$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS212854.roa File: AS212854.roa (raw, json) Hash identifier: AWur5eLoWOOFkMmSV+FGRKvySvZWBjkKpumxrFwWX3k= Subject key identifier: 4F:EB:04:FA:99:E4:6A:0E:9C:6C:14:4B:6F:56:D4:F4:21:7A:34:6A Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 1EB3F7A04CFBEFD502ABB7867B5DFCDDB4C08DF9 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS212854.roa Signing time: Fri 05 Jun 2026 07:12:13 +0000 ROA not before: Fri 05 Jun 2026 07:07:13 +0000 ROA not after: Fri 04 Jun 2027 07:12:13 +0000 asID: 212854 IP address blocks: 2a05:dfc1:3e00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:b3:f7:a0:4c:fb:ef:d5:02:ab:b7:86:7b:5d:fc:dd:b4:c0:8d:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:13 2026 GMT Not After : Jun 4 07:12:13 2027 GMT Subject: CN=4FEB04FA99E46A0E9C6C144B6F56D4F4217A346A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2c:8f:51:e9:44:7f:1f:e7:cd:88:2d:d7:9e: 7a:e0:ee:55:bb:a2:22:76:6a:bb:fd:f8:fd:c8:0f: d7:4c:e9:41:23:75:f7:90:fb:9b:2f:ab:cf:58:1a: db:ae:a6:de:7c:85:e1:7e:7a:74:b2:ab:f8:ad:b2: 8c:56:91:dc:f5:da:fc:e3:9f:ca:af:86:cc:1e:f0: 96:d0:60:cf:6d:c0:d0:53:5c:6e:33:97:62:b6:5a: 92:08:4c:36:18:94:ee:59:af:44:11:59:de:b7:06: 4d:39:a1:de:a3:29:b4:72:52:05:de:09:bb:5f:29: 75:60:ff:d1:7f:2d:e6:1b:93:2e:b6:2d:a1:a5:c3: e1:59:36:7f:9a:d5:05:fc:19:6c:40:97:78:ae:c9: 76:36:f3:19:fe:0f:e6:64:de:f0:e3:c4:2f:5b:16: d0:26:38:46:33:3b:44:f2:1a:68:81:71:39:7b:0a: 81:2c:56:ce:49:cd:f1:43:a5:03:74:cd:28:35:6d: bc:39:31:b8:3d:43:84:f0:08:e1:3e:9e:b1:cc:79: 19:16:ff:ad:62:c4:64:d5:83:9f:be:4a:5e:2b:69: c0:b2:f7:a1:ff:d1:98:2e:96:76:9c:10:82:e1:37: 97:44:0a:3f:5b:b5:6d:bc:e9:60:d2:61:76:22:ce: c8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:EB:04:FA:99:E4:6A:0E:9C:6C:14:4B:6F:56:D4:F4:21:7A:34:6A X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS212854.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:3e00::/40 Signature Algorithm: sha256WithRSAEncryption c6:37:35:02:71:ab:d1:a2:83:eb:0d:3a:38:19:a5:3b:e7:4d: 48:e4:3e:62:23:b6:89:1f:72:b9:45:b3:2a:86:f2:7a:db:86: 7c:39:14:82:2c:7c:48:de:9d:61:61:a9:00:f1:e0:83:03:2f: 6a:c3:1b:3c:6f:3e:9c:ba:1b:5b:70:29:64:f3:e6:92:c9:cf: f2:b4:f0:dc:13:fd:80:92:56:c4:b0:a0:f9:2a:2b:80:5d:5c: b2:e2:d2:12:3e:82:b1:48:6e:69:6c:10:37:e2:87:26:3f:dc: 64:87:19:46:44:bc:50:db:90:4c:db:f1:ce:43:1e:66:c9:f0: b8:8c:98:1e:04:9b:f2:55:52:28:84:f7:22:4e:5e:b7:46:71: 36:f6:41:62:d5:ae:eb:79:f0:ed:1c:7a:87:76:e6:93:bf:9f: 60:63:ac:61:9b:dc:71:5e:22:6b:d6:37:56:fe:6d:7f:d9:f3: c7:f9:10:4d:6f:78:3b:1f:d1:85:1e:0c:5e:19:4c:0f:4b:d5: c8:6f:eb:9a:89:f5:fc:3b:48:32:e2:06:5c:1c:ab:03:42:75: 02:c7:d4:a4:a7:53:7e:ae:a0:10:ef:84:80:51:90:d7:2d:b6: 3b:20:50:f3:f8:f3:9d:02:51:ff:e5:69:32:fe:8d:a8:40:ec: 70:05:94:31 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUHrP3oEz779UCq7eGe1383bTAjfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MTNaFw0yNzA2MDQwNzEyMTNaMDMxMTAvBgNV BAMTKDRGRUIwNEZBOTlFNDZBMEU5QzZDMTQ0QjZGNTZENEY0MjE3QTM0NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDILI9R6UR/H+fNiC3Xnnrg7lW7 oiJ2arv9+P3ID9dM6UEjdfeQ+5svq89YGtuupt58heF+enSyq/itsoxWkdz12vzj n8qvhswe8JbQYM9twNBTXG4zl2K2WpIITDYYlO5Zr0QRWd63Bk05od6jKbRyUgXe CbtfKXVg/9F/LeYbky62LaGlw+FZNn+a1QX8GWxAl3iuyXY28xn+D+Zk3vDjxC9b FtAmOEYzO0TyGmiBcTl7CoEsVs5JzfFDpQN0zSg1bbw5Mbg9Q4TwCOE+nrHMeRkW /61ixGTVg5++Sl4racCy96H/0ZgulnacEILhN5dECj9btW286WDSYXYizshVAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUT+sE+pnkag6cbBRLb1bU9CF6NGowHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjEyODU0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwT4wDQYJKoZIhvcNAQELBQADggEBAMY3 NQJxq9Gig+sNOjgZpTvnTUjkPmIjtokfcrlFsyqG8nrbhnw5FIIsfEjenWFhqQDx 4IMDL2rDGzxvPpy6G1twKWTz5pLJz/K08NwT/YCSVsSwoPkqK4BdXLLi0hI+grFI bmlsEDfihyY/3GSHGUZEvFDbkEzb8c5DHmbJ8LiMmB4Em/JVUiiE9yJOXrdGcTb2 QWLVrut58O0ceod25pO/n2BjrGGb3HFeImvWN1b+bX/Z88f5EE1veDsf0YUeDF4Z TA9L1chv65qJ9fw7SDLiBlwcqwNCdQLH1KSnU36uoBDvhIBRkNcttjsgUPP4850C Uf/laTL+jahA7HAFlDE= -----END CERTIFICATE-----Generated at Sat Jun 13 09:11:05 2026 by rpki-client