$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215592.roa File: AS215592.roa (raw, json) Hash identifier: Bde6XHeTn+1hv18aLTseD4zCSFTC0gwJDnxk+mFR+eA= Subject key identifier: FD:EB:2E:17:C5:8C:58:10:6D:6F:69:1C:53:6C:E0:06:DD:49:9D:70 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 0ABA4175E1202A869A4EA23F8EAB682FC32B4EBF Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215592.roa Signing time: Fri 04 Jul 2025 06:53:12 +0000 ROA not before: Fri 04 Jul 2025 06:48:12 +0000 ROA not after: Fri 03 Jul 2026 06:53:12 +0000 asID: 215592 IP address blocks: 2a06:9f81:3900::/40 maxlen: 48 2a06:9f81:5600::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ba:41:75:e1:20:2a:86:9a:4e:a2:3f:8e:ab:68:2f:c3:2b:4e:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:12 2025 GMT Not After : Jul 3 06:53:12 2026 GMT Subject: CN=FDEB2E17C58C58106D6F691C536CE006DD499D70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:44:16:33:37:9c:b0:81:bb:ca:38:9f:49:72: ab:40:4e:f6:70:43:9c:a7:53:9f:7d:93:d1:54:b2: 4d:59:54:dd:5e:39:97:97:58:89:0b:2a:5e:cc:21: 2d:c7:d5:ae:67:f1:ad:59:e8:b7:0f:a2:5b:22:07: 80:e5:cc:14:a9:00:85:fe:c2:fe:fb:3e:ef:e4:87: ab:44:1d:04:7d:b4:ee:88:1c:2f:b3:f6:8f:2b:9d: b9:c7:91:5a:72:fc:2a:b4:90:73:8b:4e:06:81:93: 3e:8a:eb:9a:a3:2b:4c:76:11:3d:96:b8:37:de:ce: 7e:3f:14:5a:14:68:16:92:97:ef:7e:71:91:60:2d: b2:24:c1:58:73:0d:ba:6f:11:f6:51:3f:90:ef:25: 9a:6e:15:60:90:cc:45:2a:85:58:2f:db:4a:3b:4e: 42:38:87:d7:0e:2e:51:db:59:87:2b:61:a3:3e:32: 09:e9:c9:00:8e:f8:27:4e:4c:7c:68:32:94:34:6f: 27:c5:02:97:6c:51:d2:9f:8f:bf:17:aa:47:97:d2: b9:5c:76:a3:ce:ee:3a:60:ad:4d:8a:b7:a9:26:76: 98:45:ed:67:97:9f:d0:eb:54:8b:a7:6a:f3:eb:36: cb:e1:8f:37:72:ff:3f:c3:63:f3:0e:1d:36:2f:0c: c8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:EB:2E:17:C5:8C:58:10:6D:6F:69:1C:53:6C:E0:06:DD:49:9D:70 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215592.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:3900::/40 2a06:9f81:5600::/40 Signature Algorithm: sha256WithRSAEncryption 05:9b:05:5a:a3:18:ec:23:16:b6:55:01:c3:ab:63:ef:7f:98: c1:97:08:7f:1f:4d:e2:8b:8b:56:c6:97:ca:df:04:51:54:f0: 25:0e:21:cb:52:fc:2b:c1:a9:3a:e0:42:e8:00:15:8a:09:9a: ed:4e:0a:d5:00:9a:ff:db:74:67:71:ee:67:f5:bc:d9:99:c0: 85:0d:07:4e:47:4f:a2:f2:17:09:8b:99:52:72:8d:f2:7d:82: ef:39:76:9e:52:50:75:d4:5d:47:e6:bc:2b:39:74:90:77:f2: e6:ea:8e:f4:02:90:26:69:10:86:4d:fa:9c:a2:78:d7:9b:96: 76:72:25:82:a4:70:87:85:a3:ca:79:8f:04:2a:6a:f8:ae:56: b0:f1:29:1f:6a:20:2b:5b:04:7a:7e:cb:76:47:e1:55:40:37: ff:94:31:b3:93:ff:07:0b:6d:aa:75:4d:d7:8e:c1:12:7e:22: 2a:49:07:ef:eb:ed:4e:77:ca:60:f2:45:ef:77:e7:61:8c:b0: 21:50:8c:dd:46:f6:2b:d0:16:44:f3:7d:6e:8c:75:5b:27:2f: 3f:cf:3a:cb:4b:ee:f7:ea:5a:2f:f5:52:b1:1d:3f:2c:cb:f4: 87:a2:d9:ff:db:0d:35:fd:1d:66:db:44:5e:64:83:ea:a6:1d: 0b:b3:ca:20 -----BEGIN CERTIFICATE----- MIIE8jCCA9qgAwIBAgIUCrpBdeEgKoaaTqI/jqtoL8MrTr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MTJaFw0yNjA3MDMwNjUzMTJaMDMxMTAvBgNV BAMTKEZERUIyRTE3QzU4QzU4MTA2RDZGNjkxQzUzNkNFMDA2REQ0OTlENzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSRBYzN5ywgbvKOJ9JcqtATvZw Q5ynU599k9FUsk1ZVN1eOZeXWIkLKl7MIS3H1a5n8a1Z6LcPolsiB4DlzBSpAIX+ wv77Pu/kh6tEHQR9tO6IHC+z9o8rnbnHkVpy/Cq0kHOLTgaBkz6K65qjK0x2ET2W uDfezn4/FFoUaBaSl+9+cZFgLbIkwVhzDbpvEfZRP5DvJZpuFWCQzEUqhVgv20o7 TkI4h9cOLlHbWYcrYaM+MgnpyQCO+CdOTHxoMpQ0byfFApdsUdKfj78XqkeX0rlc dqPO7jpgrU2Kt6kmdphF7WeXn9DrVIunavPrNsvhjzdy/z/DY/MOHTYvDMg1AgMB AAGjggH8MIIB+DAdBgNVHQ4EFgQU/esuF8WMWBBtb2kcU2zgBt1JnXAwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjE1NTkyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCkGCCsGAQUF BwEHAQH/BBowGDAWBAIAAjAQAwYAKgafgTkDBgAqBp+BVjANBgkqhkiG9w0BAQsF AAOCAQEABZsFWqMY7CMWtlUBw6tj73+YwZcIfx9N4ouLVsaXyt8EUVTwJQ4hy1L8 K8GpOuBC6AAVigma7U4K1QCa/9t0Z3HuZ/W82ZnAhQ0HTkdPovIXCYuZUnKN8n2C 7zl2nlJQddRdR+a8Kzl0kHfy5uqO9AKQJmkQhk36nKJ415uWdnIlgqRwh4WjynmP BCpq+K5WsPEpH2ogK1sEen7LdkfhVUA3/5Qxs5P/BwttqnVN147BEn4iKkkH7+vt TnfKYPJF73fnYYywIVCM3Ub2K9AWRPN9box1WycvP886y0vu9+paL/VSsR0/LMv0 h6LZ/9sNNf0dZttEXmSD6qYdC7PKIA== -----END CERTIFICATE-----Generated at Wed Nov 5 08:43:49 2025 by rpki-client