$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215917.roa File: AS215917.roa (raw, json) Hash identifier: mtqR04lXvJo0Nc7DGn2SUExmRU/tM1ptyg16+/wHqu0= Subject key identifier: C8:78:52:52:DC:61:D6:FB:E2:80:AC:A3:A2:7E:85:7A:6C:AF:1C:5B Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 05A54B8B7770F73A88619B6716A366FA4C0C18EE Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215917.roa Signing time: Fri 04 Jul 2025 06:52:54 +0000 ROA not before: Fri 04 Jul 2025 06:47:54 +0000 ROA not after: Fri 03 Jul 2026 06:52:54 +0000 asID: 215917 IP address blocks: 2a06:9f81:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:a5:4b:8b:77:70:f7:3a:88:61:9b:67:16:a3:66:fa:4c:0c:18:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:47:54 2025 GMT Not After : Jul 3 06:52:54 2026 GMT Subject: CN=C8785252DC61D6FBE280ACA3A27E857A6CAF1C5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f6:97:04:3c:8f:3d:be:18:bf:01:25:ae:83: 8e:ee:47:64:72:ad:31:93:bb:87:dc:a7:0e:16:cd: 5a:21:ca:e7:60:7f:eb:04:ef:89:99:03:a9:e0:2f: c5:02:fd:18:74:23:4c:3b:d6:c1:be:9a:b4:66:d8: 74:4d:f0:c7:3d:ac:e1:f4:6c:86:63:44:1e:ff:8e: 18:dc:1c:79:22:f7:20:1a:5c:5a:08:6b:40:a0:c5: 4e:8c:42:a7:b8:b2:4c:96:23:06:13:4b:5e:70:f2: 75:af:1b:40:57:7f:29:aa:91:98:ab:e0:86:b6:1d: af:d4:98:a3:d5:a2:79:7c:66:92:c7:71:8e:a8:17: d5:d6:38:02:75:e5:98:81:9b:0f:33:dd:b5:1c:d5: 56:73:ac:86:ee:7e:58:06:7b:50:13:be:36:87:d2: 7d:be:f9:4c:30:ba:82:e4:34:63:6f:90:c6:c4:da: d2:b8:84:69:67:bd:b0:49:8c:99:16:5a:bf:66:3a: 7d:bf:9b:c3:61:b7:a1:50:2c:33:4a:31:57:80:a0: de:90:3d:c0:f3:62:14:98:8b:07:37:b0:3b:6c:f9: c0:e8:8b:bc:a8:71:fd:0a:dd:f2:26:b4:01:29:27: d1:0f:1c:73:74:fa:70:9f:4f:48:a0:c2:b0:16:52: 3d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:78:52:52:DC:61:D6:FB:E2:80:AC:A3:A2:7E:85:7A:6C:AF:1C:5B X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215917.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:2800::/40 Signature Algorithm: sha256WithRSAEncryption 18:96:1c:f1:00:29:36:07:ce:8b:36:4e:fd:5a:bb:f1:41:4d: 9e:0f:a4:50:45:d8:f8:8b:35:17:6b:a2:0f:7d:6b:7e:65:dd: c1:21:dd:31:63:9c:3f:aa:77:52:ce:7a:57:d3:4c:66:76:77: 98:07:63:81:f8:62:e8:38:9e:6d:cf:a3:ab:43:63:8b:93:e6: 02:8c:30:57:4a:67:59:59:44:01:c7:df:e0:2c:e8:92:7e:91: e4:4b:a2:0e:64:f8:c6:bb:37:4f:bf:ca:d1:8a:5e:72:3d:09: 23:dd:93:b4:4e:bf:54:2c:6b:e8:c5:a0:82:31:ae:69:77:2b: dc:41:c0:79:af:12:21:b1:b2:6e:f0:c3:15:3b:1b:d1:a9:d3: 96:04:56:5f:51:95:61:a4:4a:2f:e3:b9:9b:27:da:9f:11:19: 36:be:b0:9b:46:8f:e7:ba:38:60:e7:85:8a:1e:3b:3c:33:6c: 9d:90:75:1b:b4:ba:40:4d:f6:1c:6a:17:be:e4:15:40:d5:ea: dc:bd:d7:93:98:4c:6c:0b:6f:1b:45:a0:13:91:2b:8e:ca:0d: 9c:b6:ff:1d:0e:cd:58:b9:6e:57:33:6e:40:a4:7f:44:58:94: e0:7f:52:ef:ef:4c:03:b3:14:aa:98:23:c9:f8:93:2d:16:0d: c7:71:f8:59 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUBaVLi3dw9zqIYZtnFqNm+kwMGO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ3NTRaFw0yNjA3MDMwNjUyNTRaMDMxMTAvBgNV BAMTKEM4Nzg1MjUyREM2MUQ2RkJFMjgwQUNBM0EyN0U4NTdBNkNBRjFDNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ9pcEPI89vhi/ASWug47uR2Ry rTGTu4fcpw4WzVohyudgf+sE74mZA6ngL8UC/Rh0I0w71sG+mrRm2HRN8Mc9rOH0 bIZjRB7/jhjcHHki9yAaXFoIa0CgxU6MQqe4skyWIwYTS15w8nWvG0BXfymqkZir 4Ia2Ha/UmKPVonl8ZpLHcY6oF9XWOAJ15ZiBmw8z3bUc1VZzrIbuflgGe1ATvjaH 0n2++UwwuoLkNGNvkMbE2tK4hGlnvbBJjJkWWr9mOn2/m8Nht6FQLDNKMVeAoN6Q PcDzYhSYiwc3sDts+cDoi7yocf0K3fImtAEpJ9EPHHN0+nCfT0igwrAWUj2FAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUyHhSUtxh1vvigKyjon6FemyvHFswHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjE1OTE3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgafgSgwDQYJKoZIhvcNAQELBQADggEBABiW HPEAKTYHzos2Tv1au/FBTZ4PpFBF2PiLNRdrog99a35l3cEh3TFjnD+qd1LOelfT TGZ2d5gHY4H4Yug4nm3Po6tDY4uT5gKMMFdKZ1lZRAHH3+As6JJ+keRLog5k+Ma7 N0+/ytGKXnI9CSPdk7ROv1Qsa+jFoIIxrml3K9xBwHmvEiGxsm7wwxU7G9Gp05YE Vl9RlWGkSi/juZsn2p8RGTa+sJtGj+e6OGDnhYoeOzwzbJ2QdRu0ukBN9hxqF77k FUDV6ty915OYTGwLbxtFoBORK47KDZy2/x0OzVi5blczbkCkf0RYlOB/Uu/vTAOz FKqYI8n4ky0WDcdx+Fk= -----END CERTIFICATE-----Generated at Wed Nov 5 08:43:53 2025 by rpki-client