$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198872.roa File: AS198872.roa (raw, json) Hash identifier: y5UO7r1R6RQMkxM/esLk8ebVFrkLGPc42xca18F+Y7A= Subject key identifier: 50:D0:BF:8C:AD:F6:D6:88:93:A4:D4:07:03:FA:8F:C9:58:A7:B5:41 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 1AABBD0FD6698740188A73715A0CD11C53BD8150 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198872.roa Signing time: Wed 09 Apr 2025 00:45:58 +0000 ROA not before: Wed 09 Apr 2025 00:40:58 +0000 ROA not after: Wed 08 Apr 2026 00:45:58 +0000 asID: 198872 IP address blocks: 2a05:dfc1:4f00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 07:09:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:ab:bd:0f:d6:69:87:40:18:8a:73:71:5a:0c:d1:1c:53:bd:81:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Apr 9 00:40:58 2025 GMT Not After : Apr 8 00:45:58 2026 GMT Subject: CN=50D0BF8CADF6D68893A4D40703FA8FC958A7B541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f6:e4:f0:cd:a0:ff:0c:14:e1:7d:f0:87:58: 88:f5:1b:0c:aa:e5:af:d7:b1:91:fe:96:81:95:b9: 82:c5:f2:8a:05:f0:b5:9d:d1:bf:75:1a:76:84:69: 15:a8:f0:56:e0:43:c8:8b:2b:f4:74:be:9e:c8:86: 10:90:75:a4:b2:ff:79:5a:4b:7b:9c:6f:d1:75:d3: de:cd:c7:d7:ed:3a:7c:f9:81:f1:67:aa:b6:2a:4a: 46:36:84:bf:55:ea:f4:3b:b7:d6:43:13:8e:a7:3d: e4:11:a8:13:a1:52:62:1b:e0:f7:d1:67:1b:b4:95: a3:95:88:ab:ca:bc:f2:c6:18:00:4a:a9:5d:00:e7: 83:74:d0:23:c0:31:14:8e:1f:e0:63:62:44:a5:de: 76:19:0d:c4:5b:cb:5f:3b:e2:38:48:f1:26:44:95: 03:e0:66:06:6c:6d:63:e7:c9:7d:b3:00:b0:6f:0b: 69:e9:23:06:79:32:96:4d:44:a2:9e:41:ef:b2:33: af:9b:48:a1:0d:61:c1:00:74:26:a5:4a:52:fb:dd: 8c:9b:78:ff:21:02:47:3a:48:da:14:82:cf:64:5a: a6:b0:f4:92:72:8b:6b:37:1a:89:ab:89:d8:43:88: e1:63:3e:25:65:f7:ef:b4:6e:63:64:81:09:d8:89: 17:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D0:BF:8C:AD:F6:D6:88:93:A4:D4:07:03:FA:8F:C9:58:A7:B5:41 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198872.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:4f00::/40 Signature Algorithm: sha256WithRSAEncryption 54:55:02:6d:c7:2c:a8:8a:4d:10:4c:94:0d:29:0a:5e:e6:37: 39:a6:5f:ae:b0:9f:5d:a3:49:fe:0d:81:bb:5c:60:f7:14:55: fe:fd:fb:53:ac:fc:3a:c2:eb:ee:72:ea:4c:78:19:b2:a5:c1: ee:e5:23:ea:d0:26:2c:df:7f:ca:4d:53:c0:23:97:63:80:53: 2b:f6:0c:44:11:95:ac:1b:ad:9e:86:03:6f:14:4d:8f:3e:2b: 76:25:f8:22:aa:a0:14:5c:d1:36:f6:b6:e0:8d:03:4c:52:61: ae:bd:30:5c:bd:31:5f:13:1d:58:6f:8b:1a:5b:92:1a:a4:fb: d3:10:63:21:c1:b4:19:ce:10:25:e4:d6:11:6e:00:c7:09:9b: a2:36:73:87:b3:e8:8c:f8:3f:c8:3a:ea:1e:63:85:a9:e0:8d: 6c:ff:dc:af:bf:3b:48:bf:e4:e5:06:ff:56:83:cb:28:01:a5: 21:a9:ab:69:c1:11:47:c3:08:b2:18:0d:b0:ba:b9:2d:70:92: c4:8a:98:a5:f5:e1:1a:16:be:98:a0:07:d3:18:42:f6:30:64: e7:36:cb:bf:0c:e1:70:90:c2:f8:2a:7a:16:8c:2b:31:02:ea: fe:46:e0:0a:4f:26:f1:59:59:7c:99:1d:45:a5:99:e9:85:f6: 27:30:fb:c9 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUGqu9D9Zph0AYinNxWgzRHFO9gVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNTA0MDkwMDQwNThaFw0yNjA0MDgwMDQ1NThaMDMxMTAvBgNV BAMTKDUwRDBCRjhDQURGNkQ2ODg5M0E0RDQwNzAzRkE4RkM5NThBN0I1NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV9uTwzaD/DBThffCHWIj1Gwyq 5a/XsZH+loGVuYLF8ooF8LWd0b91GnaEaRWo8FbgQ8iLK/R0vp7IhhCQdaSy/3la S3ucb9F1097Nx9ftOnz5gfFnqrYqSkY2hL9V6vQ7t9ZDE46nPeQRqBOhUmIb4PfR Zxu0laOViKvKvPLGGABKqV0A54N00CPAMRSOH+BjYkSl3nYZDcRby1874jhI8SZE lQPgZgZsbWPnyX2zALBvC2npIwZ5MpZNRKKeQe+yM6+bSKENYcEAdCalSlL73Yyb eP8hAkc6SNoUgs9kWqaw9JJyi2s3GomridhDiOFjPiVl9++0bmNkgQnYiRf5AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUUNC/jK321oiTpNQHA/qPyVintUEwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMTk4ODcyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwU8wDQYJKoZIhvcNAQELBQADggEBAFRV Am3HLKiKTRBMlA0pCl7mNzmmX66wn12jSf4NgbtcYPcUVf79+1Os/DrC6+5y6kx4 GbKlwe7lI+rQJizff8pNU8Ajl2OAUyv2DEQRlawbrZ6GA28UTY8+K3Yl+CKqoBRc 0Tb2tuCNA0xSYa69MFy9MV8THVhvixpbkhqk+9MQYyHBtBnOECXk1hFuAMcJm6I2 c4ez6Iz4P8g66h5jhangjWz/3K+/O0i/5OUG/1aDyygBpSGpq2nBEUfDCLIYDbC6 uS1wksSKmKX14RoWvpigB9MYQvYwZOc2y78M4XCQwvgqehaMKzEC6v5G4ApPJvFZ WXyZHUWlmemF9icw+8k= -----END CERTIFICATE-----Generated at Sun Apr 27 00:27:26 2025 by rpki-client