$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215648.roa File: AS215648.roa (raw, json) Hash identifier: +X0hkCDo7RVWgaRDfigkYEAN7qWSnCGU7srPIZ7jiGo= Subject key identifier: 8E:FA:47:C8:83:7F:99:9B:4C:5F:A5:BD:CA:3F:F2:9D:82:F2:B6:E7 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 2150001269350F555355C736903F333B0FD0D575 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215648.roa Signing time: Fri 05 Jun 2026 07:12:21 +0000 ROA not before: Fri 05 Jun 2026 07:07:21 +0000 ROA not after: Fri 04 Jun 2027 07:12:21 +0000 asID: 215648 IP address blocks: 2a06:9f81:3700::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:50:00:12:69:35:0f:55:53:55:c7:36:90:3f:33:3b:0f:d0:d5:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:21 2026 GMT Not After : Jun 4 07:12:21 2027 GMT Subject: CN=8EFA47C8837F999B4C5FA5BDCA3FF29D82F2B6E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:09:70:32:8c:21:30:35:fc:dc:79:45:1d:00: c6:6f:4d:47:22:3d:df:2b:07:37:4b:84:3d:25:33: 8b:82:7b:de:07:e8:34:a0:5a:ec:3b:16:ac:d2:7b: 20:a5:90:ee:9d:4e:a3:57:d0:6f:6b:b1:33:de:85: 0f:14:55:8e:c2:fd:8a:66:c6:01:d1:60:57:03:76: 52:5b:b2:3b:1f:71:d2:c8:2e:da:04:d6:03:03:78: 2f:39:cf:aa:91:db:86:2b:d0:80:43:f0:2d:94:db: e8:ac:78:42:23:99:c8:14:f8:e4:3c:5b:11:da:7a: 19:89:c0:cc:c9:7e:a7:ce:cd:6d:16:3e:06:b2:35: 0e:28:ac:dd:52:4b:71:d8:03:8a:a8:da:3d:36:81: 75:da:9a:42:8a:3d:91:c2:94:2a:4a:f2:20:8e:f1: 1f:97:10:ac:5f:2b:b7:9a:3d:9c:fa:c8:8e:9a:e3: 6b:c8:b7:9a:25:00:7b:29:10:d3:61:09:57:58:a6: 78:f6:d5:ed:9e:07:88:4c:cb:0e:66:a2:80:26:91: 4d:22:cf:6a:c7:d6:f8:68:22:9d:16:56:45:d0:3f: 87:00:d9:db:f5:fc:d3:21:e8:68:29:f0:69:47:89: e0:c6:d3:0b:73:c2:14:b6:71:11:b9:c2:5b:29:d4: 72:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:FA:47:C8:83:7F:99:9B:4C:5F:A5:BD:CA:3F:F2:9D:82:F2:B6:E7 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215648.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:3700::/40 Signature Algorithm: sha256WithRSAEncryption b9:21:6f:00:26:0d:b3:9a:de:8c:8c:6d:c9:2f:96:23:23:79: 28:cc:7f:e0:43:ea:6a:e4:34:35:d0:d9:b3:de:14:d3:2f:53: 13:d2:7a:75:aa:02:c9:0b:f0:21:bb:45:5e:f3:bd:ba:4f:ed: b4:52:eb:cf:5f:c2:b9:36:c7:37:5b:60:a8:b4:d0:a7:ee:c4: 43:f6:5f:97:2c:d2:b5:46:9c:fe:c1:56:a0:9f:d3:87:ec:41: 94:84:ab:10:6b:b7:02:38:75:5a:72:49:c0:fd:44:f7:63:7a: 71:54:63:bd:9b:86:d8:6b:5b:bb:b0:46:02:e6:84:bf:5e:66: 96:d8:a7:84:44:31:12:fb:41:20:5e:e3:26:38:c4:5c:74:00: 21:01:37:ac:21:57:71:22:7f:36:1b:8c:f6:f5:21:c9:13:36: 7c:91:0d:f5:a3:e7:63:22:30:60:45:ce:44:30:70:df:88:8c: 65:ac:60:51:7a:04:c9:ac:4e:1e:c7:18:e0:c4:68:51:fe:76: 28:35:6c:23:fa:ce:69:90:e2:64:12:2d:d7:83:06:80:a6:50: 25:23:b2:b4:b4:40:ed:de:df:9f:68:32:b3:48:c1:7a:72:9e: 25:b3:05:c2:13:9a:b3:94:b6:e8:71:dc:d2:1b:9c:22:38:7c: b9:1f:31:08 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUIVAAEmk1D1VTVcc2kD8zOw/Q1XUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MjFaFw0yNzA2MDQwNzEyMjFaMDMxMTAvBgNV BAMTKDhFRkE0N0M4ODM3Rjk5OUI0QzVGQTVCRENBM0ZGMjlEODJGMkI2RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmCXAyjCEwNfzceUUdAMZvTUci Pd8rBzdLhD0lM4uCe94H6DSgWuw7FqzSeyClkO6dTqNX0G9rsTPehQ8UVY7C/Ypm xgHRYFcDdlJbsjsfcdLILtoE1gMDeC85z6qR24Yr0IBD8C2U2+iseEIjmcgU+OQ8 WxHaehmJwMzJfqfOzW0WPgayNQ4orN1SS3HYA4qo2j02gXXamkKKPZHClCpK8iCO 8R+XEKxfK7eaPZz6yI6a42vIt5olAHspENNhCVdYpnj21e2eB4hMyw5mooAmkU0i z2rH1vhoIp0WVkXQP4cA2dv1/NMh6Ggp8GlHieDG0wtzwhS2cRG5wlsp1HKNAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUjvpHyIN/mZtMX6W9yj/ynYLytucwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjE1NjQ4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgafgTcwDQYJKoZIhvcNAQELBQADggEBALkh bwAmDbOa3oyMbckvliMjeSjMf+BD6mrkNDXQ2bPeFNMvUxPSenWqAskL8CG7RV7z vbpP7bRS689fwrk2xzdbYKi00KfuxEP2X5cs0rVGnP7BVqCf04fsQZSEqxBrtwI4 dVpyScD9RPdjenFUY72bhthrW7uwRgLmhL9eZpbYp4REMRL7QSBe4yY4xFx0ACEB N6whV3EifzYbjPb1IckTNnyRDfWj52MiMGBFzkQwcN+IjGWsYFF6BMmsTh7HGODE aFH+dig1bCP6zmmQ4mQSLdeDBoCmUCUjsrS0QO3e359oMrNIwXpyniWzBcITmrOU tuhx3NIbnCI4fLkfMQg= -----END CERTIFICATE-----Generated at Sat Jun 13 09:10:53 2026 by rpki-client