$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS210965.roa File: AS210965.roa (raw, json) Hash identifier: 4xnMVj6N+bKKXWSisJGDOcQBpCVM4YMXM61iS2qXvOQ= Subject key identifier: 91:C3:C4:2D:EB:53:1F:99:3E:5C:AE:46:7E:D7:7F:F1:A3:E1:F1:1C Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 5373B0514B5F3CA3A54E2CAF250891E84FAE109A Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS210965.roa Signing time: Fri 05 Jun 2026 07:12:41 +0000 ROA not before: Fri 05 Jun 2026 07:07:41 +0000 ROA not after: Fri 04 Jun 2027 07:12:41 +0000 asID: 210965 IP address blocks: 2a0a:6040:b400::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:73:b0:51:4b:5f:3c:a3:a5:4e:2c:af:25:08:91:e8:4f:ae:10:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:41 2026 GMT Not After : Jun 4 07:12:41 2027 GMT Subject: CN=91C3C42DEB531F993E5CAE467ED77FF1A3E1F11C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:16:91:fd:3f:a1:77:75:02:15:d1:27:20:20: 95:13:40:5e:45:3f:9d:87:c2:de:63:c5:21:15:bc: 3d:80:29:63:b5:0c:17:fb:8d:9f:6a:a0:b1:00:af: 74:ed:c7:69:88:8b:7d:3c:ce:7a:22:8f:9b:05:6c: ed:ae:21:a7:d4:7c:b5:70:b1:e0:26:39:57:32:78: 73:30:ff:17:81:eb:b9:76:d3:c8:a7:8a:a7:9e:31: d1:c2:2a:55:3c:e9:29:e3:d6:97:3a:e0:8d:af:4e: 23:24:a8:7a:3f:49:3a:cf:c1:e0:3d:f7:1f:20:70: 92:09:b3:2b:fb:4f:67:f1:53:d9:63:32:7f:5c:5a: 19:a0:98:5a:65:3e:92:fb:26:0e:ec:b7:df:1a:6a: 4d:ba:32:a4:db:e4:84:55:34:78:35:35:d9:ea:31: 82:2f:48:68:8a:53:45:d5:cb:3e:0e:8d:ad:50:44: dd:87:e9:8e:0b:c1:0d:5a:c0:e9:da:7c:1a:df:28: 69:2c:1a:67:fc:f5:1b:a6:c9:b8:9d:39:e4:f1:c1: 96:bd:c4:e4:fb:1c:90:99:82:47:c2:dd:47:40:cf: 3e:54:56:51:a0:82:11:18:67:1d:4e:62:1b:b7:d2: 24:0b:62:07:69:bf:92:88:5b:ed:45:6e:e8:51:55: 53:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C3:C4:2D:EB:53:1F:99:3E:5C:AE:46:7E:D7:7F:F1:A3:E1:F1:1C X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS210965.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:b400::/40 Signature Algorithm: sha256WithRSAEncryption 4d:d7:48:bb:61:7e:a4:16:23:4e:48:89:4e:c9:5b:b5:d5:6c: 8e:3d:b8:1e:c2:a1:07:78:23:bf:79:fe:7e:89:87:38:9b:9e: 37:9d:3e:28:9c:b8:b7:0d:88:30:07:7a:0a:7f:1b:53:17:d7: 1a:df:44:43:9c:1e:ad:59:81:d7:17:3d:17:ff:e5:32:4b:61: 4a:03:83:1c:1d:e4:ea:34:7b:7c:4f:b3:c4:23:0f:d0:62:d9: 0f:69:34:b9:f4:97:53:ef:a7:36:d0:78:64:40:d2:71:40:a2: 1c:c3:62:f8:5c:d4:ba:a5:27:39:53:21:5b:2f:48:17:f6:fd: d2:ea:94:d5:cd:58:02:ab:8c:cc:51:d2:74:c6:27:0a:2c:cf: ab:c8:48:8d:d0:6c:2d:c6:b7:ca:d8:99:51:8e:ea:01:e7:39: 76:f1:a8:31:47:0d:df:94:b4:fe:45:01:d6:58:87:9c:b9:a6: a6:df:bc:b8:57:bb:2e:93:ea:62:c8:f8:d8:b8:88:6a:65:86: 64:85:e0:9d:2f:22:75:ad:5f:d8:7c:1b:25:45:d1:6c:20:86: 77:79:6c:a0:0a:4a:c0:78:b4:5f:9e:4d:61:e0:9d:8d:67:77: ce:00:39:1b:bd:13:6b:57:be:2b:b8:d7:fd:e8:d0:f5:c5:c1: 7e:83:a1:2f -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUU3OwUUtfPKOlTiyvJQiR6E+uEJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3NDFaFw0yNzA2MDQwNzEyNDFaMDMxMTAvBgNV BAMTKDkxQzNDNDJERUI1MzFGOTkzRTVDQUU0NjdFRDc3RkYxQTNFMUYxMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/FpH9P6F3dQIV0ScgIJUTQF5F P52Hwt5jxSEVvD2AKWO1DBf7jZ9qoLEAr3Ttx2mIi308znoij5sFbO2uIafUfLVw seAmOVcyeHMw/xeB67l208iniqeeMdHCKlU86Snj1pc64I2vTiMkqHo/STrPweA9 9x8gcJIJsyv7T2fxU9ljMn9cWhmgmFplPpL7Jg7st98aak26MqTb5IRVNHg1Ndnq MYIvSGiKU0XVyz4Oja1QRN2H6Y4LwQ1awOnafBrfKGksGmf89RumybidOeTxwZa9 xOT7HJCZgkfC3UdAzz5UVlGgghEYZx1OYhu30iQLYgdpv5KIW+1FbuhRVVNZAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUkcPELetTH5k+XK5Gftd/8aPh8RwwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjEwOTY1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQLQwDQYJKoZIhvcNAQELBQADggEBAE3X SLthfqQWI05IiU7JW7XVbI49uB7CoQd4I795/n6JhzibnjedPiicuLcNiDAHegp/ G1MX1xrfREOcHq1ZgdcXPRf/5TJLYUoDgxwd5Oo0e3xPs8QjD9Bi2Q9pNLn0l1Pv pzbQeGRA0nFAohzDYvhc1LqlJzlTIVsvSBf2/dLqlNXNWAKrjMxR0nTGJwosz6vI SI3QbC3Gt8rYmVGO6gHnOXbxqDFHDd+UtP5FAdZYh5y5pqbfvLhXuy6T6mLI+Ni4 iGplhmSF4J0vInWtX9h8GyVF0Wwghnd5bKAKSsB4tF+eTWHgnY1nd84AORu9E2tX viu41/3o0PXFwX6DoS8= -----END CERTIFICATE-----Generated at Sat Jun 13 10:22:55 2026 by rpki-client