$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199079.roa File: AS199079.roa (raw, json) Hash identifier: iN1iC8IipT83dCfPvkP2r9eCbY5rbDE3EAtUi0Ym9fs= Subject key identifier: B0:FA:02:A1:4C:83:A8:15:7E:48:2A:AB:6B:83:97:50:AA:1C:9B:5B Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 2C00507FF41CC9A08EA20ED3B58BB346EDAC4274 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199079.roa Signing time: Fri 05 Jun 2026 07:12:39 +0000 ROA not before: Fri 05 Jun 2026 07:07:39 +0000 ROA not after: Fri 04 Jun 2027 07:12:39 +0000 asID: 199079 IP address blocks: 2a05:dfc1:1900::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:00:50:7f:f4:1c:c9:a0:8e:a2:0e:d3:b5:8b:b3:46:ed:ac:42:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:39 2026 GMT Not After : Jun 4 07:12:39 2027 GMT Subject: CN=B0FA02A14C83A8157E482AAB6B839750AA1C9B5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b2:d6:2e:aa:b9:ea:27:f0:76:86:90:a5:df: 9a:7c:0f:ee:09:b6:51:db:92:33:5d:cc:f7:6a:da: ce:f7:60:47:20:32:24:ad:35:eb:61:6f:98:e0:a8: 39:58:8e:2c:7f:3b:81:0a:65:9c:8c:28:56:e2:79: 32:64:10:c8:1b:54:03:d1:1a:b0:f2:59:70:09:d7: da:76:c9:94:13:af:1c:1c:d5:35:c1:36:8a:0b:7a: 6d:59:3e:ff:33:dd:77:54:88:93:08:f5:f0:ab:04: 03:ef:54:3b:9b:b8:5b:f9:06:57:5d:fb:df:d5:ae: 4d:5d:b9:c9:a8:63:f3:f5:36:80:3a:ec:c5:35:cf: 32:e0:f4:c5:30:96:54:b4:d7:58:2e:d2:2f:aa:84: 7d:e9:c3:5e:3b:3b:00:1a:ef:1c:c1:77:e2:5e:28: 61:e0:58:a6:93:c8:b3:e6:f6:7f:6a:06:28:59:a5: 80:c7:1f:30:ef:d3:ef:93:79:8d:8f:04:68:12:5c: 04:aa:a9:5c:85:01:28:6f:3f:c5:65:da:aa:59:09: 73:9e:59:6f:db:00:1f:fe:13:28:a1:bb:42:3d:46: e4:ae:82:07:46:c4:fa:58:dc:d6:f8:4d:85:36:f3: a9:8c:8b:15:10:1b:b1:43:63:4f:de:06:b5:7b:73: 41:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:FA:02:A1:4C:83:A8:15:7E:48:2A:AB:6B:83:97:50:AA:1C:9B:5B X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199079.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:1900::/40 Signature Algorithm: sha256WithRSAEncryption 68:30:df:0c:3c:19:2c:d2:df:b6:de:a5:7b:6f:b3:cd:c8:4b: 0d:d3:3c:ca:25:06:22:3c:2a:75:75:3b:83:7c:40:5b:23:e1: 2a:55:c4:dd:55:60:03:63:7a:c1:7c:6b:06:86:b6:08:c4:4e: 82:d4:fd:35:79:13:92:8f:f2:86:68:44:94:2b:03:80:6b:93: a5:2a:42:24:12:fc:68:df:45:39:e4:e6:b3:02:61:fa:9f:8b: 36:68:5c:cb:b3:63:9b:99:25:9e:bf:38:f7:44:26:5b:2b:3f: 63:32:8d:33:e3:27:13:dd:df:dc:d3:2f:60:05:ae:bb:f4:c3: 43:a4:dc:12:42:b3:f7:a0:e5:f1:57:b0:a7:2c:67:63:e3:1b: 6b:0f:a3:65:19:a8:05:28:52:2f:3a:43:42:c4:11:31:6c:52: 65:e3:b8:7d:34:62:5b:a0:7f:e9:03:9d:7e:ef:97:82:e3:40: 0b:93:e8:03:2a:a1:13:8d:26:fb:00:80:24:0f:db:14:36:6f: 00:c9:be:a9:53:10:32:52:00:46:4f:c7:5f:b7:86:b6:28:a3: ee:2f:b3:ca:75:b7:73:87:22:7b:a8:89:35:38:3e:df:fa:73: dc:32:05:df:f8:c8:14:5a:54:cf:2f:24:91:52:af:1d:71:d3: ee:0c:29:58 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIULABQf/QcyaCOog7TtYuzRu2sQnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MzlaFw0yNzA2MDQwNzEyMzlaMDMxMTAvBgNV BAMTKEIwRkEwMkExNEM4M0E4MTU3RTQ4MkFBQjZCODM5NzUwQUExQzlCNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpstYuqrnqJ/B2hpCl35p8D+4J tlHbkjNdzPdq2s73YEcgMiStNethb5jgqDlYjix/O4EKZZyMKFbieTJkEMgbVAPR GrDyWXAJ19p2yZQTrxwc1TXBNooLem1ZPv8z3XdUiJMI9fCrBAPvVDubuFv5Bldd +9/Vrk1ducmoY/P1NoA67MU1zzLg9MUwllS011gu0i+qhH3pw147OwAa7xzBd+Je KGHgWKaTyLPm9n9qBihZpYDHHzDv0++TeY2PBGgSXASqqVyFAShvP8Vl2qpZCXOe WW/bAB/+Eyihu0I9RuSuggdGxPpY3Nb4TYU286mMixUQG7FDY0/eBrV7c0GJAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUsPoCoUyDqBV+SCqra4OXUKocm1swHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMTk5MDc5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwRkwDQYJKoZIhvcNAQELBQADggEBAGgw 3ww8GSzS37bepXtvs83ISw3TPMolBiI8KnV1O4N8QFsj4SpVxN1VYANjesF8awaG tgjEToLU/TV5E5KP8oZoRJQrA4Brk6UqQiQS/GjfRTnk5rMCYfqfizZoXMuzY5uZ JZ6/OPdEJlsrP2MyjTPjJxPd39zTL2AFrrv0w0Ok3BJCs/eg5fFXsKcsZ2PjG2sP o2UZqAUoUi86Q0LEETFsUmXjuH00Ylugf+kDnX7vl4LjQAuT6AMqoRONJvsAgCQP 2xQ2bwDJvqlTEDJSAEZPx1+3hrYoo+4vs8p1t3OHInuoiTU4Pt/6c9wyBd/4yBRa VM8vJJFSrx1x0+4MKVg= -----END CERTIFICATE-----Generated at Sat Jun 13 10:22:56 2026 by rpki-client