$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer File: 43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer (raw, json) Hash identifier: mU0RQLNjd0IE5TTYiDliWKLgGD30OUFmz/5yVF/oT/U= Subject key identifier: 43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 737CD2DC09D025578EE257C7C7D0CE712C282E63 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Manifest: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft caRepository: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Fri 04 Jul 2025 09:16:17 +0000 Certificate not after: Fri 03 Jul 2026 09:21:17 +0000 Subordinate resources: IP: 2a05:dfc1:1000::/40 IP: 2a0a:6040:4b00::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:7c:d2:dc:09:d0:25:57:8e:e2:57:c7:c7:d0:ce:71:2c:28:2e:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 09:16:17 2025 GMT Not After : Jul 3 09:21:17 2026 GMT Subject: CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:68:cb:56:10:c3:d0:da:81:84:a4:59:cf:0b: 2f:a0:04:94:2d:88:47:b2:75:c7:ab:23:70:c9:47: 56:50:dd:ea:35:d7:7c:53:3f:83:6f:88:c5:68:d2: e7:f0:75:a2:ab:02:ea:1c:49:bb:79:c2:c2:f4:28: 6c:3a:54:76:a8:0c:df:1d:02:f0:04:70:44:39:90: f1:fc:b1:11:c8:3e:56:80:70:7f:8d:6e:ae:b3:6e: 7f:d9:0c:e6:0b:49:20:01:38:8a:35:c4:90:04:ee: 2d:c6:19:a6:cb:3f:6c:36:de:74:95:8a:6c:53:d2: 61:37:a0:36:b6:2e:aa:e1:4d:b5:20:d7:d7:98:d0: 1a:ea:13:d0:f9:7c:fd:bd:cf:72:da:f9:4e:03:91: 72:20:78:de:19:30:0e:80:ee:f2:cb:1f:86:bf:61: ca:69:86:94:11:cd:5b:e0:2d:3d:1b:7f:fb:8e:b1: fa:d8:bc:b1:a8:de:87:dd:33:0a:2b:3d:2b:f3:5b: 72:a5:f4:31:e0:63:a4:49:71:ff:bd:41:eb:3d:a1: 0e:ce:d3:31:c4:04:cb:60:ff:9e:a9:d4:30:11:83: 46:c5:42:8e:4a:d7:6f:82:e7:e9:62:72:bd:60:1a: 36:11:ac:72:d7:f1:2e:b2:48:21:c9:02:84:b5:90: e4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:1000::/40 2a0a:6040:4b00::/40 Signature Algorithm: sha256WithRSAEncryption 97:d6:22:84:63:50:82:df:74:72:70:a2:40:b2:4e:60:50:39: 05:66:cf:15:cd:01:1f:d8:0e:48:47:de:88:3e:d7:02:c4:dd: 96:c4:d7:8b:51:96:6a:a7:31:e7:39:c3:fd:24:41:fa:dd:c9: db:f1:04:06:9e:0c:ce:8f:61:d8:45:b0:f9:b1:27:3d:37:a4: a5:58:4d:cc:61:41:5e:f2:94:33:94:28:b8:b0:69:27:22:34: be:c5:0a:29:56:80:8c:6d:82:a8:c5:10:f7:29:b2:10:89:0b: 06:74:80:d0:88:8b:6c:08:a6:32:12:75:9f:bf:c6:cf:a3:d6: a7:40:af:63:9d:86:3a:0e:af:dc:c7:f1:3d:d8:fa:82:87:f3: 9a:24:b3:9f:fb:7d:4b:bd:64:77:59:1b:f9:4f:2f:32:ec:c0: 72:2a:bb:cf:74:c9:f6:3d:ef:da:57:c5:c8:13:06:2f:57:bb: 79:fb:e8:0f:66:6c:1f:9a:b8:df:1f:54:12:e1:65:d2:15:4d: 0d:2e:22:fa:4b:59:1f:eb:1c:be:ae:bd:52:44:3a:73:7b:66: 1b:9d:2b:12:16:69:85:f3:c4:7d:55:f5:11:6d:7f:0d:17:69: d2:f9:15:ed:18:b1:4d:7b:79:f2:b2:0f:f1:2e:39:bf:fb:3d: 9f:cd:48:6b -----BEGIN CERTIFICATE----- MIIFzjCCBLagAwIBAgIUc3zS3AnQJVeO4lfHx9DOcSwoLmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwOTE2MTdaFw0yNjA3MDMwOTIxMTdaMDMxMTAvBgNV BAMTKDQzMzg3NTU3RDJGN0Y4OEIxRDk0OTY1QUMxRDE1QjNGNDc1QUJDRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIaMtWEMPQ2oGEpFnPCy+gBJQt iEeydcerI3DJR1ZQ3eo113xTP4NviMVo0ufwdaKrAuocSbt5wsL0KGw6VHaoDN8d AvAEcEQ5kPH8sRHIPlaAcH+Nbq6zbn/ZDOYLSSABOIo1xJAE7i3GGabLP2w23nSV imxT0mE3oDa2LqrhTbUg19eY0BrqE9D5fP29z3La+U4DkXIgeN4ZMA6A7vLLH4a/ YcpphpQRzVvgLT0bf/uOsfrYvLGo3ofdMworPSvzW3Kl9DHgY6RJcf+9Qes9oQ7O 0zHEBMtg/56p1DARg0bFQo5K12+C5+licr1gGjYRrHLX8S6ySCHJAoS1kOSrAgMB AAGjggLYMIIC1DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRDOHVX0vf4ix2U llrB0Vs/R1q81zAfBgNVHSMEGDAWgBSPw8+13z6PchwIuLX+f2HWewvhOzAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvNC84RkMzQ0ZCNURGM0U4Rjcy MUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy84RkMzQ0ZCNURG M0U4RjcyMUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNlcjCCASMGCCsGAQUFBwEL BIIBFTCCAREwVAYIKwYBBQUHMAWGSHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv cmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTBjOWZlZWMxMjQ5ZS82LzCB gAYIKwYBBQUHMAqGdHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9y eS84YTg0OGFkZTg4ZTM5YmZhMDE4OTBjOWZlZWMxMjQ5ZS82LzQzMzg3NTU3RDJG N0Y4OEIxRDk0OTY1QUMxRDE1QjNGNDc1QUJDRDcubWZ0MDYGCCsGAQUFBzANhipo dHRwczovL3JyZHAtcnBzLmFyaW4ubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjApBggrBgEFBQcBBwEB/wQaMBgwFgQCAAIwEAMG ACoF38EQAwYAKgpgQEswDQYJKoZIhvcNAQELBQADggEBAJfWIoRjUILfdHJwokCy TmBQOQVmzxXNAR/YDkhH3og+1wLE3ZbE14tRlmqnMec5w/0kQfrdydvxBAaeDM6P YdhFsPmxJz03pKVYTcxhQV7ylDOUKLiwaSciNL7FCilWgIxtgqjFEPcpshCJCwZ0 gNCIi2wIpjISdZ+/xs+j1qdAr2OdhjoOr9zH8T3Y+oKH85oks5/7fUu9ZHdZG/lP LzLswHIqu890yfY979pXxcgTBi9Xu3n76A9mbB+auN8fVBLhZdIVTQ0uIvpLWR/r HL6uvVJEOnN7ZhudKxIWaYXzxH1V9RFtfw0XadL5Fe0YsU17efKyD/EuOb/7PZ/N SGs= -----END CERTIFICATE-----Generated at Wed Nov 5 07:44:57 2025 by rpki-client