$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS212884.roa File: AS212884.roa (raw, json) Hash identifier: Jq7a6LMLAMX7htKcZreDjkTAiPvlOe1jabXk47nwqGw= Subject key identifier: 8D:F3:D8:A2:B4:E5:35:91:6A:4C:99:FB:72:E2:91:AD:C6:75:19:61 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: C9F02F6572A45D55C415239008F06B75453B0F Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS212884.roa Signing time: Fri 05 Jun 2026 07:12:44 +0000 ROA not before: Fri 05 Jun 2026 07:07:44 +0000 ROA not after: Fri 04 Jun 2027 07:12:44 +0000 asID: 212884 IP address blocks: 2a0a:6040:2900::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: c9:f0:2f:65:72:a4:5d:55:c4:15:23:90:08:f0:6b:75:45:3b:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:44 2026 GMT Not After : Jun 4 07:12:44 2027 GMT Subject: CN=8DF3D8A2B4E535916A4C99FB72E291ADC6751961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:83:6e:d9:bd:80:af:5d:30:68:f4:76:ae:94: 0f:06:31:18:06:01:bd:ea:8f:19:78:75:b3:c2:ab: 57:8b:5d:56:8d:83:6a:fd:5b:2d:86:c1:a3:01:47: c8:dc:bd:16:c3:66:5a:82:64:c7:50:7b:b9:99:19: 78:1d:1c:dd:ad:95:9e:28:5d:d8:1a:e7:dd:1f:4f: 8f:86:46:bf:e4:ba:2a:04:63:e5:02:c9:66:e0:5a: 38:43:96:da:ba:57:80:ec:bb:75:b6:12:18:7c:d1: f2:10:d7:e6:c6:19:5e:7b:d8:d7:16:51:64:c5:ce: 8a:6f:66:69:b4:15:33:fb:57:67:ee:6e:31:a1:22: eb:fc:8d:2a:03:b5:c2:ba:1e:de:b2:a3:89:3f:f8: 46:98:2f:c0:7d:8a:35:e1:b0:7c:d0:cb:3a:a5:77: ed:f8:1e:c3:a8:44:60:13:2d:fd:a6:02:e5:de:19: 47:13:66:4d:6e:df:40:5b:1f:7b:89:3f:5d:5b:80: ab:61:11:71:28:6d:46:69:4c:c7:27:1d:df:7e:0e: b2:3a:8d:54:72:7e:b9:82:6a:40:69:07:5c:76:d9: 95:fb:db:b5:71:1d:45:a0:72:d3:e5:25:cc:42:bf: 76:6b:0a:fd:29:55:44:a7:f7:bb:28:42:5a:26:03: fd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F3:D8:A2:B4:E5:35:91:6A:4C:99:FB:72:E2:91:AD:C6:75:19:61 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS212884.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:2900::/40 Signature Algorithm: sha256WithRSAEncryption 6d:db:88:89:7f:b5:43:2b:a4:84:4e:85:dd:52:e8:21:7a:c0: 58:45:d2:87:f5:6e:f4:8d:80:27:92:89:00:cb:c3:1a:60:75: f3:0a:56:28:7d:eb:ec:09:d6:41:ba:d7:10:8f:7d:92:3a:ae: e3:f0:73:20:fd:f2:e3:f5:1f:3a:59:0d:21:c0:12:e0:c2:fb: 3e:08:3a:6e:5b:21:5a:cc:fd:7b:3b:cf:f2:05:c6:8c:5d:b6: 21:19:4a:f1:01:f2:67:1d:af:d4:de:24:06:40:be:d0:db:cd: d2:9f:28:ca:c4:78:6d:82:4a:1e:46:8f:ff:cf:fa:dc:c2:62: c1:8f:c8:32:fa:5c:92:19:dc:14:f1:b6:c3:18:15:15:2b:1d: 69:2b:ad:8c:73:8a:87:b2:87:b4:37:68:c6:bb:6e:dd:c9:3b: b4:e8:0e:8e:ad:f4:38:61:4e:f0:e7:60:3f:bd:7f:f2:46:c9: 62:8c:7b:5d:e9:08:48:f4:f1:67:d0:cc:a0:7c:d0:fd:3f:05: 2a:37:5b:39:fd:4b:97:92:3e:44:4a:6c:ed:82:21:4d:cf:3a: ac:a3:4e:94:62:ee:ad:e0:8f:ff:dd:19:fc:5c:5f:59:81:46: 54:84:1a:cf:c6:03:2b:0e:fd:e2:13:75:f1:e0:49:7e:8a:6c: 16:84:ce:38 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUAMnwL2VypF1VxBUjkAjwa3VFOw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3NDRaFw0yNzA2MDQwNzEyNDRaMDMxMTAvBgNV BAMTKDhERjNEOEEyQjRFNTM1OTE2QTRDOTlGQjcyRTI5MUFEQzY3NTE5NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyg27ZvYCvXTBo9HaulA8GMRgG Ab3qjxl4dbPCq1eLXVaNg2r9Wy2GwaMBR8jcvRbDZlqCZMdQe7mZGXgdHN2tlZ4o Xdga590fT4+GRr/kuioEY+UCyWbgWjhDltq6V4Dsu3W2Ehh80fIQ1+bGGV572NcW UWTFzopvZmm0FTP7V2fubjGhIuv8jSoDtcK6Ht6yo4k/+EaYL8B9ijXhsHzQyzql d+34HsOoRGATLf2mAuXeGUcTZk1u30BbH3uJP11bgKthEXEobUZpTMcnHd9+DrI6 jVRyfrmCakBpB1x22ZX727VxHUWgctPlJcxCv3ZrCv0pVUSn97soQlomA/0bAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUjfPYorTlNZFqTJn7cuKRrcZ1GWEwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjEyODg0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQCkwDQYJKoZIhvcNAQELBQADggEBAG3b iIl/tUMrpIROhd1S6CF6wFhF0of1bvSNgCeSiQDLwxpgdfMKVih96+wJ1kG61xCP fZI6ruPwcyD98uP1HzpZDSHAEuDC+z4IOm5bIVrM/Xs7z/IFxoxdtiEZSvEB8mcd r9TeJAZAvtDbzdKfKMrEeG2CSh5Gj//P+tzCYsGPyDL6XJIZ3BTxtsMYFRUrHWkr rYxzioeyh7Q3aMa7bt3JO7ToDo6t9DhhTvDnYD+9f/JGyWKMe13pCEj08WfQzKB8 0P0/BSo3Wzn9S5eSPkRKbO2CIU3POqyjTpRi7q3gj//dGfxcX1mBRlSEGs/GAysO /eITdfHgSX6KbBaEzjg= -----END CERTIFICATE-----Generated at Sat Jun 13 09:11:56 2026 by rpki-client