$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199097.roa File: AS199097.roa (raw, json) Hash identifier: 2Uwtbjd57UXBnzhA2zFqNNwGGzZkEzReqBdBZEF6COo= Subject key identifier: CE:D1:00:28:DC:42:3E:D8:F0:0C:57:34:BE:A5:8E:D3:42:23:8B:33 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 7B7CE05EEB6A91343B3A0670CD3CF081F3405054 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199097.roa Signing time: Fri 05 Jun 2026 07:12:13 +0000 ROA not before: Fri 05 Jun 2026 07:07:13 +0000 ROA not after: Fri 04 Jun 2027 07:12:13 +0000 asID: 199097 IP address blocks: 2a05:dfc1:1100::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:7c:e0:5e:eb:6a:91:34:3b:3a:06:70:cd:3c:f0:81:f3:40:50:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:13 2026 GMT Not After : Jun 4 07:12:13 2027 GMT Subject: CN=CED10028DC423ED8F00C5734BEA58ED342238B33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8e:1c:34:0f:41:35:78:36:e0:4e:79:29:2a: fd:7e:66:da:7e:64:57:d3:7b:af:61:a4:58:34:54: 80:d1:e3:0c:3a:c5:db:9c:c9:79:2f:36:6f:48:f7: 71:c1:32:92:94:35:e8:98:4e:06:a3:5a:0f:ec:d1: 0d:fb:06:29:da:3c:09:51:55:85:50:36:1c:81:a8: 0b:c6:a2:c3:15:5f:3e:c7:3c:31:ab:2a:ba:ed:55: 37:4f:5f:e3:fc:a6:6d:26:ee:c9:da:0c:dd:78:2c: 93:13:3c:34:c1:eb:32:57:35:1b:6f:13:db:ef:3e: 06:d3:16:44:56:3a:2c:1f:40:2c:db:75:d6:b3:4f: 7e:a1:51:8b:46:64:e9:e1:f6:1a:56:2e:38:6a:93: 9e:d0:c8:be:f9:18:34:ce:2d:2e:79:d7:8e:01:97: 4e:0a:2c:fe:aa:3a:6d:a1:0d:5c:67:13:f1:cd:56: ec:8c:47:b1:07:63:35:56:46:86:5c:7d:8c:dd:68: 3e:dd:35:2e:70:4c:d4:d1:37:e9:ed:6d:99:65:9d: 66:97:9c:6a:78:0c:52:7e:40:f8:cd:a0:e5:a7:ae: a1:9b:16:1a:4a:d3:52:a8:eb:f4:1c:7f:70:44:47: 76:07:4c:4f:3a:58:39:af:31:21:0a:3b:67:e5:ec: 16:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D1:00:28:DC:42:3E:D8:F0:0C:57:34:BE:A5:8E:D3:42:23:8B:33 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199097.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:1100::/40 Signature Algorithm: sha256WithRSAEncryption a8:92:10:e8:a4:97:58:75:19:8a:95:7a:68:c6:4f:d8:85:f1: 87:ed:0e:72:9f:ef:19:c9:55:c1:d5:5d:ed:7e:78:2a:68:5d: fd:56:f6:0a:b5:1a:b7:c8:9c:02:2a:c5:02:b6:5a:62:83:06: 0e:bd:6e:d0:8e:24:e5:3a:95:b3:66:bc:75:56:57:9c:41:4d: f2:3a:32:10:aa:2e:90:b0:5d:ee:80:f1:3d:fb:b8:d5:d4:3e: 16:ae:78:a2:75:56:d5:dd:53:47:6f:10:fc:78:8c:54:b4:66: 68:f8:a0:16:3f:37:3b:35:75:f2:82:9c:9d:b3:86:a8:5d:80: b5:7c:71:4f:e6:fa:82:c2:75:02:82:f2:3a:b0:b5:60:75:fc: 6f:fb:26:35:e6:e4:c6:e4:c1:31:b8:be:95:f4:cc:1f:2d:8f: 7f:41:fe:c2:39:73:63:7c:57:6c:7d:55:65:30:ec:06:65:c7: ea:60:10:3a:98:2a:64:e1:6e:39:a0:87:e9:4b:7c:c1:68:9e: f8:6d:a9:ac:da:61:c5:3c:ab:5e:b4:af:be:f9:b3:c7:d5:01: da:14:ba:5f:7b:63:e2:44:b4:96:29:ee:93:f4:2a:60:02:e6: e2:02:b9:7b:e3:65:7c:48:d0:6b:77:47:6d:2e:b6:43:54:1b: df:17:31:b0 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUe3zgXutqkTQ7OgZwzTzwgfNAUFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MTNaFw0yNzA2MDQwNzEyMTNaMDMxMTAvBgNV BAMTKENFRDEwMDI4REM0MjNFRDhGMDBDNTczNEJFQTU4RUQzNDIyMzhCMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPjhw0D0E1eDbgTnkpKv1+Ztp+ ZFfTe69hpFg0VIDR4ww6xducyXkvNm9I93HBMpKUNeiYTgajWg/s0Q37BinaPAlR VYVQNhyBqAvGosMVXz7HPDGrKrrtVTdPX+P8pm0m7snaDN14LJMTPDTB6zJXNRtv E9vvPgbTFkRWOiwfQCzbddazT36hUYtGZOnh9hpWLjhqk57QyL75GDTOLS55144B l04KLP6qOm2hDVxnE/HNVuyMR7EHYzVWRoZcfYzdaD7dNS5wTNTRN+ntbZllnWaX nGp4DFJ+QPjNoOWnrqGbFhpK01Ko6/Qcf3BER3YHTE86WDmvMSEKO2fl7Bb7AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUztEAKNxCPtjwDFc0vqWO00IjizMwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMTk5MDk3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwREwDQYJKoZIhvcNAQELBQADggEBAKiS EOikl1h1GYqVemjGT9iF8YftDnKf7xnJVcHVXe1+eCpoXf1W9gq1GrfInAIqxQK2 WmKDBg69btCOJOU6lbNmvHVWV5xBTfI6MhCqLpCwXe6A8T37uNXUPhaueKJ1VtXd U0dvEPx4jFS0Zmj4oBY/Nzs1dfKCnJ2zhqhdgLV8cU/m+oLCdQKC8jqwtWB1/G/7 JjXm5MbkwTG4vpX0zB8tj39B/sI5c2N8V2x9VWUw7AZlx+pgEDqYKmThbjmgh+lL fMFonvhtqazaYcU8q160r775s8fVAdoUul97Y+JEtJYp7pP0KmAC5uICuXvjZXxI 0Gt3R20utkNUG98XMbA= -----END CERTIFICATE-----Generated at Sat Jun 13 10:22:55 2026 by rpki-client