$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS212762.roa File: AS212762.roa (raw, json) Hash identifier: cdKLqWVMJPW5+nqSD3WRAfLfFd+vAdgYmrombm+vZAg= Subject key identifier: 2C:9B:7A:40:D3:B3:E7:37:6B:E5:99:20:FF:22:DA:0D:59:47:54:3A Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 3A0C49462D5FBEC684290C408763D3C182AAD1BA Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS212762.roa Signing time: Mon 21 Apr 2025 11:46:10 +0000 ROA not before: Mon 21 Apr 2025 11:41:10 +0000 ROA not after: Mon 20 Apr 2026 11:46:10 +0000 asID: 212762 IP address blocks: 2a05:dfc1:5500::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 07:09:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:0c:49:46:2d:5f:be:c6:84:29:0c:40:87:63:d3:c1:82:aa:d1:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Apr 21 11:41:10 2025 GMT Not After : Apr 20 11:46:10 2026 GMT Subject: CN=2C9B7A40D3B3E7376BE59920FF22DA0D5947543A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:31:6f:06:44:75:1b:bd:6a:0a:62:93:cd:a2: da:84:38:1a:34:3b:ac:40:76:b4:ba:aa:4a:f9:31: 04:4d:e3:85:3d:f7:13:20:12:79:c6:43:0c:65:d3: 14:db:41:82:4f:73:d3:07:53:51:b5:1d:3e:e1:ee: 54:f2:da:d6:e9:8b:19:73:03:bd:4c:c3:5a:30:4b: 67:3d:82:92:a8:e3:f8:18:f7:41:96:d4:e4:77:aa: c9:58:ef:32:9c:f2:3b:05:75:a2:19:02:11:9f:9d: e0:54:90:dc:57:aa:6f:9f:38:40:06:b0:62:1f:23: 85:f2:c3:52:f0:fe:6b:f9:9b:83:cc:c4:1d:5b:1a: 7a:33:1e:78:3b:e7:ff:5b:33:f5:77:af:9f:95:49: 96:c4:c4:77:4f:db:99:f7:e6:64:66:f0:ec:1c:73: 3b:c7:5b:cb:50:ad:b9:66:7f:3b:c4:d5:8f:75:33: a1:01:d7:02:1a:60:8d:6f:d7:87:55:12:4a:a6:1f: a5:9b:6c:4b:c5:24:e4:a5:df:43:c9:8b:40:8c:fe: 6b:3b:ac:7b:e6:0f:ae:0f:a2:6d:37:3b:55:de:eb: 32:35:0e:81:05:64:e2:46:1a:87:1b:51:ee:8d:13: 43:99:27:67:32:e9:81:73:15:cf:f4:15:f1:d9:9a: 4f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9B:7A:40:D3:B3:E7:37:6B:E5:99:20:FF:22:DA:0D:59:47:54:3A X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS212762.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:5500::/40 Signature Algorithm: sha256WithRSAEncryption 11:b4:89:ba:af:12:cd:cb:da:8f:eb:00:56:97:2a:f8:81:78: 33:d2:d5:f2:8f:19:7c:a5:00:34:40:38:f2:91:a3:2c:dc:76: b2:2b:96:c5:25:2b:a7:c1:15:0a:d2:69:1d:dd:cb:ee:b0:08: f6:78:03:ad:82:c6:31:95:d9:89:fe:bf:3b:6c:dd:70:77:96: a2:97:d9:f4:c9:78:4e:bd:4f:4a:5c:32:c7:e1:3c:02:55:b2: eb:50:a2:0b:8f:ad:9e:6f:e3:3b:5f:61:d1:3d:6b:f1:97:51: aa:e4:26:47:de:46:85:a6:07:9f:71:d9:a3:8b:a6:f8:38:1f: 81:2e:b8:a0:59:1c:28:a8:91:dc:00:74:50:16:25:15:4b:86: 66:cc:3c:6d:c1:82:36:3c:ee:5e:1d:45:ae:ac:5d:fb:ab:b3: a5:12:ce:b5:a9:c3:9b:4c:70:bc:47:be:dc:ee:d3:a0:31:46: 49:ce:f2:93:6a:68:77:c0:7a:ea:79:d9:5f:68:89:93:34:22: a5:45:a9:90:06:4e:bc:b9:4e:bc:91:12:40:18:04:a8:04:32: 6f:19:47:c4:b1:b1:9d:ee:28:b1:78:2e:4b:16:77:7f:53:ab: 92:52:00:f5:a8:5c:19:03:54:91:f4:9b:78:09:9d:84:99:52: 67:6e:cb:7b -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUOgxJRi1fvsaEKQxAh2PTwYKq0bowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNTA0MjExMTQxMTBaFw0yNjA0MjAxMTQ2MTBaMDMxMTAvBgNV BAMTKDJDOUI3QTQwRDNCM0U3Mzc2QkU1OTkyMEZGMjJEQTBENTk0NzU0M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoMW8GRHUbvWoKYpPNotqEOBo0 O6xAdrS6qkr5MQRN44U99xMgEnnGQwxl0xTbQYJPc9MHU1G1HT7h7lTy2tbpixlz A71Mw1owS2c9gpKo4/gY90GW1OR3qslY7zKc8jsFdaIZAhGfneBUkNxXqm+fOEAG sGIfI4Xyw1Lw/mv5m4PMxB1bGnozHng75/9bM/V3r5+VSZbExHdP25n35mRm8Owc czvHW8tQrblmfzvE1Y91M6EB1wIaYI1v14dVEkqmH6WbbEvFJOSl30PJi0CM/ms7 rHvmD64Pom03O1Xe6zI1DoEFZOJGGocbUe6NE0OZJ2cy6YFzFc/0FfHZmk/rAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQULJt6QNOz5zdr5Zkg/yLaDVlHVDowHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjEyNzYyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwVUwDQYJKoZIhvcNAQELBQADggEBABG0 ibqvEs3L2o/rAFaXKviBeDPS1fKPGXylADRAOPKRoyzcdrIrlsUlK6fBFQrSaR3d y+6wCPZ4A62CxjGV2Yn+vzts3XB3lqKX2fTJeE69T0pcMsfhPAJVsutQoguPrZ5v 4ztfYdE9a/GXUarkJkfeRoWmB59x2aOLpvg4H4EuuKBZHCiokdwAdFAWJRVLhmbM PG3BgjY87l4dRa6sXfurs6USzrWpw5tMcLxHvtzu06AxRknO8pNqaHfAeup52V9o iZM0IqVFqZAGTry5TryREkAYBKgEMm8ZR8SxsZ3uKLF4LksWd39Tq5JSAPWoXBkD VJH0m3gJnYSZUmduy3s= -----END CERTIFICATE-----Generated at Sun Apr 27 00:27:30 2025 by rpki-client