:d9: 51:74:7d:ed:95:07:35:4d:09:c4:21:a9:b5:0d:fb:ce:a1:14: 65:15:f9:45:6d:b0:42:92:b6:30:ed:c8:14:f1:53:b1:57:b5: fa:1c:f3:2c:28:e9:b2:af:7e:7b:f5:08:c7:bc:a3:72:16:49: ba:1a:a2:f0:6c:4b:4b:6b:2b:3d:3f:bb:8c:db:90:f0:df:6e: 99:de:d0:64:ac:77:44:27:bb:ae:4d:45:8f:bb:0d:fe:5e:47: fc:4b:f1:a1:14:73:e7:94:e6:dc:45:d6:02:f3:42:c4:5d:c5: cb:ec:7a:44:99:0c:13:ca:f7:4d:b0:8f:24:ff:69:16:00:13: ff:77:d9:bb:4a:d3:89:25:df:9a:3f:a4:65:e3:33:54:9b:05: 46:ff:bc:4e:88:f8:35:f3:c2:a8:64:42:5b:31:1e:d3:35:d1: 9a:c0:61:b9:bb:a3:6f:60:2f:6c:d3:3a:52:6a:9e:ce:8b:43: 9d:b4:2f:65:5d:bd:c5:85:79:b9:93:2a:51:0e:f9:bb:d7:5e: f2:6e:48:7e -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUCExe/Ket+HHiorgUpocI567FBu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNTA0MTgxMjQxMTBaFw0yNjA0MTcxMjQ2MTBaMDMxMTAvBgNV BAMTKDgwNUFEMkU4OUVFMjA0MDE1RDVDNDYyNjdENEE2NDY3NjJGNjAzQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFwgJKsDubuQiMGdtJ0RpKnmMW JxEVZQqjVMJaGXE89aLxLgRdvu6KLzJ31oOslT6j8in8dCuEhacimq9zbhVx1mbd AXkfFlW5y+xxPCmkU8JshGvfmKmYEJDIs9qpH/q8+CnJK5af3++wD7P/nCifGAh8 3EYSYbUt7fVi2r39UecQ0GF7fny8Mg0pSS30duONvNPIhilJ/ZrVOuWeZISxN681 UkzzzHl80nUIbGcB+XShjWqlBgGTOFlyrrCKzMnLrW3v1gYudpkq6DYBdnq3g+/0 ICO7RcXCaZ9PVWrpqx1Q77AQsdIJwhQNLFXUCJSYHGqAg45YBeX8dbqWYrzPAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUgFrS6J7iBAFdXEYmfUpkZ2L2A6QwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMTk4MDkyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwVgwDQYJKoZIhvcNAQELBQADggEBAE6Q c+ztq7Tp6x9ZFxzxArfzXXxvQ8xpdn0BL/HmZGggrWI4rhCpy7o49xSZImtSavq4 ehYe2VF0fe2VBzVNCcQhqbUN+86hFGUV+UVtsEKStjDtyBTxU7FXtfoc8ywo6bKv fnv1CMe8o3IWSboaovBsS0trKz0/u4zbkPDfbpne0GSsd0Qnu65NRY+7Df5eR/xL 8aEUc+eU5txF1gLzQsRdxcvsekSZDBPK902wjyT/aRYAE/932btK04kl35o/pGXj M1SbBUb/vE6I+DXzwqhkQlsxHtM10ZrAYbm7o29gL2zTOlJqns6LQ520L2VdvcWF ebmTKlEO+bvXXvJuSH4= -----END CERTIFICATE-----Generated at Sun Apr 27 00:27:17 2025 by rpki-client