$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS198946.roa File: AS198946.roa (raw, json) Hash identifier: JvT01gmeWivU9rHm4lsBa1H0v/gTAIpMRTRcLf8o4z0= Subject key identifier: EC:16:3D:76:92:D5:42:43:BD:78:A4:24:E6:6E:F1:72:05:E8:D7:85 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 581ACC906439CBAE38F6BBA57B858E38BE9FD610 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS198946.roa Signing time: Fri 04 Jul 2025 06:53:15 +0000 ROA not before: Fri 04 Jul 2025 06:48:15 +0000 ROA not after: Fri 03 Jul 2026 06:53:15 +0000 asID: 198946 IP address blocks: 2a05:dfc1:3300::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:1a:cc:90:64:39:cb:ae:38:f6:bb:a5:7b:85:8e:38:be:9f:d6:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:15 2025 GMT Not After : Jul 3 06:53:15 2026 GMT Subject: CN=EC163D7692D54243BD78A424E66EF17205E8D785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b1:b1:d5:0e:bd:d7:53:5d:5e:10:43:ac:78: 73:4e:2d:40:a4:2f:8f:4b:56:6d:9b:fc:12:79:f9: 52:d4:4f:fe:26:9d:71:f7:70:a8:04:a9:11:bf:70: e1:03:fc:50:86:2e:b6:e8:03:69:81:85:72:fd:13: 26:c9:a5:f0:47:8b:b4:c1:48:e0:b7:e9:7e:d2:2d: c3:81:8f:08:2f:f4:1d:ee:2e:e4:bf:82:f8:35:9e: 1a:ee:6f:56:59:19:4e:74:5f:6e:de:c7:78:b2:44: 27:28:40:7d:54:b6:06:ff:01:e9:3f:e4:75:16:70: b2:31:12:5f:9a:1c:ef:40:7e:07:c8:70:07:a5:30: ec:26:09:95:a6:fc:89:a1:df:ce:3d:8a:9d:74:29: 47:df:64:bb:8a:dc:5f:32:c1:00:16:fc:74:fc:0c: 71:78:c7:ea:d9:dc:02:a1:8c:41:c7:28:9d:a7:52: b0:30:bc:36:15:48:1a:9b:87:c3:98:3a:e3:02:5b: dd:d7:1c:ae:8a:f6:54:2d:31:ae:3c:ba:a8:93:c3: 5f:2b:b5:e1:6c:03:f0:90:07:e5:f3:b8:1a:7b:13: 51:9a:79:1f:2c:61:9d:56:f2:fe:a2:a9:f9:49:78: 94:5f:c3:fc:17:65:5f:03:36:3c:a1:50:54:b5:e1: ae:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:16:3D:76:92:D5:42:43:BD:78:A4:24:E6:6E:F1:72:05:E8:D7:85 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS198946.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:3300::/40 Signature Algorithm: sha256WithRSAEncryption 25:d5:68:a8:41:24:c5:4f:df:e7:95:33:15:b0:12:6d:6a:ce: 72:75:31:7b:52:0f:2a:0d:4c:b8:c6:85:86:99:1d:d3:bd:a7: 96:b0:29:78:95:cf:50:95:7e:cf:f8:12:9a:6c:07:43:27:2d: 72:da:df:2a:11:b4:68:1f:06:9a:0c:06:fe:2f:7e:38:e0:d5: 0f:2e:47:df:9e:20:89:c0:9c:5b:a7:37:29:77:d4:36:c5:8e: 94:26:9f:98:40:4d:2c:88:85:c3:d8:18:0b:bb:6f:14:fb:9c: 42:27:d5:32:81:a3:4d:23:b0:a5:33:36:d0:7b:1a:19:62:cf: fe:17:52:47:99:7d:95:ae:fc:0a:53:b8:83:7f:8e:80:a3:58: 3f:e7:8d:bf:71:ef:03:b5:d9:d6:1d:0c:9f:73:27:c3:98:e9: 3b:2d:d0:30:ff:40:96:c4:6f:c5:f2:c3:93:f3:e3:2c:7d:c8: f1:13:0c:8f:be:8d:63:c3:cd:e9:55:d4:25:af:a2:ac:db:02: e2:44:a9:b9:4e:3e:e5:1c:32:ff:75:e6:82:7b:f8:cf:1c:0e: de:8b:9c:c0:49:33:da:1f:c3:60:ef:16:c8:7a:b4:e7:93:e0: e1:89:f7:99:d3:0d:90:b7:9b:d0:40:e9:6b:97:9d:82:c5:be: d2:76:16:74 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUWBrMkGQ5y6449rule4WOOL6f1hAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MTVaFw0yNjA3MDMwNjUzMTVaMDMxMTAvBgNV BAMTKEVDMTYzRDc2OTJENTQyNDNCRDc4QTQyNEU2NkVGMTcyMDVFOEQ3ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGsbHVDr3XU11eEEOseHNOLUCk L49LVm2b/BJ5+VLUT/4mnXH3cKgEqRG/cOED/FCGLrboA2mBhXL9EybJpfBHi7TB SOC36X7SLcOBjwgv9B3uLuS/gvg1nhrub1ZZGU50X27ex3iyRCcoQH1Utgb/Aek/ 5HUWcLIxEl+aHO9AfgfIcAelMOwmCZWm/Imh3849ip10KUffZLuK3F8ywQAW/HT8 DHF4x+rZ3AKhjEHHKJ2nUrAwvDYVSBqbh8OYOuMCW93XHK6K9lQtMa48uqiTw18r teFsA/CQB+XzuBp7E1GaeR8sYZ1W8v6iqflJeJRfw/wXZV8DNjyhUFS14a7tAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU7BY9dpLVQkO9eKQk5m7xcgXo14UwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMTk4OTQ2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwTMwDQYJKoZIhvcNAQELBQADggEBACXV aKhBJMVP3+eVMxWwEm1qznJ1MXtSDyoNTLjGhYaZHdO9p5awKXiVz1CVfs/4Epps B0MnLXLa3yoRtGgfBpoMBv4vfjjg1Q8uR9+eIInAnFunNyl31DbFjpQmn5hATSyI hcPYGAu7bxT7nEIn1TKBo00jsKUzNtB7Ghliz/4XUkeZfZWu/ApTuIN/joCjWD/n jb9x7wO12dYdDJ9zJ8OY6Tst0DD/QJbEb8Xyw5Pz4yx9yPETDI++jWPDzelV1CWv oqzbAuJEqblOPuUcMv915oJ7+M8cDt6LnMBJM9ofw2DvFsh6tOeT4OGJ95nTDZC3 m9BA6WuXnYLFvtJ2FnQ= -----END CERTIFICATE-----Generated at Wed Nov 5 12:56:37 2025 by rpki-client