$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS214752.roa File: AS214752.roa (raw, json) Hash identifier: Kalcd0BpWoyMBW/mQITm3j+xj1b2Q79VXDSjMMV5kQk= Subject key identifier: 61:40:9A:67:C7:96:29:33:12:B8:22:95:A4:FF:56:2C:F7:1F:2C:94 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 159B8A6D698608DEC4BBDAF89D486758EF91FD38 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS214752.roa Signing time: Fri 04 Jul 2025 06:53:24 +0000 ROA not before: Fri 04 Jul 2025 06:48:24 +0000 ROA not after: Fri 03 Jul 2026 06:53:24 +0000 asID: 214752 IP address blocks: 2a06:9f81:4500::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 04 Aug 2025 23:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:9b:8a:6d:69:86:08:de:c4:bb:da:f8:9d:48:67:58:ef:91:fd:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:24 2025 GMT Not After : Jul 3 06:53:24 2026 GMT Subject: CN=61409A67C796293312B82295A4FF562CF71F2C94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8b:c1:15:c2:86:a4:9b:ce:87:4a:79:6c:0c: a2:70:bd:b2:38:f9:85:b6:07:1b:4f:9b:11:bd:d9: 0f:a4:ba:d5:14:b5:5d:be:28:31:9a:7e:ae:c7:cf: 3b:5e:93:79:fa:c0:d5:ef:ec:59:49:68:0e:be:cd: 5c:dc:91:5f:ce:c4:fd:30:76:87:70:2a:9c:3e:84: 26:c6:5c:0c:fd:fb:3f:5d:01:f0:f4:f9:de:3d:3b: a2:40:e2:d3:13:cb:60:23:66:0d:3b:be:0f:ee:a2: 61:4b:74:e5:02:9f:08:15:65:a1:60:d2:3d:02:07: 42:1a:f1:b5:0e:aa:22:a9:78:d3:eb:49:4c:ff:46: 71:c8:3d:bf:2c:8a:e1:87:0e:e0:21:56:f9:00:46: 8b:b6:90:39:7c:11:56:e7:f7:1d:a1:59:88:92:5e: 2e:18:48:ef:af:f0:b2:94:84:73:19:ea:f9:38:52: ba:70:62:b7:8a:63:e4:1e:eb:30:cd:fb:dc:5c:36: 2b:30:e1:21:dc:90:b8:92:1a:86:8f:2c:5e:5e:2c: 91:3c:2f:c5:ec:82:4e:7f:fb:18:63:21:eb:4a:13: fd:02:67:b7:7e:18:0f:7b:a5:4c:36:35:86:dc:eb: fd:f0:32:31:5f:fe:77:84:c9:04:8c:aa:5a:2a:7e: a9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:40:9A:67:C7:96:29:33:12:B8:22:95:A4:FF:56:2C:F7:1F:2C:94 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS214752.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:4500::/40 Signature Algorithm: sha256WithRSAEncryption c5:fc:09:72:35:c0:cd:23:cc:5d:73:0a:b3:cc:1b:89:55:63: d2:07:fc:bb:21:7e:96:4e:42:9b:32:03:82:91:73:b4:42:14: f3:08:a7:6b:88:92:cb:d7:9a:5b:a4:84:45:4e:d9:0d:79:8f: 6b:8b:f3:d4:8b:9e:28:09:55:84:26:41:1f:b0:ca:ab:a4:ba: d4:fa:8e:24:cf:14:f3:cb:bf:55:53:7b:55:49:e5:60:ce:1f: d5:87:3e:86:0b:64:aa:c4:d0:d1:b2:9c:62:b6:5c:15:f4:c3: b4:56:b7:07:17:4a:eb:ba:ca:e4:f5:aa:59:0b:e3:8b:12:a5: 54:59:35:76:23:49:2b:e5:39:f8:55:4c:b9:73:58:d9:14:fc: 21:e5:21:1e:cc:1e:aa:ee:b4:4f:d9:b0:a6:20:80:69:c4:f8: a6:52:18:17:16:b7:b9:f9:4a:4a:dd:1f:c6:da:8f:ce:8a:61: c4:6b:7e:50:c3:9d:6d:58:58:49:87:74:f1:9c:56:6a:c3:fa: e6:e6:54:12:31:15:ae:56:86:6e:5b:f4:0f:41:c1:f6:8e:37: 0d:bd:bf:e2:95:0f:1e:14:de:af:83:16:01:ce:cd:00:b0:b6: a0:7d:75:25:02:4b:2f:e7:b9:ff:42:d9:1f:5b:e7:8f:0b:cc: 4d:da:c5:f4 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUFZuKbWmGCN7Eu9r4nUhnWO+R/TgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MjRaFw0yNjA3MDMwNjUzMjRaMDMxMTAvBgNV BAMTKDYxNDA5QTY3Qzc5NjI5MzMxMkI4MjI5NUE0RkY1NjJDRjcxRjJDOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRi8EVwoakm86HSnlsDKJwvbI4 +YW2BxtPmxG92Q+kutUUtV2+KDGafq7Hzztek3n6wNXv7FlJaA6+zVzckV/OxP0w dodwKpw+hCbGXAz9+z9dAfD0+d49O6JA4tMTy2AjZg07vg/uomFLdOUCnwgVZaFg 0j0CB0Ia8bUOqiKpeNPrSUz/RnHIPb8siuGHDuAhVvkARou2kDl8EVbn9x2hWYiS Xi4YSO+v8LKUhHMZ6vk4UrpwYreKY+Qe6zDN+9xcNisw4SHckLiSGoaPLF5eLJE8 L8Xsgk5/+xhjIetKE/0CZ7d+GA97pUw2NYbc6/3wMjFf/neEyQSMqloqfqm9AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUYUCaZ8eWKTMSuCKVpP9WLPcfLJQwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjE0NzUyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgafgUUwDQYJKoZIhvcNAQELBQADggEBAMX8 CXI1wM0jzF1zCrPMG4lVY9IH/LshfpZOQpsyA4KRc7RCFPMIp2uIksvXmlukhEVO 2Q15j2uL89SLnigJVYQmQR+wyqukutT6jiTPFPPLv1VTe1VJ5WDOH9WHPoYLZKrE 0NGynGK2XBX0w7RWtwcXSuu6yuT1qlkL44sSpVRZNXYjSSvlOfhVTLlzWNkU/CHl IR7MHqrutE/ZsKYggGnE+KZSGBcWt7n5SkrdH8baj86KYcRrflDDnW1YWEmHdPGc VmrD+ubmVBIxFa5Whm5b9A9BwfaONw29v+KVDx4U3q+DFgHOzQCwtqB9dSUCSy/n uf9C2R9b548LzE3axfQ= -----END CERTIFICATE-----Generated at Mon Aug 4 15:59:25 2025 by rpki-client