$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS51089.roa File: AS51089.roa (raw, json) Hash identifier: yA29ZfPvbtZH7H9x3DGu+fruyDtKRiTUkrSH1bWJ/e8= Subject key identifier: 57:BF:E3:30:B7:07:01:69:52:C1:56:57:05:9C:FB:37:60:AF:E7:5B Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 5717CA021A3CD6BFAC47910AFF1D3126F308BC51 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS51089.roa Signing time: Thu 19 Jun 2025 07:46:38 +0000 ROA not before: Thu 19 Jun 2025 07:41:38 +0000 ROA not after: Thu 18 Jun 2026 07:46:38 +0000 asID: 51089 IP address blocks: 2a06:9f81:5700::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 23:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:17:ca:02:1a:3c:d6:bf:ac:47:91:0a:ff:1d:31:26:f3:08:bc:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Jun 19 07:41:38 2025 GMT Not After : Jun 18 07:46:38 2026 GMT Subject: CN=57BFE330B707016952C15657059CFB3760AFE75B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a0:06:ac:fe:b1:f1:02:e5:de:e2:ba:2c:22: 55:5e:20:42:f3:e1:c0:22:b7:9d:5f:fe:a9:56:be: 3c:33:a1:a4:72:8b:b1:f9:ae:7f:57:a8:57:84:d2: f5:95:09:9e:dd:65:07:09:3f:da:5e:50:32:42:7d: df:ab:72:42:07:14:6b:f5:64:68:dc:a6:24:34:44: 49:8a:57:09:78:d6:a6:a6:c4:29:bb:7a:4a:95:8b: 91:03:d2:16:29:16:29:bb:21:b3:c3:99:5b:96:25: 48:f2:a7:6f:97:63:af:88:b4:38:38:01:9f:c3:56: 9a:5c:c3:01:de:7f:ad:67:b2:2c:52:cf:70:89:c6: c3:17:2d:99:82:65:58:d4:41:2c:40:07:5f:c8:78: 36:07:a3:1c:90:a7:d6:26:ec:d4:f3:80:4a:55:87: 95:56:e4:68:d8:56:38:0b:2e:28:89:fb:7c:05:59: 63:0b:38:35:b3:8c:d3:95:88:63:c1:a6:e8:67:29: 3a:cc:2d:fa:84:76:82:23:50:e2:2c:3f:41:c1:10: 0a:72:59:54:1b:27:c5:6c:b9:bb:fc:03:49:38:6a: 0f:8b:94:d4:80:9c:2d:35:e2:68:40:72:84:db:fb: 0f:80:89:86:2d:62:b8:6b:4b:a7:05:f9:66:17:8e: 6e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:BF:E3:30:B7:07:01:69:52:C1:56:57:05:9C:FB:37:60:AF:E7:5B X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS51089.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:5700::/40 Signature Algorithm: sha256WithRSAEncryption 95:41:03:66:3d:6a:c7:bd:8f:4e:27:6a:fa:62:9f:28:e5:3f: 30:a5:a4:3b:0b:0b:91:43:c0:0a:6a:77:ce:b3:ce:b6:89:2e: 86:43:05:ec:e5:b1:f1:af:74:81:95:6c:e8:32:93:80:6a:68: 27:d4:98:4f:0f:5a:ee:e3:46:95:6b:af:3c:cd:d3:4d:28:e5: d7:88:0b:a8:5e:0e:a0:64:be:33:ae:04:ba:02:cd:a8:15:90: 24:ef:05:e4:d9:38:ab:17:e6:43:72:ca:f6:24:3d:67:5b:0d: 1c:62:f1:79:06:00:37:29:50:5d:ba:9c:10:73:d8:7f:56:0f: ef:2c:74:f7:54:ea:52:45:a2:cd:3d:cf:47:d3:00:aa:5a:46: 32:dc:4b:b8:01:b4:1e:02:80:ab:e7:de:26:6c:31:ff:1a:15: d0:e6:88:0c:29:2e:50:f5:c9:51:38:2e:33:33:4c:c3:95:8b: c1:27:bb:eb:b0:3f:33:b0:92:aa:17:ce:dd:9c:e1:4f:2f:e9: ca:2a:a1:1a:b7:33:fd:da:2c:22:61:00:7e:6c:98:6d:3e:fc: 72:35:96:14:6a:ac:29:98:27:5a:a3:83:a4:94:11:fa:ce:56: 9c:e7:8c:08:81:e7:2a:d1:26:cb:86:b0:e7:b0:0b:af:49:06: 55:3a:34:54 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUVxfKAho81r+sR5EK/x0xJvMIvFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNTA2MTkwNzQxMzhaFw0yNjA2MTgwNzQ2MzhaMDMxMTAvBgNV BAMTKDU3QkZFMzMwQjcwNzAxNjk1MkMxNTY1NzA1OUNGQjM3NjBBRkU3NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCioAas/rHxAuXe4rosIlVeIELz 4cAit51f/qlWvjwzoaRyi7H5rn9XqFeE0vWVCZ7dZQcJP9peUDJCfd+rckIHFGv1 ZGjcpiQ0REmKVwl41qamxCm7ekqVi5ED0hYpFim7IbPDmVuWJUjyp2+XY6+ItDg4 AZ/DVppcwwHef61nsixSz3CJxsMXLZmCZVjUQSxAB1/IeDYHoxyQp9Ym7NTzgEpV h5VW5GjYVjgLLiiJ+3wFWWMLODWzjNOViGPBpuhnKTrMLfqEdoIjUOIsP0HBEApy WVQbJ8Vsubv8A0k4ag+LlNSAnC014mhAcoTb+w+AiYYtYrhrS6cF+WYXjm77AgMB AAGjggHzMIIB7zAdBgNVHQ4EFgQUV7/jMLcHAWlSwVZXBZz7N2Cv51swHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTNTEwODkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqBp+BVzANBgkqhkiG9w0BAQsFAAOCAQEAlUED Zj1qx72PTidq+mKfKOU/MKWkOwsLkUPACmp3zrPOtokuhkMF7OWx8a90gZVs6DKT gGpoJ9SYTw9a7uNGlWuvPM3TTSjl14gLqF4OoGS+M64EugLNqBWQJO8F5Nk4qxfm Q3LK9iQ9Z1sNHGLxeQYANylQXbqcEHPYf1YP7yx091TqUkWizT3PR9MAqlpGMtxL uAG0HgKAq+feJmwx/xoV0OaIDCkuUPXJUTguMzNMw5WLwSe767A/M7CSqhfO3Zzh Ty/pyiqhGrcz/dosImEAfmyYbT78cjWWFGqsKZgnWqODpJQR+s5WnOeMCIHnKtEm y4aw57ALr0kGVTo0VA== -----END CERTIFICATE-----Generated at Sun Jun 29 09:38:48 2025 by rpki-client