$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS204931.roa File: AS204931.roa (raw, json) Hash identifier: PVDp7c0SawTKHx2/czxPJavg0rjrpTqTT3/fbvz4Eo8= Subject key identifier: 4A:E6:86:6C:EC:85:F8:73:75:74:B2:E8:E1:0A:97:12:25:9A:F6:B5 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 4A4DC1F08BCC3E631579B0BD1E653F7F9DA23B32 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS204931.roa Signing time: Tue 08 Apr 2025 10:45:58 +0000 ROA not before: Tue 08 Apr 2025 10:40:58 +0000 ROA not after: Tue 07 Apr 2026 10:45:58 +0000 asID: 204931 IP address blocks: 2a05:dfc1:4c00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 07:09:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:4d:c1:f0:8b:cc:3e:63:15:79:b0:bd:1e:65:3f:7f:9d:a2:3b:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Apr 8 10:40:58 2025 GMT Not After : Apr 7 10:45:58 2026 GMT Subject: CN=4AE6866CEC85F8737574B2E8E10A9712259AF6B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:49:c9:9f:1d:8a:04:dd:2a:ca:a9:39:63:a1: 58:52:d9:6d:8d:d3:7b:95:3f:9c:85:db:a3:45:0f: c2:c4:2a:32:cb:f1:bf:26:40:4a:97:e8:60:02:44: 14:bd:b5:05:c2:af:3b:7b:3e:29:69:8d:4e:95:46: d9:c1:49:33:f8:60:ab:90:c6:e9:2d:dd:9a:b2:c5: cf:3e:12:ad:a4:d6:11:9f:a5:7d:55:62:de:24:28: de:33:30:5f:45:ea:6b:93:b9:e8:16:77:71:93:cf: 8b:1a:05:f5:0b:b2:f3:b9:b6:55:fe:cb:13:2b:3b: e7:e2:b9:5f:a0:f7:f8:07:21:78:02:d9:17:26:92: 4f:9d:cc:29:d5:5a:62:53:28:51:62:05:85:31:f5: a1:79:cf:42:35:b0:44:2a:c5:10:16:0d:7d:d5:0c: 2d:65:c0:b3:01:0f:39:8d:d9:77:47:08:80:d5:7c: 79:77:d8:67:43:2d:fa:92:7b:84:4f:70:00:61:c8: 7b:75:7f:38:7d:23:f8:7f:9f:00:9c:5b:f5:51:c3: 2d:d4:18:ff:7d:2e:74:58:1a:b5:b9:fd:13:32:bc: ef:e4:aa:e2:a8:f2:14:e3:4a:5f:15:9f:01:58:5a: 6a:3d:86:0e:fc:9b:c6:d5:a5:96:89:c5:9a:b3:83: aa:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E6:86:6C:EC:85:F8:73:75:74:B2:E8:E1:0A:97:12:25:9A:F6:B5 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS204931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:4c00::/40 Signature Algorithm: sha256WithRSAEncryption 00:b5:77:d7:bf:ea:2f:0d:4a:bf:a9:1a:60:ab:db:44:78:b7: 80:8b:0e:34:c7:a9:b4:bd:fb:1b:99:cb:69:3c:b3:aa:0c:1f: 54:1b:0b:68:a8:fb:25:10:b6:f6:fa:bf:29:39:f6:dd:2f:8c: 63:6e:7a:11:0a:21:78:b1:26:0d:23:1b:f8:0d:a4:c9:3d:39: 35:9b:5a:9a:f9:cf:e9:6f:cb:99:41:13:aa:af:77:5a:1d:b9: 1c:f0:ac:8a:89:b4:d2:07:20:42:d5:1c:7e:c7:e1:3e:f6:99: b6:48:57:6f:54:3e:1b:92:5f:91:3b:25:ed:0d:0b:d4:9f:a1: 05:7c:08:03:df:5a:dd:1e:3f:a2:9c:de:76:5b:00:6c:91:fc: 4a:68:9d:db:4a:98:7e:2c:5c:2b:15:bd:61:eb:f7:46:36:b2: 0d:f4:bb:83:3c:ba:13:03:65:e6:6d:41:1c:2a:8f:8a:19:01: af:3e:17:29:d0:1a:29:37:ed:65:6e:e1:dd:1e:10:83:79:6a: 9a:0d:ff:f3:41:12:eb:a0:e0:a9:40:18:8e:da:6e:7b:01:40: 43:93:18:13:60:e3:92:81:b8:d6:de:5b:59:c0:79:cf:be:ea: 17:f6:36:e7:9f:4a:ee:b3:83:ff:82:b5:37:8f:a4:e6:38:d7: 7a:21:2d:5d -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUSk3B8IvMPmMVebC9HmU/f52iOzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNTA0MDgxMDQwNThaFw0yNjA0MDcxMDQ1NThaMDMxMTAvBgNV BAMTKDRBRTY4NjZDRUM4NUY4NzM3NTc0QjJFOEUxMEE5NzEyMjU5QUY2QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRScmfHYoE3SrKqTljoVhS2W2N 03uVP5yF26NFD8LEKjLL8b8mQEqX6GACRBS9tQXCrzt7PilpjU6VRtnBSTP4YKuQ xukt3Zqyxc8+Eq2k1hGfpX1VYt4kKN4zMF9F6muTuegWd3GTz4saBfULsvO5tlX+ yxMrO+fiuV+g9/gHIXgC2Rcmkk+dzCnVWmJTKFFiBYUx9aF5z0I1sEQqxRAWDX3V DC1lwLMBDzmN2XdHCIDVfHl32GdDLfqSe4RPcABhyHt1fzh9I/h/nwCcW/VRwy3U GP99LnRYGrW5/RMyvO/kquKo8hTjSl8VnwFYWmo9hg78m8bVpZaJxZqzg6qVAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUSuaGbOyF+HN1dLLo4QqXEiWa9rUwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjA0OTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwUwwDQYJKoZIhvcNAQELBQADggEBAAC1 d9e/6i8NSr+pGmCr20R4t4CLDjTHqbS9+xuZy2k8s6oMH1QbC2io+yUQtvb6vyk5 9t0vjGNuehEKIXixJg0jG/gNpMk9OTWbWpr5z+lvy5lBE6qvd1oduRzwrIqJtNIH IELVHH7H4T72mbZIV29UPhuSX5E7Je0NC9SfoQV8CAPfWt0eP6Kc3nZbAGyR/Epo ndtKmH4sXCsVvWHr90Y2sg30u4M8uhMDZeZtQRwqj4oZAa8+FynQGik37WVu4d0e EIN5apoN//NBEuug4KlAGI7abnsBQEOTGBNg45KBuNbeW1nAec++6hf2NuefSu6z g/+CtTePpOY413ohLV0= -----END CERTIFICATE-----Generated at Sun Apr 27 00:27:32 2025 by rpki-client