$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198663.roa File: AS198663.roa (raw, json) Hash identifier: vhE7Lp2fRter+95X1IkHvdFeHNs7BKDySUBAwRKO8yM= Subject key identifier: CB:3B:C3:3F:93:50:AF:77:19:B6:0B:9B:B7:B3:CB:FA:6C:2F:04:F4 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 0D731A2C0C7F311EF56C7E9D9F61E85D8489B982 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198663.roa Signing time: Tue 04 Mar 2025 00:45:56 +0000 ROA not before: Tue 04 Mar 2025 00:40:56 +0000 ROA not after: Tue 03 Mar 2026 00:45:56 +0000 asID: 198663 IP address blocks: 2a05:dfc1:2f00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 11:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:73:1a:2c:0c:7f:31:1e:f5:6c:7e:9d:9f:61:e8:5d:84:89:b9:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Mar 4 00:40:56 2025 GMT Not After : Mar 3 00:45:56 2026 GMT Subject: CN=CB3BC33F9350AF7719B60B9BB7B3CBFA6C2F04F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f1:64:cd:70:2d:ab:d1:f9:c3:1b:1a:6d:f4: c3:e9:ad:27:a8:79:bb:5f:46:58:7c:2f:0d:f8:d6: 24:e8:b0:d7:b5:7b:4d:0c:fb:b0:3a:9c:45:93:61: 12:a7:3d:ef:22:79:4d:a1:f4:70:4c:6a:2c:60:fe: 5b:da:7e:4e:66:b6:4a:55:e8:e6:de:02:fe:97:f9: b3:fa:9a:10:5e:fb:7b:eb:1b:3b:a7:fa:0e:e0:49: 0c:36:c0:3e:56:1e:b0:0f:6b:47:c9:77:fa:02:29: 4e:b2:39:be:22:95:5a:18:b6:69:32:96:f5:1d:d0: 1e:cd:b9:bc:08:76:af:c6:51:6a:12:39:b6:62:4a: 1e:e4:8d:d4:ea:cf:1e:b5:bc:f2:10:f1:47:bf:07: 0b:89:5b:25:df:cf:5b:49:7b:c1:a4:8b:e4:11:14: 5a:a0:da:6a:ce:8a:f5:01:2b:05:95:f6:72:e6:89: 29:06:8a:7f:b8:91:ce:8c:c0:3b:73:a6:ff:64:2d: 4b:07:f6:34:d7:a7:ed:00:6a:c9:61:38:47:6f:00: 19:10:e7:06:1f:c7:cf:15:ed:bd:39:5a:20:ee:28: 3c:5f:f5:94:95:d8:66:b7:23:83:f2:ab:da:c7:6b: 90:ad:96:17:73:4e:4e:8f:bc:fa:87:04:2e:bd:f5: 59:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:3B:C3:3F:93:50:AF:77:19:B6:0B:9B:B7:B3:CB:FA:6C:2F:04:F4 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198663.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:2f00::/40 Signature Algorithm: sha256WithRSAEncryption a1:1f:a9:3d:05:20:07:eb:b8:32:eb:8d:e2:11:22:ae:39:65: 30:6a:ae:2e:1c:fa:92:a9:55:26:ab:a3:4e:5d:56:ab:ff:07: fc:b9:be:8d:52:78:ae:91:5c:02:fb:09:21:54:9c:87:71:46: 04:bd:24:c2:a9:46:30:aa:dc:18:f6:35:df:9d:be:0f:95:03: ee:74:c3:68:89:91:28:be:77:10:eb:a8:83:18:3f:88:20:30: 04:58:21:63:e0:4b:ea:58:f8:ed:f3:20:0e:96:52:79:50:2c: a0:76:c7:11:46:77:e9:b2:4a:ff:ab:3a:66:1d:83:5b:2c:34: 59:f0:10:a9:16:ab:95:84:98:ac:47:be:af:44:7c:97:90:ea: 52:a7:b6:9c:83:13:16:df:d4:af:21:2d:7f:2f:2d:1b:b3:b9: d6:a1:99:b9:6b:45:f2:66:0e:6e:96:8b:36:84:7b:66:86:88: 7c:b4:85:84:f9:b9:2f:4e:57:fe:3b:63:10:5e:ed:fd:49:41: 19:81:bb:7d:ae:38:52:14:21:96:ad:91:0c:cc:cc:88:98:8c: c5:08:c2:b6:ee:cb:a3:1b:31:01:8f:13:3f:5d:25:e9:0c:50: f4:ea:23:48:b9:61:aa:65:87:3e:49:4d:3b:02:a0:12:f1:4a: 99:42:92:14 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUDXMaLAx/MR71bH6dn2HoXYSJuYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNTAzMDQwMDQwNTZaFw0yNjAzMDMwMDQ1NTZaMDMxMTAvBgNV BAMTKENCM0JDMzNGOTM1MEFGNzcxOUI2MEI5QkI3QjNDQkZBNkMyRjA0RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu8WTNcC2r0fnDGxpt9MPprSeo ebtfRlh8Lw341iTosNe1e00M+7A6nEWTYRKnPe8ieU2h9HBMaixg/lvafk5mtkpV 6ObeAv6X+bP6mhBe+3vrGzun+g7gSQw2wD5WHrAPa0fJd/oCKU6yOb4ilVoYtmky lvUd0B7NubwIdq/GUWoSObZiSh7kjdTqzx61vPIQ8Ue/BwuJWyXfz1tJe8Gki+QR FFqg2mrOivUBKwWV9nLmiSkGin+4kc6MwDtzpv9kLUsH9jTXp+0AaslhOEdvABkQ 5wYfx88V7b05WiDuKDxf9ZSV2Ga3I4Pyq9rHa5CtlhdzTk6PvPqHBC699VnrAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUyzvDP5NQr3cZtgubt7PL+mwvBPQwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMTk4NjYzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwS8wDQYJKoZIhvcNAQELBQADggEBAKEf qT0FIAfruDLrjeIRIq45ZTBqri4c+pKpVSaro05dVqv/B/y5vo1SeK6RXAL7CSFU nIdxRgS9JMKpRjCq3Bj2Nd+dvg+VA+50w2iJkSi+dxDrqIMYP4ggMARYIWPgS+pY +O3zIA6WUnlQLKB2xxFGd+mySv+rOmYdg1ssNFnwEKkWq5WEmKxHvq9EfJeQ6lKn tpyDExbf1K8hLX8vLRuzudahmblrRfJmDm6WizaEe2aGiHy0hYT5uS9OV/47YxBe 7f1JQRmBu32uOFIUIZatkQzMzIiYjMUIwrbuy6MbMQGPEz9dJekMUPTqI0i5Yapl hz5JTTsCoBLxSplCkhQ= -----END CERTIFICATE-----Generated at Wed May 7 04:24:24 2025 by rpki-client