$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS213236.roa File: AS213236.roa (raw, json) Hash identifier: tIW0HPXgeK9FS7pjC1cKFk8UkC58Nmm3JOYXLamuocI= Subject key identifier: C0:1F:EC:1D:DA:9B:0D:38:5D:6D:C8:72:B0:75:A7:6E:1D:6C:1D:62 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 1A5829442232698762D75640F4B0025983C61C43 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS213236.roa Signing time: Fri 05 Jun 2026 07:12:30 +0000 ROA not before: Fri 05 Jun 2026 07:07:30 +0000 ROA not after: Fri 04 Jun 2027 07:12:30 +0000 asID: 213236 IP address blocks: 2a05:dfc1:4600::/40 maxlen: 48 2a05:dfc1:4700::/40 maxlen: 40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:58:29:44:22:32:69:87:62:d7:56:40:f4:b0:02:59:83:c6:1c:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:30 2026 GMT Not After : Jun 4 07:12:30 2027 GMT Subject: CN=C01FEC1DDA9B0D385D6DC872B075A76E1D6C1D62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ba:d0:48:74:c1:0e:e8:d5:df:04:69:4a:a0: ae:e9:fb:7c:3c:fc:0e:e5:b1:ed:59:76:e1:e6:56: bb:a8:16:49:e9:a9:2f:c4:c0:e6:06:ca:49:1c:34: 66:40:bb:4c:3e:1c:52:55:a0:09:0f:66:6b:bd:f3: d4:5f:1c:93:18:23:e0:7b:81:da:7e:9f:7b:62:c1: b4:a8:ba:0a:76:20:79:f0:d9:db:06:72:f8:5f:48: 77:bf:6c:27:f6:69:43:49:76:65:24:95:29:a0:b2: 2e:76:b0:bf:cd:d6:75:ec:f2:c7:d4:23:c8:e6:71: b9:a5:99:b0:f3:65:64:8f:66:cc:5b:e3:fc:99:1d: 71:d3:41:60:48:30:8c:1c:8a:b5:39:7c:0b:a8:eb: 8a:35:d5:64:67:43:12:26:d2:51:ca:a3:59:37:02: 7f:7a:91:14:63:08:a0:02:16:7b:86:51:a3:23:df: 67:5a:69:1b:61:27:b7:11:12:a3:64:d5:41:27:80: c5:42:39:d6:6b:bb:cd:8d:75:a4:c6:00:70:66:f6: db:2f:22:7e:7c:48:13:fa:e4:97:80:de:4c:5c:1f: 3b:16:59:90:21:2a:9d:44:d7:7b:87:03:2f:f6:0b: ce:f6:49:84:48:0d:cb:b1:91:ee:fc:ed:2d:5e:38: 85:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:1F:EC:1D:DA:9B:0D:38:5D:6D:C8:72:B0:75:A7:6E:1D:6C:1D:62 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS213236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:4600::/39 Signature Algorithm: sha256WithRSAEncryption d9:7c:6a:cf:31:7b:10:80:96:f6:8c:ba:22:70:44:b9:78:c8: 4e:85:43:55:dd:29:96:b3:aa:0b:cd:78:2b:fc:e6:57:34:a5: c6:3e:72:08:4b:76:81:47:66:b5:8d:86:bb:57:bb:16:b3:9e: 49:8b:39:01:73:38:dc:4c:1d:b7:77:c5:e6:35:ea:27:30:01: 67:d0:09:45:b5:29:df:c1:9a:31:da:2a:b9:1c:38:d1:de:8f: 9e:e6:11:82:ca:38:7c:7d:73:39:46:e0:3d:f4:3f:a3:55:c5: 2b:9a:81:eb:32:51:92:6b:02:94:50:39:7c:d2:63:f4:d1:7b: e7:09:23:80:3e:a7:48:61:93:35:b0:96:ba:0b:e1:a0:f5:f6: 45:24:4f:29:ec:d6:a7:91:14:ee:a6:ff:27:2a:71:dd:f9:52: 5a:3d:0c:ce:67:53:30:0c:9a:9e:04:58:c2:eb:91:8a:c5:5f: a2:4e:ac:6f:1d:0d:b0:d9:ed:6a:58:15:96:72:28:e9:57:db: 63:81:b6:4f:bc:4f:84:da:6b:e4:6c:78:cc:78:06:83:62:24: 7c:71:ff:ec:62:0e:6d:74:85:4c:b4:79:c1:81:ad:cf:1b:60: b9:26:74:94:e8:2b:a3:25:e6:f3:a7:12:60:9f:2e:d1:e6:b6: 50:48:3a:2d -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUGlgpRCIyaYdi11ZA9LACWYPGHEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MzBaFw0yNzA2MDQwNzEyMzBaMDMxMTAvBgNV BAMTKEMwMUZFQzFEREE5QjBEMzg1RDZEQzg3MkIwNzVBNzZFMUQ2QzFENjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDputBIdMEO6NXfBGlKoK7p+3w8 /A7lse1ZduHmVruoFknpqS/EwOYGykkcNGZAu0w+HFJVoAkPZmu989RfHJMYI+B7 gdp+n3tiwbSougp2IHnw2dsGcvhfSHe/bCf2aUNJdmUklSmgsi52sL/N1nXs8sfU I8jmcbmlmbDzZWSPZsxb4/yZHXHTQWBIMIwcirU5fAuo64o11WRnQxIm0lHKo1k3 An96kRRjCKACFnuGUaMj32daaRthJ7cREqNk1UEngMVCOdZru82NdaTGAHBm9tsv In58SBP65JeA3kxcHzsWWZAhKp1E13uHAy/2C872SYRIDcuxke787S1eOIVnAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUwB/sHdqbDThdbchysHWnbh1sHWIwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjEzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYBKgXfwUYwDQYJKoZIhvcNAQELBQADggEBANl8 as8xexCAlvaMuiJwRLl4yE6FQ1XdKZazqgvNeCv85lc0pcY+cghLdoFHZrWNhrtX uxaznkmLOQFzONxMHbd3xeY16icwAWfQCUW1Kd/BmjHaKrkcONHej57mEYLKOHx9 czlG4D30P6NVxSuagesyUZJrApRQOXzSY/TRe+cJI4A+p0hhkzWwlroL4aD19kUk Tyns1qeRFO6m/ycqcd35Ulo9DM5nUzAMmp4EWMLrkYrFX6JOrG8dDbDZ7WpYFZZy KOlX22OBtk+8T4Taa+RseMx4BoNiJHxx/+xiDm10hUy0ecGBrc8bYLkmdJToK6Ml 5vOnEmCfLtHmtlBIOi0= -----END CERTIFICATE-----Generated at Sat Jun 13 10:23:06 2026 by rpki-client