$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215917.roa File: AS215917.roa (raw, json) Hash identifier: gqhIdYVOcD/b4KlVPqMQ0WA2TxfDhbr0TiSCv9DirW8= Subject key identifier: EF:07:DD:EA:5A:EA:81:A0:39:A5:AC:04:5D:A8:F2:CA:E9:E3:D3:66 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 550C7C8860DAC94A68B3F61C4AACA0BA27A5FA56 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215917.roa Signing time: Fri 05 Jun 2026 07:12:49 +0000 ROA not before: Fri 05 Jun 2026 07:07:49 +0000 ROA not after: Fri 04 Jun 2027 07:12:49 +0000 asID: 215917 IP address blocks: 2a06:9f81:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:0c:7c:88:60:da:c9:4a:68:b3:f6:1c:4a:ac:a0:ba:27:a5:fa:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:49 2026 GMT Not After : Jun 4 07:12:49 2027 GMT Subject: CN=EF07DDEA5AEA81A039A5AC045DA8F2CAE9E3D366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:39:d4:5e:72:44:38:4e:49:46:c9:99:cd:71: 11:dd:d4:72:6e:57:89:d7:53:ba:ee:31:bb:6f:77: 57:f4:36:8d:d6:bd:9f:61:0c:e9:23:9c:41:7b:61: dd:89:6c:e7:e1:7c:51:2d:a7:d8:27:d0:2a:27:b4: 43:bd:e0:9b:16:b8:46:0e:61:05:02:3e:37:f7:f6: 01:6d:39:9b:b8:79:c9:e7:e9:a1:b4:d1:47:53:c3: 29:da:dc:8d:96:98:e1:6f:36:f1:0e:b8:3b:49:0f: 53:f1:43:89:ea:7e:e7:17:6a:e0:a6:9b:cc:58:2c: 9f:95:b0:cf:c3:55:b0:df:15:80:a5:37:a2:94:72: 39:11:e3:45:ad:6d:bb:c6:55:4a:3a:68:90:09:71: 73:f4:44:1a:15:73:e3:d7:06:95:9d:7f:5d:c3:0e: ca:1d:63:bf:79:36:bb:49:e5:47:8c:fd:71:c3:32: f4:cc:3d:31:ae:01:ca:a5:a1:35:7b:48:cc:f3:ff: 8a:c7:9d:57:80:06:05:d0:65:1e:01:45:cc:36:2d: 00:3c:d5:f8:a6:e0:83:87:75:c7:d0:73:27:82:90: 40:1f:87:d2:18:f4:24:fc:61:e3:16:b2:00:4a:57: 96:0a:df:60:f4:ef:37:6b:10:46:bc:c2:5f:61:af: a4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:07:DD:EA:5A:EA:81:A0:39:A5:AC:04:5D:A8:F2:CA:E9:E3:D3:66 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215917.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:2800::/40 Signature Algorithm: sha256WithRSAEncryption 89:2f:46:69:7a:15:61:60:29:79:a8:f1:89:2c:be:2b:58:2a: 1b:89:c0:1f:8f:40:48:ce:05:72:f5:3e:93:7f:84:cf:a1:fe: f7:d7:1c:92:85:d1:ed:e2:1f:82:7c:9c:47:76:24:5f:df:5e: 68:52:06:78:2d:a5:93:85:c9:df:da:c9:cb:61:f4:c4:ed:e6: c0:cd:8c:e1:77:26:e6:9c:a4:b6:63:f4:6e:1c:87:ed:71:ce: 63:5f:5f:68:15:a0:0c:70:0e:66:cc:66:bd:cf:e4:5b:be:7a: 40:0a:32:6f:c1:da:91:1a:b6:47:dc:21:57:4b:ad:c5:79:79: b4:00:96:9e:f0:cb:45:5b:9c:66:25:29:a8:53:a1:d9:0e:34: ff:b5:99:68:83:fc:80:bb:f1:f3:44:ed:3d:c4:b8:aa:40:9a: 45:ef:c9:ad:82:27:20:6a:11:7b:5f:87:94:38:fe:b4:86:b1: 7b:a9:56:f0:22:d5:a7:42:d6:58:98:b2:40:24:0f:67:13:47: 40:32:55:fe:2f:80:44:73:39:26:6e:67:d7:e6:bd:af:65:42: 55:19:19:30:a5:a1:82:c3:8b:8b:ad:7b:f4:ac:54:0c:e9:30: 76:57:af:f0:d2:48:ed:1a:61:36:db:a2:61:4a:c5:7c:bf:bf: 52:34:62:88 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUVQx8iGDayUpos/YcSqyguiel+lYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3NDlaFw0yNzA2MDQwNzEyNDlaMDMxMTAvBgNV BAMTKEVGMDdEREVBNUFFQTgxQTAzOUE1QUMwNDVEQThGMkNBRTlFM0QzNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7OdReckQ4TklGyZnNcRHd1HJu V4nXU7ruMbtvd1f0No3WvZ9hDOkjnEF7Yd2JbOfhfFEtp9gn0ContEO94JsWuEYO YQUCPjf39gFtOZu4ecnn6aG00UdTwyna3I2WmOFvNvEOuDtJD1PxQ4nqfucXauCm m8xYLJ+VsM/DVbDfFYClN6KUcjkR40WtbbvGVUo6aJAJcXP0RBoVc+PXBpWdf13D DsodY795NrtJ5UeM/XHDMvTMPTGuAcqloTV7SMzz/4rHnVeABgXQZR4BRcw2LQA8 1fim4IOHdcfQcyeCkEAfh9IY9CT8YeMWsgBKV5YK32D07zdrEEa8wl9hr6QhAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU7wfd6lrqgaA5pawEXajyyunj02YwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjE1OTE3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgafgSgwDQYJKoZIhvcNAQELBQADggEBAIkv Rml6FWFgKXmo8YksvitYKhuJwB+PQEjOBXL1PpN/hM+h/vfXHJKF0e3iH4J8nEd2 JF/fXmhSBngtpZOFyd/aycth9MTt5sDNjOF3JuacpLZj9G4ch+1xzmNfX2gVoAxw DmbMZr3P5Fu+ekAKMm/B2pEatkfcIVdLrcV5ebQAlp7wy0VbnGYlKahTodkONP+1 mWiD/IC78fNE7T3EuKpAmkXvya2CJyBqEXtfh5Q4/rSGsXupVvAi1adC1liYskAk D2cTR0AyVf4vgERzOSZuZ9fmva9lQlUZGTCloYLDi4ute/SsVAzpMHZXr/DSSO0a YTbbomFKxXy/v1I0Yog= -----END CERTIFICATE-----Generated at Sat Jun 13 09:10:25 2026 by rpki-client