$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS203868.roa File: AS203868.roa (raw, json) Hash identifier: AWo57r5n9B2JqOczjcl3+h8JQQH18qI7xUW/d4AICtE= Subject key identifier: FC:72:15:21:DB:EC:27:C6:DF:20:C9:5C:24:52:88:F1:63:E6:17:92 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 1848670203FF5B860B0D1465FF9B0C543651FD57 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS203868.roa Signing time: Sat 28 Jun 2025 08:46:42 +0000 ROA not before: Sat 28 Jun 2025 08:41:42 +0000 ROA not after: Sat 27 Jun 2026 08:46:42 +0000 asID: 203868 IP address blocks: 2a0a:6040:dd00::/40 maxlen: 48 2a0a:6040:fb00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 23:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:48:67:02:03:ff:5b:86:0b:0d:14:65:ff:9b:0c:54:36:51:fd:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Jun 28 08:41:42 2025 GMT Not After : Jun 27 08:46:42 2026 GMT Subject: CN=FC721521DBEC27C6DF20C95C245288F163E61792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:14:aa:8f:a2:cc:10:5d:e1:1d:74:4a:01:b0: c4:a8:85:db:bd:a7:73:67:82:7e:5a:16:57:58:db: 02:49:59:61:35:0c:86:f1:49:02:45:8b:ea:b1:23: f3:4c:b0:1a:c8:e5:4c:3c:5c:82:fb:92:c4:c5:33: c1:30:f0:ef:d4:b4:3f:fe:01:af:6a:5d:cc:e6:60: 1e:e1:c9:6a:94:59:1a:cb:43:59:c8:51:c1:7d:5d: b7:35:8f:85:91:e3:1d:84:61:a8:e7:31:d8:ad:1e: d7:c7:54:11:99:3b:82:7c:b5:9b:b0:5a:7e:7d:2a: f8:dc:4d:b3:b5:7a:97:e1:27:20:16:0b:df:ee:62: 88:c3:3f:73:5c:84:39:03:e6:e6:13:77:39:7f:a7: 62:2e:e4:41:54:dc:d6:ce:59:05:ae:88:30:00:68: 7c:20:c6:e6:9d:52:4d:d5:96:c1:a9:ef:c8:84:78: 74:05:b7:2c:ad:65:83:75:36:fb:d4:d2:1a:70:b2: c8:2e:97:ff:f5:87:23:64:8e:5b:05:fb:ee:9f:1f: 7b:5d:a0:d1:d7:47:b7:10:ab:06:c8:49:68:78:71: 9d:a7:51:c5:08:f1:58:83:42:e5:23:c2:b0:72:9c: 36:0c:13:f6:e5:6a:04:c4:fe:f1:68:d6:07:42:73: 41:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:72:15:21:DB:EC:27:C6:DF:20:C9:5C:24:52:88:F1:63:E6:17:92 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS203868.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:dd00::/40 2a0a:6040:fb00::/40 Signature Algorithm: sha256WithRSAEncryption 9f:55:81:29:0d:7a:18:05:ce:db:df:c4:77:05:58:25:26:da: 3d:40:43:73:d9:e4:c7:bc:67:1e:bc:49:81:45:fb:91:2a:5a: df:af:64:21:be:ab:0a:19:6c:0b:72:83:42:a1:0f:58:62:23: f3:4d:33:d8:e2:91:38:59:54:97:f3:75:3d:1f:fd:0e:b1:64: e6:93:84:f9:81:d9:da:f5:0c:d7:67:e5:13:af:14:6a:1b:61: 81:e2:83:31:cb:53:17:d4:01:e9:43:2a:8c:c5:1c:dd:b7:7a: 39:2c:c0:79:fb:75:9c:b8:3f:c4:8d:7e:95:c8:85:86:85:9f: db:5b:21:09:4b:ae:9d:eb:cd:66:5b:3c:85:98:2a:28:60:80: bf:ca:e9:b3:b3:49:70:af:92:ea:43:92:e1:bf:0b:7f:5f:5d: d0:80:b9:af:70:2a:f6:da:6e:7b:09:40:24:75:a0:9b:33:9a: f1:90:5c:1f:70:df:fb:6f:31:d0:cd:41:a6:b9:bd:d9:c4:0a: ea:e7:63:4c:ff:ea:f5:57:91:2b:ca:90:cc:d6:fd:26:a4:6a: e3:55:d4:48:58:50:72:b7:91:48:4d:d0:87:b5:95:e6:26:51: 7f:d1:7c:b1:44:8d:5a:8d:64:c3:4f:e5:05:b3:d0:bc:18:83: 9c:26:fe:40 -----BEGIN CERTIFICATE----- MIIE8jCCA9qgAwIBAgIUGEhnAgP/W4YLDRRl/5sMVDZR/VcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNTA2MjgwODQxNDJaFw0yNjA2MjcwODQ2NDJaMDMxMTAvBgNV BAMTKEZDNzIxNTIxREJFQzI3QzZERjIwQzk1QzI0NTI4OEYxNjNFNjE3OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNFKqPoswQXeEddEoBsMSohdu9 p3Nngn5aFldY2wJJWWE1DIbxSQJFi+qxI/NMsBrI5Uw8XIL7ksTFM8Ew8O/UtD/+ Aa9qXczmYB7hyWqUWRrLQ1nIUcF9Xbc1j4WR4x2EYajnMditHtfHVBGZO4J8tZuw Wn59KvjcTbO1epfhJyAWC9/uYojDP3NchDkD5uYTdzl/p2Iu5EFU3NbOWQWuiDAA aHwgxuadUk3VlsGp78iEeHQFtyytZYN1NvvU0hpwssgul//1hyNkjlsF++6fH3td oNHXR7cQqwbISWh4cZ2nUcUI8ViDQuUjwrBynDYME/blagTE/vFo1gdCc0ERAgMB AAGjggH8MIIB+DAdBgNVHQ4EFgQU/HIVIdvsJ8bfIMlcJFKI8WPmF5IwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjAzODY4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCkGCCsGAQUF BwEHAQH/BBowGDAWBAIAAjAQAwYAKgpgQN0DBgAqCmBA+zANBgkqhkiG9w0BAQsF AAOCAQEAn1WBKQ16GAXO29/EdwVYJSbaPUBDc9nkx7xnHrxJgUX7kSpa369kIb6r ChlsC3KDQqEPWGIj800z2OKROFlUl/N1PR/9DrFk5pOE+YHZ2vUM12flE68Uahth geKDMctTF9QB6UMqjMUc3bd6OSzAeft1nLg/xI1+lciFhoWf21shCUuunevNZls8 hZgqKGCAv8rps7NJcK+S6kOS4b8Lf19d0IC5r3Aq9tpuewlAJHWgmzOa8ZBcH3Df +28x0M1Bprm92cQK6udjTP/q9VeRK8qQzNb9JqRq41XUSFhQcreRSE3Qh7WV5iZR f9F8sUSNWo1kw0/lBbPQvBiDnCb+QA== -----END CERTIFICATE-----Generated at Sun Jun 29 09:38:59 2025 by rpki-client