$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS203686.roa File: AS203686.roa (raw, json) Hash identifier: pNb0ND8HGLTHG37X9zLAmurAL/eJi1Z996CD2uqdk6Y= Subject key identifier: 4A:C6:BA:47:4B:09:F7:24:53:71:A9:4F:AD:03:6D:80:3D:D5:E6:AB Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 20077458D5C2EE99B98C0C5D98AD075A35AF860F Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS203686.roa Signing time: Fri 05 Jun 2026 07:12:14 +0000 ROA not before: Fri 05 Jun 2026 07:07:14 +0000 ROA not after: Fri 04 Jun 2027 07:12:14 +0000 asID: 203686 IP address blocks: 2a05:dfc1:7e00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:07:74:58:d5:c2:ee:99:b9:8c:0c:5d:98:ad:07:5a:35:af:86:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:14 2026 GMT Not After : Jun 4 07:12:14 2027 GMT Subject: CN=4AC6BA474B09F7245371A94FAD036D803DD5E6AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:81:97:7d:b7:f4:4c:b9:c4:10:06:b7:82:04: b1:96:75:a1:5f:1a:70:3b:18:7c:b8:ed:98:ef:d6: 5e:d9:bd:e9:be:f1:31:87:7e:1f:55:8b:5f:d5:9e: fd:15:2f:8b:dd:a0:4b:aa:75:24:35:9c:84:6b:d4: 8b:10:fa:45:08:a2:83:ad:af:10:42:25:61:4f:e6: 27:a9:05:30:5d:58:90:90:d1:73:c1:3b:db:3f:46: 43:ed:67:99:45:7c:01:dd:2a:d7:46:36:e7:d6:0b: 73:60:c0:66:02:81:14:4a:bf:51:da:1f:7a:fb:38: ed:76:81:32:88:d0:ce:52:66:2d:e5:f4:bd:e4:80: f2:e6:e3:67:be:5e:73:02:9b:60:a6:ea:ed:a8:73: 47:db:67:18:9f:0a:3f:d2:5c:aa:5c:13:7b:97:f9: fc:cd:e2:2d:5d:a6:63:7b:d3:b5:fb:85:11:07:0b: cc:55:82:81:a6:2a:64:5a:6a:cb:1b:6b:31:ba:dd: eb:f3:e0:d4:cf:75:a5:ad:88:ad:e5:94:03:07:f3: 5c:8c:f2:2f:7b:f0:86:ee:92:0c:f7:53:68:af:d3: 2f:8e:7e:b7:39:47:bf:d6:9e:01:0a:e6:ff:5d:d4: 78:d1:91:82:f6:08:c3:46:55:1a:36:6e:db:d6:44: 98:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C6:BA:47:4B:09:F7:24:53:71:A9:4F:AD:03:6D:80:3D:D5:E6:AB X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS203686.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:7e00::/40 Signature Algorithm: sha256WithRSAEncryption e1:83:3c:dd:26:c5:57:11:35:e1:a3:bc:33:79:15:6a:96:35: b4:ea:b1:66:0e:e1:cb:28:3d:8f:0d:50:07:ba:2c:56:dd:26: 10:1c:1a:a1:76:62:55:c6:e2:51:80:9e:63:bd:03:99:9d:2a: cd:e6:6f:2b:91:b2:c1:6d:e0:f1:64:de:af:b9:b4:ca:40:08: 0f:81:d0:9b:b1:74:9e:21:f3:34:3a:4c:17:a5:12:22:9e:f8: 1e:8d:99:5e:1c:96:ee:c6:e4:d2:88:a8:ce:38:39:9c:69:7a: 6a:d5:9d:61:d9:90:0d:58:63:70:13:ce:a1:b6:03:1e:14:5d: 33:07:f4:52:d5:73:a2:99:09:ed:25:9b:40:65:03:5b:4c:4b: 83:86:92:24:fe:ce:8c:27:49:5d:0a:0a:8f:cb:b6:88:24:59: 76:9d:78:48:08:61:44:ec:61:48:95:64:a0:c2:4c:3a:90:48: 77:c7:2d:6f:e9:25:f8:d3:7c:94:83:32:4c:42:26:9f:a6:de: b0:14:ba:94:71:eb:f8:04:ea:9d:f5:43:ab:12:69:f7:42:ba: 16:fd:97:00:9e:69:63:0b:8c:d2:89:01:22:32:c7:78:6c:08: 53:38:77:aa:7b:cd:dd:a6:75:50:61:4d:70:e6:ef:2d:54:91: 1a:23:0e:5f -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUIAd0WNXC7pm5jAxdmK0HWjWvhg8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MTRaFw0yNzA2MDQwNzEyMTRaMDMxMTAvBgNV BAMTKDRBQzZCQTQ3NEIwOUY3MjQ1MzcxQTk0RkFEMDM2RDgwM0RENUU2QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDigZd9t/RMucQQBreCBLGWdaFf GnA7GHy47Zjv1l7Zvem+8TGHfh9Vi1/Vnv0VL4vdoEuqdSQ1nIRr1IsQ+kUIooOt rxBCJWFP5iepBTBdWJCQ0XPBO9s/RkPtZ5lFfAHdKtdGNufWC3NgwGYCgRRKv1Ha H3r7OO12gTKI0M5SZi3l9L3kgPLm42e+XnMCm2Cm6u2oc0fbZxifCj/SXKpcE3uX +fzN4i1dpmN707X7hREHC8xVgoGmKmRaassbazG63evz4NTPdaWtiK3llAMH81yM 8i978Ibukgz3U2iv0y+Ofrc5R7/WngEK5v9d1HjRkYL2CMNGVRo2btvWRJj5AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUSsa6R0sJ9yRTcalPrQNtgD3V5qswHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAzNjg2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwX4wDQYJKoZIhvcNAQELBQADggEBAOGD PN0mxVcRNeGjvDN5FWqWNbTqsWYO4csoPY8NUAe6LFbdJhAcGqF2YlXG4lGAnmO9 A5mdKs3mbyuRssFt4PFk3q+5tMpACA+B0JuxdJ4h8zQ6TBelEiKe+B6NmV4clu7G 5NKIqM44OZxpemrVnWHZkA1YY3ATzqG2Ax4UXTMH9FLVc6KZCe0lm0BlA1tMS4OG kiT+zownSV0KCo/LtogkWXadeEgIYUTsYUiVZKDCTDqQSHfHLW/pJfjTfJSDMkxC Jp+m3rAUupRx6/gE6p31Q6sSafdCuhb9lwCeaWMLjNKJASIyx3hsCFM4d6p7zd2m dVBhTXDm7y1UkRojDl8= -----END CERTIFICATE-----Generated at Sat Jun 13 09:10:54 2026 by rpki-client