$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS151194.roa File: AS151194.roa (raw, json) Hash identifier: etbKJqAaYsVN0GCwJ3bT2WEoYVvgznf7gCX+aOOFuho= Subject key identifier: 7C:58:42:7C:20:6D:68:7D:38:B5:90:29:B0:AF:BA:88:47:09:BE:F4 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 4E8A39E887CC440F5E73FDD4B487AAA82A28C0AD Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS151194.roa Signing time: Tue 29 Apr 2025 11:46:17 +0000 ROA not before: Tue 29 Apr 2025 11:41:17 +0000 ROA not after: Tue 28 Apr 2026 11:46:17 +0000 asID: 151194 IP address blocks: 2a05:dfc1:5980::/41 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 04:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:8a:39:e8:87:cc:44:0f:5e:73:fd:d4:b4:87:aa:a8:2a:28:c0:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Apr 29 11:41:17 2025 GMT Not After : Apr 28 11:46:17 2026 GMT Subject: CN=7C58427C206D687D38B59029B0AFBA884709BEF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:14:84:47:1b:94:d4:69:b0:f4:42:84:0d:22: d7:3b:b6:2b:a1:b4:38:a2:4e:09:d1:61:27:4b:b4: 90:d0:a7:72:23:9e:4d:d7:e9:e8:67:e3:9b:d7:c3: ae:6a:64:04:a0:88:6e:47:a5:a4:e8:b6:8e:42:18: 1b:5b:62:ea:d7:c4:c5:f2:99:d6:b1:b0:3b:be:91: bc:13:b9:9a:81:89:f8:3b:2f:86:de:e7:f8:69:6f: e8:37:5e:e4:94:0e:a1:6d:b7:59:6b:2e:d0:b8:9c: 62:89:e0:46:78:07:05:b7:3f:05:db:03:0d:ec:1c: 86:3e:4b:ce:6d:a3:24:50:50:11:eb:aa:44:03:09: 3c:42:55:28:0a:04:02:6a:32:52:20:80:44:72:6a: 03:67:d5:92:e2:12:5c:85:bf:ee:a0:d1:fb:cb:27: be:ab:eb:56:43:39:b1:f7:77:db:ee:31:07:84:bb: 07:fb:32:00:64:fd:3f:09:0f:7d:27:92:94:73:57: b0:aa:fa:76:7e:d0:3c:25:fc:f4:98:86:5b:7a:70: ab:44:c7:3e:27:d5:15:0e:78:d4:eb:85:55:3a:da: 4c:f0:78:d8:67:6b:d1:68:aa:ca:22:2f:d0:e0:69: 8e:ad:68:f1:60:47:50:90:28:c7:7a:0c:09:73:a2: 29:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:58:42:7C:20:6D:68:7D:38:B5:90:29:B0:AF:BA:88:47:09:BE:F4 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS151194.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:5980::/41 Signature Algorithm: sha256WithRSAEncryption 45:f6:14:6a:bc:30:8b:bf:a1:24:0d:c8:5c:e9:bb:4f:e3:74: e2:a4:70:9f:43:38:17:c5:22:b6:a8:e7:3b:c6:a6:7b:6e:e9: be:21:ec:bc:70:f4:99:a0:3c:d2:5e:53:1c:b0:90:c6:93:3b: e7:8e:58:6e:da:88:81:ab:79:82:83:69:8b:86:ba:8d:cd:51: ca:87:f8:3f:31:7b:0a:61:30:0f:03:4f:ec:e0:aa:c6:2c:22: b1:6e:05:8e:38:4a:3a:79:af:57:73:f7:9f:52:8f:d7:7c:5b: 19:18:2c:7b:30:44:d9:b9:f8:18:92:3b:94:e7:79:15:4c:4b: b6:4a:ee:8c:27:b0:48:13:14:40:e1:03:63:0a:7e:e6:ec:6a: fb:13:18:1e:da:7e:4c:6a:5b:a7:47:20:f5:5a:30:94:48:41: e6:41:55:22:c2:9b:f0:ca:94:ff:96:c8:c2:65:ff:a9:4d:7d: b2:89:75:8f:7a:ed:39:8c:1c:85:eb:be:d2:df:ab:b5:9b:ac: 35:74:33:d0:87:78:ef:6c:a2:33:ac:44:72:ef:6e:f4:8a:b4: 78:d6:20:26:45:a1:88:d3:f7:e8:85:45:89:b2:4a:3e:45:b1: 22:f5:de:a6:0f:97:76:d0:da:e3:11:2c:10:09:5d:84:67:a1: cf:fd:6e:dc -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgIUToo56IfMRA9ec/3UtIeqqCoowK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNTA0MjkxMTQxMTdaFw0yNjA0MjgxMTQ2MTdaMDMxMTAvBgNV BAMTKDdDNTg0MjdDMjA2RDY4N0QzOEI1OTAyOUIwQUZCQTg4NDcwOUJFRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpFIRHG5TUabD0QoQNItc7tiuh tDiiTgnRYSdLtJDQp3Ijnk3X6ehn45vXw65qZASgiG5HpaToto5CGBtbYurXxMXy mdaxsDu+kbwTuZqBifg7L4be5/hpb+g3XuSUDqFtt1lrLtC4nGKJ4EZ4BwW3PwXb Aw3sHIY+S85toyRQUBHrqkQDCTxCVSgKBAJqMlIggERyagNn1ZLiElyFv+6g0fvL J76r61ZDObH3d9vuMQeEuwf7MgBk/T8JD30nkpRzV7Cq+nZ+0Dwl/PSYhlt6cKtE xz4n1RUOeNTrhVU62kzweNhna9FoqsoiL9DgaY6taPFgR1CQKMd6DAlzoinPAgMB AAGjggH1MIIB8TAdBgNVHQ4EFgQUfFhCfCBtaH04tZApsK+6iEcJvvQwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMTUxMTk0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcHKgXfwVmAMA0GCSqGSIb3DQEBCwUAA4IBAQBF 9hRqvDCLv6EkDchc6btP43TipHCfQzgXxSK2qOc7xqZ7bum+Iey8cPSZoDzSXlMc sJDGkzvnjlhu2oiBq3mCg2mLhrqNzVHKh/g/MXsKYTAPA0/s4KrGLCKxbgWOOEo6 ea9Xc/efUo/XfFsZGCx7METZufgYkjuU53kVTEu2Su6MJ7BIExRA4QNjCn7m7Gr7 Exge2n5MalunRyD1WjCUSEHmQVUiwpvwypT/lsjCZf+pTX2yiXWPeu05jByF677S 36u1m6w1dDPQh3jvbKIzrERy7270irR41iAmRaGI0/fohUWJsko+RbEi9d6mD5d2 0NrjESwQCV2EZ6HP/W7c -----END CERTIFICATE-----Generated at Tue May 6 13:43:45 2025 by rpki-client