$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS61142.roa File: AS61142.roa (raw, json) Hash identifier: c13KyVp5CWYDbp3B2blD3Wv9TM5uuCW93lziazHqETw= Subject key identifier: BE:1A:BB:3C:7E:79:7C:7A:14:B0:A4:FD:7E:4D:1C:9E:BD:53:20:BB Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 060BDE7A881B3868386C10E17C80A543DBD8A327 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS61142.roa Signing time: Thu 26 Jun 2025 12:46:41 +0000 ROA not before: Thu 26 Jun 2025 12:41:41 +0000 ROA not after: Thu 25 Jun 2026 12:46:41 +0000 asID: 61142 IP address blocks: 2a06:9f81:5800::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 23:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:0b:de:7a:88:1b:38:68:38:6c:10:e1:7c:80:a5:43:db:d8:a3:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Jun 26 12:41:41 2025 GMT Not After : Jun 25 12:46:41 2026 GMT Subject: CN=BE1ABB3C7E797C7A14B0A4FD7E4D1C9EBD5320BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d8:a8:36:f1:dc:5f:d7:53:b1:e0:21:db:46: d5:27:48:3d:f1:44:ef:c7:21:13:aa:b2:b5:e4:7c: 14:29:35:08:c5:db:a8:07:c0:c3:be:35:05:a2:8d: 77:f6:3f:d5:e8:8c:91:ec:21:c5:cb:cf:41:9b:ec: d6:a6:8b:b1:3f:00:49:1f:d2:f2:d5:2a:25:08:46: 97:35:91:8b:07:31:b7:48:5a:5b:42:a1:5c:10:4e: 5c:36:0d:70:df:2a:ca:a6:43:38:dc:b1:31:60:e1: f3:76:b5:db:5f:eb:0f:0c:5f:2b:11:a1:b2:9b:58: 46:ef:08:6c:1f:6e:6b:17:0b:31:6b:64:77:f2:b5: 24:68:c8:20:d7:c0:44:4a:17:10:88:05:2f:2f:43: 4f:a7:98:ff:48:84:98:7c:3f:f0:e5:c4:fe:3c:bb: 2b:db:4c:54:d6:0f:87:78:e1:19:ab:fa:47:82:c0: ee:ed:03:7e:24:17:d8:f8:ec:1d:fe:e2:e2:d7:a9: 88:f6:27:08:23:fc:6a:32:ca:d3:b6:63:73:1f:54: 6e:4b:cb:24:89:df:54:b2:36:9f:9d:8c:5d:d5:f5: 35:68:99:b1:38:f6:0b:b1:33:ff:32:08:bf:83:14: 1b:a7:2b:3e:82:55:47:c5:cf:9c:ae:bb:7f:5d:0d: 61:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:1A:BB:3C:7E:79:7C:7A:14:B0:A4:FD:7E:4D:1C:9E:BD:53:20:BB X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS61142.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:5800::/40 Signature Algorithm: sha256WithRSAEncryption 3d:47:1d:71:e1:45:a2:dc:ea:0c:4c:55:97:b3:ec:39:be:66: 76:23:c9:d3:da:bf:31:a1:55:5f:18:c2:3a:45:bf:25:e2:07: 5e:0b:bd:34:f3:68:83:e4:6d:a0:ad:1e:3c:94:b0:d6:db:83: 95:1f:9e:02:75:8b:c3:0b:a9:6f:2b:9b:f9:9d:de:27:e8:42: 4b:ad:0c:cf:54:f0:4e:45:ae:8c:c6:6a:e9:4f:23:95:3c:ab: e7:53:ea:ec:ac:3b:84:b4:64:7c:8f:d4:de:3e:7e:d3:26:c9: 89:e2:33:c3:28:d0:0c:89:e4:77:75:95:80:68:85:b6:6f:e7: e5:b4:52:88:c6:c3:bf:d4:0b:54:7a:0e:d3:5e:66:30:f6:60: 0f:03:27:97:a5:0c:63:d1:f2:b3:dd:9b:0b:e5:70:9f:96:ab: 8d:bc:f0:35:7c:d2:e8:a0:80:e5:db:6e:b1:01:b9:86:15:1a: 1e:7b:1a:77:cf:93:9d:e4:95:2c:a9:e2:bb:06:ea:c2:86:22: 81:5a:9c:bc:56:95:2c:ea:a1:cd:94:8d:78:f6:60:76:cf:4f: 23:91:ac:b1:53:0c:3d:8d:e2:57:8f:db:d7:58:39:39:8b:3a: fc:b9:6f:14:6a:ac:b5:25:69:00:16:49:58:01:3d:04:18:0a: 67:d3:a9:94 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUBgveeogbOGg4bBDhfIClQ9vYoycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNTA2MjYxMjQxNDFaFw0yNjA2MjUxMjQ2NDFaMDMxMTAvBgNV BAMTKEJFMUFCQjNDN0U3OTdDN0ExNEIwQTRGRDdFNEQxQzlFQkQ1MzIwQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC62Kg28dxf11Ox4CHbRtUnSD3x RO/HIROqsrXkfBQpNQjF26gHwMO+NQWijXf2P9XojJHsIcXLz0Gb7Nami7E/AEkf 0vLVKiUIRpc1kYsHMbdIWltCoVwQTlw2DXDfKsqmQzjcsTFg4fN2tdtf6w8MXysR obKbWEbvCGwfbmsXCzFrZHfytSRoyCDXwERKFxCIBS8vQ0+nmP9IhJh8P/DlxP48 uyvbTFTWD4d44Rmr+keCwO7tA34kF9j47B3+4uLXqYj2Jwgj/GoyytO2Y3MfVG5L yySJ31SyNp+djF3V9TVombE49guxM/8yCL+DFBunKz6CVUfFz5yuu39dDWEnAgMB AAGjggHzMIIB7zAdBgNVHQ4EFgQUvhq7PH55fHoUsKT9fk0cnr1TILswHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTNjExNDIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqBp+BWDANBgkqhkiG9w0BAQsFAAOCAQEAPUcd ceFFotzqDExVl7PsOb5mdiPJ09q/MaFVXxjCOkW/JeIHXgu9NPNog+RtoK0ePJSw 1tuDlR+eAnWLwwupbyub+Z3eJ+hCS60Mz1TwTkWujMZq6U8jlTyr51Pq7Kw7hLRk fI/U3j5+0ybJieIzwyjQDInkd3WVgGiFtm/n5bRSiMbDv9QLVHoO015mMPZgDwMn l6UMY9Hys92bC+Vwn5arjbzwNXzS6KCA5dtusQG5hhUaHnsad8+TneSVLKniuwbq woYigVqcvFaVLOqhzZSNePZgds9PI5GssVMMPY3iV4/b11g5OYs6/LlvFGqstSVp ABZJWAE9BBgKZ9OplA== -----END CERTIFICATE-----Generated at Sun Jun 29 09:38:08 2025 by rpki-client