$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS202338.roa File: AS202338.roa (raw, json) Hash identifier: udH8hdDKAPT1LGH8+sUGuU4gffMHOQRcj2X23vDEavQ= Subject key identifier: 47:52:25:85:84:41:D9:6D:7A:89:CE:96:68:7C:31:F8:9C:36:92:C3 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 4F6557C81836420D780B6BA0D0452FF442575C Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS202338.roa Signing time: Fri 11 Apr 2025 13:45:59 +0000 ROA not before: Fri 11 Apr 2025 13:40:59 +0000 ROA not after: Fri 10 Apr 2026 13:45:59 +0000 asID: 202338 IP address blocks: 2a05:dfc1:8800::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 04:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:65:57:c8:18:36:42:0d:78:0b:6b:a0:d0:45:2f:f4:42:57:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Apr 11 13:40:59 2025 GMT Not After : Apr 10 13:45:59 2026 GMT Subject: CN=475225858441D96D7A89CE96687C31F89C3692C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8e:b9:0d:37:c2:70:f3:50:50:42:ff:fe:13: 09:b2:13:42:4a:a9:90:da:1c:5e:86:7e:94:8c:28: 29:81:61:b8:be:07:2f:20:f8:a5:86:51:3e:98:10: ef:51:dc:52:68:98:8b:cf:15:45:3b:fe:28:81:eb: 06:99:f1:24:5c:b5:67:3e:fc:79:33:ba:fb:87:38: 13:ee:e1:41:c9:11:26:19:04:6c:75:47:b6:f6:f5: ff:3e:8d:a1:7a:28:9f:18:63:44:98:b0:c5:e5:94: d9:d9:d8:5f:e9:4a:ab:ae:be:82:a2:51:22:55:09: 44:e5:e6:ee:81:0a:7f:a0:e2:5c:1b:5c:51:fd:11: a5:c1:4d:c3:33:a8:84:c7:6e:05:1e:72:76:39:14: 73:21:fc:82:23:4f:ef:38:cb:71:0e:c3:4d:2a:5e: 2c:e7:01:eb:c2:eb:8a:cb:d5:13:75:71:0b:a9:54: 0d:94:04:93:0c:da:8e:c1:1f:13:92:75:5e:61:51: ad:be:26:2a:13:5c:5a:3d:4c:b4:d5:d8:74:1e:4a: 00:e4:81:06:b7:9c:5c:50:7c:78:a1:41:7f:18:03: c8:e4:bb:5d:51:ca:80:08:2a:f7:01:c4:fb:6d:32: 69:56:df:70:13:bd:6e:cf:49:47:3a:00:18:29:6e: 6f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:52:25:85:84:41:D9:6D:7A:89:CE:96:68:7C:31:F8:9C:36:92:C3 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS202338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8800::/40 Signature Algorithm: sha256WithRSAEncryption 68:6d:17:e5:fc:d7:42:6f:f3:8c:0c:fb:c8:6e:3c:4a:27:a5: c6:20:5a:10:38:82:75:e5:8e:36:f4:5b:32:2d:18:47:8b:22: a5:bd:f4:d2:6d:cf:42:0f:07:32:82:53:c5:7c:d4:45:f9:88: 8c:4a:66:e1:e6:0b:bc:7a:b0:78:fa:70:c3:5b:17:fa:83:e0: 12:de:19:7b:db:cd:93:0a:30:72:77:40:58:35:20:2f:e0:eb: 