$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS198376.roa File: AS198376.roa (raw, json) Hash identifier: F++Wrq09VU9JwTUdx9NAXUfl+9NGRcu9d8hoIv1fGzM= Subject key identifier: 2C:EE:DC:56:5C:7B:D2:02:88:F9:7B:3E:23:AD:E5:23:66:CC:04:E2 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 325FF6D7DE9CE0366BE0F1231753FDD71427664F Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS198376.roa Signing time: Fri 04 Jul 2025 06:53:21 +0000 ROA not before: Fri 04 Jul 2025 06:48:21 +0000 ROA not after: Fri 03 Jul 2026 06:53:21 +0000 asID: 198376 IP address blocks: 2a05:dfc1:4a00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:5f:f6:d7:de:9c:e0:36:6b:e0:f1:23:17:53:fd:d7:14:27:66:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:21 2025 GMT Not After : Jul 3 06:53:21 2026 GMT Subject: CN=2CEEDC565C7BD20288F97B3E23ADE52366CC04E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:15:3c:54:61:68:db:cb:7f:c8:7a:96:cf:f6: 2e:dd:00:5d:12:04:f3:f5:5f:da:0c:90:42:03:08: 7e:ba:cd:3b:70:80:7e:bc:24:24:69:cb:6f:9e:8b: a2:d5:9b:3e:60:dc:e5:49:5c:f6:9d:59:b8:dd:6b: 33:04:5e:40:f9:f8:48:14:bd:75:bc:ad:63:24:1e: 70:01:8c:71:f8:26:a3:4f:55:9f:68:4b:98:98:46: 57:b8:f8:0d:24:f9:a2:05:43:e8:48:17:cc:a1:0d: 6b:10:57:26:72:77:c6:e0:0d:b3:c2:44:4c:f2:1d: fc:44:68:16:d4:70:b9:dc:d0:7d:e8:ec:e1:d1:b9: 3e:54:05:92:c4:35:31:58:57:da:ed:29:0c:6b:11: 1f:2d:1b:44:97:89:10:69:fc:40:83:50:11:3c:4a: 1b:09:91:c3:19:1e:08:a1:2f:78:48:32:50:c9:3f: a8:56:91:6e:42:d8:8b:b7:45:c6:53:77:3b:84:60: 4f:e0:e7:91:a8:fe:d9:6b:38:53:f2:e2:03:6f:d4: b8:5e:dd:bc:17:8e:ba:3d:a7:5a:41:f5:c2:d2:55: 21:b0:ff:35:30:f6:9c:4b:8d:78:dd:56:34:a1:70: c8:fa:d0:26:d6:66:7e:8a:9b:6f:3d:21:f4:32:29: 35:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:EE:DC:56:5C:7B:D2:02:88:F9:7B:3E:23:AD:E5:23:66:CC:04:E2 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS198376.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:4a00::/40 Signature Algorithm: sha256WithRSAEncryption 96:45:f4:0b:29:9e:04:8e:3c:01:39:55:b8:73:11:7f:ef:a1: ef:7c:cd:67:35:df:76:ed:9f:55:a8:47:c9:5b:db:e5:ba:4b: eb:38:8c:2c:ac:0c:5c:dc:8c:ff:28:9d:58:59:f7:1a:b7:1a: b3:51:7a:fd:60:c1:d2:a6:7f:28:73:45:fe:05:e4:b9:a9:9f: 03:d7:c6:1c:b3:34:a4:c2:e2:db:36:db:a0:cb:3e:db:be:76: fb:1d:59:d3:d2:56:f8:ef:61:16:62:91:14:07:ea:7b:1d:37: 94:87:4e:9e:e5:62:f1:66:e1:0b:e1:24:53:e1:54:2e:73:a3: c6:ab:7d:b8:02:f5:f1:50:56:82:2a:ed:69:b6:ec:32:97:64: 65:cb:ea:a6:be:14:3e:d8:40:a2:e1:2a:52:ca:bf:09:dc:3b: 48:4c:3c:5c:1c:25:5c:e9:6e:c5:ea:89:db:a6:b6:8e:59:df: 8a:d4:3d:5c:9f:b0:9e:53:4b:2e:10:77:02:e4:3f:bf:3d:d3: 88:bf:54:4d:0b:dd:dd:72:9c:84:8f:d7:3a:1c:e0:51:3e:73: f3:64:6c:f8:79:7e:85:49:50:04:6d:32:9a:63:2c:59:e4:98: d9:0a:65:c0:d3:f6:50:74:58:b2:85:8b:b6:9e:10:eb:bc:19: 4f:eb:bf:81 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUMl/2196c4DZr4PEjF1P91xQnZk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MjFaFw0yNjA3MDMwNjUzMjFaMDMxMTAvBgNV BAMTKDJDRUVEQzU2NUM3QkQyMDI4OEY5N0IzRTIzQURFNTIzNjZDQzA0RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4FTxUYWjby3/IepbP9i7dAF0S BPP1X9oMkEIDCH66zTtwgH68JCRpy2+ei6LVmz5g3OVJXPadWbjdazMEXkD5+EgU vXW8rWMkHnABjHH4JqNPVZ9oS5iYRle4+A0k+aIFQ+hIF8yhDWsQVyZyd8bgDbPC REzyHfxEaBbUcLnc0H3o7OHRuT5UBZLENTFYV9rtKQxrER8tG0SXiRBp/ECDUBE8 ShsJkcMZHgihL3hIMlDJP6hWkW5C2Iu3RcZTdzuEYE/g55Go/tlrOFPy4gNv1Lhe 3bwXjro9p1pB9cLSVSGw/zUw9pxLjXjdVjShcMj60CbWZn6Km289IfQyKTUXAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQULO7cVlx70gKI+Xs+I63lI2bMBOIwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMTk4Mzc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwUowDQYJKoZIhvcNAQELBQADggEBAJZF 9AspngSOPAE5VbhzEX/voe98zWc133btn1WoR8lb2+W6S+s4jCysDFzcjP8onVhZ 9xq3GrNRev1gwdKmfyhzRf4F5LmpnwPXxhyzNKTC4ts226DLPtu+dvsdWdPSVvjv YRZikRQH6nsdN5SHTp7lYvFm4QvhJFPhVC5zo8arfbgC9fFQVoIq7Wm27DKXZGXL 6qa+FD7YQKLhKlLKvwncO0hMPFwcJVzpbsXqidumto5Z34rUPVyfsJ5TSy4QdwLk P78904i/VE0L3d1ynISP1zoc4FE+c/NkbPh5foVJUARtMppjLFnkmNkKZcDT9lB0 WLKFi7aeEOu8GU/rv4E= -----END CERTIFICATE-----Generated at Wed Nov 5 06:25:36 2025 by rpki-client