$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216020.roa File: AS216020.roa (raw, json) Hash identifier: K8s3LBBKhLTOyGzi2CtayNrBXBSrBL07q0JscLwHHcM= Subject key identifier: 49:83:43:CE:2E:74:3D:6D:36:8D:81:8E:D6:1B:9D:7F:94:D2:44:86 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 781627D67D618E55DCD6A06C85724DB67EEBE7AF Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216020.roa Signing time: Fri 05 Jun 2026 07:12:34 +0000 ROA not before: Fri 05 Jun 2026 07:07:34 +0000 ROA not after: Fri 04 Jun 2027 07:12:34 +0000 asID: 216020 IP address blocks: 2a05:dfc1:c900::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:16:27:d6:7d:61:8e:55:dc:d6:a0:6c:85:72:4d:b6:7e:eb:e7:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:34 2026 GMT Not After : Jun 4 07:12:34 2027 GMT Subject: CN=498343CE2E743D6D368D818ED61B9D7F94D24486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7b:11:5a:5b:e8:a0:fe:0d:71:70:20:90:34: b4:03:d7:b1:cc:7d:66:11:58:fd:6e:a6:57:46:2a: 9a:71:06:4b:17:2b:65:f0:e1:19:0d:e8:55:ba:7b: 0e:7b:82:ab:44:e8:fe:59:e2:f1:c8:a4:ef:3f:da: 85:b0:2f:27:e2:ad:b8:34:28:c2:c5:23:af:24:2f: 6b:75:c6:dd:a1:27:01:ad:78:30:32:d6:5b:13:71: 35:40:0c:81:88:29:c8:94:7d:fa:65:d3:46:a8:92: 47:af:e2:24:26:bf:e1:50:15:d0:d9:4d:10:e9:d7: 1d:c4:cd:e4:35:03:9f:de:eb:7b:41:39:15:54:ce: d8:de:92:ee:cf:dc:14:3e:d3:71:b5:c2:cb:de:80: 43:42:1f:7b:06:05:70:56:f2:e5:4a:2f:f9:fd:fa: ae:f9:bb:cd:5b:c3:48:02:71:15:40:87:08:e8:e5: 20:eb:66:b2:c6:d3:67:53:aa:50:e0:7a:1f:23:d2: ca:cf:14:be:79:d0:81:c4:e8:fc:30:9f:a5:df:ab: 3b:0d:37:b3:7a:b4:08:62:c0:25:4b:03:5d:64:44: 2c:5a:eb:44:04:87:e4:c0:fd:de:7b:2a:41:1c:56: 07:39:19:1b:94:b1:f3:5a:c1:58:41:15:57:e1:ce: 21:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:83:43:CE:2E:74:3D:6D:36:8D:81:8E:D6:1B:9D:7F:94:D2:44:86 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216020.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:c900::/40 Signature Algorithm: sha256WithRSAEncryption ce:a1:c4:a0:45:c2:7c:47:6f:3a:55:83:b1:be:5d:14:07:19: 04:56:a2:23:aa:fc:e4:d2:09:2e:45:e0:46:63:f1:88:d9:23: 3e:a0:d8:b4:90:fa:bb:96:87:b3:1f:ec:cb:83:ea:88:f9:03: 0a:42:81:39:ac:1c:09:70:fc:5d:a5:e1:73:7c:d5:89:18:8a: d4:35:a0:ca:63:e2:e5:39:8a:08:3a:c4:41:4b:fd:3b:95:4c: e8:ce:e0:fa:76:cf:e9:cd:c0:de:9c:89:16:37:46:66:9c:90: 49:8f:a3:9a:bf:c3:66:ef:a2:9f:75:d1:a6:b9:a3:fb:08:83: 5e:9f:c4:3e:42:f8:52:11:4d:83:32:14:88:2e:31:e7:54:92: f1:21:c9:44:05:9d:ee:1f:da:65:b5:fa:68:32:2e:97:07:71: 5c:c4:9b:3b:72:2e:80:2e:49:5f:28:cd:79:0b:c4:c1:c3:5e: 63:01:c5:2b:fa:62:2d:8f:1e:be:02:1c:14:4d:09:06:9d:37: 18:42:a7:5c:7d:e1:dd:77:ae:a5:d9:9f:7f:7f:fb:4b:96:bc: 33:0b:70:c0:64:60:a7:01:d3:f0:25:bd:50:c2:13:14:d5:f4: 6e:3a:ec:d2:b9:c0:de:f3:8b:3a:b3:e4:a7:40:2f:38:16:71: 66:c3:67:30 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUeBYn1n1hjlXc1qBshXJNtn7r568wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MzRaFw0yNzA2MDQwNzEyMzRaMDMxMTAvBgNV BAMTKDQ5ODM0M0NFMkU3NDNENkQzNjhEODE4RUQ2MUI5RDdGOTREMjQ0ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNexFaW+ig/g1xcCCQNLQD17HM fWYRWP1upldGKppxBksXK2Xw4RkN6FW6ew57gqtE6P5Z4vHIpO8/2oWwLyfirbg0 KMLFI68kL2t1xt2hJwGteDAy1lsTcTVADIGIKciUffpl00aokkev4iQmv+FQFdDZ TRDp1x3EzeQ1A5/e63tBORVUztjeku7P3BQ+03G1wsvegENCH3sGBXBW8uVKL/n9 +q75u81bw0gCcRVAhwjo5SDrZrLG02dTqlDgeh8j0srPFL550IHE6Pwwn6XfqzsN N7N6tAhiwCVLA11kRCxa60QEh+TA/d57KkEcVgc5GRuUsfNawVhBFVfhziERAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUSYNDzi50PW02jYGO1hudf5TSRIYwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjE2MDIwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwckwDQYJKoZIhvcNAQELBQADggEBAM6h xKBFwnxHbzpVg7G+XRQHGQRWoiOq/OTSCS5F4EZj8YjZIz6g2LSQ+ruWh7Mf7MuD 6oj5AwpCgTmsHAlw/F2l4XN81YkYitQ1oMpj4uU5igg6xEFL/TuVTOjO4Pp2z+nN wN6ciRY3RmackEmPo5q/w2bvop910aa5o/sIg16fxD5C+FIRTYMyFIguMedUkvEh yUQFne4f2mW1+mgyLpcHcVzEmztyLoAuSV8ozXkLxMHDXmMBxSv6Yi2PHr4CHBRN CQadNxhCp1x94d13rqXZn39/+0uWvDMLcMBkYKcB0/AlvVDCExTV9G467NK5wN7z izqz5KdALzgWcWbDZzA= -----END CERTIFICATE-----Generated at Sat Jun 13 09:11:15 2026 by rpki-client