$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS210152.roa File: AS210152.roa (raw, json) Hash identifier: Ml05SlIuVnPhxc/kJdZ14tDEY6I+7KuaZ23jvQzQ6M4= Subject key identifier: 77:9E:F0:27:25:94:AC:DF:84:6A:05:43:0B:55:47:49:02:54:7C:C6 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 48D4B9EA3D457743062ABF79C2D23E281A495CDA Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS210152.roa Signing time: Fri 05 Jun 2026 07:12:13 +0000 ROA not before: Fri 05 Jun 2026 07:07:13 +0000 ROA not after: Fri 04 Jun 2027 07:12:13 +0000 asID: 210152 IP address blocks: 2a0a:6040:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:d4:b9:ea:3d:45:77:43:06:2a:bf:79:c2:d2:3e:28:1a:49:5c:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:13 2026 GMT Not After : Jun 4 07:12:13 2027 GMT Subject: CN=779EF0272594ACDF846A05430B55474902547CC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ff:64:aa:2c:85:d5:bf:10:3d:c2:cf:1d:96: 61:b8:d1:11:4b:7a:7e:5f:e8:cf:bb:4e:12:85:da: d4:83:ff:81:87:a5:12:c7:39:fd:fe:82:9a:36:03: 3b:cd:96:89:bd:7b:f5:b4:ad:38:5a:d1:ae:f6:62: 93:4c:85:b2:07:bf:80:8b:81:bf:b3:fc:37:35:77: 2f:86:f5:fa:b5:a6:24:bb:33:d7:1e:d2:f7:0a:48: 0d:6d:64:02:c5:38:32:54:e8:bb:7a:6f:61:de:db: 6a:51:08:77:6c:05:2c:c8:de:07:0a:82:e7:b9:12: 4a:45:be:d5:a8:8c:d9:f0:8b:5c:d6:55:9a:72:f4: 6e:94:42:53:08:a7:d6:7d:b9:82:a6:fd:f0:9f:23: 19:24:1c:e5:8f:c2:c5:6c:fe:56:07:38:7b:34:fd: 6f:93:b3:35:4d:34:62:fd:2d:a2:5e:9d:95:04:b1: 54:eb:70:34:48:cf:71:76:3a:ac:2f:af:06:b7:33: be:16:1c:0f:4a:c0:53:1e:8e:a4:8f:a0:a7:6f:fe: c2:b9:17:98:f4:c7:0d:aa:15:e4:21:03:f3:fc:d1: 28:ac:f0:24:8e:c3:e4:d7:fd:1d:e1:8d:bc:96:53: ac:96:7a:df:45:82:35:8c:51:99:da:37:29:a7:22: f2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:9E:F0:27:25:94:AC:DF:84:6A:05:43:0B:55:47:49:02:54:7C:C6 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS210152.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:e000::/40 Signature Algorithm: sha256WithRSAEncryption 12:2d:d6:39:c2:45:20:c2:ce:9f:ec:be:12:84:6b:40:95:b1: 04:21:90:51:ae:72:ea:a0:08:6f:4f:55:b3:9c:10:8d:37:30: a7:ea:05:96:cd:21:69:49:8f:09:81:ea:d8:20:eb:c8:85:06: 50:fb:4b:44:cf:f3:a6:14:27:26:cb:a4:fd:b3:0a:2c:63:b7: 57:2f:84:56:cc:18:da:b5:57:66:ad:8a:32:ff:9d:6a:af:b0: e3:f5:37:0c:d9:3f:31:8e:2b:a6:b2:32:3c:53:44:c4:b5:16: 84:15:0b:33:19:09:4f:9e:70:84:31:4c:9e:c8:58:82:bb:1e: e8:cf:a8:07:b3:3e:77:5a:cf:57:04:c4:e2:f8:3e:7c:e2:9e: 2b:b4:13:51:3e:4b:da:e9:ac:0b:f0:06:2a:09:d4:3f:e4:6c: 23:0d:79:0a:83:d6:f5:63:5c:f1:4b:ba:79:5f:34:9a:c8:5f: bd:c3:a3:64:f7:31:15:db:c5:d6:77:3f:6d:cf:7c:ce:17:5a: d1:a3:4e:39:55:27:cc:f1:1b:4c:73:dd:ac:89:14:7f:ac:6d: cf:c7:5b:18:95:38:61:a4:22:14:75:95:69:4f:ab:d4:22:64: 84:70:64:6e:9c:4a:8b:74:75:76:43:df:98:f8:fa:db:70:de: 07:a8:ab:b4 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUSNS56j1Fd0MGKr95wtI+KBpJXNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MTNaFw0yNzA2MDQwNzEyMTNaMDMxMTAvBgNV BAMTKDc3OUVGMDI3MjU5NEFDREY4NDZBMDU0MzBCNTU0NzQ5MDI1NDdDQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL/2SqLIXVvxA9ws8dlmG40RFL en5f6M+7ThKF2tSD/4GHpRLHOf3+gpo2AzvNlom9e/W0rTha0a72YpNMhbIHv4CL gb+z/Dc1dy+G9fq1piS7M9ce0vcKSA1tZALFODJU6Lt6b2He22pRCHdsBSzI3gcK gue5EkpFvtWojNnwi1zWVZpy9G6UQlMIp9Z9uYKm/fCfIxkkHOWPwsVs/lYHOHs0 /W+TszVNNGL9LaJenZUEsVTrcDRIz3F2Oqwvrwa3M74WHA9KwFMejqSPoKdv/sK5 F5j0xw2qFeQhA/P80Sis8CSOw+TX/R3hjbyWU6yWet9FgjWMUZnaNymnIvLJAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUd57wJyWUrN+EagVDC1VHSQJUfMYwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjEwMTUyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQOAwDQYJKoZIhvcNAQELBQADggEBABIt 1jnCRSDCzp/svhKEa0CVsQQhkFGucuqgCG9PVbOcEI03MKfqBZbNIWlJjwmB6tgg 68iFBlD7S0TP86YUJybLpP2zCixjt1cvhFbMGNq1V2atijL/nWqvsOP1NwzZPzGO K6ayMjxTRMS1FoQVCzMZCU+ecIQxTJ7IWIK7HujPqAezPndaz1cExOL4Pnziniu0 E1E+S9rprAvwBioJ1D/kbCMNeQqD1vVjXPFLunlfNJrIX73Do2T3MRXbxdZ3P23P fM4XWtGjTjlVJ8zxG0xz3ayJFH+sbc/HWxiVOGGkIhR1lWlPq9QiZIRwZG6cSot0 dXZD35j4+ttw3geoq7Q= -----END CERTIFICATE-----Generated at Sat Jun 13 06:43:22 2026 by rpki-client