$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198209.roa File: AS198209.roa (raw, json) Hash identifier: Di4nAxkIpGsnmmCiLT6nAgoGsuz9TMmFHnJARGnl6n8= Subject key identifier: B8:78:04:48:08:2E:BE:0C:87:8F:C2:5D:9E:54:13:79:63:1E:44:30 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 586480F208195297CE3EE027B3798954B7FECF Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198209.roa Signing time: Fri 11 Apr 2025 01:45:59 +0000 ROA not before: Fri 11 Apr 2025 01:40:59 +0000 ROA not after: Fri 10 Apr 2026 01:45:59 +0000 asID: 198209 IP address blocks: 2a05:dfc1:5600::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 04:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:64:80:f2:08:19:52:97:ce:3e:e0:27:b3:79:89:54:b7:fe:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Apr 11 01:40:59 2025 GMT Not After : Apr 10 01:45:59 2026 GMT Subject: CN=B8780448082EBE0C878FC25D9E541379631E4430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:96:f0:72:6a:60:bc:26:a0:a4:12:22:b0:fa: e1:84:e1:f7:05:03:41:82:e0:b7:69:ff:28:e7:33: 74:d4:63:7c:5a:5e:a2:f6:2c:e4:49:59:98:f2:ee: 72:69:5f:b8:ad:d4:20:80:3e:f4:13:7f:af:52:9b: 7d:a3:a5:86:01:fc:c8:57:19:c9:2e:0b:66:30:d5: b4:91:e5:b5:91:e7:20:00:c4:ab:31:42:a6:cf:99: e2:90:e2:e3:39:6e:fb:95:60:b1:38:f0:5a:4c:61: f0:f8:00:4b:e5:63:79:82:16:1a:a7:76:95:f3:c4: 38:f5:94:15:5b:20:c5:ca:af:0e:c6:3a:ee:db:8d: 39:e1:be:67:be:62:9d:2f:6f:55:f2:d6:63:0c:97: 82:56:93:75:f7:a2:55:a3:eb:66:59:c1:24:65:c6: cf:a1:b8:fb:f7:3a:ef:62:13:aa:49:c0:5d:c3:e2: 32:00:0e:e5:a2:6b:ae:fd:4b:fc:65:c6:be:1e:b0: 19:d1:d0:0d:1d:44:da:c1:36:9e:ad:b5:55:02:9d: af:73:2b:71:65:7a:00:ba:18:28:53:f7:51:00:ca: 23:37:cf:06:47:b3:fe:f1:68:71:b5:f9:ff:0b:a8: ee:c6:2f:a3:be:18:aa:be:8f:95:08:fa:fc:8b:7c: 9a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:78:04:48:08:2E:BE:0C:87:8F:C2:5D:9E:54:13:79:63:1E:44:30 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198209.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:5600::/40 Signature Algorithm: sha256WithRSAEncryption 7e:b5:da:a2:3e:fe:1e:ca:f6:cc:eb:6a:78:41:f2:29:6c:5a: be:53:0c:fd:2d:ad:77:95:fa:70:4d:cc:17:95:50:e2:9e:6d: a1:c5:f7:28:8e:b6:d5:87:a7:be:32:8a:a2:60:3f:ec:1c:8b: 92:46:5e:9e:57:c9:4a:db:1c:c0:f3:81:3b:b5:bb:00:a2:30: 34:8c:b6:e1:20:e1:00:4b:d6:f1:64:1b:8d:95:d2:7d:70:d7: 