$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215541.roa File: AS215541.roa (raw, json) Hash identifier: XvZWj/w9ANINHEDOojqZ0WZBEhswtS19u6xVKdQnNoU= Subject key identifier: 90:DC:F6:4F:5C:41:91:AF:5F:22:3A:DC:8B:64:C6:28:D5:11:59:2A Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 0E5BA45C9CD0380D47A35628B698E87DE3A0D0FC Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215541.roa Signing time: Fri 04 Jul 2025 06:53:27 +0000 ROA not before: Fri 04 Jul 2025 06:48:27 +0000 ROA not after: Fri 03 Jul 2026 06:53:27 +0000 asID: 215541 IP address blocks: 2a06:9f81:4700::/40 maxlen: 48 2a06:9f81:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:5b:a4:5c:9c:d0:38:0d:47:a3:56:28:b6:98:e8:7d:e3:a0:d0:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:27 2025 GMT Not After : Jul 3 06:53:27 2026 GMT Subject: CN=90DCF64F5C4191AF5F223ADC8B64C628D511592A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:11:b8:a6:48:19:ed:b4:f6:08:9f:23:73:24: 1f:65:77:66:00:ae:ab:a8:4e:b1:53:9d:ae:23:f8: 4f:de:78:91:bf:e5:fa:a5:e4:5d:0e:ca:b9:39:1d: e0:8e:a5:8d:87:17:d7:e1:02:b3:10:00:1d:25:37: 36:53:f5:5d:fa:da:2b:c2:2b:ce:76:dd:9d:14:a2: 8b:73:58:46:bb:d5:09:69:a0:53:4e:37:88:59:fb: 38:b8:10:01:41:e3:af:7a:f2:8b:84:40:38:77:86: 46:d7:18:0b:76:75:a4:51:7b:0b:2f:e7:82:48:b4: 3b:04:82:e8:68:eb:06:5a:ab:47:3a:67:32:d4:02: 15:6b:c4:6a:5a:86:53:3a:07:5c:5e:41:6f:fc:6e: f3:48:d1:4d:f2:a0:9b:2b:d9:06:fb:55:d4:1d:9f: eb:98:8a:bb:15:ad:a7:81:06:94:92:56:5c:78:10: 92:9b:6b:07:19:5f:19:b5:ba:88:c4:44:e8:20:f6: c8:13:40:9f:5e:80:b8:50:d7:d9:e6:a2:49:b2:19: 04:51:90:cd:2e:17:b4:17:8d:94:2d:d9:87:e3:c7: c1:97:a9:1b:3e:0e:66:5d:8e:2e:de:97:6d:08:6a: 52:94:9f:d7:63:c7:68:50:10:0e:40:9c:fc:68:71: 27:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:DC:F6:4F:5C:41:91:AF:5F:22:3A:DC:8B:64:C6:28:D5:11:59:2A X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215541.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:4700::-2a06:9f81:48ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption af:1b:f7:6d:05:35:1e:2e:4a:b0:e3:d8:81:24:d8:b7:f8:37: 8e:53:f9:45:74:e0:36:1c:7a:22:0e:75:f0:79:35:d6:45:ad: 72:6e:3d:0d:4c:c0:be:ef:78:7a:62:4a:6e:e5:f1:33:19:09: 88:19:52:47:e0:aa:76:4c:ce:52:73:40:a1:a5:8d:8b:55:fc: b8:ba:1e:f6:65:dc:e5:2f:71:e8:7f:f6:28:ed:38:b3:a3:8e: ac:cf:f2:13:a3:b3:30:bd:cc:2b:fa:62:6a:b5:50:57:96:b5: 2e:d2:50:df:1c:2f:fe:0c:74:d9:8a:21:26:14:9e:b9:48:d1: de:0e:95:5d:4b:00:0c:39:11:ac:50:73:7f:78:36:f3:33:9e: 04:08:28:e5:31:58:12:e3:ac:c0:7b:ce:00:9c:b6:c7:ce:66: 93:a4:46:7b:2b:27:74:08:3d:fb:36:b8:8c:cd:c3:b1:7b:7d: ca:ef:01:97:d8:f5:52:94:90:cc:c7:77:62:19:ea:bc:44:29: 03:c5:18:f7:ce:7e:ad:74:c9:dc:d6:38:01:ad:dd:2d:f3:b5: d7:a9:f0:d5:af:e0:99:71:f6:35:8f:e2:2f:d6:12:98:ae:f4: 6e:67:2a:a7:bd:53:d3:57:d7:39:a9:79:aa:d5:d1:7c:fb:26: eb:79:c4:2b -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUDlukXJzQOA1Ho1YotpjofeOg0PwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MjdaFw0yNjA3MDMwNjUzMjdaMDMxMTAvBgNV BAMTKDkwRENGNjRGNUM0MTkxQUY1RjIyM0FEQzhCNjRDNjI4RDUxMTU5MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7EbimSBnttPYInyNzJB9ld2YA rquoTrFTna4j+E/eeJG/5fql5F0Oyrk5HeCOpY2HF9fhArMQAB0lNzZT9V362ivC K8523Z0UootzWEa71QlpoFNON4hZ+zi4EAFB46968ouEQDh3hkbXGAt2daRRewsv 54JItDsEguho6wZaq0c6ZzLUAhVrxGpahlM6B1xeQW/8bvNI0U3yoJsr2Qb7VdQd n+uYirsVraeBBpSSVlx4EJKbawcZXxm1uojEROgg9sgTQJ9egLhQ19nmokmyGQRR kM0uF7QXjZQt2Yfjx8GXqRs+DmZdji7el20IalKUn9djx2hQEA5AnPxocSdnAgMB AAGjggH+MIIB+jAdBgNVHQ4EFgQUkNz2T1xBka9fIjrci2TGKNURWSowHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjE1NTQxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAAjASMBADBgAqBp+BRwMGACoGn4FIMA0GCSqGSIb3DQEB CwUAA4IBAQCvG/dtBTUeLkqw49iBJNi3+DeOU/lFdOA2HHoiDnXweTXWRa1ybj0N TMC+73h6Ykpu5fEzGQmIGVJH4Kp2TM5Sc0ChpY2LVfy4uh72ZdzlL3Hof/Yo7Tiz o46sz/ITo7Mwvcwr+mJqtVBXlrUu0lDfHC/+DHTZiiEmFJ65SNHeDpVdSwAMORGs UHN/eDbzM54ECCjlMVgS46zAe84AnLbHzmaTpEZ7Kyd0CD37NriMzcOxe33K7wGX 2PVSlJDMx3diGeq8RCkDxRj3zn6tdMnc1jgBrd0t87XXqfDVr+CZcfY1j+Iv1hKY rvRuZyqnvVPTV9c5qXmq1dF8+ybrecQr -----END CERTIFICATE-----Generated at Wed Nov 5 20:32:40 2025 by rpki-client