$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199073.roa File: AS199073.roa (raw, json) Hash identifier: dXJ1NfH//TCK/E1ltby6DAEpWSutMlJ9zQy/o8apwHk= Subject key identifier: 3A:53:4B:D8:08:BB:F5:E6:F8:58:A6:23:76:65:60:4E:DE:55:0B:F4 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 1E02D929D3B197AADA49352E714F1568ADB9CE4A Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199073.roa Signing time: Thu 30 Jan 2025 02:45:44 +0000 ROA not before: Thu 30 Jan 2025 02:40:44 +0000 ROA not after: Thu 29 Jan 2026 02:45:44 +0000 asID: 199073 IP address blocks: 2a05:dfc1:1b00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 07:09:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:02:d9:29:d3:b1:97:aa:da:49:35:2e:71:4f:15:68:ad:b9:ce:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Jan 30 02:40:44 2025 GMT Not After : Jan 29 02:45:44 2026 GMT Subject: CN=3A534BD808BBF5E6F858A6237665604EDE550BF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:05:fd:51:28:92:5f:df:8f:e2:a5:5c:ea:43: 84:34:02:5d:10:63:5a:fd:c8:4b:81:75:d8:55:1d: bc:8e:23:1e:11:f5:1f:3d:7a:1e:54:7f:ae:69:2d: de:67:84:e1:5f:61:3a:13:6c:84:8d:9e:2f:9c:5c: a4:49:26:32:87:0c:de:5d:92:07:c3:34:ae:33:0e: 98:47:08:0d:87:31:03:a6:8d:01:41:1a:0f:2c:c1: 20:f7:fe:90:d7:12:99:5f:99:94:7b:c4:28:13:2c: ae:31:55:b6:5a:e2:5a:2d:b0:d9:57:15:d1:42:99: 2f:bb:ec:ed:1e:b4:c9:9e:bc:e9:c7:92:d0:6e:15: 66:62:07:bb:ad:1c:7b:c1:7e:7a:bf:01:27:a5:e2: 89:a6:91:9e:c8:df:6e:2b:0b:06:d5:9a:96:cb:45: ba:aa:b8:9e:e3:74:17:4e:42:f6:45:bd:8d:e5:eb: 40:65:0f:57:6c:d2:7b:34:96:1e:59:43:fd:c2:88: 0b:fd:5e:29:42:54:6b:1b:5d:6d:09:e6:c3:20:eb: 68:b7:08:75:f1:09:f9:1d:29:09:0f:db:fb:61:ee: a1:70:33:fa:60:b2:6c:de:8a:5e:fc:07:1b:1e:01: 18:9c:f0:93:b1:05:70:90:b9:bd:07:df:95:04:89: 91:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:53:4B:D8:08:BB:F5:E6:F8:58:A6:23:76:65:60:4E:DE:55:0B:F4 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199073.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:1b00::/40 Signature Algorithm: sha256WithRSAEncryption b3:14:a4:4c:f2:61:40:b8:f7:c3:23:08:4b:d0:da:71:b7:84: 1d:e4:38:90:ef:2c:9e:d0:f0:fe:15:3b:6e:63:40:7f:4d:13: a5:54:71:30:6a:87:9c:12:33:c0:a0:88:37:de:72:81:a7:61: 66:40:68:b0:ac:32:06:43:28:29:05:f8:8a:c6:ab:d0:e3:af: 36:0b:44:b5:ad:41:f4:57:f0:ba:99:a9:39:80:a2:ea:3d:2c: 67:b0:24:c1:88:a3:34:8d:6b:a2:12:54:4a:34:0c:99:29:b2: 4a:e5:b4:fa:c1:88:e4:67:cb:68:23:d1:1f:d0:82:12:d2:39: 41:78:dc:80:3b:d5:02:dc:a6:12:62:e8:b7:51:5d:fa:1d:64: 08:fb:07:40:58:48:94:49:47:d8:fe:b6:75:75:ba:ff:d0:a3: 41:ae:71:a9:15:ed:97:e1:95:56:50:54:77:8e:6f:75:2b:46: 88:d0:11:d1:b5:27:03:bf:80:b8:13:5a:fe:d4:e1:ee:ae:9e: ee:5d:14:b1:1e:ed:5d:32:72:d7:4b:e2:33:a0:75:63:95:9b: 1f:bc:47:22:31:a3:04:7f:f5:07:89:d6:76:c6:62:eb:8d:46: 0b:e6:7b:ae:9c:71:fc:ec:18:fd:9b:da:4f:52:2d:32:27:39: 64:0a:ea:1e -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUHgLZKdOxl6raSTUucU8VaK25zkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNTAxMzAwMjQwNDRaFw0yNjAxMjkwMjQ1NDRaMDMxMTAvBgNV BAMTKDNBNTM0QkQ4MDhCQkY1RTZGODU4QTYyMzc2NjU2MDRFREU1NTBCRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Bf1RKJJf34/ipVzqQ4Q0Al0Q Y1r9yEuBddhVHbyOIx4R9R89eh5Uf65pLd5nhOFfYToTbISNni+cXKRJJjKHDN5d kgfDNK4zDphHCA2HMQOmjQFBGg8swSD3/pDXEplfmZR7xCgTLK4xVbZa4lotsNlX FdFCmS+77O0etMmevOnHktBuFWZiB7utHHvBfnq/ASel4ommkZ7I324rCwbVmpbL RbqquJ7jdBdOQvZFvY3l60BlD1ds0ns0lh5ZQ/3CiAv9XilCVGsbXW0J5sMg62i3 CHXxCfkdKQkP2/th7qFwM/pgsmzeil78BxseARic8JOxBXCQub0H35UEiZH7AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUOlNL2Ai79eb4WKYjdmVgTt5VC/QwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMTk5MDczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwRswDQYJKoZIhvcNAQELBQADggEBALMU pEzyYUC498MjCEvQ2nG3hB3kOJDvLJ7Q8P4VO25jQH9NE6VUcTBqh5wSM8CgiDfe coGnYWZAaLCsMgZDKCkF+IrGq9DjrzYLRLWtQfRX8LqZqTmAouo9LGewJMGIozSN a6ISVEo0DJkpskrltPrBiORny2gj0R/QghLSOUF43IA71QLcphJi6LdRXfodZAj7 B0BYSJRJR9j+tnV1uv/Qo0GucakV7ZfhlVZQVHeOb3UrRojQEdG1JwO/gLgTWv7U 4e6unu5dFLEe7V0yctdL4jOgdWOVmx+8RyIxowR/9QeJ1nbGYuuNRgvme66ccfzs GP2b2k9SLTInOWQK6h4= -----END CERTIFICATE-----Generated at Sun Apr 27 00:27:25 2025 by rpki-client