$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS210110.roa File: AS210110.roa (raw, json) Hash identifier: MJnEmX+H4jBUFGgc2FLxIjEt8R6/a26nfbVA4WcikzQ= Subject key identifier: B8:E3:80:DB:F8:C2:DA:EF:5B:9C:1A:68:6B:81:E2:F3:E3:E4:CF:8F Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 502AC1E45C1B3493501F678DFF6B1BACD601E885 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS210110.roa Signing time: Thu 19 Jun 2025 09:46:38 +0000 ROA not before: Thu 19 Jun 2025 09:41:38 +0000 ROA not after: Thu 18 Jun 2026 09:46:38 +0000 asID: 210110 IP address blocks: 2a06:9f81:5701::/48 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 23:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:2a:c1:e4:5c:1b:34:93:50:1f:67:8d:ff:6b:1b:ac:d6:01:e8:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Jun 19 09:41:38 2025 GMT Not After : Jun 18 09:46:38 2026 GMT Subject: CN=B8E380DBF8C2DAEF5B9C1A686B81E2F3E3E4CF8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5a:84:6a:e2:9a:14:8b:f6:1e:f7:af:78:11: 8f:42:23:84:59:61:28:7a:73:84:b6:f9:fb:dd:05: 84:77:e1:8e:a1:63:fd:0b:95:89:4a:2d:23:ff:f9: b2:d9:75:30:0d:83:02:7c:6f:e4:78:f5:91:48:a4: 54:37:7f:f2:38:0c:c6:fb:7f:d8:86:4e:6a:b9:ff: ac:87:6c:56:ad:f4:86:51:41:4a:eb:c9:f5:ca:7c: 3b:09:c5:0f:47:44:3f:e7:60:01:60:bb:1d:4a:7c: 09:a5:22:86:e3:52:8c:a9:13:24:0b:03:2d:11:57: a7:13:f2:72:3e:b1:89:3f:09:6d:e0:62:d1:0f:72: 9c:ad:7e:aa:79:cd:b0:ff:40:d4:cd:fb:34:cc:fb: 13:54:f2:f7:20:f2:69:49:f6:8e:49:2b:ea:a2:cc: 36:73:35:63:d6:c2:ee:13:94:cc:55:27:9c:4d:d6: c3:2b:5b:50:6a:47:b8:23:c3:59:d4:12:37:28:11: a1:2f:d4:3b:11:e2:02:4a:ae:30:9e:25:b2:09:bf: bd:83:cb:6f:a5:fe:cd:20:71:ff:96:b3:87:a6:cf: e0:df:5b:57:80:48:3a:7d:bc:fb:ea:ee:33:eb:cc: 14:7b:9e:21:66:fc:c0:14:ae:e1:c9:1e:ff:51:ca: e5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E3:80:DB:F8:C2:DA:EF:5B:9C:1A:68:6B:81:E2:F3:E3:E4:CF:8F X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS210110.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:5701::/48 Signature Algorithm: sha256WithRSAEncryption 83:11:06:dc:af:6a:04:f9:cb:19:d5:b5:90:a6:3c:2f:0c:4d: d9:36:65:52:eb:0d:12:1d:49:a1:b9:01:0b:37:d8:ee:6e:8a: b5:a8:d7:9b:e7:ae:46:55:3c:9c:99:e9:44:23:80:89:e3:01: f5:ff:90:bc:7f:10:dd:89:4d:33:e2:29:2e:40:92:c5:29:d3: ac:56:d1:2e:4a:35:1b:90:2a:9b:ea:41:3b:c3:8c:70:25:59: 0a:7e:fc:08:f2:b1:3b:b5:6d:0d:03:27:5f:2c:c3:bf:86:e6: 49:bf:ea:d2:cd:0b:a7:d1:6f:61:cc:fa:3c:3a:72:a8:e1:39: a0:8a:8e:32:67:d5:e3:fc:d6:81:d4:6f:fe:9b:87:d2:e4:d8: 2e:3f:e1:68:b2:80:a7:13:25:62:94:41:80:49:6e:f1:85:f7: 6a:98:1e:82:e2:24:6e:32:b2:ef:cb:45:1e:f9:c2:ab:ad:ef: 5e:fb:55:5a:1b:9e:b6:46:0e:57:48:ec:c7:fb:09:1e:66:56: a7:fa:9b:36:ff:a3:72:13:70:82:65:ed:12:0d:9c:ef:cb:97: 78:ea:36:3e:2c:20:cf:bb:3d:2e:10:14:f5:3b:06:86:4d:f5: 32:ff:30:37:80:c7:9d:aa:81:63:75:4c:36:cb:4e:81:0b:43: 7c:eb:5e:97 -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgIUUCrB5FwbNJNQH2eN/2sbrNYB6IUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNTA2MTkwOTQxMzhaFw0yNjA2MTgwOTQ2MzhaMDMxMTAvBgNV BAMTKEI4RTM4MERCRjhDMkRBRUY1QjlDMUE2ODZCODFFMkYzRTNFNENGOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGWoRq4poUi/Ye9694EY9CI4RZ YSh6c4S2+fvdBYR34Y6hY/0LlYlKLSP/+bLZdTANgwJ8b+R49ZFIpFQ3f/I4DMb7 f9iGTmq5/6yHbFat9IZRQUrryfXKfDsJxQ9HRD/nYAFgux1KfAmlIobjUoypEyQL Ay0RV6cT8nI+sYk/CW3gYtEPcpytfqp5zbD/QNTN+zTM+xNU8vcg8mlJ9o5JK+qi zDZzNWPWwu4TlMxVJ5xN1sMrW1BqR7gjw1nUEjcoEaEv1DsR4gJKrjCeJbIJv72D y2+l/s0gcf+Ws4emz+DfW1eASDp9vPvq7jPrzBR7niFm/MAUruHJHv9RyuUBAgMB AAGjggH1MIIB8TAdBgNVHQ4EFgQUuOOA2/jC2u9bnBpoa4Hi8+Pkz48wHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjEwMTEwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgafgVcBMA0GCSqGSIb3DQEBCwUAA4IBAQCD EQbcr2oE+csZ1bWQpjwvDE3ZNmVS6w0SHUmhuQELN9juboq1qNeb565GVTycmelE I4CJ4wH1/5C8fxDdiU0z4ikuQJLFKdOsVtEuSjUbkCqb6kE7w4xwJVkKfvwI8rE7 tW0NAydfLMO/huZJv+rSzQun0W9hzPo8OnKo4Tmgio4yZ9Xj/NaB1G/+m4fS5Ngu P+FosoCnEyVilEGASW7xhfdqmB6C4iRuMrLvy0Ue+cKrre9e+1VaG562Rg5XSOzH +wkeZlan+ps2/6NyE3CCZe0SDZzvy5d46jY+LCDPuz0uEBT1OwaGTfUy/zA3gMed qoFjdUw2y06BC0N8616X -----END CERTIFICATE-----Generated at Sun Jun 29 09:38:50 2025 by rpki-client