$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS209512.roa File: AS209512.roa (raw, json) Hash identifier: 48oHuB7VUnLHpzWysrkC0n+EKNXGgoiGCtOoNRoDGJ0= Subject key identifier: 5E:64:3E:ED:AF:7B:80:AB:41:A6:E7:41:C2:0B:2A:43:E1:0C:D9:24 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 4F8EB0FB3C252D6971E90C71AD03D80E63E855D4 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS209512.roa Signing time: Fri 05 Jun 2026 07:12:30 +0000 ROA not before: Fri 05 Jun 2026 07:07:30 +0000 ROA not after: Fri 04 Jun 2027 07:12:30 +0000 asID: 209512 IP address blocks: 2a05:dfc1:c500::/40 maxlen: 48 2a05:dfc1:c600::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:8e:b0:fb:3c:25:2d:69:71:e9:0c:71:ad:03:d8:0e:63:e8:55:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:30 2026 GMT Not After : Jun 4 07:12:30 2027 GMT Subject: CN=5E643EEDAF7B80AB41A6E741C20B2A43E10CD924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:07:33:a8:0c:0f:01:d0:35:3e:f3:77:78:d3: 27:b9:7f:05:5e:6f:c1:45:76:d1:2c:08:64:23:1b: 6d:92:d3:20:42:5f:4b:00:43:a5:76:d9:8d:e7:d1: 87:66:dd:27:df:7a:2c:35:77:1b:bc:ee:f3:4a:8c: 07:0c:ba:6e:74:a3:92:42:98:de:ce:69:bb:b7:28: 25:1d:c2:51:1f:f0:bf:64:e8:de:ab:e9:ec:99:6c: 7c:a4:1d:d3:63:c5:a4:89:ed:c9:8a:18:c4:14:4a: 47:b6:52:b8:c1:76:fb:33:cd:19:a3:c3:cb:23:a2: 29:83:09:28:f3:c6:51:98:ab:ec:68:8e:d8:76:07: 4b:6c:ee:72:c7:78:11:fe:64:7b:45:25:ed:cc:28: 66:0c:1f:88:10:42:5a:73:27:80:af:3c:1b:64:28: 99:f1:9e:db:43:94:d3:7c:2c:40:27:2a:7e:35:9a: 22:d2:7c:5a:0f:cf:4a:8e:35:2c:75:e8:59:78:14: c7:be:17:a1:f5:fb:d9:b0:12:f9:6f:6e:db:c5:8a: 61:74:6b:28:a9:3f:15:bc:4b:9f:68:5c:40:4d:81: 1f:23:aa:b4:67:1b:ab:fe:ed:c8:06:e0:41:89:e8: d3:86:ba:12:84:50:02:f6:c2:04:1f:25:86:a6:90: 72:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:64:3E:ED:AF:7B:80:AB:41:A6:E7:41:C2:0B:2A:43:E1:0C:D9:24 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS209512.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:c500::-2a05:dfc1:c6ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption a4:be:ce:7a:4d:ef:35:fb:7b:06:28:42:73:94:24:54:fc:fc: 8b:da:02:f2:87:1b:23:0e:b2:d3:c1:c2:f0:6c:97:12:5e:a1: f2:d9:76:85:70:f3:1c:f5:41:b8:9e:3c:a3:44:d8:fc:6b:a8: be:79:8b:dd:5c:25:44:eb:a8:d5:e3:83:e5:f1:77:13:65:b3: 53:15:85:1b:d4:32:a4:a0:b5:36:b3:ce:3d:aa:36:84:73:88: 0f:9d:e3:eb:0c:74:f8:04:8c:10:21:b2:fb:0f:12:f5:7c:42: 4f:e2:87:ce:c0:d1:fc:7f:e8:6d:8c:ca:4c:26:ee:6b:4d:08: e0:b0:1a:4e:e7:e2:1d:50:f2:83:5b:54:56:7a:31:16:1f:ec: 69:55:64:c9:43:36:a7:9c:8b:06:66:06:8e:63:24:80:d9:69: 9a:3b:d9:2a:63:49:12:45:45:2b:f6:2c:72:88:f9:a7:b6:e0: 0f:55:8e:c6:a6:e9:61:20:59:1e:7f:83:d2:97:cd:5c:8d:55: eb:41:21:d5:48:83:2d:98:2f:0c:03:bb:bb:a4:00:08:38:19: 52:f7:04:0f:d8:dc:df:82:0e:54:d6:0c:08:ed:80:f2:81:2a: 67:4b:37:e3:15:30:67:ba:59:52:7d:1d:f3:94:28:d0:2c:6f: b0:d1:4a:3b -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUT46w+zwlLWlx6QxxrQPYDmPoVdQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MzBaFw0yNzA2MDQwNzEyMzBaMDMxMTAvBgNV BAMTKDVFNjQzRUVEQUY3QjgwQUI0MUE2RTc0MUMyMEIyQTQzRTEwQ0Q5MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkBzOoDA8B0DU+83d40ye5fwVe b8FFdtEsCGQjG22S0yBCX0sAQ6V22Y3n0Ydm3Sffeiw1dxu87vNKjAcMum50o5JC mN7Oabu3KCUdwlEf8L9k6N6r6eyZbHykHdNjxaSJ7cmKGMQUSke2UrjBdvszzRmj w8sjoimDCSjzxlGYq+xojth2B0ts7nLHeBH+ZHtFJe3MKGYMH4gQQlpzJ4CvPBtk KJnxnttDlNN8LEAnKn41miLSfFoPz0qONSx16Fl4FMe+F6H1+9mwEvlvbtvFimF0 ayipPxW8S59oXEBNgR8jqrRnG6v+7cgG4EGJ6NOGuhKEUAL2wgQfJYamkHJhAgMB AAGjggH+MIIB+jAdBgNVHQ4EFgQUXmQ+7a97gKtBpudBwgsqQ+EM2SQwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjA5NTEyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAAjASMBADBgAqBd/BxQMGACoF38HGMA0GCSqGSIb3DQEB CwUAA4IBAQCkvs56Te81+3sGKEJzlCRU/PyL2gLyhxsjDrLTwcLwbJcSXqHy2XaF cPMc9UG4njyjRNj8a6i+eYvdXCVE66jV44Pl8XcTZbNTFYUb1DKkoLU2s849qjaE c4gPnePrDHT4BIwQIbL7DxL1fEJP4ofOwNH8f+htjMpMJu5rTQjgsBpO5+IdUPKD W1RWejEWH+xpVWTJQzannIsGZgaOYySA2WmaO9kqY0kSRUUr9ixyiPmntuAPVY7G pulhIFkef4PSl81cjVXrQSHVSIMtmC8MA7u7pAAIOBlS9wQP2Nzfgg5U1gwI7YDy gSpnSzfjFTBnullSfR3zlCjQLG+w0Uo7 -----END CERTIFICATE-----Generated at Sat Jun 13 09:11:00 2026 by rpki-client