$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS211810.roa File: AS211810.roa (raw, json) Hash identifier: v+3XiIoDz3rftOuq2Z8ev+YAOqctW2iGXl2OYb2oU1o= Subject key identifier: FD:DD:AE:64:9E:2A:2A:6F:3C:F4:1E:4E:6B:A6:53:BC:4D:F2:63:10 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 1A51A23CFD9A768B8D01916B86BC4C24C4E81335 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS211810.roa Signing time: Fri 04 Jul 2025 06:53:19 +0000 ROA not before: Fri 04 Jul 2025 06:48:19 +0000 ROA not after: Fri 03 Jul 2026 06:53:19 +0000 asID: 211810 IP address blocks: 2a0a:6040:6900::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:51:a2:3c:fd:9a:76:8b:8d:01:91:6b:86:bc:4c:24:c4:e8:13:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:19 2025 GMT Not After : Jul 3 06:53:19 2026 GMT Subject: CN=FDDDAE649E2A2A6F3CF41E4E6BA653BC4DF26310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:13:a9:5a:dc:46:22:fb:2c:7e:ec:7d:e9:cb: 84:6e:3d:9a:e9:21:48:bd:36:21:0f:21:8f:ad:95: a6:dc:d7:24:13:48:ea:44:3a:64:53:f4:1d:d9:75: 28:25:64:55:24:34:30:45:45:0a:08:89:fd:e7:2f: 6b:01:13:4a:5d:af:f1:ae:db:e5:1d:16:27:dc:b5: ac:60:12:f8:a3:74:df:94:98:56:25:30:e4:23:85: 7b:34:41:98:89:ab:52:c3:73:59:57:83:34:61:d8: 50:64:e8:d2:a9:cd:6a:01:84:8e:cf:e7:79:0d:4e: 0d:2b:77:4f:0c:db:70:7f:8a:9c:e4:89:0b:17:e7: cf:1a:dd:3b:bb:85:32:d6:e1:5a:2b:c2:5e:21:a2: e8:e9:e8:d3:65:11:a6:a2:84:f4:bb:55:c9:0a:d4: 47:ff:2f:09:ab:1a:2a:b3:89:c3:75:b6:f5:10:00: 00:91:05:bd:20:02:0a:73:98:08:c7:8a:c7:04:db: ee:8e:13:d0:d1:9f:11:97:94:67:51:40:8e:dc:55: 13:8f:71:ee:48:f7:b1:42:b7:e7:50:cb:74:ea:60: 3e:d4:1f:25:44:38:6a:e5:57:40:cb:f5:d8:55:e7: 56:c3:9b:15:54:38:32:6d:f1:59:58:52:e2:ac:b9: e1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:DD:AE:64:9E:2A:2A:6F:3C:F4:1E:4E:6B:A6:53:BC:4D:F2:63:10 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS211810.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:6900::/40 Signature Algorithm: sha256WithRSAEncryption 8e:4e:43:4f:b7:22:5f:c4:4b:86:53:14:5e:cd:1d:7a:22:35: fd:0e:a3:51:1a:ba:b2:90:28:40:32:83:ac:a8:cb:dd:18:e2: cc:60:5a:e8:53:f3:e5:d5:01:9b:65:c1:59:92:0f:c6:30:23: 4d:47:84:3b:d4:a0:f9:49:b5:8a:7e:72:cc:d8:65:98:47:1b: 9e:54:28:2c:60:9c:d6:b2:b8:cd:8d:44:3a:c1:9c:14:c7:6f: 3b:73:f1:fb:e2:56:96:e7:2e:e1:6f:d7:38:b6:31:46:19:ad: 42:cd:05:1b:e0:fa:b9:2d:ae:b8:b0:e2:06:06:0e:33:6f:c5: 2a:6b:91:b0:f4:2b:ae:92:aa:6f:dc:cd:d4:59:92:fd:41:bc: 24:bb:23:58:71:b2:4b:61:1a:71:8c:fb:8c:00:d3:68:55:2e: 52:7e:0d:9f:89:ef:d1:05:61:3a:59:28:7a:f6:56:b9:7d:7e: c9:4b:50:6b:7b:41:fa:6c:d2:77:6c:a8:64:a7:d5:de:c4:10: 61:04:29:49:45:1f:ec:27:bb:32:06:9e:17:b3:63:a2:47:38: a6:ba:d7:bf:71:77:94:67:9a:86:47:4d:0d:a3:1d:a6:b6:09: c6:00:0c:5a:d7:59:d1:dc:66:8c:0f:2e:72:69:bd:6d:36:fd: c9:06:39:43 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUGlGiPP2adouNAZFrhrxMJMToEzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MTlaFw0yNjA3MDMwNjUzMTlaMDMxMTAvBgNV BAMTKEZERERBRTY0OUUyQTJBNkYzQ0Y0MUU0RTZCQTY1M0JDNERGMjYzMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEE6la3EYi+yx+7H3py4RuPZrp IUi9NiEPIY+tlabc1yQTSOpEOmRT9B3ZdSglZFUkNDBFRQoIif3nL2sBE0pdr/Gu 2+UdFifctaxgEvijdN+UmFYlMOQjhXs0QZiJq1LDc1lXgzRh2FBk6NKpzWoBhI7P 53kNTg0rd08M23B/ipzkiQsX588a3Tu7hTLW4Vorwl4houjp6NNlEaaihPS7VckK 1Ef/LwmrGiqzicN1tvUQAACRBb0gAgpzmAjHiscE2+6OE9DRnxGXlGdRQI7cVROP ce5I97FCt+dQy3TqYD7UHyVEOGrlV0DL9dhV51bDmxVUODJt8VlYUuKsueFzAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU/d2uZJ4qKm889B5Oa6ZTvE3yYxAwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjExODEwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQGkwDQYJKoZIhvcNAQELBQADggEBAI5O Q0+3Il/ES4ZTFF7NHXoiNf0Oo1EaurKQKEAyg6yoy90Y4sxgWuhT8+XVAZtlwVmS D8YwI01HhDvUoPlJtYp+cszYZZhHG55UKCxgnNayuM2NRDrBnBTHbztz8fviVpbn LuFv1zi2MUYZrULNBRvg+rktrriw4gYGDjNvxSprkbD0K66Sqm/czdRZkv1BvCS7 I1hxskthGnGM+4wA02hVLlJ+DZ+J79EFYTpZKHr2Vrl9fslLUGt7Qfps0ndsqGSn 1d7EEGEEKUlFH+wnuzIGnhezY6JHOKa6179xd5RnmoZHTQ2jHaa2CcYADFrXWdHc ZowPLnJpvW02/ckGOUM= -----END CERTIFICATE-----Generated at Wed Nov 5 08:43:54 2025 by rpki-client