$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS212468.roa File: AS212468.roa (raw, json) Hash identifier: WXFJ3nkCCzpYo8XHFD42QU5E8rxhYwVWWp1vrKG7+Ug= Subject key identifier: F8:F4:E1:24:A7:51:E9:10:9C:94:07:F7:AD:F3:D8:37:7E:67:36:65 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 5C4C8AE937B2F20E2FB7CF702D3F09544BE9684F Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS212468.roa Signing time: Fri 05 Jun 2026 07:12:22 +0000 ROA not before: Fri 05 Jun 2026 07:07:22 +0000 ROA not after: Fri 04 Jun 2027 07:12:22 +0000 asID: 212468 IP address blocks: 2a0a:6040:bd00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:4c:8a:e9:37:b2:f2:0e:2f:b7:cf:70:2d:3f:09:54:4b:e9:68:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:22 2026 GMT Not After : Jun 4 07:12:22 2027 GMT Subject: CN=F8F4E124A751E9109C9407F7ADF3D8377E673665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:88:28:d7:89:7b:4e:a8:23:ee:33:d3:64:85: 56:20:b9:2c:2b:fe:1a:18:eb:c8:40:8a:2b:b1:c4: 64:d3:cb:72:d5:cc:37:d6:a8:45:e8:9c:6a:f3:da: fc:30:e7:ec:bf:94:67:ae:15:e1:90:d8:c7:34:7d: 17:05:73:e5:93:5b:30:98:31:00:75:a3:09:be:81: 82:0b:bf:96:bc:d2:6b:54:96:88:02:f4:1e:d3:3c: 44:2c:2c:1d:52:a9:f6:d4:77:cd:d8:f8:4a:61:6c: e1:de:1e:46:80:60:51:5b:f6:63:61:93:f6:ac:46: f0:7f:c9:79:0d:75:0b:be:6c:b8:e8:b6:1f:f6:d5: 96:7a:9b:f5:92:78:2d:5c:47:d5:57:55:1a:48:8d: 47:a8:5b:40:5f:a5:d2:20:01:90:3c:f4:4e:9d:11: 01:b9:55:b9:f9:d9:9b:1c:07:89:ba:bd:cb:30:ad: 81:df:28:1f:28:bf:0d:c0:f1:75:09:59:a0:e0:9e: 23:ea:41:c7:4a:87:2d:93:e6:8d:e3:e7:ff:1d:08: c7:d3:f8:63:25:38:9f:d8:41:66:3e:de:17:a9:1f: 1d:c0:8b:90:6d:f3:0d:6b:45:93:ba:a9:9e:08:41: a7:b4:52:3f:8d:46:e0:d6:91:14:18:12:6d:52:50: e9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F4:E1:24:A7:51:E9:10:9C:94:07:F7:AD:F3:D8:37:7E:67:36:65 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS212468.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:bd00::/40 Signature Algorithm: sha256WithRSAEncryption a2:d8:28:74:d5:04:5d:fb:bc:62:0e:f7:b2:57:7f:92:c8:5b: b5:3a:7f:1e:a7:0c:bf:3a:1b:2f:0e:63:9f:6a:fb:34:35:aa: 7f:62:4f:62:8d:cc:ac:23:e8:23:9a:fa:16:1f:8c:7f:5b:71: db:ec:5b:52:51:b3:b7:37:59:e6:60:bc:d0:47:0e:6e:79:f2: d0:c8:30:81:b0:15:6d:23:63:56:33:cd:3e:57:ac:0c:4c:51: ee:62:79:5b:37:8f:5e:92:eb:04:a7:f7:93:2e:1d:56:d5:0b: 97:64:11:4e:6c:54:f3:79:4d:67:e0:70:a4:4b:84:4d:eb:ef: fa:09:d9:a2:20:cf:98:06:cd:4b:ba:ea:9d:38:0c:78:ea:b2: d1:62:c8:db:0c:ac:23:fc:da:17:d5:15:b7:a0:39:12:14:4e: 6d:c4:64:d6:30:1c:60:9a:29:dd:47:62:6d:b4:7d:17:93:63: 35:9c:de:38:92:5c:7e:d6:88:f9:9c:1e:66:1e:d4:13:f3:02: 2a:83:02:83:f6:ca:d0:bb:84:05:5c:c3:f8:ef:5b:d0:a6:ad: 0e:c2:79:5d:ee:77:2f:d2:80:36:87:b5:e5:1b:47:0c:b6:c3: f5:be:99:63:7b:fd:f5:fd:e3:81:5e:75:98:8b:ba:89:31:8a: fb:24:b2:c1 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUXEyK6Tey8g4vt89wLT8JVEvpaE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MjJaFw0yNzA2MDQwNzEyMjJaMDMxMTAvBgNV BAMTKEY4RjRFMTI0QTc1MUU5MTA5Qzk0MDdGN0FERjNEODM3N0U2NzM2NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdiCjXiXtOqCPuM9NkhVYguSwr /hoY68hAiiuxxGTTy3LVzDfWqEXonGrz2vww5+y/lGeuFeGQ2Mc0fRcFc+WTWzCY MQB1owm+gYILv5a80mtUlogC9B7TPEQsLB1SqfbUd83Y+EphbOHeHkaAYFFb9mNh k/asRvB/yXkNdQu+bLjoth/21ZZ6m/WSeC1cR9VXVRpIjUeoW0BfpdIgAZA89E6d EQG5Vbn52ZscB4m6vcswrYHfKB8ovw3A8XUJWaDgniPqQcdKhy2T5o3j5/8dCMfT +GMlOJ/YQWY+3hepHx3Ai5Bt8w1rRZO6qZ4IQae0Uj+NRuDWkRQYEm1SUOl3AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU+PThJKdR6RCclAf3rfPYN35nNmUwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjEyNDY4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQL0wDQYJKoZIhvcNAQELBQADggEBAKLY KHTVBF37vGIO97JXf5LIW7U6fx6nDL86Gy8OY59q+zQ1qn9iT2KNzKwj6COa+hYf jH9bcdvsW1JRs7c3WeZgvNBHDm558tDIMIGwFW0jY1YzzT5XrAxMUe5ieVs3j16S 6wSn95MuHVbVC5dkEU5sVPN5TWfgcKRLhE3r7/oJ2aIgz5gGzUu66p04DHjqstFi yNsMrCP82hfVFbegORIUTm3EZNYwHGCaKd1HYm20fReTYzWc3jiSXH7WiPmcHmYe 1BPzAiqDAoP2ytC7hAVcw/jvW9CmrQ7CeV3udy/SgDaHteUbRwy2w/W+mWN7/fX9 44FedZiLuokxivskssE= -----END CERTIFICATE-----Generated at Sat Jun 13 09:10:24 2026 by rpki-client