$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199343.roa File: AS199343.roa (raw, json) Hash identifier: OU4dGvYqB6bNUbhOnqPfZQ7HlspQ1ZXvpHVvFKZBAQM= Subject key identifier: 6E:8F:D6:DE:D6:26:FD:E4:CD:4C:E3:CB:29:86:81:B6:C7:02:1D:C5 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 2D0D787880D49FD6705DA323D266E00CDCD36DE3 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199343.roa Signing time: Fri 05 Jun 2026 07:12:42 +0000 ROA not before: Fri 05 Jun 2026 07:07:42 +0000 ROA not after: Fri 04 Jun 2027 07:12:42 +0000 asID: 199343 IP address blocks: 2a0a:6040:9800::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:0d:78:78:80:d4:9f:d6:70:5d:a3:23:d2:66:e0:0c:dc:d3:6d:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:42 2026 GMT Not After : Jun 4 07:12:42 2027 GMT Subject: CN=6E8FD6DED626FDE4CD4CE3CB298681B6C7021DC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6f:18:75:72:df:eb:8c:42:07:41:1b:36:32: 93:05:ba:9b:20:05:9e:fd:2f:85:fd:ed:21:82:f8: 89:74:a9:75:8d:eb:50:54:b4:63:37:54:54:cc:ac: 7f:a1:a6:9c:d7:4d:58:af:ba:47:75:9d:eb:75:5d: e8:23:79:ee:8c:e4:ab:d4:d1:a0:79:d5:23:01:8d: 96:4d:4e:32:e1:5b:60:c6:b1:21:11:02:d7:50:01: d8:ce:5a:dc:1b:e7:08:81:88:31:a2:5e:df:09:c4: ab:e4:42:6e:b2:f3:13:e2:ff:fd:9a:20:5e:7a:27: 4b:07:6d:de:f4:ae:02:7a:fa:3c:a8:01:d6:08:9c: 38:62:40:ad:e9:ee:19:a0:91:01:64:a9:d2:a8:9d: 5c:08:17:1d:9b:fd:43:5f:52:1f:8c:2b:e0:79:d7: c1:52:9a:f9:a1:2e:69:33:d8:ad:f5:8f:6d:bc:1f: c3:93:39:93:af:77:51:4f:fe:89:a4:ed:f6:4d:7d: 83:5e:07:80:59:0d:ed:df:79:d4:b7:d1:2d:7a:0d: 38:1f:49:db:1d:9e:7e:ab:7d:90:b5:cf:65:71:28: f0:1c:73:1d:cc:c2:0b:cb:80:53:24:29:49:58:61: fe:35:5a:6f:e1:64:35:98:c5:23:3f:b1:f2:64:14: 9c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:8F:D6:DE:D6:26:FD:E4:CD:4C:E3:CB:29:86:81:B6:C7:02:1D:C5 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199343.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:9800::/40 Signature Algorithm: sha256WithRSAEncryption 03:61:d7:c0:c7:ec:a0:63:38:c5:e9:74:84:28:49:26:fd:d9: c3:60:e7:ba:cd:03:66:42:c6:f3:d2:97:f6:eb:2a:98:6c:2d: e4:f9:de:2c:ee:58:ca:44:33:3f:a1:e7:2c:90:48:2c:0f:00: c4:3d:df:d0:6e:fa:8d:af:79:36:06:02:a2:a5:24:a1:4d:77: e3:c8:3e:fc:2a:24:5b:29:88:b7:b2:ce:2b:66:a0:80:70:bb: a6:cb:d8:ae:04:71:56:56:ab:78:c0:66:43:c3:1d:a4:16:a2: d9:2d:87:74:0d:a5:d8:da:39:5d:26:9d:e6:3f:e5:f9:ff:34: de:2e:66:f9:2e:cd:b8:a6:92:92:22:05:c3:6f:17:77:fc:08: 5d:1c:94:40:94:91:5c:d9:58:75:31:28:2c:4d:a7:a2:5e:d6: 77:4e:a6:1e:19:6a:c4:0f:80:e3:bb:1e:0f:dd:ae:9e:d4:8b: ff:18:ab:33:69:28:35:25:c1:1a:8d:53:84:04:09:49:b3:a1: 04:39:d9:da:c0:51:75:2a:fb:5e:8c:8a:51:6f:08:e4:b2:6e: ed:08:da:0a:ab:6e:f0:47:dd:d4:33:b7:13:5b:c0:8d:00:a7: 71:94:b6:92:d9:4f:32:d8:04:62:45:c0:87:d4:da:ca:47:9f: a6:88:31:4e -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIULQ14eIDUn9ZwXaMj0mbgDNzTbeMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3NDJaFw0yNzA2MDQwNzEyNDJaMDMxMTAvBgNV BAMTKDZFOEZENkRFRDYyNkZERTRDRDRDRTNDQjI5ODY4MUI2QzcwMjFEQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDabxh1ct/rjEIHQRs2MpMFupsg BZ79L4X97SGC+Il0qXWN61BUtGM3VFTMrH+hppzXTVivukd1net1Xegjee6M5KvU 0aB51SMBjZZNTjLhW2DGsSERAtdQAdjOWtwb5wiBiDGiXt8JxKvkQm6y8xPi//2a IF56J0sHbd70rgJ6+jyoAdYInDhiQK3p7hmgkQFkqdKonVwIFx2b/UNfUh+MK+B5 18FSmvmhLmkz2K31j228H8OTOZOvd1FP/omk7fZNfYNeB4BZDe3fedS30S16DTgf Sdsdnn6rfZC1z2VxKPAccx3MwgvLgFMkKUlYYf41Wm/hZDWYxSM/sfJkFJztAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUbo/W3tYm/eTNTOPLKYaBtscCHcUwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMTk5MzQzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQJgwDQYJKoZIhvcNAQELBQADggEBAANh 18DH7KBjOMXpdIQoSSb92cNg57rNA2ZCxvPSl/brKphsLeT53izuWMpEMz+h5yyQ SCwPAMQ939Bu+o2veTYGAqKlJKFNd+PIPvwqJFspiLeyzitmoIBwu6bL2K4EcVZW q3jAZkPDHaQWotkth3QNpdjaOV0mneY/5fn/NN4uZvkuzbimkpIiBcNvF3f8CF0c lECUkVzZWHUxKCxNp6Je1ndOph4ZasQPgOO7Hg/drp7Ui/8YqzNpKDUlwRqNU4QE CUmzoQQ52drAUXUq+16MilFvCOSybu0I2gqrbvBH3dQztxNbwI0Ap3GUtpLZTzLY BGJFwIfU2spHn6aIMU4= -----END CERTIFICATE-----Generated at Sat Jun 13 09:11:07 2026 by rpki-client