$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199840.roa File: AS199840.roa (raw, json) Hash identifier: AFsFuKin/I1TWzX36xoQRPWPVrgIHgVMQIyZ1p6b5eY= Subject key identifier: F1:70:B2:A1:A5:78:E1:41:EA:D9:05:79:03:0C:B8:F8:8C:5B:B0:1C Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 2832AFB42B9F8DA6D7DAAFF43DFABCE454822AFF Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199840.roa Signing time: Fri 05 Jun 2026 07:12:38 +0000 ROA not before: Fri 05 Jun 2026 07:07:38 +0000 ROA not after: Fri 04 Jun 2027 07:12:38 +0000 asID: 199840 IP address blocks: 2a0a:6040:6800::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:32:af:b4:2b:9f:8d:a6:d7:da:af:f4:3d:fa:bc:e4:54:82:2a:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:38 2026 GMT Not After : Jun 4 07:12:38 2027 GMT Subject: CN=F170B2A1A578E141EAD90579030CB8F88C5BB01C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ca:e2:80:ed:3e:52:82:09:23:b2:cc:5e:99: 84:b5:d5:7c:ee:3b:26:75:58:bb:91:92:d9:af:0e: 66:03:b2:21:31:52:6e:f2:b0:9b:64:97:27:f5:1b: e1:ad:1e:9c:ce:69:a5:84:ca:a3:8a:08:f3:29:28: 58:82:fa:21:01:a4:a2:73:69:61:57:a8:c4:73:36: 5f:28:6f:a2:88:98:13:e0:15:1f:ed:8c:77:33:06: 20:ee:08:05:68:b8:fb:08:51:e3:c5:32:ef:6c:fd: 22:b6:f4:77:c4:2d:d2:d6:c4:e5:59:35:c8:e1:dd: 42:85:64:80:7b:a9:64:54:71:2b:7c:35:ff:cd:0d: 32:d8:b6:9f:d3:51:c6:7a:64:f0:f0:b0:4b:ad:66: 77:5c:bd:cb:8c:d4:f3:cb:db:21:7b:61:b2:c6:ab: 46:70:6c:ca:65:e6:46:f7:38:16:df:32:76:9a:f7: 8b:90:94:9d:0e:35:e0:91:09:3b:37:47:0e:f0:da: 33:2b:1b:53:b2:e6:39:60:bd:9f:da:07:c5:75:f2: ca:cf:53:79:e0:57:48:65:36:f7:4c:e8:18:4e:2c: 0b:a5:85:2c:e1:cd:7e:60:25:05:f9:b4:29:80:f9: 30:ac:41:56:e7:2a:11:f9:e9:25:5d:06:36:41:2c: 15:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:70:B2:A1:A5:78:E1:41:EA:D9:05:79:03:0C:B8:F8:8C:5B:B0:1C X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199840.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:6800::/40 Signature Algorithm: sha256WithRSAEncryption 01:7a:95:2c:ab:54:c7:83:22:71:e4:30:c7:7d:98:07:80:ad: 7e:37:a5:9c:d7:4c:4b:1e:32:6e:88:22:a4:63:50:f9:a4:5b: 44:e5:f2:34:22:2e:5f:e1:b6:f5:fe:84:b4:57:2b:35:42:1e: d5:3d:c4:25:6c:36:5d:cf:63:b1:7a:43:d3:b6:dc:73:4d:68: 76:fb:2e:66:bb:69:ec:8e:4c:c5:49:6c:65:ee:50:96:4a:e5: 4a:ea:36:e2:d6:58:04:b0:4e:dd:e4:59:bf:21:88:1d:b0:68: 76:5c:bd:9c:88:cc:e8:da:fa:fa:db:57:57:ca:a1:20:c9:b0: ba:e5:7b:9e:e0:67:b5:c4:fe:27:bb:12:ff:87:65:f7:b6:dc: 72:07:94:a5:11:47:22:59:34:7d:a4:f3:c6:bd:7b:f7:64:b0: 20:74:56:73:aa:27:71:17:55:d5:46:ab:7c:2b:06:85:ac:30: c6:a2:62:ce:cf:37:07:5a:e1:bc:01:5e:13:10:38:50:86:b8: a4:f5:f6:e4:d4:71:9e:61:e1:e7:bf:74:c3:df:d4:df:e9:68: bc:85:f1:6c:1b:ea:4e:57:25:4d:c8:d1:05:e8:9e:20:12:d8: c7:bb:ec:53:e1:cc:7b:9f:8d:34:01:39:33:ac:a5:a2:87:68: e0:a7:40:05 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUKDKvtCufjabX2q/0Pfq85FSCKv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MzhaFw0yNzA2MDQwNzEyMzhaMDMxMTAvBgNV BAMTKEYxNzBCMkExQTU3OEUxNDFFQUQ5MDU3OTAzMENCOEY4OEM1QkIwMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDryuKA7T5SggkjssxemYS11Xzu OyZ1WLuRktmvDmYDsiExUm7ysJtklyf1G+GtHpzOaaWEyqOKCPMpKFiC+iEBpKJz aWFXqMRzNl8ob6KImBPgFR/tjHczBiDuCAVouPsIUePFMu9s/SK29HfELdLWxOVZ Ncjh3UKFZIB7qWRUcSt8Nf/NDTLYtp/TUcZ6ZPDwsEutZndcvcuM1PPL2yF7YbLG q0ZwbMpl5kb3OBbfMnaa94uQlJ0ONeCRCTs3Rw7w2jMrG1Oy5jlgvZ/aB8V18srP U3ngV0hlNvdM6BhOLAulhSzhzX5gJQX5tCmA+TCsQVbnKhH56SVdBjZBLBUhAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU8XCyoaV44UHq2QV5Awy4+IxbsBwwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMTk5ODQwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQGgwDQYJKoZIhvcNAQELBQADggEBAAF6 lSyrVMeDInHkMMd9mAeArX43pZzXTEseMm6IIqRjUPmkW0Tl8jQiLl/htvX+hLRX KzVCHtU9xCVsNl3PY7F6Q9O23HNNaHb7Lma7aeyOTMVJbGXuUJZK5UrqNuLWWASw Tt3kWb8hiB2waHZcvZyIzOja+vrbV1fKoSDJsLrle57gZ7XE/ie7Ev+HZfe23HIH lKURRyJZNH2k88a9e/dksCB0VnOqJ3EXVdVGq3wrBoWsMMaiYs7PNwda4bwBXhMQ OFCGuKT19uTUcZ5h4ee/dMPf1N/paLyF8Wwb6k5XJU3I0QXoniAS2Me77FPhzHuf jTQBOTOspaKHaOCnQAU= -----END CERTIFICATE-----Generated at Sat Jun 13 09:11:23 2026 by rpki-client