$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198969.roa File: AS198969.roa (raw, json) Hash identifier: 3SZC3BW6CtIDAyfuNzbN0lvrV3kKlNt+liTrHOvrx80= Subject key identifier: B5:A4:01:51:45:CF:77:79:A8:33:D6:53:67:DB:2D:60:CB:36:49:CF Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 72E1370A4E703AB9154F160D0B29F0C1D3646135 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198969.roa Signing time: Thu 06 Feb 2025 13:45:50 +0000 ROA not before: Thu 06 Feb 2025 13:40:50 +0000 ROA not after: Thu 05 Feb 2026 13:45:50 +0000 asID: 198969 IP address blocks: 2a05:dfc1:1700::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 07:09:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:e1:37:0a:4e:70:3a:b9:15:4f:16:0d:0b:29:f0:c1:d3:64:61:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Feb 6 13:40:50 2025 GMT Not After : Feb 5 13:45:50 2026 GMT Subject: CN=B5A4015145CF7779A833D65367DB2D60CB3649CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8f:4e:9c:28:38:f1:1a:9b:2a:ca:3f:23:d8: b0:6d:41:97:12:06:d1:f9:b0:8a:f3:9c:25:51:ed: 27:fe:57:0b:7a:55:e6:94:10:8c:5e:45:1c:ed:c5: e2:6e:41:58:e0:4e:ac:f0:d8:5d:1b:8f:66:00:f2: a1:08:9f:92:b0:7a:28:94:a5:f8:a1:90:9a:14:8d: d6:23:8b:4a:b7:bc:f8:d2:0e:58:8d:ea:87:c2:63: 7b:e8:1b:ec:4a:28:fc:b3:7d:57:5f:bc:97:81:7a: ff:f8:60:62:76:c9:e2:7c:a0:6f:eb:a0:d5:62:3d: a1:c2:6a:7f:38:ca:f2:f0:3d:e0:b6:96:33:8f:ea: ad:89:75:44:9f:21:9e:68:70:4d:ec:9a:9e:87:44: 07:72:6e:80:f1:0e:44:e0:45:98:7d:72:b4:51:a2: a7:fd:33:10:29:39:51:f7:8f:2f:fd:18:a1:3f:8a: 07:af:3a:47:f7:b1:ca:a6:07:73:71:97:26:7d:1d: bb:2e:74:53:51:b3:27:d5:37:5d:fc:c8:d7:e9:62: 47:73:85:01:f2:e7:4b:bd:a3:ba:6f:ae:97:78:4d: 48:2b:b8:5c:5e:c6:e4:c6:b1:fc:f0:bb:68:96:51: 0d:8e:53:39:e6:a6:4c:3d:bb:c0:b9:73:1e:da:be: bf:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A4:01:51:45:CF:77:79:A8:33:D6:53:67:DB:2D:60:CB:36:49:CF X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198969.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:1700::/40 Signature Algorithm: sha256WithRSAEncryption 0c:d6:85:50:8a:bf:43:84:db:cc:b9:88:25:b3:1c:f4:2e:9b: a9:c6:95:db:2c:84:04:71:a9:99:d7:20:b9:b4:cd:f3:0e:e4: a4:3d:5b:4f:62:9e:ac:35:c7:ba:53:9e:aa:45:db:3e:27:0f: 55:47:1c:70:46:dd:1e:86:0f:e7:35:79:25:53:44:5f:22:c5: 8b:d3:58:d5:ee:82:b4:b9:b6:b5:5e:07:c9:3d:a1:ab:b1:e0: cc:a9:4d:b5:d9:ee:de:35:77:80:6f:da:cb:3b:17:63:d2:f9: 3e:48:19:a1:e9:65:15:c9:37:bf:4d:ae:5f:6d:b6:02:7d:8c: 53:5f:a2:6c:79:28:a8:30:f1:1c:59:0a:27:fc:e1:de:69:08: 20:94:d2:03:58:35:08:80:f4:b5:25:f9:30:e1:23:a7:67:96: ca:c5:c8:ff:58:5e:ec:a1:d2:d7:c0:f1:32:d0:d2:af:fa:41: 55:56:03:ce:35:95:b8:7d:84:c1:74:51:48:7c:3a:e9:48:1a: a4:28:68:ab:d8:16:ac:19:bd:f9:68:05:42:90:32:ea:70:04: b4:cb:b7:0e:7a:09:b9:71:ac:e7:9f:52:07:0a:76:c2:1e:99: 63:dc:06:50:5a:7b:a5:1c:e5:59:ba:7f:67:95:95:56:89:90: 97:25:7f:e6 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUcuE3Ck5wOrkVTxYNCynwwdNkYTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNTAyMDYxMzQwNTBaFw0yNjAyMDUxMzQ1NTBaMDMxMTAvBgNV BAMTKEI1QTQwMTUxNDVDRjc3NzlBODMzRDY1MzY3REIyRDYwQ0IzNjQ5Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdj06cKDjxGpsqyj8j2LBtQZcS BtH5sIrznCVR7Sf+Vwt6VeaUEIxeRRztxeJuQVjgTqzw2F0bj2YA8qEIn5KweiiU pfihkJoUjdYji0q3vPjSDliN6ofCY3voG+xKKPyzfVdfvJeBev/4YGJ2yeJ8oG/r oNViPaHCan84yvLwPeC2ljOP6q2JdUSfIZ5ocE3smp6HRAdyboDxDkTgRZh9crRR oqf9MxApOVH3jy/9GKE/igevOkf3scqmB3NxlyZ9HbsudFNRsyfVN138yNfpYkdz hQHy50u9o7pvrpd4TUgruFxexuTGsfzwu2iWUQ2OUznmpkw9u8C5cx7avr+JAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUtaQBUUXPd3moM9ZTZ9stYMs2Sc8wHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMTk4OTY5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwRcwDQYJKoZIhvcNAQELBQADggEBAAzW hVCKv0OE28y5iCWzHPQum6nGldsshARxqZnXILm0zfMO5KQ9W09inqw1x7pTnqpF 2z4nD1VHHHBG3R6GD+c1eSVTRF8ixYvTWNXugrS5trVeB8k9oaux4MypTbXZ7t41 d4Bv2ss7F2PS+T5IGaHpZRXJN79Nrl9ttgJ9jFNfomx5KKgw8RxZCif84d5pCCCU 0gNYNQiA9LUl+TDhI6dnlsrFyP9YXuyh0tfA8TLQ0q/6QVVWA841lbh9hMF0UUh8 OulIGqQoaKvYFqwZvfloBUKQMupwBLTLtw56CblxrOefUgcKdsIemWPcBlBae6Uc 5Vm6f2eVlVaJkJclf+Y= -----END CERTIFICATE-----Generated at Sun Apr 27 00:27:29 2025 by rpki-client