47:c9:64:dc:7f:6f:1c:ff:d1:11:32:12:32:a3:97:cb:6b:f7: 18:5e:b5:c0:cb:9a:f2:dd:c8:dd:0c:92:c0:37:01:0b:be:1c: c3:c1:97:55:21:c8:00:f3:27:0b:d1:d2:f5:93:69:31:37:3e: fe:de:4a:a6:92:53:6b:9e:98:3a:c5:60:11:07:27:f1:ea:3d: ab:6f:d5:ac:f2:45:50:48:58:ac:bb:0c:7c:ce:b5:27:0c:cf: ee:b0:3e:a9:b0:58:6c:e7:c3:5e:d0:3d:91:83:ea:4f:5f:78: c2:eb:0e:7d:3d:49:a3:e5:5a:ad:f4:2e:12:cc:86:78:0b:3e: d4:f4:27:f7:c5:ac:a8:2b:04:56:8a:f3:e0:d3:ed:ca:50:f9: b1:ef:f3:d8:6c:85:ff:f3:95:fb:d4:cf:4c:ae:59:6b:d1:f8: ef:49:29:65 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgITWGSA8ggZUpfOPuAns3mJVLf+zzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygwRTM1N0REQTA0QjgxMDc2MjYxMjRGNTJDRkMyNDM5Qjc2 RDg1QUY5MB4XDTI1MDQxMTAxNDA1OVoXDTI2MDQxMDAxNDU1OVowMzExMC8GA1UE AxMoQjg3ODA0NDgwODJFQkUwQzg3OEZDMjVEOUU1NDEzNzk2MzFFNDQzMDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALiW8HJqYLwmoKQSIrD64YTh9wUD QYLgt2n/KOczdNRjfFpeovYs5ElZmPLucmlfuK3UIIA+9BN/r1KbfaOlhgH8yFcZ yS4LZjDVtJHltZHnIADEqzFCps+Z4pDi4zlu+5VgsTjwWkxh8PgAS+VjeYIWGqd2 lfPEOPWUFVsgxcqvDsY67tuNOeG+Z75inS9vVfLWYwyXglaTdfeiVaPrZlnBJGXG z6G4+/c672ITqknAXcPiMgAO5aJrrv1L/GXGvh6wGdHQDR1E2sE2nq21VQKdr3Mr cWV6ALoYKFP3UQDKIzfPBkez/vFocbX5/wuo7sYvo74Yqr6PlQj6/It8mgMCAwEA AaOCAfQwggHwMB0GA1UdDgQWBBS4eARICC6+DIePwl2eVBN5Yx5EMDAfBgNVHSME GDAWgBQONX3aBLgQdiYST1LPwkObdtha+TAOBgNVHQ8BAf8EBAMCB4AwbwYDVR0f BGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJlcG8ucnBraS5hcHAvcmVwby9D TE9VRElFLVJQS0kvMC8wRTM1N0REQTA0QjgxMDc2MjYxMjRGNTJDRkMyNDM5Qjc2 RDg1QUY5LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz ZTAxODU3NTVjOTFiZTNmOWQvMi8wRTM1N0REQTA0QjgxMDc2MjYxMjRGNTJDRkMy NDM5Qjc2RDg1QUY5LmNlcjBaBggrBgEFBQcBCwROMEwwSgYIKwYBBQUHMAuGPnJz eW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzAv QVMxOTgyMDkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqBd/BVjANBgkqhkiG9w0BAQsFAAOCAQEAfrXa oj7+Hsr2zOtqeEHyKWxavlMM/S2td5X6cE3MF5VQ4p5tocX3KI621YenvjKKomA/ 7ByLkkZenlfJStscwPOBO7W7AKIwNIy24SDhAEvW8WQbjZXSfXDXR8lk3H9vHP/R ETISMqOXy2v3GF61wMua8t3I3QySwDcBC74cw8GXVSHIAPMnC9HS9ZNpMTc+/t5K ppJTa56YOsVgEQcn8eo9q2/VrPJFUEhYrLsMfM61JwzP7rA+qbBYbOfDXtA9kYPq T194wusOfT1Jo+VarfQuEsyGeAs+1PQn98WsqCsEVorz4NPtylD5se/z2GyF//OV +9TPTK5Za9H470kpZQ== -----END CERTIFICATE-----Generated at Tue May 6 11:14:23 2025 by rpki-client