$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/9CC40553ED3A1EDDCD4DA4C7BE96EDB2A8110BDF.cer File: 9CC40553ED3A1EDDCD4DA4C7BE96EDB2A8110BDF.cer (raw, json) Hash identifier: sN/26Q0ymTK+BkohNzCnVoXsPCsgGA/wxBO+DxXfMoE= Subject key identifier: 9C:C4:05:53:ED:3A:1E:DD:CD:4D:A4:C7:BE:96:ED:B2:A8:11:0B:DF Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 215C3FD3BE5EA6F44802EBDF1213A7F9EC51250E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Manifest: rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/3/9CC40553ED3A1EDDCD4DA4C7BE96EDB2A8110BDF.mft caRepository: rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/3/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Fri 04 Jul 2025 23:50:01 +0000 Certificate not after: Fri 03 Jul 2026 23:55:01 +0000 Subordinate resources: IP: 2a06:9f81:3200::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:5c:3f:d3:be:5e:a6:f4:48:02:eb:df:12:13:a7:f9:ec:51:25:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 23:50:01 2025 GMT Not After : Jul 3 23:55:01 2026 GMT Subject: CN=9CC40553ED3A1EDDCD4DA4C7BE96EDB2A8110BDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ee:c2:49:30:e4:ec:63:01:da:b0:73:a8:93: d3:b0:5c:d7:65:af:2d:a0:c3:72:1d:71:b6:8e:12: aa:9f:bd:7a:9d:84:18:69:c3:48:f9:49:fd:89:e6: 1a:49:07:25:1a:28:44:26:d8:b5:94:a1:e6:04:3c: 48:c4:bf:cc:e3:d9:aa:f3:5a:86:27:dc:03:16:83: ea:f4:72:c9:61:8d:fe:af:d2:eb:7a:c1:ec:1a:13: 2f:74:2c:a8:20:5e:86:7a:cc:b0:75:b3:c1:82:ba: db:66:66:46:4d:3c:74:02:93:fe:47:62:4d:b8:25: 8a:f3:1c:b9:c4:b3:e3:33:b2:c6:dc:54:fb:f0:12: 82:54:10:99:b6:c9:9e:ef:f7:50:b1:f9:a2:1d:6f: 9b:c7:47:1e:2c:74:27:a4:22:da:fe:5a:69:1e:fc: 4a:0a:c3:99:95:66:cb:ad:7f:81:c3:ae:b8:30:28: c1:74:3e:47:b6:77:73:5b:12:90:b8:7e:5d:b4:3c: 9a:d4:d8:eb:a5:7a:ab:89:d1:bc:13:c7:44:62:b3: a7:fb:7f:4e:94:d1:3a:12:27:e7:93:ef:97:aa:fa: cf:ff:d6:9e:01:3f:90:d6:0c:e8:31:9f:85:9b:58: 26:47:f0:f3:27:24:79:52:13:d0:4f:81:9e:7a:0d: 93:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9C:C4:05:53:ED:3A:1E:DD:CD:4D:A4:C7:BE:96:ED:B2:A8:11:0B:DF X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/3/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/3/9CC40553ED3A1EDDCD4DA4C7BE96EDB2A8110BDF.