$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199488.roa File: AS199488.roa (raw, json) Hash identifier: F2u8SuI6jW7Yg2MPprIvGgom2S1PTjACqT/Bcqnw4yY= Subject key identifier: 75:B9:8C:D2:F3:17:76:DC:8F:AA:77:32:AE:CF:DF:D2:F2:C9:51:73 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 1DDE7E45607E635E74AB0122C9421D1AEEC30D89 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199488.roa Signing time: Fri 05 Jun 2026 07:12:15 +0000 ROA not before: Fri 05 Jun 2026 07:07:15 +0000 ROA not after: Fri 04 Jun 2027 07:12:15 +0000 asID: 199488 IP address blocks: 2a0a:6040:8500::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:de:7e:45:60:7e:63:5e:74:ab:01:22:c9:42:1d:1a:ee:c3:0d:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:15 2026 GMT Not After : Jun 4 07:12:15 2027 GMT Subject: CN=75B98CD2F31776DC8FAA7732AECFDFD2F2C95173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:de:81:52:e6:29:2f:54:a9:2b:9f:bc:e8:df: ad:51:1c:11:02:ae:93:17:70:44:06:fe:56:29:9d: b8:29:76:15:ad:cd:97:32:1b:ac:28:a6:69:68:16: 7e:b7:0f:c6:72:bb:e9:7b:c3:d6:70:3e:e7:af:2a: c4:c6:e0:5e:80:53:68:b6:aa:30:43:6d:fe:27:d4: 3f:37:da:5c:a9:57:0d:28:3b:1c:37:71:bf:6e:d7: 4d:b7:0f:65:36:9b:9c:ba:ce:bc:7c:1e:83:da:8e: dc:9a:eb:c3:1c:46:d9:ac:fd:8b:fe:84:f0:63:c9: 89:54:d4:37:4c:27:74:dc:30:a2:ca:ac:cf:21:78: 2b:97:c7:20:7b:24:8b:c8:86:0f:d1:ec:a7:f3:6d: 98:ec:66:3d:d3:b2:b0:23:73:c2:ae:46:67:3b:04: a2:12:bc:2c:87:98:2d:41:c9:73:39:b6:cd:19:1c: d6:ac:a1:47:86:d3:6c:56:d7:76:22:41:8d:cd:91: a6:78:16:f3:14:75:6b:21:9a:57:62:3e:31:b1:41: 2a:db:2a:6a:3f:c2:2d:b0:3e:4c:c7:5b:25:a5:19: 0e:cb:10:86:5a:ac:eb:93:f2:a3:a8:91:a5:11:c2: bb:b0:8e:44:5e:41:6f:20:fc:9e:e2:e3:2a:de:93: 05:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B9:8C:D2:F3:17:76:DC:8F:AA:77:32:AE:CF:DF:D2:F2:C9:51:73 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199488.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:8500::/40 Signature Algorithm: sha256WithRSAEncryption 15:0e:f3:2d:57:1b:5b:2b:62:fd:bf:8f:8c:82:31:7a:1a:b6: 00:15:2c:fa:2d:c6:d2:73:13:ba:d1:b4:64:47:1e:ea:4a:bd: ce:77:7f:c4:66:11:cf:a0:7a:b2:c5:c5:51:e2:9d:41:91:89: 24:fd:76:2a:b7:64:49:d7:d7:7a:62:5f:4c:71:33:63:28:df: ef:32:d2:a8:b0:cc:c2:ae:d0:f8:d7:b8:0e:64:19:6f:1f:2e: 3a:ed:59:12:04:5e:ed:4c:14:35:99:a5:a5:75:6a:eb:6e:b8: 67:ba:ca:3f:1d:64:e0:af:b7:fc:04:bc:07:a2:4b:f1:72:07: 8b:1d:d0:c9:a4:29:41:a3:de:e8:df:ab:74:50:77:2e:97:27: 14:a5:fc:6c:54:c3:21:ba:6a:02:59:56:7e:4f:6e:aa:f8:81: e8:1e:9e:5a:b9:4b:8b:f7:33:c4:c1:18:81:30:f3:4e:e4:b1: c3:e7:5d:9b:e8:89:d1:4c:5c:51:8a:a3:a6:d5:14:9e:a4:bd: 2b:8b:74:da:d1:2c:07:8f:a4:c0:5f:d4:b2:cc:30:2a:1c:d6: 82:21:87:61:59:b7:2b:9a:62:02:34:b7:32:2f:e5:e5:18:e6: 8c:6d:b4:2c:17:24:89:bc:49:ed:d8:c1:91:fb:d6:22:03:ba: 9a:4d:cb:c7 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUHd5+RWB+Y150qwEiyUIdGu7DDYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MTVaFw0yNzA2MDQwNzEyMTVaMDMxMTAvBgNV BAMTKDc1Qjk4Q0QyRjMxNzc2REM4RkFBNzczMkFFQ0ZERkQyRjJDOTUxNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD3oFS5ikvVKkrn7zo361RHBEC rpMXcEQG/lYpnbgpdhWtzZcyG6wopmloFn63D8Zyu+l7w9ZwPuevKsTG4F6AU2i2 qjBDbf4n1D832lypVw0oOxw3cb9u1023D2U2m5y6zrx8HoPajtya68McRtms/Yv+ hPBjyYlU1DdMJ3TcMKLKrM8heCuXxyB7JIvIhg/R7KfzbZjsZj3TsrAjc8KuRmc7 BKISvCyHmC1ByXM5ts0ZHNasoUeG02xW13YiQY3NkaZ4FvMUdWshmldiPjGxQSrb Kmo/wi2wPkzHWyWlGQ7LEIZarOuT8qOokaURwruwjkReQW8g/J7i4yrekwXBAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUdbmM0vMXdtyPqncyrs/f0vLJUXMwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMTk5NDg4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQIUwDQYJKoZIhvcNAQELBQADggEBABUO 8y1XG1srYv2/j4yCMXoatgAVLPotxtJzE7rRtGRHHupKvc53f8RmEc+gerLFxVHi nUGRiST9diq3ZEnX13piX0xxM2Mo3+8y0qiwzMKu0PjXuA5kGW8fLjrtWRIEXu1M FDWZpaV1autuuGe6yj8dZOCvt/wEvAeiS/FyB4sd0MmkKUGj3ujfq3RQdy6XJxSl /GxUwyG6agJZVn5Pbqr4gegenlq5S4v3M8TBGIEw807kscPnXZvoidFMXFGKo6bV FJ6kvSuLdNrRLAePpMBf1LLMMCoc1oIhh2FZtyuaYgI0tzIv5eUY5oxttCwXJIm8 Se3YwZH71iIDuppNy8c= -----END CERTIFICATE-----Generated at Sat Jun 13 09:10:27 2026 by rpki-client