48:83:c7:66:f9:03:96:b9:a5:da:97:b9:ff:31:04:9c:a4:9c: e6:69:87:70:cd:2f:f3:6e:8d:38:1f:bc:3b:c7:66:c0:68:4e: 02:0e:cc:2d:33:9c:cc:c4:c5:57:f1:78:4d:36:ca:44:d4:0f: 54:36:dd:c6:98:87:31:ce:ea:45:04:5f:55:e8:51:c9:b4:ef: 82:b0:43:b2:9d:47:53:34:69:a6:6a:6d:ae:ea:62:d1:45:5d: 94:07:6c:b0:dc:87:62:11:19:b7:fc:93:2f:fc:2b:1e:3a:b5: 47:8b:1d:76:57:8c:74:a2:32:92:fe:60:8b:aa:ca:32:ec:42: 48:3a:32:3c:7d:e9:e3:3f:90:be:ff:be:12:79:45:d4:f6:d9: ea:50:dd:c2:ec:cc:66:49:6f:a1:db:72:26:79:cb:31:4b:2c: a3:d2:6b:a6 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgITT2VXyBg2Qg14C2ug0EUv9EJXXDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygwRTM1N0REQTA0QjgxMDc2MjYxMjRGNTJDRkMyNDM5Qjc2 RDg1QUY5MB4XDTI1MDQxMTEzNDA1OVoXDTI2MDQxMDEzNDU1OVowMzExMC8GA1UE AxMoNDc1MjI1ODU4NDQxRDk2RDdBODlDRTk2Njg3QzMxRjg5QzM2OTJDMzCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMCOuQ03wnDzUFBC//4TCbITQkqp kNocXoZ+lIwoKYFhuL4HLyD4pYZRPpgQ71HcUmiYi88VRTv+KIHrBpnxJFy1Zz78 eTO6+4c4E+7hQckRJhkEbHVHtvb1/z6NoXoonxhjRJiwxeWU2dnYX+lKq66+gqJR IlUJROXm7oEKf6DiXBtcUf0RpcFNwzOohMduBR5ydjkUcyH8giNP7zjLcQ7DTSpe LOcB68LrisvVE3VxC6lUDZQEkwzajsEfE5J1XmFRrb4mKhNcWj1MtNXYdB5KAOSB BrecXFB8eKFBfxgDyOS7XVHKgAgq9wHE+20yaVbfcBO9bs9JRzoAGClub2cCAwEA AaOCAfQwggHwMB0GA1UdDgQWBBRHUiWFhEHZbXqJzpZofDH4nDaSwzAfBgNVHSME GDAWgBQONX3aBLgQdiYST1LPwkObdtha+TAOBgNVHQ8BAf8EBAMCB4AwbwYDVR0f BGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJlcG8ucnBraS5hcHAvcmVwby9D TE9VRElFLVJQS0kvMC8wRTM1N0REQTA0QjgxMDc2MjYxMjRGNTJDRkMyNDM5Qjc2 RDg1QUY5LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz ZTAxODU3NTVjOTFiZTNmOWQvMi8wRTM1N0REQTA0QjgxMDc2MjYxMjRGNTJDRkMy NDM5Qjc2RDg1QUY5LmNlcjBaBggrBgEFBQcBCwROMEwwSgYIKwYBBQUHMAuGPnJz eW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzAv QVMyMDIzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqBd/BiDANBgkqhkiG9w0BAQsFAAOCAQEAaG0X 5fzXQm/zjAz7yG48SielxiBaEDiCdeWONvRbMi0YR4sipb300m3PQg8HMoJTxXzU RfmIjEpm4eYLvHqwePpww1sX+oPgEt4Ze9vNkwowcndAWDUgL+DrSIPHZvkDlrml 2pe5/zEEnKSc5mmHcM0v826NOB+8O8dmwGhOAg7MLTOczMTFV/F4TTbKRNQPVDbd xpiHMc7qRQRfVehRybTvgrBDsp1HUzRppmptrupi0UVdlAdssNyHYhEZt/yTL/wr Hjq1R4sddleMdKIykv5gi6rKMuxCSDoyPH3p4z+Qvv++EnlF1PbZ6lDdwuzMZklv odtyJnnLMUsso9Jrpg== -----END CERTIFICATE-----Generated at Tue May 6 13:40:14 2025 by rpki-client