$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215843.roa File: AS215843.roa (raw, json) Hash identifier: pK+ptq3s0ioNiChEcbI5R62/ag1qQlPFO5utBMzt7LA= Subject key identifier: 2B:24:48:09:4F:CB:7A:69:C9:DA:A5:FB:82:FE:89:3A:5C:AD:51:6F Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 062D3D0F3AE52DD3B1551CB5B7993D21B41A5CC3 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215843.roa Signing time: Fri 05 Jun 2026 07:12:16 +0000 ROA not before: Fri 05 Jun 2026 07:07:16 +0000 ROA not after: Fri 04 Jun 2027 07:12:16 +0000 asID: 215843 IP address blocks: 2a06:9f81:3400::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:2d:3d:0f:3a:e5:2d:d3:b1:55:1c:b5:b7:99:3d:21:b4:1a:5c:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:16 2026 GMT Not After : Jun 4 07:12:16 2027 GMT Subject: CN=2B2448094FCB7A69C9DAA5FB82FE893A5CAD516F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1d:92:93:1b:77:0c:9c:55:3e:11:c9:e6:98: db:4a:22:d7:06:5b:4a:31:b1:e8:45:b6:f5:f4:dd: e7:b8:92:d2:e7:1d:b6:b5:cd:e1:25:32:2c:5d:04: 60:6f:57:99:1e:6c:c0:05:80:6c:8e:07:c8:19:55: ea:4a:63:2f:03:ca:47:ef:0d:9a:c6:99:e5:a1:3b: f1:78:df:dd:fa:ad:8a:57:45:05:d4:55:5e:dd:b7: db:0e:08:2a:92:52:29:2a:23:f0:96:fc:d4:9a:72: 3b:f4:51:e7:3d:4d:55:31:7a:4c:c1:80:1a:66:15: 07:37:68:d5:db:8d:70:7e:19:9a:fd:27:51:69:f3: d2:38:9c:a9:65:11:23:80:7f:68:c3:28:40:0e:ed: b6:6d:02:4b:37:d3:f0:cc:0b:56:48:29:ab:8a:61: f6:a8:60:58:97:0a:c5:d8:f0:c5:e8:10:02:a9:76: 9e:8c:0c:eb:d2:76:15:9f:67:b7:2c:25:ed:32:50: 28:5b:38:25:3b:13:b9:25:a6:43:02:ae:b9:51:89: 6f:25:4b:60:6e:52:9a:1e:9c:ff:17:19:17:cd:69: 2c:f7:75:ee:2a:e1:0b:b1:41:7f:60:44:0c:16:2a: df:af:9a:0d:37:d6:e2:c6:df:78:48:46:16:61:da: c4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:24:48:09:4F:CB:7A:69:C9:DA:A5:FB:82:FE:89:3A:5C:AD:51:6F X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215843.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:3400::/40 Signature Algorithm: sha256WithRSAEncryption 21:d2:c0:c9:18:ab:47:bd:29:77:1d:d2:0c:f2:37:29:da:27: 1d:b4:cd:c6:85:d5:c2:6a:07:28:02:8d:70:d8:54:49:d4:0d: 2e:10:f1:c1:3f:bc:b7:a4:c2:76:f7:f2:a0:42:e8:0a:e2:8c: ab:d7:46:1f:ea:fa:37:a9:04:8d:98:b2:db:39:c4:64:7e:71: 98:b8:f3:e5:5e:de:6b:e3:9c:81:df:30:40:41:c1:87:9b:c9: 7d:b6:30:99:6b:64:41:69:6a:b4:e0:cb:00:14:65:5a:1b:3f: 33:74:bd:b5:ad:f1:12:7f:b1:4e:7e:1e:d5:8f:00:9d:e4:23: 76:51:13:81:17:7b:c5:d9:2b:88:96:84:08:96:3b:5e:30:88: 35:d7:c3:11:36:57:f7:6b:77:de:4f:92:79:f7:03:1e:5b:45: ce:d3:ad:ec:61:5d:50:55:a7:99:86:21:7f:1a:a5:57:d7:40: c9:cb:36:72:b3:71:86:bd:5e:55:31:3f:5b:da:5b:4b:2c:38: cd:8f:ae:79:a1:c9:4c:cf:6b:a6:fa:39:fc:70:21:3a:15:56: f2:32:58:45:65:4f:a4:90:1c:7a:d5:15:27:06:0e:b6:c7:66: ee:47:ca:61:2d:e2:f1:f2:e7:cb:2a:df:a7:b7:e6:48:d9:9e: f5:26:e6:24 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUBi09DzrlLdOxVRy1t5k9IbQaXMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MTZaFw0yNzA2MDQwNzEyMTZaMDMxMTAvBgNV BAMTKDJCMjQ0ODA5NEZDQjdBNjlDOURBQTVGQjgyRkU4OTNBNUNBRDUxNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9HZKTG3cMnFU+EcnmmNtKItcG W0oxsehFtvX03ee4ktLnHba1zeElMixdBGBvV5kebMAFgGyOB8gZVepKYy8Dykfv DZrGmeWhO/F43936rYpXRQXUVV7dt9sOCCqSUikqI/CW/NSacjv0Uec9TVUxekzB gBpmFQc3aNXbjXB+GZr9J1Fp89I4nKllESOAf2jDKEAO7bZtAks30/DMC1ZIKauK YfaoYFiXCsXY8MXoEAKpdp6MDOvSdhWfZ7csJe0yUChbOCU7E7klpkMCrrlRiW8l S2BuUpoenP8XGRfNaSz3de4q4QuxQX9gRAwWKt+vmg031uLG33hIRhZh2sQlAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUKyRICU/LemnJ2qX7gv6JOlytUW8wHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjE1ODQzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgafgTQwDQYJKoZIhvcNAQELBQADggEBACHS wMkYq0e9KXcd0gzyNynaJx20zcaF1cJqBygCjXDYVEnUDS4Q8cE/vLekwnb38qBC 6ArijKvXRh/q+jepBI2Ysts5xGR+cZi48+Ve3mvjnIHfMEBBwYebyX22MJlrZEFp arTgywAUZVobPzN0vbWt8RJ/sU5+HtWPAJ3kI3ZRE4EXe8XZK4iWhAiWO14wiDXX wxE2V/drd95Pknn3Ax5bRc7TrexhXVBVp5mGIX8apVfXQMnLNnKzcYa9XlUxP1va W0ssOM2PrnmhyUzPa6b6OfxwIToVVvIyWEVlT6SQHHrVFScGDrbHZu5HymEt4vHy 58sq36e35kjZnvUm5iQ= -----END CERTIFICATE-----Generated at Sat Jun 13 09:11:25 2026 by rpki-client