$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS60431.roa File: AS60431.roa (raw, json) Hash identifier: UmPJQljlMyjdIGUQDzOSFuNtxexczq0UMjwmiY37UfY= Subject key identifier: 40:EF:44:DA:0C:DA:2D:08:6D:BA:52:80:C8:0B:E6:5D:BA:52:9F:BC Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 445614050B6E46F327062BB081238E303A5AF0F3 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS60431.roa Signing time: Thu 03 Apr 2025 09:45:57 +0000 ROA not before: Thu 03 Apr 2025 09:40:57 +0000 ROA not after: Thu 02 Apr 2026 09:45:57 +0000 asID: 60431 IP address blocks: 2a05:dfc1:4c00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 23:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:56:14:05:0b:6e:46:f3:27:06:2b:b0:81:23:8e:30:3a:5a:f0:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Apr 3 09:40:57 2025 GMT Not After : Apr 2 09:45:57 2026 GMT Subject: CN=40EF44DA0CDA2D086DBA5280C80BE65DBA529FBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3a:47:e8:d2:03:e4:2f:58:93:08:95:fd:e8: ad:a0:99:7d:fb:b7:3b:85:6c:ac:e7:c8:3a:28:c0: ee:f0:80:77:f2:6c:fe:06:dc:c1:5e:11:b0:b2:4b: 99:e2:ab:3c:e2:1e:47:6d:04:30:86:33:cf:91:37: 4e:90:da:db:fe:77:9f:a9:64:66:98:1e:06:ea:90: 9c:9e:7a:ca:68:80:08:66:22:70:f6:69:64:cd:8a: c3:6c:a1:a7:3a:0b:66:fa:ec:69:15:7a:51:a9:01: af:df:ef:6d:56:36:a8:1d:95:4a:97:fd:85:cf:c8: 56:8e:cf:69:01:6b:8f:b5:c9:55:86:6c:f5:b2:f1: 8e:d8:4c:c0:f9:27:b6:60:cf:e7:c1:0a:e4:c4:72: d9:3a:f7:28:d8:ef:72:66:4d:26:70:38:f4:c8:4c: 8d:87:29:13:90:74:16:69:04:8e:0f:bf:a6:c2:bf: 01:7b:20:31:cc:a8:5c:8a:79:9b:19:c3:c6:1f:bf: 03:ed:8e:bc:ea:b6:df:db:c4:73:fe:4f:6f:5c:9c: bd:5a:c8:77:87:b8:06:82:04:ca:15:af:88:9c:46: 5c:89:cb:6b:d0:a7:48:1a:a4:12:15:a7:2a:5b:4a: 83:59:a5:bb:c5:5c:70:5e:8a:2b:c6:51:75:91:2d: 1b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:EF:44:DA:0C:DA:2D:08:6D:BA:52:80:C8:0B:E6:5D:BA:52:9F:BC X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS60431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:4c00::/40 Signature Algorithm: sha256WithRSAEncryption 7b:e7:a4:52:65:ff:76:b4:3e:97:20:f9:f5:01:83:cf:14:e6: 1d:ff:20:c2:32:b3:b8:e1:42:e1:a4:ef:6a:a3:7b:9a:e1:d1: fc:23:32:01:83:84:c9:82:0c:52:91:51:7d:4b:f1:5e:b8:b8: 76:8c:8d:f5:ca:ce:45:53:4c:1b:0b:c0:57:43:15:ca:1f:2f: 17:42:b3:ed:53:b4:17:35:d8:ba:ae:c2:ac:4e:bd:4f:1a:6b: 65:a5:53:0c:09:26:ec:ed:02:83:2f:56:96:66:b6:25:ea:7d: 13:99:25:b1:df:f8:b7:b2:45:44:3f:34:bc:b4:ca:e5:f7:14: c9:6c:1d:66:ec:ff:7e:8a:1a:a3:b1:b5:d3:5c:da:2d:2d:68: 48:bd:24:32:5a:0a:3e:98:39:40:1f:69:4e:03:0c:1c:6d:1d: 55:5d:90:5b:65:2f:ad:f2:b0:c8:66:02:17:a2:3c:b9:aa:01: f4:73:5e:15:2b:53:b4:83:33:f1:0c:1f:63:18:3c:d2:5e:66: bd:ae:8c:74:5c:45:aa:8d:91:00:69:ef:b6:f3:37:50:70:90: 2f:14:37:29:1b:b7:3e:23:ac:7e:1e:98:df:39:8d:a0:db:53: d1:b6:83:18:19:65:1f:09:00:96:56:65:c7:e9:c9:87:d9:5c: a6:a0:59:4a -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIURFYUBQtuRvMnBiuwgSOOMDpa8PMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNTA0MDMwOTQwNTdaFw0yNjA0MDIwOTQ1NTdaMDMxMTAvBgNV BAMTKDQwRUY0NERBMENEQTJEMDg2REJBNTI4MEM4MEJFNjVEQkE1MjlGQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Okfo0gPkL1iTCJX96K2gmX37 tzuFbKznyDoowO7wgHfybP4G3MFeEbCyS5niqzziHkdtBDCGM8+RN06Q2tv+d5+p ZGaYHgbqkJyeespogAhmInD2aWTNisNsoac6C2b67GkVelGpAa/f721WNqgdlUqX /YXPyFaOz2kBa4+1yVWGbPWy8Y7YTMD5J7Zgz+fBCuTEctk69yjY73JmTSZwOPTI TI2HKROQdBZpBI4Pv6bCvwF7IDHMqFyKeZsZw8YfvwPtjrzqtt/bxHP+T29cnL1a yHeHuAaCBMoVr4icRlyJy2vQp0gapBIVpypbSoNZpbvFXHBeiivGUXWRLRsJAgMB AAGjggHzMIIB7zAdBgNVHQ4EFgQUQO9E2gzaLQhtulKAyAvmXbpSn7wwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTNjA0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqBd/BTDANBgkqhkiG9w0BAQsFAAOCAQEAe+ek UmX/drQ+lyD59QGDzxTmHf8gwjKzuOFC4aTvaqN7muHR/CMyAYOEyYIMUpFRfUvx Xri4doyN9crORVNMGwvAV0MVyh8vF0Kz7VO0FzXYuq7CrE69TxprZaVTDAkm7O0C gy9Wlma2Jep9E5klsd/4t7JFRD80vLTK5fcUyWwdZuz/fooao7G101zaLS1oSL0k MloKPpg5QB9pTgMMHG0dVV2QW2UvrfKwyGYCF6I8uaoB9HNeFStTtIMz8QwfYxg8 0l5mva6MdFxFqo2RAGnvtvM3UHCQLxQ3KRu3PiOsfh6Y3zmNoNtT0baDGBllHwkA llZlx+nJh9lcpqBZSg== -----END CERTIFICATE-----Generated at Wed May 7 06:34:26 2025 by rpki-client