$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS203686.roa File: AS203686.roa (raw, json) Hash identifier: xax/URAdbenQz4qkECTpiJ12GgxukYaWIUwQxU9q/Vw= Subject key identifier: DA:89:2A:DE:6C:C4:CF:95:45:F6:B7:20:57:9A:BD:46:B7:0B:C9:AD Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 1F7DE131ADEBE9685DB130ED07A3E74682DB0BF9 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS203686.roa Signing time: Mon 09 Jun 2025 23:46:35 +0000 ROA not before: Mon 09 Jun 2025 23:41:35 +0000 ROA not after: Mon 08 Jun 2026 23:46:35 +0000 asID: 203686 IP address blocks: 2a05:dfc1:7e00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 20:29:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:7d:e1:31:ad:eb:e9:68:5d:b1:30:ed:07:a3:e7:46:82:db:0b:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Jun 9 23:41:35 2025 GMT Not After : Jun 8 23:46:35 2026 GMT Subject: CN=DA892ADE6CC4CF9545F6B720579ABD46B70BC9AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:52:fb:c7:50:2b:ce:d5:9c:58:08:8d:f0:12: 6e:59:c5:9f:8c:1d:cf:79:e9:c3:32:f4:1f:79:0b: bb:1d:b8:db:ea:f9:b8:17:b5:9c:e3:1c:67:8c:83: 56:37:7f:14:89:46:a3:9d:3e:f8:3c:5d:3d:b3:da: ee:53:ec:d9:02:6f:6b:7c:68:80:53:96:e9:53:ba: f2:61:ef:cd:46:e1:1d:19:d4:21:da:d8:4e:24:d3: b8:fb:51:bc:d0:12:eb:b7:6a:a0:f2:65:04:c0:44: 4e:89:26:d3:3d:82:4e:97:d4:d6:f1:20:df:de:80: 6a:00:61:56:f5:bc:35:ca:e1:03:45:86:2a:50:6d: ac:81:b0:02:0c:98:64:44:c6:32:7d:ec:7b:6e:34: d9:03:1d:32:30:43:ef:d8:33:c6:e4:90:8b:13:bb: be:8f:b7:0d:2c:25:03:ce:35:19:4a:40:58:a8:e6: 26:f3:bc:87:57:d6:5c:f4:f5:64:02:c6:35:6b:b6: c7:25:48:33:f2:63:51:11:20:7d:e3:da:0d:7b:6d: fc:81:28:03:0b:48:7d:85:74:62:e3:57:59:c6:e5: 0f:ec:6d:e2:86:82:32:e1:c2:b8:cc:f2:5f:a8:44: ea:74:d9:90:48:ef:22:6e:41:a9:0f:7f:6b:89:16: 6d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:89:2A:DE:6C:C4:CF:95:45:F6:B7:20:57:9A:BD:46:B7:0B:C9:AD X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS203686.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:7e00::/40 Signature Algorithm: sha256WithRSAEncryption 63:1d:ca:b0:18:5e:d5:1d:99:40:81:f1:6b:f3:29:db:dd:99: e5:30:62:1f:44:b9:b9:28:11:cb:61:13:6d:3b:c8:83:07:2b: d1:af:21:dd:74:d1:f5:46:e1:a0:c5:44:ee:d5:0d:20:50:56: ef:ba:82:0e:bb:53:91:31:b8:0b:66:a8:60:95:ca:cf:dd:84: 3d:cb:f5:d0:f4:7a:66:a9:69:cd:9a:3c:f0:ee:61:a9:62:58: dd:42:ec:88:a2:a1:af:1d:e2:23:ba:c9:9b:60:38:62:2b:b5: ea:5f:d8:b5:bf:95:5f:46:14:05:38:79:73:da:01:d0:e5:fc: db:3f:71:84:c5:d9:88:3b:fc:02:f5:cf:17:dd:39:57:6d:cc: ac:e5:7c:55:bb:4d:00:13:e1:84:13:ed:e5:a5:8c:1e:e7:eb: 49:6b:71:88:f9:c6:aa:6a:ee:f9:09:74:59:37:ab:a8:fe:d9: 57:cd:85:78:51:b0:1e:8c:3b:bf:7a:4a:51:b4:98:b1:79:4b: 59:04:df:ea:37:21:0c:d7:64:50:34:4d:36:1c:3e:2c:6b:37: d6:0c:d7:a6:30:68:88:07:b6:ac:65:1b:5d:af:62:de:42:1d: 34:71:cb:c8:e3:2d:62:70:26:45:ec:72:f0:53:7b:e9:4e:21: f1:29:ed:a1 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUH33hMa3r6WhdsTDtB6PnRoLbC/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNTA2MDkyMzQxMzVaFw0yNjA2MDgyMzQ2MzVaMDMxMTAvBgNV BAMTKERBODkyQURFNkNDNENGOTU0NUY2QjcyMDU3OUFCRDQ2QjcwQkM5QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVUvvHUCvO1ZxYCI3wEm5ZxZ+M Hc956cMy9B95C7sduNvq+bgXtZzjHGeMg1Y3fxSJRqOdPvg8XT2z2u5T7NkCb2t8 aIBTlulTuvJh781G4R0Z1CHa2E4k07j7UbzQEuu3aqDyZQTARE6JJtM9gk6X1Nbx IN/egGoAYVb1vDXK4QNFhipQbayBsAIMmGRExjJ97HtuNNkDHTIwQ+/YM8bkkIsT u76Ptw0sJQPONRlKQFio5ibzvIdX1lz09WQCxjVrtsclSDPyY1ERIH3j2g17bfyB KAMLSH2FdGLjV1nG5Q/sbeKGgjLhwrjM8l+oROp02ZBI7yJuQakPf2uJFm1dAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU2okq3mzEz5VF9rcgV5q9RrcLya0wHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjAzNjg2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwX4wDQYJKoZIhvcNAQELBQADggEBAGMd yrAYXtUdmUCB8WvzKdvdmeUwYh9EubkoEcthE207yIMHK9GvId100fVG4aDFRO7V DSBQVu+6gg67U5ExuAtmqGCVys/dhD3L9dD0emapac2aPPDuYaliWN1C7Iiioa8d 4iO6yZtgOGIrtepf2LW/lV9GFAU4eXPaAdDl/Ns/cYTF2Yg7/AL1zxfdOVdtzKzl fFW7TQAT4YQT7eWljB7n60lrcYj5xqpq7vkJdFk3q6j+2VfNhXhRsB6MO796SlG0 mLF5S1kE3+o3IQzXZFA0TTYcPixrN9YM16YwaIgHtqxlG12vYt5CHTRxy8jjLWJw JkXscvBTe+lOIfEp7aE= -----END CERTIFICATE-----Generated at Sun Jun 15 11:50:39 2025 by rpki-client