$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS204931.roa File: AS204931.roa (raw, json) Hash identifier: srOE83Z4nup6TRNN/XfQZbT1fI5ij04Rq5YYFL7USFg= Subject key identifier: 5F:0A:8D:48:70:96:94:F3:65:39:6E:07:A8:AD:8B:84:23:29:A1:D2 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 3FC15B498D6249B332E5E81B3E11A23FA75D6186 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS204931.roa Signing time: Fri 05 Jun 2026 07:12:42 +0000 ROA not before: Fri 05 Jun 2026 07:07:42 +0000 ROA not after: Fri 04 Jun 2027 07:12:42 +0000 asID: 204931 IP address blocks: 2a05:dfc1:4c00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:c1:5b:49:8d:62:49:b3:32:e5:e8:1b:3e:11:a2:3f:a7:5d:61:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:42 2026 GMT Not After : Jun 4 07:12:42 2027 GMT Subject: CN=5F0A8D48709694F365396E07A8AD8B842329A1D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cd:76:0d:83:96:89:aa:82:6e:8b:3a:e7:1d: ea:e0:33:d9:68:10:5e:04:cb:fc:f3:80:01:0c:53: e5:cb:fc:76:ec:f8:66:ec:c9:e0:87:b3:a6:57:0a: f6:45:4c:8c:e3:b8:c0:b6:b4:79:4d:c8:17:22:be: f3:d0:8f:a0:11:6a:80:d4:44:b0:17:1c:de:72:27: 7f:8e:01:82:dc:3b:18:32:fb:c3:ec:56:2a:dd:8c: c9:40:81:5c:ad:96:b2:b6:05:7e:a7:4e:21:15:ef: 79:07:ac:59:ea:43:99:51:f4:f1:83:5c:e0:2b:b8: 6c:5b:26:74:65:4e:13:12:bf:a8:03:49:4a:59:a3: e4:07:81:a4:1f:95:80:ae:76:c9:27:53:71:5c:9b: ae:f7:94:b8:37:f7:42:90:c5:f1:19:ad:f7:6e:da: 4d:68:fc:ee:a5:05:df:be:e7:99:c9:2d:50:66:70: f1:5c:0e:4f:ff:2c:c3:bc:66:d8:6d:2c:33:0f:b8: 86:b7:62:8a:37:48:72:67:81:fb:a9:7c:f0:4d:b0: 4c:81:e4:4f:2f:19:f2:76:4f:8b:b4:36:11:bb:18: 91:92:7b:b2:ba:54:cb:55:c4:2f:b7:82:35:5e:b3: f9:57:98:a0:c9:91:96:d1:e1:41:49:8f:43:18:49: 8f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:0A:8D:48:70:96:94:F3:65:39:6E:07:A8:AD:8B:84:23:29:A1:D2 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS204931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:4c00::/40 Signature Algorithm: sha256WithRSAEncryption ae:b5:c8:53:6b:b3:e4:a0:6a:0a:98:a2:b2:78:06:23:0b:49: 79:5d:70:ad:d9:67:bf:27:50:22:b6:17:13:32:57:62:1e:a6: dd:1a:2c:93:f1:e3:e9:fb:2b:aa:7a:b6:93:7b:00:bb:16:a1: ac:5c:34:a6:67:92:e4:9b:73:3e:9b:ec:a4:49:54:01:ed:a8: 55:a7:4a:86:d5:ae:16:7d:4e:c2:fb:a5:93:ce:9b:28:6e:58: 4e:b1:e7:cc:ea:d9:52:59:92:d2:a4:28:e0:ba:02:66:26:e5: b1:ef:f3:c3:09:5d:df:20:3d:eb:ce:ae:fe:08:58:12:79:59: 41:32:e5:6c:96:18:67:99:58:48:33:03:84:6a:ed:34:62:70: ee:17:03:f8:c8:82:bb:7e:d3:9c:21:0a:f8:4a:49:ba:62:b7: 24:fc:97:50:90:0e:9e:ef:9d:9e:01:5b:d7:00:0c:ef:79:2b: fa:b4:a8:6f:7e:c0:1c:94:40:9e:01:93:1e:e0:9c:20:23:5c: e4:66:92:f6:d6:3e:ce:38:dc:45:ca:98:8a:82:29:61:f8:44: 93:80:21:30:49:6e:03:b5:cb:3d:af:a5:4f:91:8a:49:ad:e4: 06:21:d3:f5:50:4f:33:b4:c9:35:25:e3:c4:92:90:9b:ed:52: 0e:22:cc:e9 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUP8FbSY1iSbMy5egbPhGiP6ddYYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3NDJaFw0yNzA2MDQwNzEyNDJaMDMxMTAvBgNV BAMTKDVGMEE4RDQ4NzA5Njk0RjM2NTM5NkUwN0E4QUQ4Qjg0MjMyOUExRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQzXYNg5aJqoJuizrnHergM9lo EF4Ey/zzgAEMU+XL/Hbs+GbsyeCHs6ZXCvZFTIzjuMC2tHlNyBcivvPQj6ARaoDU RLAXHN5yJ3+OAYLcOxgy+8PsVirdjMlAgVytlrK2BX6nTiEV73kHrFnqQ5lR9PGD XOAruGxbJnRlThMSv6gDSUpZo+QHgaQflYCudsknU3Fcm673lLg390KQxfEZrfdu 2k1o/O6lBd++55nJLVBmcPFcDk//LMO8ZthtLDMPuIa3Yoo3SHJngfupfPBNsEyB 5E8vGfJ2T4u0NhG7GJGSe7K6VMtVxC+3gjVes/lXmKDJkZbR4UFJj0MYSY8PAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUXwqNSHCWlPNlOW4HqK2LhCMpodIwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjA0OTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwUwwDQYJKoZIhvcNAQELBQADggEBAK61 yFNrs+SgagqYorJ4BiMLSXldcK3ZZ78nUCK2FxMyV2Iept0aLJPx4+n7K6p6tpN7 ALsWoaxcNKZnkuSbcz6b7KRJVAHtqFWnSobVrhZ9TsL7pZPOmyhuWE6x58zq2VJZ ktKkKOC6AmYm5bHv88MJXd8gPevOrv4IWBJ5WUEy5WyWGGeZWEgzA4Rq7TRicO4X A/jIgrt+05whCvhKSbpityT8l1CQDp7vnZ4BW9cADO95K/q0qG9+wByUQJ4Bkx7g nCAjXORmkvbWPs443EXKmIqCKWH4RJOAITBJbgO1yz2vpU+Rikmt5AYh0/VQTzO0 yTUl48SSkJvtUg4izOk= -----END CERTIFICATE-----Generated at Sat Jun 13 06:43:23 2026 by rpki-client