$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS197919.roa File: AS197919.roa (raw, json) Hash identifier: 0wwckTBK1ympX5g8WybTaoTKAVnEDaGVIDoLLRg6KP8= Subject key identifier: 3F:EC:3C:20:89:1C:EE:45:1D:9A:24:2C:72:3C:9C:6B:81:59:44:94 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 1957B5628BAE2C8BD5CCFB15C7649A13AAD35C83 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS197919.roa Signing time: Sat 28 Jun 2025 22:46:43 +0000 ROA not before: Sat 28 Jun 2025 22:41:43 +0000 ROA not after: Sat 27 Jun 2026 22:46:43 +0000 asID: 197919 IP address blocks: 2a05:dfc1:6200::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 23:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:57:b5:62:8b:ae:2c:8b:d5:cc:fb:15:c7:64:9a:13:aa:d3:5c:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Jun 28 22:41:43 2025 GMT Not After : Jun 27 22:46:43 2026 GMT Subject: CN=3FEC3C20891CEE451D9A242C723C9C6B81594494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c6:a5:4d:e7:f0:83:da:e4:14:21:50:db:de: 7c:88:77:c2:84:9d:86:5b:58:eb:57:02:1d:4e:08: 75:94:2c:56:41:c7:3f:82:78:ad:87:5d:7e:17:eb: 01:8e:47:42:c1:04:e6:21:e8:14:48:9d:29:7e:03: 5f:6a:44:7d:6c:9a:e1:04:51:e9:3e:bc:98:3e:b0: 35:f0:eb:d7:4c:cb:8e:8a:08:fb:68:4a:e5:da:1d: a7:db:24:bd:a3:6e:2c:89:20:39:58:b2:aa:af:39: c6:dd:c7:be:99:bc:cd:57:26:65:32:f1:4a:f8:89: ca:b8:2f:74:57:5b:be:73:0f:a0:92:f7:d1:b3:de: 38:7c:bd:20:27:32:d0:68:b2:f9:01:ba:e0:df:00: 23:f8:79:9b:aa:37:7a:f3:93:6c:55:4d:3e:cb:0a: 40:fa:58:f6:98:8a:2d:89:b9:66:78:3b:bc:46:bc: 53:54:d4:fb:91:e2:a9:ac:3f:f6:6a:04:8f:e5:78: 8f:5f:0c:94:7c:05:b4:f3:4b:53:9c:e6:09:55:2c: aa:22:62:42:79:a6:ab:9a:76:cd:aa:de:e1:1b:37: da:f2:ec:a7:1d:61:c4:d1:de:6c:33:61:42:76:51: 7d:be:4f:ff:56:0e:84:de:49:89:23:f4:32:c0:46: 0f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:EC:3C:20:89:1C:EE:45:1D:9A:24:2C:72:3C:9C:6B:81:59:44:94 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS197919.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:6200::/40 Signature Algorithm: sha256WithRSAEncryption 0a:1f:80:c8:2f:f9:e2:3a:74:77:bd:7e:69:9b:d6:f2:23:13: 24:52:90:e1:ec:9a:d1:18:0e:2b:92:8b:15:c8:ea:8f:ef:bc: 13:b2:93:0a:35:2f:3d:36:97:10:42:70:a2:0d:4d:1f:33:2a: 8d:b3:2d:a4:a0:eb:34:2f:4b:5c:ea:30:c3:24:18:b7:27:ef: 34:fb:72:15:4f:ec:16:51:8d:21:b1:97:ce:b0:81:0f:f4:70: 39:6b:bc:8f:8f:ef:20:ae:78:cf:36:7f:cf:5b:b6:86:74:74: 9f:88:0b:6f:e4:4a:94:39:8f:cd:cf:c0:c3:36:c7:18:89:23: 33:de:46:9c:07:4e:bd:54:97:e7:9b:05:32:e6:22:75:bd:fe: 6d:df:64:e5:38:24:c2:3d:de:88:35:e1:5c:db:46:10:82:ac: 51:38:9d:61:19:bc:72:4e:62:bb:0b:61:d1:3f:e6:7e:f6:64: 10:69:94:e7:06:16:47:64:35:5c:22:0a:51:29:26:58:c1:c6: 9b:78:1d:62:d4:5a:2b:be:03:20:ae:8e:14:fd:e1:6f:85:21: 27:b5:10:f1:bb:c6:e3:89:ca:02:f9:dd:75:6e:3c:33:a5:14: 22:aa:7c:03:f0:3e:53:cc:ef:e9:36:55:b3:74:cb:e6:39:cb: 32:c2:78:af -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUGVe1YouuLIvVzPsVx2SaE6rTXIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNTA2MjgyMjQxNDNaFw0yNjA2MjcyMjQ2NDNaMDMxMTAvBgNV BAMTKDNGRUMzQzIwODkxQ0VFNDUxRDlBMjQyQzcyM0M5QzZCODE1OTQ0OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsxqVN5/CD2uQUIVDb3nyId8KE nYZbWOtXAh1OCHWULFZBxz+CeK2HXX4X6wGOR0LBBOYh6BRInSl+A19qRH1smuEE Uek+vJg+sDXw69dMy46KCPtoSuXaHafbJL2jbiyJIDlYsqqvOcbdx76ZvM1XJmUy 8Ur4icq4L3RXW75zD6CS99Gz3jh8vSAnMtBosvkBuuDfACP4eZuqN3rzk2xVTT7L CkD6WPaYii2JuWZ4O7xGvFNU1PuR4qmsP/ZqBI/leI9fDJR8BbTzS1Oc5glVLKoi YkJ5pquads2q3uEbN9ry7KcdYcTR3mwzYUJ2UX2+T/9WDoTeSYkj9DLARg/rAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUP+w8IIkc7kUdmiQscjyca4FZRJQwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMTk3OTE5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwWIwDQYJKoZIhvcNAQELBQADggEBAAof gMgv+eI6dHe9fmmb1vIjEyRSkOHsmtEYDiuSixXI6o/vvBOykwo1Lz02lxBCcKIN TR8zKo2zLaSg6zQvS1zqMMMkGLcn7zT7chVP7BZRjSGxl86wgQ/0cDlrvI+P7yCu eM82f89btoZ0dJ+IC2/kSpQ5j83PwMM2xxiJIzPeRpwHTr1Ul+ebBTLmInW9/m3f ZOU4JMI93og14VzbRhCCrFE4nWEZvHJOYrsLYdE/5n72ZBBplOcGFkdkNVwiClEp JljBxpt4HWLUWiu+AyCujhT94W+FISe1EPG7xuOJygL53XVuPDOlFCKqfAPwPlPM 7+k2VbN0y+Y5yzLCeK8= -----END CERTIFICATE-----Generated at Sun Jun 29 09:39:07 2025 by rpki-client