$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS210152.roa File: AS210152.roa (raw, json) Hash identifier: MtAWk3U+W9wFWnyv0iAJxzZ9Kzl11hLnDrX7wlljl18= Subject key identifier: F3:05:66:65:A8:CA:1D:C4:F9:02:37:72:7A:C2:A3:EB:51:38:15:4B Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 0FD0C4887FDBDA5F7F877DC05677286FFCD4CB6C Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS210152.roa Signing time: Fri 04 Jul 2025 06:53:23 +0000 ROA not before: Fri 04 Jul 2025 06:48:23 +0000 ROA not after: Fri 03 Jul 2026 06:53:23 +0000 asID: 210152 IP address blocks: 2a0a:6040:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d0:c4:88:7f:db:da:5f:7f:87:7d:c0:56:77:28:6f:fc:d4:cb:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:23 2025 GMT Not After : Jul 3 06:53:23 2026 GMT Subject: CN=F3056665A8CA1DC4F90237727AC2A3EB5138154B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:0f:8e:e0:5e:15:fb:0a:7d:96:2e:76:8d:18: e3:ea:09:42:05:fa:ba:30:62:cd:09:53:60:e2:32: 7c:35:74:d1:71:dc:86:26:7f:05:e2:f8:4e:c9:a7: d4:24:10:9c:b8:d0:18:30:05:a0:fb:99:73:a2:8d: 4c:fa:0f:8a:29:74:73:04:af:68:91:38:b1:e1:23: a1:cf:2a:b8:0f:01:02:b3:a0:b6:a6:d3:af:44:5e: 2e:71:61:25:35:9a:67:10:40:5c:81:80:d4:78:37: f3:2f:ba:08:53:c3:82:23:60:24:68:aa:b2:c5:ca: 9f:91:c6:a5:c6:63:f9:47:fa:9e:54:0b:1e:68:11: d5:17:b6:ac:a9:3b:50:32:de:aa:c0:15:50:fe:3d: f9:1d:21:38:4b:77:43:b0:e4:e6:ab:ba:5c:0c:d6: 79:c7:54:04:96:32:83:bc:03:ea:d2:f7:de:38:a1: 33:ba:6f:79:91:ce:6f:19:9f:08:b7:73:db:41:57: a4:ba:8b:bf:44:d6:09:46:a2:1f:56:7a:7a:9e:0e: 5a:d6:44:86:54:84:00:4f:d3:09:01:36:b2:cc:3c: 47:90:4a:4f:c7:aa:7f:6b:b7:e4:f6:a0:50:b2:d9: 13:c0:26:7a:08:4e:08:3c:ad:eb:3e:f5:9b:e3:20: 54:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:05:66:65:A8:CA:1D:C4:F9:02:37:72:7A:C2:A3:EB:51:38:15:4B X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS210152.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:e000::/40 Signature Algorithm: sha256WithRSAEncryption e1:16:d4:ae:f2:ea:d9:5a:f0:48:2d:d2:49:c5:dc:04:1f:5d: 2f:a1:8c:63:d1:6e:e2:11:6d:52:27:5a:50:78:b2:5c:25:f3: 74:35:20:58:84:f7:6d:dd:d7:67:13:70:df:56:cd:85:39:3d: 49:a3:83:65:98:f4:36:90:22:7f:9d:73:b7:ba:5a:5c:da:3a: 13:25:7c:4c:38:65:c2:bc:b0:79:47:62:c4:60:99:b3:19:15: 5a:81:e6:c5:eb:94:a6:81:38:8c:7a:1b:4e:db:78:58:67:69: 63:ff:49:a1:fc:0e:23:68:f5:f7:39:e1:c4:1d:f0:a9:42:57: 4d:66:a6:3e:1b:ce:f2:9d:6a:4d:e1:43:94:c9:e4:91:06:fa: 30:cb:a0:c1:11:09:6b:2a:13:75:ac:1d:0e:21:87:71:95:78: 4c:0e:af:91:50:a7:0a:91:f0:aa:bf:5b:0a:50:1e:56:33:8d: 15:78:e2:ae:c7:66:9f:59:65:05:b2:3c:98:da:ce:3b:bc:bf: f8:e6:1f:c7:d1:7f:9c:51:6a:5d:43:6c:dc:78:49:75:03:3c: 09:0a:42:99:5c:4f:3d:41:1b:ef:70:2d:e5:4f:f5:64:84:f4: a0:ae:95:9c:4b:2f:01:fe:11:82:5d:2d:25:3f:4d:ce:70:0e: 34:c0:e9:6c -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUD9DEiH/b2l9/h33AVncob/zUy2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MjNaFw0yNjA3MDMwNjUzMjNaMDMxMTAvBgNV BAMTKEYzMDU2NjY1QThDQTFEQzRGOTAyMzc3MjdBQzJBM0VCNTEzODE1NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpD47gXhX7Cn2WLnaNGOPqCUIF +rowYs0JU2DiMnw1dNFx3IYmfwXi+E7Jp9QkEJy40BgwBaD7mXOijUz6D4opdHME r2iROLHhI6HPKrgPAQKzoLam069EXi5xYSU1mmcQQFyBgNR4N/MvughTw4IjYCRo qrLFyp+RxqXGY/lH+p5UCx5oEdUXtqypO1Ay3qrAFVD+PfkdIThLd0Ow5OarulwM 1nnHVASWMoO8A+rS9944oTO6b3mRzm8Znwi3c9tBV6S6i79E1glGoh9WenqeDlrW RIZUhABP0wkBNrLMPEeQSk/Hqn9rt+T2oFCy2RPAJnoITgg8res+9ZvjIFSTAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU8wVmZajKHcT5AjdyesKj61E4FUswHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjEwMTUyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQOAwDQYJKoZIhvcNAQELBQADggEBAOEW 1K7y6tla8Egt0knF3AQfXS+hjGPRbuIRbVInWlB4slwl83Q1IFiE923d12cTcN9W zYU5PUmjg2WY9DaQIn+dc7e6WlzaOhMlfEw4ZcK8sHlHYsRgmbMZFVqB5sXrlKaB OIx6G07beFhnaWP/SaH8DiNo9fc54cQd8KlCV01mpj4bzvKdak3hQ5TJ5JEG+jDL oMERCWsqE3WsHQ4hh3GVeEwOr5FQpwqR8Kq/WwpQHlYzjRV44q7HZp9ZZQWyPJja zju8v/jmH8fRf5xRal1DbNx4SXUDPAkKQplcTz1BG+9wLeVP9WSE9KCulZxLLwH+ EYJdLSU/Tc5wDjTA6Ww= -----END CERTIFICATE-----Generated at Wed Nov 5 02:29:55 2025 by rpki-client