$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS202732.roa File: AS202732.roa (raw, json) Hash identifier: wP78GBkLsi47AnpTOXsSISO8vyToVpr6WoD+FkRXLQ4= Subject key identifier: 8A:D5:99:0C:01:09:15:B6:5F:6D:33:1D:36:E1:06:F1:31:7D:9D:69 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 6CC6F0A240B37AF7C005D5358C7B40151EA1BDF2 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS202732.roa Signing time: Fri 05 Jun 2026 07:12:31 +0000 ROA not before: Fri 05 Jun 2026 07:07:31 +0000 ROA not after: Fri 04 Jun 2027 07:12:31 +0000 asID: 202732 IP address blocks: 2a0a:6040:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:c6:f0:a2:40:b3:7a:f7:c0:05:d5:35:8c:7b:40:15:1e:a1:bd:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:31 2026 GMT Not After : Jun 4 07:12:31 2027 GMT Subject: CN=8AD5990C010915B65F6D331D36E106F1317D9D69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7b:6e:69:08:71:77:13:31:fe:cd:5f:d4:17: b1:4d:44:e4:3a:ce:1e:f8:77:64:c1:1e:6b:e2:95: 06:62:3b:7d:2f:47:ab:0d:9b:19:70:b4:ff:08:f5: d7:09:b6:cc:07:c7:5d:66:20:99:45:5b:ab:ce:c4: 48:4f:63:8a:12:ef:13:25:88:8a:e0:50:92:13:67: 5a:de:bf:b2:90:81:ba:5d:c9:0f:a7:d9:96:0d:ec: ae:8c:a2:3e:da:dd:5d:22:76:d3:22:0c:a9:56:e7: 25:86:c0:05:03:a0:5b:01:9e:a2:cf:d3:1b:cd:a3: f5:8c:18:06:17:65:cb:f8:bb:c3:fe:72:55:90:9c: 68:f7:68:18:aa:90:42:a1:f9:d3:80:b4:54:7b:2f: 80:e8:eb:dc:95:2d:41:57:8d:61:8c:e6:9e:05:d7: 78:49:3e:65:22:79:54:ed:41:33:e9:32:d9:c6:a5: 23:fe:1a:be:6a:2c:55:a5:c0:ff:39:db:e3:0c:9c: 84:f1:1d:3b:91:96:fc:cf:46:16:05:6a:ff:e0:9c: 24:45:4e:dc:c6:df:ee:cc:6d:44:bd:50:a4:4e:e0: 84:6c:8d:8b:db:06:a4:6a:7e:26:07:71:12:7a:07: 76:48:3c:98:a3:95:aa:5a:23:c7:61:39:9e:86:a9: 8c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D5:99:0C:01:09:15:B6:5F:6D:33:1D:36:E1:06:F1:31:7D:9D:69 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS202732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:c800::/40 Signature Algorithm: sha256WithRSAEncryption bd:cf:81:b2:4d:77:a7:f7:3e:5a:ba:e9:50:05:15:92:ec:89: 3b:8f:1c:60:77:dd:a8:71:5f:82:65:fe:a5:3a:92:55:56:bf: f9:99:8b:63:13:3e:2e:de:e6:de:61:c0:a1:57:5a:1e:7b:eb: 44:8a:63:89:13:79:5a:8a:2c:94:22:69:2e:3a:8f:3c:e9:de: f5:d8:b8:ce:6e:6c:b7:0b:65:b5:63:04:1c:30:fb:2b:3f:d5: 93:d8:aa:6b:dd:3b:5c:9a:9e:a3:0b:b6:d5:43:fb:61:c0:75: a3:b6:5f:92:17:75:17:3d:e4:65:91:ca:4d:f2:99:06:16:3a: 7d:54:3e:64:2e:18:b4:24:d3:a4:9b:70:4e:82:e4:52:3b:4c: d6:ba:28:d8:08:fb:92:ea:7e:d8:e6:38:9e:21:73:2a:ed:2d: 45:0f:b7:eb:e5:a7:72:ae:a5:3b:74:f7:b6:37:0e:26:cd:dd: 8c:9c:96:37:0e:43:69:9c:3c:f4:72:a5:c7:b2:00:5d:95:6a: f9:16:72:11:2c:0a:27:c8:95:39:3b:4a:22:f3:51:c9:f2:f0: 81:4f:05:d6:94:69:c5:f3:11:a8:65:43:ef:50:00:16:4b:74: 13:1a:e9:86:97:0f:20:6c:65:ad:d1:b4:2c:a0:97:57:4a:8c: 1c:c1:ea:09 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUbMbwokCzevfABdU1jHtAFR6hvfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MzFaFw0yNzA2MDQwNzEyMzFaMDMxMTAvBgNV BAMTKDhBRDU5OTBDMDEwOTE1QjY1RjZEMzMxRDM2RTEwNkYxMzE3RDlENjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbe25pCHF3EzH+zV/UF7FNROQ6 zh74d2TBHmvilQZiO30vR6sNmxlwtP8I9dcJtswHx11mIJlFW6vOxEhPY4oS7xMl iIrgUJITZ1rev7KQgbpdyQ+n2ZYN7K6Moj7a3V0idtMiDKlW5yWGwAUDoFsBnqLP 0xvNo/WMGAYXZcv4u8P+clWQnGj3aBiqkEKh+dOAtFR7L4Do69yVLUFXjWGM5p4F 13hJPmUieVTtQTPpMtnGpSP+Gr5qLFWlwP852+MMnITxHTuRlvzPRhYFav/gnCRF TtzG3+7MbUS9UKRO4IRsjYvbBqRqfiYHcRJ6B3ZIPJijlapaI8dhOZ6GqYxZAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUitWZDAEJFbZfbTMdNuEG8TF9nWkwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAyNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQMgwDQYJKoZIhvcNAQELBQADggEBAL3P gbJNd6f3Plq66VAFFZLsiTuPHGB33ahxX4Jl/qU6klVWv/mZi2MTPi7e5t5hwKFX Wh5760SKY4kTeVqKLJQiaS46jzzp3vXYuM5ubLcLZbVjBBww+ys/1ZPYqmvdO1ya nqMLttVD+2HAdaO2X5IXdRc95GWRyk3ymQYWOn1UPmQuGLQk06SbcE6C5FI7TNa6 KNgI+5LqftjmOJ4hcyrtLUUPt+vlp3KupTt097Y3DibN3YycljcOQ2mcPPRypcey AF2VavkWchEsCifIlTk7SiLzUcny8IFPBdaUacXzEahlQ+9QABZLdBMa6YaXDyBs Za3RtCygl1dKjBzB6gk= -----END CERTIFICATE-----Generated at Sat Jun 13 06:43:24 2026 by rpki-client