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:3200::/40 Signature Algorithm: sha256WithRSAEncryption c2:da:cc:45:a9:39:e7:d5:0c:27:eb:38:4c:e0:17:fa:a3:57: 7b:dc:43:3b:fa:34:48:19:e3:ea:f3:64:a9:da:82:02:a8:14: 56:4c:37:19:fb:eb:73:f4:50:90:5b:03:11:67:31:48:fd:b3: 0d:d4:9b:03:fd:c5:e3:a2:42:4b:5d:46:eb:48:58:2b:2b:39: 22:47:88:ad:9e:4b:f6:59:79:0d:07:9e:a4:ac:3d:71:39:18: ba:bd:a2:8a:44:92:32:45:af:e9:a9:9d:f8:a2:19:06:a8:3c: 68:40:6e:ed:96:e6:57:72:12:95:93:75:1f:5c:93:15:46:d8: 12:13:af:0e:2a:17:9c:e1:73:ea:f9:88:ac:7a:12:e7:48:2f: cd:43:e6:18:23:1d:71:6e:69:b5:bf:53:5d:af:9a:52:a2:4f: 0b:2f:73:3b:c2:d3:08:aa:e8:36:9c:a9:25:8b:d7:cf:e4:d9: 23:36:4c:e2:ed:37:07:5e:db:c8:32:05:71:dc:69:a7:1d:40: e3:75:1b:71:28:81:e5:fc:41:e9:1f:07:55:f0:b8:f4:6a:9b: ba:a7:36:27:16:eb:21:8c:da:3a:7a:ba:f8:85:52:9f:71:ca: 55:4d:b6:16:e6:d5:d3:53:89:0f:75:e0:76:73:0e:27:d4:12: fd:eb:19:da -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUIVw/075epvRIAuvfEhOn+exRJQ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQyMzUwMDFaFw0yNjA3MDMyMzU1MDFaMDMxMTAvBgNV BAMTKDlDQzQwNTUzRUQzQTFFRERDRDREQTRDN0JFOTZFREIyQTgxMTBCREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC37sJJMOTsYwHasHOok9OwXNdl ry2gw3IdcbaOEqqfvXqdhBhpw0j5Sf2J5hpJByUaKEQm2LWUoeYEPEjEv8zj2arz WoYn3AMWg+r0cslhjf6v0ut6wewaEy90LKggXoZ6zLB1s8GCuttmZkZNPHQCk/5H Yk24JYrzHLnEs+MzssbcVPvwEoJUEJm2yZ7v91Cx+aIdb5vHRx4sdCekItr+Wmke /EoKw5mVZsutf4HDrrgwKMF0Pke2d3NbEpC4fl20PJrU2OulequJ0bwTx0Ris6f7 f06U0ToSJ+eT75eq+s//1p4BP5DWDOgxn4WbWCZH8PMnJHlSE9BPgZ56DZMvAgMB AAGjggLQMIICzDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBScxAVT7Toe3c1N pMe+lu2yqBEL3zAfBgNVHSMEGDAWgBSPw8+13z6PchwIuLX+f2HWewvhOzAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvNC84RkMzQ0ZCNURGM0U4Rjcy MUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy84RkMzQ0ZCNURG M0U4RjcyMUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNlcjCCASMGCCsGAQUFBwEL BIIBFTCCAREwVAYIKwYBBQUHMAWGSHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv cmVwb3NpdG9yeS84YTg0OGFkZThiYWE1NzljMDE4Y2RjZjJjODM1NGI1Mi8zLzCB gAYIKwYBBQUHMAqGdHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9y eS84YTg0OGFkZThiYWE1NzljMDE4Y2RjZjJjODM1NGI1Mi8zLzlDQzQwNTUzRUQz QTFFRERDRDREQTRDN0JFOTZFREIyQTgxMTBCREYubWZ0MDYGCCsGAQUFBzANhipo dHRwczovL3JyZHAtcnBzLmFyaW4ubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMG ACoGn4EyMA0GCSqGSIb3DQEBCwUAA4IBAQDC2sxFqTnn1Qwn6zhM4Bf6o1d73EM7 +jRIGePq82Sp2oICqBRWTDcZ++tz9FCQWwMRZzFI/bMN1JsD/cXjokJLXUbrSFgr KzkiR4itnkv2WXkNB56krD1xORi6vaKKRJIyRa/pqZ34ohkGqDxoQG7tluZXchKV k3UfXJMVRtgSE68OKhec4XPq+YisehLnSC/NQ+YYIx1xbmm1v1Ndr5pSok8LL3M7 wtMIqug2nKkli9fP5NkjNkzi7TcHXtvIMgVx3GmnHUDjdRtxKIHl/EHpHwdV8Lj0 apu6pzYnFushjNo6err4hVKfccpVTbYW5tXTU4kPdeB2cw4n1BL96xna -----END CERTIFICATE-----Generated at Wed Nov 5 20:30:40 2025 by rpki-client