$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS209652.roa File: AS209652.roa (raw, json) Hash identifier: d2cpXMVAPGzNxEwJ3tvFH+vPFfUqJ9QI0AZHzHmMyZg= Subject key identifier: C6:B2:54:63:EE:DE:32:50:12:6D:1E:BE:98:D0:D2:6A:09:82:75:A4 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 1229FCC4E74BF3AD1D25140CE03D680D8645F577 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS209652.roa Signing time: Fri 05 Jun 2026 07:12:35 +0000 ROA not before: Fri 05 Jun 2026 07:07:35 +0000 ROA not after: Fri 04 Jun 2027 07:12:35 +0000 asID: 209652 IP address blocks: 2a0a:6040:2400::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:29:fc:c4:e7:4b:f3:ad:1d:25:14:0c:e0:3d:68:0d:86:45:f5:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:35 2026 GMT Not After : Jun 4 07:12:35 2027 GMT Subject: CN=C6B25463EEDE3250126D1EBE98D0D26A098275A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c3:8e:3e:2d:2b:7a:60:6b:5f:42:71:c7:a6: 98:3a:cb:42:2d:85:9b:7b:84:87:75:ca:44:9d:70: 02:ed:12:30:11:d8:4b:a3:88:b3:82:c9:cc:93:31: 31:30:c6:fa:f2:ca:f7:94:d9:e5:35:c1:95:de:76: bd:a8:57:27:80:97:7a:96:16:4c:70:63:73:3b:ce: 4d:7f:5f:f3:16:98:07:db:90:77:50:99:06:41:ec: 2f:24:b0:dc:31:14:61:69:0e:dc:0f:21:d8:bd:0d: 64:9f:de:1d:44:05:d9:aa:78:9c:c1:d4:23:f6:a4: 97:1b:ab:8e:26:de:fe:7b:18:55:3a:e1:5b:00:4b: 21:33:9f:c9:51:6f:e2:f3:d4:06:0f:be:01:f2:db: 0c:b3:96:84:f4:0f:34:38:65:3a:9c:2c:ab:fc:de: 64:ad:39:6a:ca:77:ee:e0:d6:8a:82:d7:76:2c:1e: de:c7:f4:90:97:c2:dc:58:5f:41:2a:d7:bc:ef:ed: f2:c4:36:ec:c1:d8:23:eb:e2:93:ac:2c:97:f6:71: 9c:c1:72:e6:f5:0a:8d:4d:2d:22:c1:fb:fe:d8:3f: f9:3e:8f:f3:e6:1c:d0:33:87:3e:47:ce:06:63:27: 0e:b6:96:f4:0a:30:88:bb:1f:8e:87:13:e3:1d:9d: f0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B2:54:63:EE:DE:32:50:12:6D:1E:BE:98:D0:D2:6A:09:82:75:A4 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS209652.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:2400::/40 Signature Algorithm: sha256WithRSAEncryption 42:78:3c:b1:fb:7c:0a:ca:88:f0:d3:fb:15:ba:93:e8:8a:87: 5f:22:01:85:e7:ce:3f:19:03:45:a0:af:d2:46:f8:78:2b:68: ea:33:b1:aa:1a:d1:80:59:28:83:aa:da:e5:7e:c2:78:b1:ba: 20:bb:11:01:3f:06:cf:a8:92:be:44:87:51:c3:19:ba:0c:69: 82:90:bb:49:7e:9d:8e:d6:28:a4:cf:ba:10:cd:5d:b9:82:96: fc:99:0f:58:04:f6:1f:a4:7a:e3:52:d7:9b:9f:1c:d5:6b:81: 4a:d9:a2:68:71:a6:39:6f:bb:af:c0:44:20:c1:6c:f1:a4:3f: 1e:68:10:a5:d7:14:07:4f:df:90:be:84:51:1c:ca:7e:e5:27: ca:9f:35:3f:93:7f:da:d2:1f:7a:42:c7:e0:da:c6:c2:fa:88: ce:e6:a9:60:fa:18:23:52:cc:8c:11:9c:21:48:75:67:f1:d3: 6f:33:4a:2a:37:a5:4c:25:f8:68:80:e5:05:b4:9d:78:4e:e9: 27:96:7a:4a:03:17:d6:58:18:6e:c2:50:9c:91:de:4d:97:df: ac:97:0a:ba:ed:8f:d1:d8:92:53:0d:89:c4:f5:a8:94:a0:cf: 82:13:a6:e5:03:88:41:1c:d4:16:d7:96:20:48:ab:ec:4b:ac: 10:79:0d:d7 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUEin8xOdL860dJRQM4D1oDYZF9XcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MzVaFw0yNzA2MDQwNzEyMzVaMDMxMTAvBgNV BAMTKEM2QjI1NDYzRUVERTMyNTAxMjZEMUVCRTk4RDBEMjZBMDk4Mjc1QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpw44+LSt6YGtfQnHHppg6y0It hZt7hId1ykSdcALtEjAR2EujiLOCycyTMTEwxvryyveU2eU1wZXedr2oVyeAl3qW FkxwY3M7zk1/X/MWmAfbkHdQmQZB7C8ksNwxFGFpDtwPIdi9DWSf3h1EBdmqeJzB 1CP2pJcbq44m3v57GFU64VsASyEzn8lRb+Lz1AYPvgHy2wyzloT0DzQ4ZTqcLKv8 3mStOWrKd+7g1oqC13YsHt7H9JCXwtxYX0Eq17zv7fLENuzB2CPr4pOsLJf2cZzB cub1Co1NLSLB+/7YP/k+j/PmHNAzhz5HzgZjJw62lvQKMIi7H46HE+MdnfD1AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUxrJUY+7eMlASbR6+mNDSagmCdaQwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjA5NjUyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQCQwDQYJKoZIhvcNAQELBQADggEBAEJ4 PLH7fArKiPDT+xW6k+iKh18iAYXnzj8ZA0Wgr9JG+HgraOozsaoa0YBZKIOq2uV+ wnixuiC7EQE/Bs+okr5Eh1HDGboMaYKQu0l+nY7WKKTPuhDNXbmClvyZD1gE9h+k euNS15ufHNVrgUrZomhxpjlvu6/ARCDBbPGkPx5oEKXXFAdP35C+hFEcyn7lJ8qf NT+Tf9rSH3pCx+DaxsL6iM7mqWD6GCNSzIwRnCFIdWfx028zSio3pUwl+GiA5QW0 nXhO6SeWekoDF9ZYGG7CUJyR3k2X36yXCrrtj9HYklMNicT1qJSgz4ITpuUDiEEc 1BbXliBIq+xLrBB5Ddc= -----END CERTIFICATE-----Generated at Sat Jun 13 09:10:22 2026 by rpki-client