$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216452.roa File: AS216452.roa (raw, json) Hash identifier: Dev3lFEtfIrpnfjXWSa2s3qYMxetyfe+3Ch3GB82iX8= Subject key identifier: B7:69:9B:16:40:9E:A8:5D:9A:E9:A3:C0:CB:E4:98:28:61:E5:95:FE Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 23A8909FD5072A7378DC6F7580A7A03D8964C14C Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216452.roa Signing time: Wed 18 Jun 2025 23:46:37 +0000 ROA not before: Wed 18 Jun 2025 23:41:37 +0000 ROA not after: Wed 17 Jun 2026 23:46:37 +0000 asID: 216452 IP address blocks: 2a05:dfc1:8200::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 23:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:a8:90:9f:d5:07:2a:73:78:dc:6f:75:80:a7:a0:3d:89:64:c1:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Jun 18 23:41:37 2025 GMT Not After : Jun 17 23:46:37 2026 GMT Subject: CN=B7699B16409EA85D9AE9A3C0CBE4982861E595FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:01:59:da:e8:9a:54:f1:b8:c4:29:a0:2d:92: b6:dc:2f:b2:1b:74:b3:3d:0e:3b:1d:54:4b:ef:c5: 71:3d:24:3a:83:2f:00:05:41:38:92:3f:c0:9e:07: 1e:12:15:b6:16:72:a3:75:64:d1:69:70:c7:c1:ec: f6:1b:eb:1f:c2:a1:89:f7:1d:80:e6:9b:81:95:e9: 9a:a3:21:c1:6f:43:c7:23:8a:47:5e:65:f9:74:8f: bc:32:93:18:35:01:e1:41:08:81:9e:e1:5c:2c:14: 69:7e:13:e7:ef:93:e5:e2:7d:56:b3:86:ce:8e:3f: 7a:b9:31:00:ee:77:8e:9b:dd:82:b3:bf:7e:4e:f8: e9:3d:37:3c:cc:b6:d4:ad:89:f9:09:5e:24:6b:6c: b4:9f:a9:99:4d:5f:53:86:0a:61:a7:98:c2:44:4c: bc:b5:3f:f5:14:d2:e7:b5:5e:e2:c0:86:ef:42:ee: 51:76:62:fc:65:61:21:c2:b8:0d:34:48:1c:10:ac: d3:ea:3c:d8:a4:f9:aa:b0:fa:14:b3:98:78:4c:8e: 2b:22:e4:d5:42:c0:6d:4a:14:24:f0:b2:d3:32:1f: d8:b2:73:0f:96:ff:64:7c:94:2d:37:e7:66:94:03: 87:d6:02:2a:16:d2:e4:b1:b6:79:c2:b5:7e:f3:0a: b9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:69:9B:16:40:9E:A8:5D:9A:E9:A3:C0:CB:E4:98:28:61:E5:95:FE X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216452.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8200::/40 Signature Algorithm: sha256WithRSAEncryption 4a:f1:03:cb:57:ad:b9:c7:e7:3d:62:59:99:be:91:5f:90:34: f1:31:4e:e4:6f:03:4b:8d:a8:e1:24:f9:d8:96:65:cf:78:cf: e4:28:a5:d5:ef:41:dd:dd:8d:13:2d:4e:89:67:e7:ba:7f:f5: 3d:32:78:46:2e:00:03:3e:a8:ec:01:54:0c:0b:db:c6:ca:ac: d2:a7:f9:a9:c5:0a:f2:58:a4:d0:2b:ad:99:1f:28:e8:74:98: 7e:62:2f:cf:41:1b:76:6e:77:16:7d:20:7f:2a:28:98:94:49: 43:fd:3f:b7:f4:0f:88:2f:37:1c:0c:89:8f:d7:3c:19:f5:9f: 4e:24:56:6b:7b:73:bb:97:61:96:37:0a:80:ed:fc:e9:61:09: d7:fe:c8:e4:e0:14:ce:66:d2:59:a9:24:21:0a:83:93:60:0c: 1f:2e:09:02:e6:6e:cb:99:0f:02:68:95:78:77:6a:3f:39:f0: 1d:d4:5b:51:78:ac:a3:2c:5c:52:8f:47:ff:be:15:77:6b:0a: 0d:ae:1a:50:49:40:93:3c:46:0c:35:e2:0d:9d:00:42:e8:d7: 7e:86:8c:1f:0a:a6:0f:32:b4:7f:d4:34:e0:62:70:24:51:2d: e4:34:a5:2c:ed:54:dd:52:d2:43:8d:04:d0:4f:8b:ab:5f:58: 2f:43:8b:7c -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUI6iQn9UHKnN43G91gKegPYlkwUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNTA2MTgyMzQxMzdaFw0yNjA2MTcyMzQ2MzdaMDMxMTAvBgNV BAMTKEI3Njk5QjE2NDA5RUE4NUQ5QUU5QTNDMENCRTQ5ODI4NjFFNTk1RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzAVna6JpU8bjEKaAtkrbcL7Ib dLM9DjsdVEvvxXE9JDqDLwAFQTiSP8CeBx4SFbYWcqN1ZNFpcMfB7PYb6x/CoYn3 HYDmm4GV6ZqjIcFvQ8cjikdeZfl0j7wykxg1AeFBCIGe4VwsFGl+E+fvk+XifVaz hs6OP3q5MQDud46b3YKzv35O+Ok9NzzMttStifkJXiRrbLSfqZlNX1OGCmGnmMJE TLy1P/UU0ue1XuLAhu9C7lF2YvxlYSHCuA00SBwQrNPqPNik+aqw+hSzmHhMjisi 5NVCwG1KFCTwstMyH9iycw+W/2R8lC0352aUA4fWAioW0uSxtnnCtX7zCrlRAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUt2mbFkCeqF2a6aPAy+SYKGHllf4wHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjE2NDUyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwYIwDQYJKoZIhvcNAQELBQADggEBAErx A8tXrbnH5z1iWZm+kV+QNPExTuRvA0uNqOEk+diWZc94z+QopdXvQd3djRMtToln 57p/9T0yeEYuAAM+qOwBVAwL28bKrNKn+anFCvJYpNArrZkfKOh0mH5iL89BG3Zu dxZ9IH8qKJiUSUP9P7f0D4gvNxwMiY/XPBn1n04kVmt7c7uXYZY3CoDt/OlhCdf+ yOTgFM5m0lmpJCEKg5NgDB8uCQLmbsuZDwJolXh3aj858B3UW1F4rKMsXFKPR/++ FXdrCg2uGlBJQJM8Rgw14g2dAELo136GjB8Kpg8ytH/UNOBicCRRLeQ0pSztVN1S 0kONBNBPi6tfWC9Di3w= -----END CERTIFICATE-----Generated at Sun Jun 29 09:39:02 2025 by rpki-client