$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS203843.roa File: AS203843.roa (raw, json) Hash identifier: cA0HsHRtJ4MjH8Ldmn+KH3jnyYvo/iE2XsxORijzzp0= Subject key identifier: 72:75:CF:25:5B:DE:95:84:2B:3E:22:3B:E0:90:C8:7D:00:06:B1:C0 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 4847D9D68D711345AB39D9DE4F87AA6C90909820 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS203843.roa Signing time: Fri 05 Jun 2026 07:12:34 +0000 ROA not before: Fri 05 Jun 2026 07:07:34 +0000 ROA not after: Fri 04 Jun 2027 07:12:34 +0000 asID: 203843 IP address blocks: 2a0a:6040:a100::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:47:d9:d6:8d:71:13:45:ab:39:d9:de:4f:87:aa:6c:90:90:98:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:34 2026 GMT Not After : Jun 4 07:12:34 2027 GMT Subject: CN=7275CF255BDE95842B3E223BE090C87D0006B1C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:58:29:86:a9:4c:2c:be:ed:f5:76:6b:ba:20: 96:bd:70:9c:90:bd:8d:f6:9a:d8:b9:c1:d6:20:ce: c3:b6:6a:1a:86:fe:b1:2c:97:3b:4e:13:04:f6:b8: 6b:98:f3:8a:85:80:b1:a2:8a:91:7c:58:3f:37:d1: ff:3e:76:64:d2:8a:58:99:31:7c:89:3d:7f:3c:de: d5:b8:3f:61:36:c5:47:e1:ee:77:54:f3:9b:a5:32: 3d:24:c1:7b:40:c2:bc:59:92:23:fb:64:9b:b9:94: 5f:a1:7c:4a:f4:73:b2:82:25:a4:50:84:76:3e:78: 06:dc:da:ab:29:c0:d5:ea:f1:53:63:b4:12:a6:31: 0f:01:19:7d:d7:85:4f:8e:77:1f:34:4c:08:52:d5: 25:75:78:3b:cf:db:06:66:b2:d0:41:ee:0a:46:b1: 9b:86:b8:3f:c5:e6:ac:ad:15:57:8f:19:66:c4:cf: 96:2c:5d:22:ae:56:6c:39:c4:1e:93:2e:a5:3d:bb: 59:20:39:28:c9:54:2a:42:99:f8:6a:35:40:e7:ef: 88:e3:b5:70:49:e1:64:11:01:14:d6:d2:eb:7b:26: a3:c7:c4:bf:c3:bb:97:00:bd:7b:6b:16:16:d9:d4: 21:f6:11:d5:c5:6f:26:12:bc:1e:1d:ee:de:87:e9: 0e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:75:CF:25:5B:DE:95:84:2B:3E:22:3B:E0:90:C8:7D:00:06:B1:C0 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS203843.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:a100::/40 Signature Algorithm: sha256WithRSAEncryption 3a:67:9b:eb:b1:48:14:96:7e:78:12:68:4b:78:18:3e:be:f7: af:c0:01:00:4d:20:a8:e6:21:58:b3:69:98:a3:30:6b:85:61: ac:c6:a8:5a:91:77:49:1f:c0:50:45:3c:03:37:82:a8:cc:37: 13:c3:ec:f5:55:57:36:bf:36:a0:02:55:de:e8:07:39:0f:d4: 2e:b5:3d:2a:4e:0a:3f:ed:35:65:37:3c:23:37:92:93:38:19: 79:bd:d2:f0:3c:30:26:45:ce:37:9e:21:b0:51:b8:26:f8:d3: c9:7e:70:f4:ce:2e:35:7d:f4:f5:fb:f3:c8:0a:44:56:b0:d4: 87:fd:6d:a1:91:9f:2b:5b:51:c1:2b:a4:b9:03:e8:9f:ae:17: 45:cc:c5:79:22:98:d1:29:07:5b:54:4b:be:bd:42:40:01:c3: bc:40:6e:f0:f0:79:d6:f6:e8:77:e0:af:62:98:51:03:91:5d: 18:c0:bc:f6:42:d7:8a:fb:05:5a:44:3e:ee:eb:cb:cc:8c:75: 52:8f:65:72:bc:68:46:78:23:e3:28:44:4c:1c:55:1a:73:86: 7a:2e:66:93:bd:de:78:67:af:19:cd:f7:d1:94:60:12:e6:26: 70:15:37:a1:ef:04:c0:48:05:b0:10:85:61:ee:16:ba:75:47: 21:49:81:59 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUSEfZ1o1xE0WrOdneT4eqbJCQmCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MzRaFw0yNzA2MDQwNzEyMzRaMDMxMTAvBgNV BAMTKDcyNzVDRjI1NUJERTk1ODQyQjNFMjIzQkUwOTBDODdEMDAwNkIxQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwWCmGqUwsvu31dmu6IJa9cJyQ vY32mti5wdYgzsO2ahqG/rEslztOEwT2uGuY84qFgLGiipF8WD830f8+dmTSiliZ MXyJPX883tW4P2E2xUfh7ndU85ulMj0kwXtAwrxZkiP7ZJu5lF+hfEr0c7KCJaRQ hHY+eAbc2qspwNXq8VNjtBKmMQ8BGX3XhU+Odx80TAhS1SV1eDvP2wZmstBB7gpG sZuGuD/F5qytFVePGWbEz5YsXSKuVmw5xB6TLqU9u1kgOSjJVCpCmfhqNUDn74jj tXBJ4WQRARTW0ut7JqPHxL/Du5cAvXtrFhbZ1CH2EdXFbyYSvB4d7t6H6Q7BAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUcnXPJVvelYQrPiI74JDIfQAGscAwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAzODQzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQKEwDQYJKoZIhvcNAQELBQADggEBADpn m+uxSBSWfngSaEt4GD6+96/AAQBNIKjmIVizaZijMGuFYazGqFqRd0kfwFBFPAM3 gqjMNxPD7PVVVza/NqACVd7oBzkP1C61PSpOCj/tNWU3PCM3kpM4GXm90vA8MCZF zjeeIbBRuCb408l+cPTOLjV99PX788gKRFaw1If9baGRnytbUcErpLkD6J+uF0XM xXkimNEpB1tUS769QkABw7xAbvDwedb26Hfgr2KYUQORXRjAvPZC14r7BVpEPu7r y8yMdVKPZXK8aEZ4I+MoREwcVRpzhnouZpO93nhnrxnN99GUYBLmJnAVN6HvBMBI BbAQhWHuFrp1RyFJgVk= -----END CERTIFICATE-----Generated at Sat Jun 13 06:43:24 2026 by rpki-client