$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS215541.roa File: AS215541.roa (raw, json) Hash identifier: 8C8812n6FxxB9T3XwRKnc9EdpfA4SEWzZ2QewrB3rtw= Subject key identifier: C1:3E:6C:6E:C2:B2:64:2C:A1:E3:6E:66:0F:2E:1A:F1:B7:91:85:5D Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 31C6C19D101BADF7A54EE859C753672DF4C96490 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS215541.roa Signing time: Sat 10 May 2025 00:46:20 +0000 ROA not before: Sat 10 May 2025 00:41:20 +0000 ROA not after: Sat 09 May 2026 00:46:20 +0000 asID: 215541 IP address blocks: 2a06:9f81:4700::/40 maxlen: 48 2a06:9f81:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 12:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:c6:c1:9d:10:1b:ad:f7:a5:4e:e8:59:c7:53:67:2d:f4:c9:64:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: May 10 00:41:20 2025 GMT Not After : May 9 00:46:20 2026 GMT Subject: CN=C13E6C6EC2B2642CA1E36E660F2E1AF1B791855D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e5:d4:83:bc:bb:97:b2:98:87:d9:ae:fa:63: 3b:ed:ce:a1:8d:6d:96:53:76:54:c2:6b:94:d4:8b: 12:d6:99:4d:04:12:66:1c:a4:55:b1:75:78:7f:c7: c9:8d:ea:de:20:d8:e6:56:b9:82:de:f1:97:6c:17: c0:5d:16:f5:b2:d4:7a:c5:a9:5e:c1:e8:7b:4e:21: 7a:1d:54:12:84:30:d9:35:fd:25:d2:a4:61:c5:60: dd:72:93:59:37:c9:39:44:cb:bc:6e:dd:36:de:23: 8f:2b:3c:c7:7e:54:d1:af:d4:5c:11:dc:a2:7e:b4: 48:5f:8a:bd:5f:02:ea:3e:10:2f:2a:ab:da:b1:0b: 08:27:7a:7e:f5:19:90:70:ad:c5:93:66:15:3b:74: 49:9a:f7:0e:14:b1:da:a4:c2:84:9d:5e:7a:ac:c8: a0:ed:23:32:99:e5:43:d6:fe:42:c8:3e:1f:73:cb: f4:f6:ce:73:cb:c3:a1:3f:24:2a:da:3a:66:1e:ae: 44:8b:7d:a2:ef:ea:c5:75:94:bf:13:29:41:f8:4d: 38:1a:b7:65:98:8a:04:20:be:cb:73:e7:a6:56:2b: 47:a5:19:17:4e:f2:3f:e6:23:b7:61:cd:05:ac:19: a9:fd:de:98:af:ac:c3:2c:f8:67:fb:28:d5:63:30: be:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:3E:6C:6E:C2:B2:64:2C:A1:E3:6E:66:0F:2E:1A:F1:B7:91:85:5D X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS215541.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:4700::-2a06:9f81:48ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption bc:3c:f3:3f:77:da:a4:44:f6:e6:78:6e:78:a6:17:bb:47:23: 52:f4:b1:6a:e3:70:7f:17:62:5e:05:c3:e0:5a:59:30:28:1b: e5:ac:ff:6d:0f:4c:d5:ea:43:64:7e:60:13:b3:b5:40:0c:a3: c5:50:2c:15:b6:79:e1:90:24:bd:84:58:d3:23:b1:90:1d:a0: 08:9d:b2:b0:9c:9e:62:a8:66:30:e7:3b:82:2b:93:b2:9c:39: 72:7c:e9:bf:d6:9e:7b:ed:a1:b8:4d:bb:23:e6:8b:ee:1b:2b: e2:be:ca:42:77:42:f9:98:7f:80:8b:9e:37:bc:c2:8f:f3:e8: a4:4b:cd:9e:d1:cc:d8:cd:8b:f6:4c:3a:82:6a:27:c2:da:60: 66:e4:b0:38:58:10:d5:b5:68:5f:03:fc:e2:0f:db:18:cc:d3: eb:52:9f:6d:04:cb:d5:89:f4:16:9f:45:d7:de:fa:8e:35:86: 00:90:26:76:13:24:c1:8b:f7:ad:02:ed:a9:d3:6e:88:a4:42: 71:51:a5:80:30:ff:4f:29:2f:bc:bb:76:96:47:7d:50:c8:5c: 4c:7c:c6:af:ac:b6:91:eb:f1:3a:e3:34:4d:fc:fd:03:59:ef: 77:52:67:a6:64:3a:cf:4c:db:21:c6:22:7d:f6:a2:59:25:f3: 69:d1:6e:39 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUMcbBnRAbrfelTuhZx1NnLfTJZJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNTA1MTAwMDQxMjBaFw0yNjA1MDkwMDQ2MjBaMDMxMTAvBgNV BAMTKEMxM0U2QzZFQzJCMjY0MkNBMUUzNkU2NjBGMkUxQUYxQjc5MTg1NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM5dSDvLuXspiH2a76YzvtzqGN bZZTdlTCa5TUixLWmU0EEmYcpFWxdXh/x8mN6t4g2OZWuYLe8ZdsF8BdFvWy1HrF qV7B6HtOIXodVBKEMNk1/SXSpGHFYN1yk1k3yTlEy7xu3TbeI48rPMd+VNGv1FwR 3KJ+tEhfir1fAuo+EC8qq9qxCwgnen71GZBwrcWTZhU7dEma9w4UsdqkwoSdXnqs yKDtIzKZ5UPW/kLIPh9zy/T2znPLw6E/JCraOmYerkSLfaLv6sV1lL8TKUH4TTga t2WYigQgvstz56ZWK0elGRdO8j/mI7dhzQWsGan93pivrMMs+Gf7KNVjML4DAgMB AAGjggH+MIIB+jAdBgNVHQ4EFgQUwT5sbsKyZCyh425mDy4a8beRhV0wHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjE1NTQxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAAjASMBADBgAqBp+BRwMGACoGn4FIMA0GCSqGSIb3DQEB CwUAA4IBAQC8PPM/d9qkRPbmeG54phe7RyNS9LFq43B/F2JeBcPgWlkwKBvlrP9t D0zV6kNkfmATs7VADKPFUCwVtnnhkCS9hFjTI7GQHaAInbKwnJ5iqGYw5zuCK5Oy nDlyfOm/1p577aG4Tbsj5ovuGyvivspCd0L5mH+Ai543vMKP8+ikS82e0czYzYv2 TDqCaifC2mBm5LA4WBDVtWhfA/ziD9sYzNPrUp9tBMvVifQWn0XX3vqONYYAkCZ2 EyTBi/etAu2p026IpEJxUaWAMP9PKS+8u3aWR31QyFxMfMavrLaR6/E64zRN/P0D We93UmemZDrPTNshxiJ99qJZJfNp0W45 -----END CERTIFICATE-----Generated at Sat May 10 05:25:42 2025 by rpki-client