$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199607.roa File: AS199607.roa (raw, json) Hash identifier: +ot6YJQOLiBdISEJiXR4q2SEcGl9gF47Bw7nKMx+1JM= Subject key identifier: 7B:22:EE:10:57:83:4C:3F:66:27:B5:99:65:C4:E1:2A:59:C1:40:D7 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 52CB21F898CBB9D482EAEB7BAC2A128F3D01266D Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199607.roa Signing time: Fri 05 Jun 2026 07:12:15 +0000 ROA not before: Fri 05 Jun 2026 07:07:15 +0000 ROA not after: Fri 04 Jun 2027 07:12:15 +0000 asID: 199607 IP address blocks: 2a0a:6040:7f00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:cb:21:f8:98:cb:b9:d4:82:ea:eb:7b:ac:2a:12:8f:3d:01:26:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:15 2026 GMT Not After : Jun 4 07:12:15 2027 GMT Subject: CN=7B22EE1057834C3F6627B59965C4E12A59C140D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:13:b3:5b:e7:1b:d8:e7:31:77:cd:41:9b:00: 08:40:f4:1a:ad:1e:65:13:fd:34:6b:ad:10:74:7d: 10:9c:35:16:8a:89:f6:10:09:43:53:96:ee:c3:ca: ff:6d:70:21:d5:3a:5e:92:0b:9c:bd:de:72:1c:8f: a5:ff:89:71:1a:8a:08:33:a1:54:dc:66:e7:b6:dd: f1:e2:58:67:55:18:4f:9a:ba:8b:cf:8c:60:a9:63: 27:4d:bf:bd:63:84:4b:d5:19:ab:d6:d0:5d:60:a6: f6:0d:f4:07:b3:83:38:fe:09:95:8d:e5:d3:c6:b0: 90:11:33:0a:75:e7:6f:d9:6b:b2:98:8d:2c:a1:46: 91:55:8f:34:0d:79:e7:81:10:00:4b:f8:ac:bc:6f: 05:cd:8a:20:1b:34:ea:50:ae:87:82:63:67:01:be: 8c:13:24:74:87:bf:f2:ab:d4:48:fd:41:4c:a0:1a: d1:6c:85:d9:fb:94:9a:53:16:c8:36:53:f1:d2:14: 7b:f8:40:3d:67:52:f4:e3:b4:bf:11:76:7d:1f:ac: 7b:8c:06:c0:dc:2d:f7:db:cf:c4:8f:e5:42:2e:96: cb:ec:3c:63:f1:ed:4a:49:55:dc:ed:17:45:61:cd: cf:15:a9:c6:b3:36:0c:b8:c6:49:12:bb:f2:17:75: b6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:22:EE:10:57:83:4C:3F:66:27:B5:99:65:C4:E1:2A:59:C1:40:D7 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199607.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:7f00::/40 Signature Algorithm: sha256WithRSAEncryption 5d:df:d2:a0:59:44:8e:f5:0b:da:19:0f:b5:32:eb:96:75:07: 1a:55:48:5b:64:bb:6c:90:d1:28:1c:d1:21:0e:ff:78:10:a3: c3:13:da:d4:87:6f:b9:c7:0a:05:e8:3a:10:27:48:64:e2:2c: d5:97:ae:76:dd:ef:2b:85:c3:9f:11:10:2e:a4:8f:bc:74:99: e5:fb:65:e5:29:b1:ea:fa:5f:a6:7e:db:f4:f8:0f:3c:9f:af: 99:2f:e6:aa:b2:40:fe:f0:9a:a4:f6:6d:dd:14:02:5c:ff:46: 2a:ff:a1:88:74:ec:d8:2c:0d:21:0c:97:2a:8e:e2:73:cb:78: e1:c2:15:37:76:60:89:a7:4d:91:23:13:d3:63:9d:d4:cc:d0: 93:75:dc:2e:59:99:13:fd:e8:2a:c9:56:ff:a3:96:5a:54:3b: 86:73:24:65:3e:b5:44:a2:38:ff:81:62:5c:fb:61:f4:bf:c7: 93:04:0a:a1:9d:5a:d5:32:d7:5f:65:d4:93:81:bd:59:14:de: 57:bd:4a:1f:c1:80:46:00:2f:5b:6e:a1:21:5b:98:13:2a:7c: 95:41:ff:50:bc:80:11:87:fe:8e:04:cf:e9:2f:98:a0:af:3b: 5f:af:af:eb:cc:d5:42:fb:68:cb:f0:2f:5a:22:ec:11:d6:26: c5:fc:e2:6a -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUUssh+JjLudSC6ut7rCoSjz0BJm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MTVaFw0yNzA2MDQwNzEyMTVaMDMxMTAvBgNV BAMTKDdCMjJFRTEwNTc4MzRDM0Y2NjI3QjU5OTY1QzRFMTJBNTlDMTQwRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJE7Nb5xvY5zF3zUGbAAhA9Bqt HmUT/TRrrRB0fRCcNRaKifYQCUNTlu7Dyv9tcCHVOl6SC5y93nIcj6X/iXEaiggz oVTcZue23fHiWGdVGE+auovPjGCpYydNv71jhEvVGavW0F1gpvYN9Aezgzj+CZWN 5dPGsJARMwp152/Za7KYjSyhRpFVjzQNeeeBEABL+Ky8bwXNiiAbNOpQroeCY2cB vowTJHSHv/Kr1Ej9QUygGtFshdn7lJpTFsg2U/HSFHv4QD1nUvTjtL8Rdn0frHuM BsDcLffbz8SP5UIulsvsPGPx7UpJVdztF0Vhzc8VqcazNgy4xkkSu/IXdbbDAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUeyLuEFeDTD9mJ7WZZcThKlnBQNcwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMTk5NjA3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQH8wDQYJKoZIhvcNAQELBQADggEBAF3f 0qBZRI71C9oZD7Uy65Z1BxpVSFtku2yQ0Sgc0SEO/3gQo8MT2tSHb7nHCgXoOhAn SGTiLNWXrnbd7yuFw58REC6kj7x0meX7ZeUpser6X6Z+2/T4Dzyfr5kv5qqyQP7w mqT2bd0UAlz/Rir/oYh07NgsDSEMlyqO4nPLeOHCFTd2YImnTZEjE9NjndTM0JN1 3C5ZmRP96CrJVv+jllpUO4ZzJGU+tUSiOP+BYlz7YfS/x5MECqGdWtUy119l1JOB vVkU3le9Sh/BgEYAL1tuoSFbmBMqfJVB/1C8gBGH/o4Ez+kvmKCvO1+vr+vM1UL7 aMvwL1oi7BHWJsX84mo= -----END CERTIFICATE-----Generated at Sat Jun 13 09:11:07 2026 by rpki-client