$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216087.roa File: AS216087.roa (raw, json) Hash identifier: Ui30N9dno9pDR578aEjHDccV/6PNWhFXM9c/ohal/g8= Subject key identifier: 84:AC:F2:F7:E8:B8:74:5A:E3:6B:0A:38:44:25:FA:F3:E5:AE:3B:A4 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 48AB0D30A81728D37DC9658A6B0E85D6CED6405F Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216087.roa Signing time: Fri 05 Jun 2026 07:12:14 +0000 ROA not before: Fri 05 Jun 2026 07:07:14 +0000 ROA not after: Fri 04 Jun 2027 07:12:14 +0000 asID: 216087 IP address blocks: 2a05:dfc1:c200::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ab:0d:30:a8:17:28:d3:7d:c9:65:8a:6b:0e:85:d6:ce:d6:40:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:14 2026 GMT Not After : Jun 4 07:12:14 2027 GMT Subject: CN=84ACF2F7E8B8745AE36B0A384425FAF3E5AE3BA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:70:ab:17:c5:ef:d1:a0:68:60:8a:8e:87:18: 2d:77:3e:43:7b:1b:d5:cc:8f:6d:80:36:3a:e0:33: ce:a5:30:ce:15:c3:f8:f0:44:f8:95:3c:97:bf:db: 81:31:88:bf:de:6d:d2:b2:b9:fb:7c:c7:09:34:97: 0c:19:2e:23:e5:6c:e1:8c:41:2a:b5:37:5d:a6:ab: 92:5d:44:55:f7:f1:e3:75:79:6e:ba:51:65:99:ec: 18:a1:da:31:7c:d5:1d:53:b9:c3:77:58:26:ba:e6: 55:2b:47:65:9f:1c:a5:84:0b:34:08:2f:ce:63:c3: fd:40:1b:f8:29:35:a0:9c:9e:85:76:48:68:9d:55: 14:5d:c3:59:1f:d8:78:2c:40:c5:39:b3:a8:35:ec: 0b:c4:35:3c:d5:8f:5b:2c:ca:38:ee:ec:74:7d:1a: de:c7:95:d1:1f:24:16:f6:00:b8:a9:69:d7:71:c8: c8:ae:1d:e9:25:9b:4d:05:d2:f8:1b:82:74:ad:de: 77:6b:ca:dd:79:56:4a:19:1e:94:70:d6:96:4c:3f: 2b:18:39:f0:9c:14:5a:a9:a5:22:7d:3b:e1:a2:59: 82:8b:1a:93:dc:93:d0:c1:f1:56:f4:f8:7f:c0:ad: 99:7f:49:3f:dc:71:33:28:47:4f:1e:dc:c0:85:f8: 99:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AC:F2:F7:E8:B8:74:5A:E3:6B:0A:38:44:25:FA:F3:E5:AE:3B:A4 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216087.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:c200::/40 Signature Algorithm: sha256WithRSAEncryption 2a:8e:69:d4:c3:a2:aa:c2:b4:f2:73:8f:a5:fe:c7:01:8b:6a: 73:be:cd:07:b1:78:f3:03:eb:2f:18:ce:e1:56:74:23:9b:ad: 02:a8:2b:19:dd:44:d6:fa:be:f8:25:32:fb:23:b2:c8:d5:b2: f4:75:aa:d8:f1:e2:16:d0:f6:a8:81:ec:a1:ca:77:38:09:6e: 6d:94:df:8e:b0:f3:2b:0d:03:46:5c:db:2d:0c:cc:59:70:32: 3e:b0:c6:62:3d:c7:66:de:e4:d8:74:e1:4c:76:d4:48:5b:aa: 68:f9:21:7c:0d:a2:49:bc:9b:ce:1e:0c:14:db:82:48:f5:00: 18:c9:da:3a:ba:15:56:b0:d5:2e:e4:ac:35:3d:e2:88:f4:5c: 12:9f:ce:46:0f:d7:f8:1d:69:15:f0:51:98:d5:64:a3:ee:9a: 28:b4:b1:2e:9b:f5:03:28:40:83:ef:45:82:d0:18:a7:d7:55: 38:af:28:58:1b:36:63:07:e1:3d:27:8b:31:54:f5:4d:b6:02: 44:ae:66:aa:3e:50:9e:98:40:e1:4d:4f:c2:4d:a3:1a:cc:09: fa:60:76:bc:d8:36:eb:68:b0:4e:9e:ac:a5:47:51:2e:08:40: 13:9c:b5:2f:d0:18:7d:0e:a5:93:53:29:2e:0a:f1:87:ce:59: 86:72:68:b9 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUSKsNMKgXKNN9yWWKaw6F1s7WQF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MTRaFw0yNzA2MDQwNzEyMTRaMDMxMTAvBgNV BAMTKDg0QUNGMkY3RThCODc0NUFFMzZCMEEzODQ0MjVGQUYzRTVBRTNCQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZcKsXxe/RoGhgio6HGC13PkN7 G9XMj22ANjrgM86lMM4Vw/jwRPiVPJe/24ExiL/ebdKyuft8xwk0lwwZLiPlbOGM QSq1N12mq5JdRFX38eN1eW66UWWZ7Bih2jF81R1TucN3WCa65lUrR2WfHKWECzQI L85jw/1AG/gpNaCcnoV2SGidVRRdw1kf2HgsQMU5s6g17AvENTzVj1ssyjju7HR9 Gt7HldEfJBb2ALipaddxyMiuHeklm00F0vgbgnSt3ndryt15VkoZHpRw1pZMPysY OfCcFFqppSJ9O+GiWYKLGpPck9DB8Vb0+H/ArZl/ST/ccTMoR08e3MCF+JnpAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUhKzy9+i4dFrjawo4RCX68+WuO6QwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjE2MDg3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwcIwDQYJKoZIhvcNAQELBQADggEBACqO adTDoqrCtPJzj6X+xwGLanO+zQexePMD6y8YzuFWdCObrQKoKxndRNb6vvglMvsj ssjVsvR1qtjx4hbQ9qiB7KHKdzgJbm2U346w8ysNA0Zc2y0MzFlwMj6wxmI9x2be 5Nh04Ux21Ehbqmj5IXwNokm8m84eDBTbgkj1ABjJ2jq6FVaw1S7krDU94oj0XBKf zkYP1/gdaRXwUZjVZKPumii0sS6b9QMoQIPvRYLQGKfXVTivKFgbNmMH4T0nizFU 9U22AkSuZqo+UJ6YQOFNT8JNoxrMCfpgdrzYNutosE6erKVHUS4IQBOctS/QGH0O pZNTKS4K8YfOWYZyaLk= -----END CERTIFICATE-----Generated at Sat Jun 13 09:11:50 2026 by rpki-client