$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215592.roa File: AS215592.roa (raw, json) Hash identifier: YXgbCuwiDqaHilKLUjn0Ircs9jsxkm6xmGRzwUe98Mw= Subject key identifier: D1:D3:DF:2D:16:91:47:14:8A:84:A3:53:F6:D5:6C:94:E4:8F:30:A6 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 35A2489DA011F67D4E756BA9104D8D242303E41E Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215592.roa Signing time: Fri 05 Jun 2026 07:12:25 +0000 ROA not before: Fri 05 Jun 2026 07:07:25 +0000 ROA not after: Fri 04 Jun 2027 07:12:25 +0000 asID: 215592 IP address blocks: 2a06:9f81:3900::/40 maxlen: 48 2a06:9f81:5600::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:a2:48:9d:a0:11:f6:7d:4e:75:6b:a9:10:4d:8d:24:23:03:e4:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:25 2026 GMT Not After : Jun 4 07:12:25 2027 GMT Subject: CN=D1D3DF2D169147148A84A353F6D56C94E48F30A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0f:1d:dd:c7:18:0d:3f:cf:c3:09:b6:df:28: fc:58:e3:e0:37:be:d6:41:b7:24:94:77:37:b2:0c: 0e:66:d8:f0:69:50:9c:5f:62:2b:ec:d7:39:c8:2c: 3d:ae:50:64:75:d4:0a:dc:2c:9a:40:68:b0:ad:67: 33:af:78:b1:03:12:3e:a1:18:45:a6:2a:ce:ad:ba: 21:ff:7f:67:2d:9c:7a:45:d3:0a:6a:32:fb:35:fe: b7:23:eb:8e:c5:bc:82:a8:50:93:00:1f:ff:a7:e9: 59:2c:db:66:93:17:33:43:89:13:24:14:5a:e5:86: 72:c1:94:23:99:37:e4:c8:91:21:7b:84:ef:79:18: 8c:a7:03:6b:85:ee:e3:17:6a:93:91:fd:6e:a6:6a: 45:aa:52:5c:6c:43:da:b7:b5:0b:3e:08:be:8c:a4: ed:0b:30:17:01:ea:b2:1f:1c:6b:8a:6f:b7:11:f1: d0:ee:43:7a:c5:42:c8:3b:54:07:fa:67:4e:25:38: 13:1d:e6:94:80:6a:d6:4e:ed:20:a7:67:bb:5c:8a: 5b:6c:b9:52:72:0b:7f:78:63:76:9a:4a:e8:3b:df: 94:fc:00:75:91:35:aa:ad:9c:90:ea:10:2c:62:f6: 8a:90:02:6e:6b:2d:73:0a:0d:17:8a:24:24:a5:4d: 60:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D3:DF:2D:16:91:47:14:8A:84:A3:53:F6:D5:6C:94:E4:8F:30:A6 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215592.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:3900::/40 2a06:9f81:5600::/40 Signature Algorithm: sha256WithRSAEncryption 00:b2:a3:55:cf:07:d0:b5:f4:12:1b:b8:06:08:47:1d:70:2b: cb:5d:3b:d6:2c:36:92:08:ed:4e:9c:d2:da:ec:55:69:c3:e4: b6:44:b7:63:48:70:93:5f:03:83:d9:06:8e:f4:19:2a:b9:ce: 36:d5:22:b7:dd:23:12:bf:a3:87:d3:56:a2:b9:98:e3:8a:de: 50:b6:f0:06:1c:97:75:17:74:66:8c:d0:2a:48:1f:98:07:70: 80:1b:9b:4e:b3:96:1a:58:69:52:92:3d:47:b7:75:94:61:1f: 35:9d:70:b6:4f:c7:2a:a9:dd:7f:78:5f:70:e9:76:ca:62:89: 32:f1:77:58:11:ab:f1:13:49:a8:a2:54:51:6b:aa:90:c2:89: 21:87:02:b6:d1:94:54:a4:6a:8d:8d:53:41:32:7a:41:a5:13: ca:c1:d1:53:23:37:ee:b6:c7:38:12:db:73:0b:38:d0:f5:96: 05:dd:7f:b4:ce:15:e7:9a:bc:4b:da:7c:7d:18:22:b2:de:0f: 7a:d5:c1:d3:33:4f:39:71:2e:e9:3b:ab:85:cd:30:cb:cf:08: 53:79:06:01:d0:61:9d:18:56:62:5c:19:bf:b9:c2:93:39:85: 1e:ea:4a:2a:21:fb:5f:3b:a8:57:ce:1c:85:9b:ff:05:57:d5: 99:44:41:05 -----BEGIN CERTIFICATE----- MIIE8jCCA9qgAwIBAgIUNaJInaAR9n1OdWupEE2NJCMD5B4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MjVaFw0yNzA2MDQwNzEyMjVaMDMxMTAvBgNV BAMTKEQxRDNERjJEMTY5MTQ3MTQ4QTg0QTM1M0Y2RDU2Qzk0RTQ4RjMwQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMDx3dxxgNP8/DCbbfKPxY4+A3 vtZBtySUdzeyDA5m2PBpUJxfYivs1znILD2uUGR11ArcLJpAaLCtZzOveLEDEj6h GEWmKs6tuiH/f2ctnHpF0wpqMvs1/rcj647FvIKoUJMAH/+n6Vks22aTFzNDiRMk FFrlhnLBlCOZN+TIkSF7hO95GIynA2uF7uMXapOR/W6makWqUlxsQ9q3tQs+CL6M pO0LMBcB6rIfHGuKb7cR8dDuQ3rFQsg7VAf6Z04lOBMd5pSAatZO7SCnZ7tcilts uVJyC394Y3aaSug735T8AHWRNaqtnJDqECxi9oqQAm5rLXMKDReKJCSlTWCvAgMB AAGjggH8MIIB+DAdBgNVHQ4EFgQU0dPfLRaRRxSKhKNT9tVslOSPMKYwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjE1NTkyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCkGCCsGAQUF BwEHAQH/BBowGDAWBAIAAjAQAwYAKgafgTkDBgAqBp+BVjANBgkqhkiG9w0BAQsF AAOCAQEAALKjVc8H0LX0Ehu4BghHHXAry1071iw2kgjtTpzS2uxVacPktkS3Y0hw k18Dg9kGjvQZKrnONtUit90jEr+jh9NWormY44reULbwBhyXdRd0ZozQKkgfmAdw gBubTrOWGlhpUpI9R7d1lGEfNZ1wtk/HKqndf3hfcOl2ymKJMvF3WBGr8RNJqKJU UWuqkMKJIYcCttGUVKRqjY1TQTJ6QaUTysHRUyM37rbHOBLbcws40PWWBd1/tM4V 55q8S9p8fRgist4PetXB0zNPOXEu6Turhc0wy88IU3kGAdBhnRhWYlwZv7nCkzmF HupKKiH7XzuoV84chZv/BVfVmURBBQ== -----END CERTIFICATE-----Generated at Sat Jun 13 09:11:56 2026 by rpki-client