$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS211576.roa File: AS211576.roa (raw, json) Hash identifier: u4LaSzqiul1FmVkoX/Cq/kEBBtPy8q3Wa/81WrNpbic= Subject key identifier: E1:8C:EC:AC:45:14:7F:77:06:85:C4:84:2C:13:EF:78:98:38:63:C0 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 7B53A6D5B62FEEE0E825B62C1D472DDA01359C20 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS211576.roa Signing time: Fri 05 Jun 2026 07:12:23 +0000 ROA not before: Fri 05 Jun 2026 07:07:23 +0000 ROA not after: Fri 04 Jun 2027 07:12:23 +0000 asID: 211576 IP address blocks: 2a0a:6040:4500::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:53:a6:d5:b6:2f:ee:e0:e8:25:b6:2c:1d:47:2d:da:01:35:9c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:23 2026 GMT Not After : Jun 4 07:12:23 2027 GMT Subject: CN=E18CECAC45147F770685C4842C13EF78983863C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:80:f9:94:50:5f:10:75:45:ac:bd:bd:44:91: 06:1d:6e:3c:38:c6:40:04:e5:0e:c4:4a:a9:b0:b5: b8:71:79:b6:83:7d:86:ba:fa:00:1b:77:c1:ca:b6: c8:50:90:17:29:a7:e7:2e:23:f6:97:31:d2:17:6d: e9:ac:40:2c:0f:40:a0:14:a8:11:05:d5:66:2b:01: c1:ee:75:a7:81:eb:97:6a:6e:55:2e:22:1b:58:b5: ab:a2:96:77:cc:96:ed:f5:45:62:d4:70:73:4a:25: 4b:bf:dc:42:8c:95:61:28:96:21:f9:8e:5d:20:90: c3:ca:43:31:c9:44:14:e4:36:d4:ec:e8:b2:26:c9: c1:db:8b:04:34:1b:57:6c:2b:63:83:1b:d8:18:b1: c8:bc:db:ad:27:ed:1d:09:b0:b8:1c:da:3a:85:68: ba:15:8a:16:35:ad:0e:0e:02:cd:0a:a6:3a:18:1e: 88:af:b9:a4:58:60:b8:9b:1b:71:8e:a5:0e:96:29: c2:b5:80:3c:bc:aa:01:95:19:26:30:cf:e9:b6:18: f1:ac:12:42:ba:95:11:ef:76:50:7e:68:ee:5f:a3: 01:65:22:99:46:85:6b:1a:de:4d:41:3a:4d:dc:26: 96:0d:9a:7a:3f:b3:ce:64:74:08:f3:ba:7a:58:53: 00:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:8C:EC:AC:45:14:7F:77:06:85:C4:84:2C:13:EF:78:98:38:63:C0 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS211576.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:4500::/40 Signature Algorithm: sha256WithRSAEncryption 8d:d7:60:db:a8:22:49:41:fb:80:38:4e:61:ff:61:41:07:22: e4:85:4f:b0:f0:b2:81:f7:5c:ed:b0:3d:c1:7a:c5:8b:ac:10: cd:7b:df:b7:e1:63:84:94:7a:28:3a:a0:ea:05:72:f4:84:99: 0d:42:8a:58:3c:53:47:c5:6d:e7:5d:00:6c:cc:e5:a8:3e:80: 40:2f:e4:62:cb:cd:7e:46:ed:58:45:dc:b4:9b:6b:59:8b:35: 68:1e:30:1d:ad:4f:2f:a9:cc:c4:e6:ca:db:4d:a1:2a:cb:99: b8:29:87:a1:d7:c5:82:a0:6d:b0:8d:1a:ec:f3:9c:98:a0:b1: 5a:3d:20:bc:d0:51:ac:b9:20:7a:a7:58:e1:15:95:1b:60:79: fb:13:a9:50:2e:69:52:ae:80:3f:71:37:a6:62:5b:bf:82:29: db:02:cb:ac:a2:55:54:51:39:9e:03:a6:ad:ac:78:4b:96:ac: 4a:a1:3b:fa:f9:2c:ba:3c:f6:1a:0e:b3:e7:43:43:78:62:c0: 34:ef:3e:61:60:b9:ea:5f:1d:cb:eb:e3:ec:1b:aa:a4:9c:a3: e9:08:ff:73:44:b4:7a:4c:bd:ae:9c:e3:39:82:29:02:8b:e7: ac:31:6d:b6:9a:1f:b3:19:f6:b9:b4:cb:9b:fc:9c:10:92:a9: aa:9f:63:92 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUe1Om1bYv7uDoJbYsHUct2gE1nCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MjNaFw0yNzA2MDQwNzEyMjNaMDMxMTAvBgNV BAMTKEUxOENFQ0FDNDUxNDdGNzcwNjg1QzQ4NDJDMTNFRjc4OTgzODYzQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAgPmUUF8QdUWsvb1EkQYdbjw4 xkAE5Q7ESqmwtbhxebaDfYa6+gAbd8HKtshQkBcpp+cuI/aXMdIXbemsQCwPQKAU qBEF1WYrAcHudaeB65dqblUuIhtYtauilnfMlu31RWLUcHNKJUu/3EKMlWEoliH5 jl0gkMPKQzHJRBTkNtTs6LImycHbiwQ0G1dsK2ODG9gYsci8260n7R0JsLgc2jqF aLoVihY1rQ4OAs0KpjoYHoivuaRYYLibG3GOpQ6WKcK1gDy8qgGVGSYwz+m2GPGs EkK6lRHvdlB+aO5fowFlIplGhWsa3k1BOk3cJpYNmno/s85kdAjzunpYUwDfAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU4YzsrEUUf3cGhcSELBPveJg4Y8AwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjExNTc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQEUwDQYJKoZIhvcNAQELBQADggEBAI3X YNuoIklB+4A4TmH/YUEHIuSFT7DwsoH3XO2wPcF6xYusEM1737fhY4SUeig6oOoF cvSEmQ1Cilg8U0fFbeddAGzM5ag+gEAv5GLLzX5G7VhF3LSba1mLNWgeMB2tTy+p zMTmyttNoSrLmbgph6HXxYKgbbCNGuzznJigsVo9ILzQUay5IHqnWOEVlRtgefsT qVAuaVKugD9xN6ZiW7+CKdsCy6yiVVRROZ4Dpq2seEuWrEqhO/r5LLo89hoOs+dD Q3hiwDTvPmFguepfHcvr4+wbqqSco+kI/3NEtHpMva6c4zmCKQKL56wxbbaaH7MZ 9rm0y5v8nBCSqaqfY5I= -----END CERTIFICATE-----Generated at Sat Jun 13 09:11:11 2026 by rpki-client