$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS131640.roa File: AS131640.roa (raw, json) Hash identifier: 65XubykkG1z8MggI38FC33zu3aKPdIdtO64x20dh3EY= Subject key identifier: 2F:B6:79:88:5A:54:EF:40:B5:E1:4D:59:18:DF:B5:4C:23:B1:66:32 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 60058C5FA09841ABF261F51D9B6931A4470D9DE2 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS131640.roa Signing time: Fri 05 Jun 2026 07:12:26 +0000 ROA not before: Fri 05 Jun 2026 07:07:26 +0000 ROA not after: Fri 04 Jun 2027 07:12:26 +0000 asID: 131640 IP address blocks: 2a05:dfc1:8b00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:05:8c:5f:a0:98:41:ab:f2:61:f5:1d:9b:69:31:a4:47:0d:9d:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:26 2026 GMT Not After : Jun 4 07:12:26 2027 GMT Subject: CN=2FB679885A54EF40B5E14D5918DFB54C23B16632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ec:69:31:c5:dd:eb:0a:b4:28:c8:6f:5b:45: 14:cd:6a:77:e8:7b:c0:5c:94:40:e7:c8:02:59:f7: dc:e8:95:0b:a2:bb:8f:8b:9f:f9:63:bc:b6:3e:a8: 52:c1:49:61:ae:b7:9d:d5:37:1f:05:70:a0:af:b5: 11:3a:a8:53:7d:d3:09:b6:55:4d:cf:b0:5b:a1:d1: 7d:a0:a0:2e:15:5e:49:78:f2:5a:cd:f6:aa:39:8a: 0b:d1:1c:e6:03:6a:fb:be:6b:bd:a6:e8:7c:a0:af: 3d:04:32:df:dd:b0:4c:98:05:15:12:ce:b3:10:e7: 8c:80:6c:82:69:34:4f:f9:ad:eb:23:fe:5e:a5:a0: a3:45:92:36:16:b0:61:c1:99:ef:0d:b4:1c:cd:48: 08:58:8d:dd:e2:5e:a7:1a:15:0c:aa:b6:0b:4b:ba: a5:87:33:ae:6a:42:d5:ef:bf:c5:cd:8f:47:e7:b5: 06:59:37:76:f9:d5:25:e7:8a:25:a4:3f:f4:de:4a: f5:2f:92:ad:c3:17:81:8b:ee:bc:12:37:14:fe:b1: ea:19:77:c6:4e:e0:a8:ad:de:36:4a:05:d8:ce:ed: ea:9d:f7:40:7a:e5:2f:ad:95:a0:40:d5:b3:f6:22: 4f:65:0e:55:07:e4:66:9d:48:f2:eb:dd:2b:70:6e: ce:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B6:79:88:5A:54:EF:40:B5:E1:4D:59:18:DF:B5:4C:23:B1:66:32 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS131640.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8b00::/40 Signature Algorithm: sha256WithRSAEncryption 36:20:91:d8:e0:c1:fa:1f:a6:c2:f9:78:59:0d:33:54:38:fa: ec:1b:ee:4e:a2:bd:4a:9e:70:3a:fb:95:df:5a:de:46:39:d8: e7:44:62:bb:61:08:60:96:f7:f0:83:0a:31:64:75:b4:2c:6f: 12:76:36:8a:20:da:d0:22:09:c9:b1:49:f0:1c:c6:f0:2c:5f: f8:a4:83:8e:1c:63:eb:71:8e:de:79:56:42:09:39:a4:1a:13: 3f:54:d2:0a:8b:5a:81:31:ea:d6:74:9c:ab:13:ec:a2:34:8e: 03:5e:a3:3f:a4:d6:9c:39:28:36:bc:f9:8a:0b:74:cc:ac:ec: 54:a3:3d:55:83:f8:e2:f5:cb:aa:bc:b9:6c:c2:eb:b2:16:52: 3f:b9:83:4e:43:6d:96:0e:6e:ef:31:7d:da:b3:65:27:6a:20: 56:74:78:f0:a9:4e:aa:e3:69:58:99:5b:45:bb:99:70:38:cb: 1f:b9:6f:e6:a3:64:d1:1a:d8:8d:e2:56:2d:4b:e5:5f:c2:36: aa:a8:26:9e:28:53:6f:68:45:c6:7f:ad:2d:6b:5d:dc:b6:67: 83:13:b6:65:25:aa:06:00:ca:c0:10:5d:62:a3:5e:51:55:dc: 73:67:58:52:1a:8f:04:76:64:ba:fe:10:3d:f8:ad:f1:49:4c: c0:0f:1f:8a -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUYAWMX6CYQavyYfUdm2kxpEcNneIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MjZaFw0yNzA2MDQwNzEyMjZaMDMxMTAvBgNV BAMTKDJGQjY3OTg4NUE1NEVGNDBCNUUxNEQ1OTE4REZCNTRDMjNCMTY2MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy7Gkxxd3rCrQoyG9bRRTNanfo e8BclEDnyAJZ99zolQuiu4+Ln/ljvLY+qFLBSWGut53VNx8FcKCvtRE6qFN90wm2 VU3PsFuh0X2goC4VXkl48lrN9qo5igvRHOYDavu+a72m6Hygrz0EMt/dsEyYBRUS zrMQ54yAbIJpNE/5resj/l6loKNFkjYWsGHBme8NtBzNSAhYjd3iXqcaFQyqtgtL uqWHM65qQtXvv8XNj0fntQZZN3b51SXniiWkP/TeSvUvkq3DF4GL7rwSNxT+seoZ d8ZO4Kit3jZKBdjO7eqd90B65S+tlaBA1bP2Ik9lDlUH5GadSPLr3Stwbs5pAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUL7Z5iFpU70C14U1ZGN+1TCOxZjIwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMTMxNjQwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwYswDQYJKoZIhvcNAQELBQADggEBADYg kdjgwfofpsL5eFkNM1Q4+uwb7k6ivUqecDr7ld9a3kY52OdEYrthCGCW9/CDCjFk dbQsbxJ2Noog2tAiCcmxSfAcxvAsX/ikg44cY+txjt55VkIJOaQaEz9U0gqLWoEx 6tZ0nKsT7KI0jgNeoz+k1pw5KDa8+YoLdMys7FSjPVWD+OL1y6q8uWzC67IWUj+5 g05DbZYObu8xfdqzZSdqIFZ0ePCpTqrjaViZW0W7mXA4yx+5b+ajZNEa2I3iVi1L 5V/CNqqoJp4oU29oRcZ/rS1rXdy2Z4MTtmUlqgYAysAQXWKjXlFV3HNnWFIajwR2 ZLr+ED34rfFJTMAPH4o= -----END CERTIFICATE-----Generated at Sat Jun 13 09:11:02 2026 by rpki-client