$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS214909.roa File: AS214909.roa (raw, json) Hash identifier: 55fHd1uwY6ZABocLRCEjcd9bC00A3lGOBWFrJkHEADw= Subject key identifier: 9F:95:18:E5:E5:BE:79:4B:8A:A5:3E:11:D7:01:DF:BC:9B:5B:53:A9 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 4D052BD08526E04BA13A46BD001FF2619BC03C03 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS214909.roa Signing time: Fri 25 Apr 2025 11:46:14 +0000 ROA not before: Fri 25 Apr 2025 11:41:14 +0000 ROA not after: Fri 24 Apr 2026 11:46:14 +0000 asID: 214909 IP address blocks: 2a06:9f81:3800::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 04:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:05:2b:d0:85:26:e0:4b:a1:3a:46:bd:00:1f:f2:61:9b:c0:3c:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Apr 25 11:41:14 2025 GMT Not After : Apr 24 11:46:14 2026 GMT Subject: CN=9F9518E5E5BE794B8AA53E11D701DFBC9B5B53A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:59:cc:f7:ec:81:6a:54:53:31:46:34:2e:bc: 39:40:7b:5d:a7:45:0c:0e:92:35:9d:5c:1d:0f:96: be:04:b0:f2:42:bc:52:09:56:09:e5:4f:8b:96:ed: 85:b6:ab:56:fa:d8:d3:d8:9a:a8:9a:69:ad:d1:26: a3:59:0e:61:2f:b8:34:84:1e:6e:ab:27:46:35:5f: 97:15:18:ea:13:25:92:e7:57:f7:0a:6e:e3:5b:77: 26:26:21:1d:85:c5:18:75:4c:b2:6c:0a:cf:aa:61: 02:d5:f5:ef:8a:f2:d7:81:27:9b:8c:3c:53:21:64: f2:32:72:75:cc:11:7d:7a:aa:58:4b:b7:91:2f:9e: 58:21:3f:99:8d:22:67:c1:05:d4:84:b0:5a:c9:53: 57:3a:39:a8:79:06:81:10:03:49:5d:4a:f8:0a:4e: 1c:e6:0a:97:84:74:a4:b7:21:01:cc:3a:13:c5:2e: 73:e0:15:35:28:4a:ae:b0:c4:cf:af:6d:3d:12:09: ae:e6:47:15:94:5d:b5:7a:ca:1b:6d:e8:74:49:e5: ee:ae:7b:91:a6:27:f3:91:f2:e1:11:16:74:a9:e6: ed:d3:1e:de:2b:00:62:65:7a:59:0b:3f:f4:fa:86: 63:1f:69:66:6e:aa:29:53:f0:9c:a4:02:37:19:4a: a8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:95:18:E5:E5:BE:79:4B:8A:A5:3E:11:D7:01:DF:BC:9B:5B:53:A9 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS214909.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:3800::/40 Signature Algorithm: sha256WithRSAEncryption 92:cb:20:92:40:b4:ae:f5:a0:ce:3a:c0:f6:bc:49:b7:b1:db: 7b:03:a8:c8:c4:e3:4c:9d:3a:fa:ef:53:d0:4c:d7:ef:c3:71: e5:53:05:07:95:6a:82:ac:24:80:5e:d0:9d:fe:a8:1b:09:20: 9f:49:84:91:46:9c:d1:3d:4b:4a:6d:e2:06:51:bc:f4:40:6f: 1f:79:b9:8b:33:c4:b4:18:57:dd:60:07:05:88:2c:e8:3a:33: 63:e5:a2:9a:12:69:21:4e:b8:87:6b:13:35:ac:6d:a7:12:a1: d4:a5:4c:0e:e9:06:29:54:3b:83:69:69:fd:37:d1:7a:b6:d1: 39:7a:99:6a:86:94:bb:e3:58:fe:f9:25:dd:a5:d3:ab:90:f4: bd:ef:3a:c7:4b:0c:76:bc:a8:5a:41:ab:7b:00:ea:1e:3f:ae: 4d:ab:9f:eb:45:ab:5b:ca:d1:e7:2f:3e:ac:4d:c1:23:4f:da: cd:30:f0:a7:10:b7:5f:f7:4c:a9:8c:06:65:39:ea:9b:bd:91: 86:0c:6b:4b:21:d2:8c:5c:9a:5f:3f:f5:1e:9a:ff:6a:7d:15: 91:5b:98:8e:e1:e4:d7:de:c8:79:ee:12:bb:8b:c3:d5:8b:f5: aa:dc:b2:df:95:77:9b:be:af:ba:85:d6:64:19:5e:85:29:91: a6:1e:e4:63 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUTQUr0IUm4EuhOka9AB/yYZvAPAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNTA0MjUxMTQxMTRaFw0yNjA0MjQxMTQ2MTRaMDMxMTAvBgNV BAMTKDlGOTUxOEU1RTVCRTc5NEI4QUE1M0UxMUQ3MDFERkJDOUI1QjUzQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtWcz37IFqVFMxRjQuvDlAe12n RQwOkjWdXB0Plr4EsPJCvFIJVgnlT4uW7YW2q1b62NPYmqiaaa3RJqNZDmEvuDSE Hm6rJ0Y1X5cVGOoTJZLnV/cKbuNbdyYmIR2FxRh1TLJsCs+qYQLV9e+K8teBJ5uM PFMhZPIycnXMEX16qlhLt5EvnlghP5mNImfBBdSEsFrJU1c6Oah5BoEQA0ldSvgK ThzmCpeEdKS3IQHMOhPFLnPgFTUoSq6wxM+vbT0SCa7mRxWUXbV6yhtt6HRJ5e6u e5GmJ/OR8uERFnSp5u3THt4rAGJlelkLP/T6hmMfaWZuqilT8JykAjcZSqgtAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUn5UY5eW+eUuKpT4R1wHfvJtbU6kwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjE0OTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgafgTgwDQYJKoZIhvcNAQELBQADggEBAJLL IJJAtK71oM46wPa8Sbex23sDqMjE40ydOvrvU9BM1+/DceVTBQeVaoKsJIBe0J3+ qBsJIJ9JhJFGnNE9S0pt4gZRvPRAbx95uYszxLQYV91gBwWILOg6M2PlopoSaSFO uIdrEzWsbacSodSlTA7pBilUO4Npaf030Xq20Tl6mWqGlLvjWP75Jd2l06uQ9L3v OsdLDHa8qFpBq3sA6h4/rk2rn+tFq1vK0ecvPqxNwSNP2s0w8KcQt1/3TKmMBmU5 6pu9kYYMa0sh0oxcml8/9R6a/2p9FZFbmI7h5NfeyHnuEruLw9WL9arcst+Vd5u+ r7qF1mQZXoUpkaYe5GM= -----END CERTIFICATE-----Generated at Tue May 6 13:40:16 2025 by rpki-client