$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS212164.roa File: AS212164.roa (raw, json) Hash identifier: w62bnSIYUVAkKjv8Ycl2eoJmzEJ0NaroOzmgPnxFFzs= Subject key identifier: A2:A5:CE:D8:71:5F:DB:36:56:C9:00:A7:5F:95:DE:03:5E:F7:9B:3B Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 479DC871C24D17D4F86C3CBF5FF58463ADA17FA9 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS212164.roa Signing time: Fri 05 Jun 2026 07:12:30 +0000 ROA not before: Fri 05 Jun 2026 07:07:30 +0000 ROA not after: Fri 04 Jun 2027 07:12:30 +0000 asID: 212164 IP address blocks: 2a0a:6040:c700::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:9d:c8:71:c2:4d:17:d4:f8:6c:3c:bf:5f:f5:84:63:ad:a1:7f:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:30 2026 GMT Not After : Jun 4 07:12:30 2027 GMT Subject: CN=A2A5CED8715FDB3656C900A75F95DE035EF79B3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:55:28:32:17:c8:87:68:b4:43:a4:fe:9a:da: 4f:d2:d2:da:39:6b:f5:e1:89:8d:69:52:20:ea:26: e7:8c:82:1d:58:26:4f:f4:bc:c2:14:a6:e0:ac:aa: 23:eb:e4:41:66:85:fe:f8:fa:52:d5:cf:57:41:80: ea:66:c1:11:a6:0b:f1:fc:59:0d:52:3d:1e:cd:dc: 8c:4f:9f:cd:6f:ed:7e:9f:d1:58:c2:48:d5:29:1a: c8:f9:1c:f9:5b:12:33:d0:a1:b4:f5:1d:02:d8:47: b2:ce:95:d0:dd:18:c3:be:ff:0e:2a:2d:42:2e:ad: e5:b6:64:47:79:91:a8:1e:82:84:9f:df:bf:25:85: dd:55:f2:d0:67:6e:a7:d8:e4:0c:9a:8d:21:91:20: bc:8a:30:dd:be:ec:f5:15:ad:e1:da:80:6d:b6:3b: 62:1f:3e:3f:b7:25:f8:d5:a8:73:e8:62:a4:41:73: d3:bb:14:47:db:3e:44:84:53:fc:b1:26:1e:3e:14: c6:a6:a8:7f:d5:ba:01:0e:11:3b:c6:a0:52:c0:89: 6f:2e:e2:3b:1f:c7:e2:1a:20:20:6a:38:f6:d3:44: cd:b2:f7:20:ae:4e:1b:a0:4c:14:7c:c0:fa:32:30: 39:fc:ba:3b:ca:5b:7f:c2:d5:38:48:76:e0:5a:19: 39:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A5:CE:D8:71:5F:DB:36:56:C9:00:A7:5F:95:DE:03:5E:F7:9B:3B X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS212164.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:c700::/40 Signature Algorithm: sha256WithRSAEncryption c3:f5:90:5c:0d:cb:94:ee:88:c8:d6:7f:7d:ed:80:0d:3a:f3: 1d:72:b5:17:0a:dd:2f:a8:e4:14:01:c6:a9:62:6b:4a:27:73: 32:52:22:2c:4d:7b:70:02:c8:0b:75:a1:c9:5c:7c:4a:64:ec: 86:f7:b7:3d:fc:cb:d9:b4:60:21:db:f6:83:b2:19:ac:9c:97: 98:0b:f2:70:77:50:ad:5a:ed:9d:56:bd:06:81:9e:46:19:33: d1:d3:06:fd:7e:ed:34:a0:11:27:1b:82:e0:70:14:5f:74:ec: 88:b8:81:74:ba:9a:a1:7f:33:4c:1a:c7:20:fb:94:6a:69:67: 32:76:d5:a8:cc:49:8a:05:bd:1b:59:c4:cb:3b:75:30:06:38: f1:15:c0:61:5f:00:bd:28:39:61:e4:fb:9e:79:70:26:70:99: 50:c0:27:b3:f2:df:e1:f4:13:ce:7a:b1:43:5d:d0:33:97:db: 96:39:4c:af:e8:7e:87:49:3e:3c:18:78:88:e6:56:98:ad:c6: 32:0a:15:f4:0a:20:f9:87:3d:57:d1:07:60:00:5e:8d:ec:27: 69:9e:cb:7c:87:38:ad:e9:04:ca:87:48:99:13:b9:8e:6f:73: 30:d5:7c:ea:7b:f8:c3:69:5b:08:c0:41:d1:98:94:f8:17:46: b9:c9:86:c5 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUR53IccJNF9T4bDy/X/WEY62hf6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MzBaFw0yNzA2MDQwNzEyMzBaMDMxMTAvBgNV BAMTKEEyQTVDRUQ4NzE1RkRCMzY1NkM5MDBBNzVGOTVERTAzNUVGNzlCM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcVSgyF8iHaLRDpP6a2k/S0to5 a/XhiY1pUiDqJueMgh1YJk/0vMIUpuCsqiPr5EFmhf74+lLVz1dBgOpmwRGmC/H8 WQ1SPR7N3IxPn81v7X6f0VjCSNUpGsj5HPlbEjPQobT1HQLYR7LOldDdGMO+/w4q LUIureW2ZEd5kagegoSf378lhd1V8tBnbqfY5AyajSGRILyKMN2+7PUVreHagG22 O2IfPj+3JfjVqHPoYqRBc9O7FEfbPkSEU/yxJh4+FMamqH/VugEOETvGoFLAiW8u 4jsfx+IaICBqOPbTRM2y9yCuThugTBR8wPoyMDn8ujvKW3/C1ThIduBaGTkbAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUoqXO2HFf2zZWyQCnX5XeA173mzswHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjEyMTY0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQMcwDQYJKoZIhvcNAQELBQADggEBAMP1 kFwNy5TuiMjWf33tgA068x1ytRcK3S+o5BQBxqlia0onczJSIixNe3ACyAt1oclc fEpk7Ib3tz38y9m0YCHb9oOyGaycl5gL8nB3UK1a7Z1WvQaBnkYZM9HTBv1+7TSg EScbguBwFF907Ii4gXS6mqF/M0waxyD7lGppZzJ21ajMSYoFvRtZxMs7dTAGOPEV wGFfAL0oOWHk+555cCZwmVDAJ7Py3+H0E856sUNd0DOX25Y5TK/ofodJPjwYeIjm VpitxjIKFfQKIPmHPVfRB2AAXo3sJ2mey3yHOK3pBMqHSJkTuY5vczDVfOp7+MNp WwjAQdGYlPgXRrnJhsU= -----END CERTIFICATE-----Generated at Sat Jun 13 09:12:05 2026 by rpki-client