$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199501.roa File: AS199501.roa (raw, json) Hash identifier: fHiZzlD3aSeRNDJrvbhwkNgGXghHtqVyWizTzAGVBYQ= Subject key identifier: 78:88:93:15:07:CD:82:32:33:A2:3B:89:12:B9:5D:5E:72:70:23:52 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 0BCB461A50C366C9087A1A3E3F679137D13D1CEF Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199501.roa Signing time: Fri 05 Jun 2026 07:12:21 +0000 ROA not before: Fri 05 Jun 2026 07:07:21 +0000 ROA not after: Fri 04 Jun 2027 07:12:21 +0000 asID: 199501 IP address blocks: 2a0a:6040:dc00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:cb:46:1a:50:c3:66:c9:08:7a:1a:3e:3f:67:91:37:d1:3d:1c:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:21 2026 GMT Not After : Jun 4 07:12:21 2027 GMT Subject: CN=7888931507CD823233A23B8912B95D5E72702352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:43:2b:a7:c4:24:0d:e1:61:af:eb:4f:30:dc: 49:9f:9a:df:cf:6b:1f:39:88:77:39:d1:b5:40:73: 84:92:fc:91:6a:13:c5:7f:52:93:78:7a:b5:3f:bc: d1:48:81:a9:dd:7f:90:64:2a:28:8a:7a:14:1b:24: 14:35:5b:d6:c3:98:be:33:36:bf:59:0e:7a:d6:80: 6c:bf:fc:4e:66:c9:ae:41:15:b6:5f:e6:bc:58:15: c3:15:f2:f8:ab:c7:d9:a0:84:92:e2:ab:43:c7:76: 91:ed:f2:89:ed:19:d9:a3:d5:64:8b:70:6a:b8:e2: c0:97:80:d0:7c:ac:fd:ed:b6:fe:d9:e1:db:08:ba: e3:bc:a6:fa:17:93:79:78:e9:fc:12:af:fb:06:d6: 31:34:ea:c0:e9:84:2f:b7:00:2a:b1:c7:62:c3:b6: ac:34:b8:8e:ec:41:5a:af:86:09:c4:27:b3:00:d4: 50:3e:23:3c:30:a3:a9:03:34:c3:9e:ac:5c:9a:81: 0e:9b:35:a8:11:7e:cf:a2:18:a6:52:61:f9:40:07: 3f:d5:4f:3f:c8:fa:54:d7:c1:ee:7f:75:d8:27:86: a8:b6:ec:55:25:a6:b9:77:b8:9a:66:be:71:4a:78: 96:48:d6:f1:82:ea:8f:e4:e3:33:f8:ce:c9:18:55: f2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:88:93:15:07:CD:82:32:33:A2:3B:89:12:B9:5D:5E:72:70:23:52 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199501.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:dc00::/40 Signature Algorithm: sha256WithRSAEncryption c1:34:0a:47:1b:6f:3f:7b:b0:11:70:15:6d:01:69:52:1c:7c: ba:d1:22:dc:ed:bd:40:1e:72:10:ce:eb:4b:39:83:6e:b4:f7: 44:ac:3c:9c:20:8e:4c:8a:35:28:a7:a0:4e:e9:a3:b4:f0:37: 3c:91:78:3d:fe:c4:3a:34:9b:4f:ee:4b:bd:2f:02:53:44:37: de:ce:cc:4e:73:b9:b4:7e:a5:a3:26:de:bc:06:1f:bc:f5:73: af:b7:b2:c2:d1:22:f1:45:1f:41:03:6a:ca:14:fe:d3:cc:18: 6b:0e:81:f5:84:b9:79:45:f4:70:55:10:80:ec:e0:e4:d6:e2: 09:f6:20:48:04:de:cc:54:a8:a4:a4:b5:14:86:55:2c:35:68: 71:8a:7c:98:63:92:b7:8c:a4:f8:76:81:4c:cf:0b:84:d3:ae: ed:d6:1a:9c:c6:9a:cf:1a:e1:fd:94:1c:77:9d:ad:8b:d9:4d: e2:c6:bd:86:da:b5:21:9a:fc:b7:0f:3c:0b:94:9d:b9:ed:2b: e8:d0:59:3e:e8:f0:95:2a:68:0d:a7:9e:47:90:6d:43:c4:cb: 5c:fc:ba:f1:3f:74:af:90:78:5c:34:40:02:ea:c1:ea:9f:45: 35:f1:93:87:2b:8c:96:52:08:9b:ac:28:96:ba:ef:0f:03:ad: a5:a6:bd:0d -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUC8tGGlDDZskIeho+P2eRN9E9HO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MjFaFw0yNzA2MDQwNzEyMjFaMDMxMTAvBgNV BAMTKDc4ODg5MzE1MDdDRDgyMzIzM0EyM0I4OTEyQjk1RDVFNzI3MDIzNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvQyunxCQN4WGv608w3Emfmt/P ax85iHc50bVAc4SS/JFqE8V/UpN4erU/vNFIgandf5BkKiiKehQbJBQ1W9bDmL4z Nr9ZDnrWgGy//E5mya5BFbZf5rxYFcMV8virx9mghJLiq0PHdpHt8ontGdmj1WSL cGq44sCXgNB8rP3ttv7Z4dsIuuO8pvoXk3l46fwSr/sG1jE06sDphC+3ACqxx2LD tqw0uI7sQVqvhgnEJ7MA1FA+Izwwo6kDNMOerFyagQ6bNagRfs+iGKZSYflABz/V Tz/I+lTXwe5/ddgnhqi27FUlprl3uJpmvnFKeJZI1vGC6o/k4zP4zskYVfIjAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUeIiTFQfNgjIzojuJErldXnJwI1IwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMTk5NTAxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQNwwDQYJKoZIhvcNAQELBQADggEBAME0 Ckcbbz97sBFwFW0BaVIcfLrRItztvUAechDO60s5g26090SsPJwgjkyKNSinoE7p o7TwNzyReD3+xDo0m0/uS70vAlNEN97OzE5zubR+paMm3rwGH7z1c6+3ssLRIvFF H0EDasoU/tPMGGsOgfWEuXlF9HBVEIDs4OTW4gn2IEgE3sxUqKSktRSGVSw1aHGK fJhjkreMpPh2gUzPC4TTru3WGpzGms8a4f2UHHedrYvZTeLGvYbatSGa/LcPPAuU nbntK+jQWT7o8JUqaA2nnkeQbUPEy1z8uvE/dK+QeFw0QALqweqfRTXxk4crjJZS CJusKJa67w8DraWmvQ0= -----END CERTIFICATE-----Generated at Sat Jun 13 10:22:58 2026 by rpki-client