$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216124.roa File: AS216124.roa (raw, json) Hash identifier: Z3XfHOoEJBmUCTeaETCjZt6G7y6bK1ZXknzuDuxwl0Q= Subject key identifier: 69:01:2E:5B:F3:D4:BD:11:D0:B4:B6:2C:09:37:8D:9D:15:CC:D0:3F Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 39A70E08DB085457359591C6E67C5D790D000B5F Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216124.roa Signing time: Fri 05 Jun 2026 07:12:36 +0000 ROA not before: Fri 05 Jun 2026 07:07:36 +0000 ROA not after: Fri 04 Jun 2027 07:12:36 +0000 asID: 216124 IP address blocks: 2a05:dfc1:aa00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:a7:0e:08:db:08:54:57:35:95:91:c6:e6:7c:5d:79:0d:00:0b:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:36 2026 GMT Not After : Jun 4 07:12:36 2027 GMT Subject: CN=69012E5BF3D4BD11D0B4B62C09378D9D15CCD03F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8f:bf:28:21:36:d9:cb:74:a8:98:fa:1f:f0: 28:66:b1:1f:b0:f0:3e:6b:66:2e:f3:5e:cc:23:68: 69:ca:78:9e:47:8e:d0:3f:d6:5d:0e:78:f3:60:af: e8:3d:d0:6a:02:b9:b0:44:93:cc:ea:2d:87:26:f9: aa:fc:31:5c:24:09:27:9a:b4:42:29:f5:03:fd:b6: fa:f6:4a:23:e1:fd:3a:0d:a8:f1:97:b9:73:1c:2d: f7:8d:dd:7d:ed:70:a1:a8:e3:1a:fa:c9:dd:56:ef: 86:65:2d:87:4a:00:fd:ca:22:44:bf:d9:52:5c:0d: 4c:b3:7f:bb:5e:30:cc:86:79:7e:b8:8b:77:c2:72: c9:21:97:b9:01:b0:23:f1:53:ff:c9:f2:6d:9c:08: f1:32:a2:ae:b5:36:ce:27:05:23:a7:f3:e3:28:87: ba:dc:ec:b4:6e:86:39:a6:54:ca:d4:f6:cb:99:fe: 0f:90:6a:39:56:34:92:dd:d6:c8:5c:bc:f0:86:a1: e5:7d:89:08:f6:44:d0:13:29:8f:e2:78:2a:38:e5: 51:3f:12:48:03:13:39:ec:2b:c8:ae:93:ca:cd:c3: 84:59:2d:e3:b1:99:1c:a8:50:71:42:0c:9c:19:63: 25:33:fd:2c:60:f9:2f:d8:86:3a:8f:0c:17:d4:42: 03:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:01:2E:5B:F3:D4:BD:11:D0:B4:B6:2C:09:37:8D:9D:15:CC:D0:3F X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216124.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:aa00::/40 Signature Algorithm: sha256WithRSAEncryption a1:9c:60:e6:18:70:ac:57:48:fd:05:b2:58:b9:da:b5:03:8d: 1f:8f:55:69:b0:34:94:98:12:2a:9f:35:e9:09:59:17:eb:38: d5:e7:cd:cf:14:c0:36:34:76:9d:28:1f:7c:ae:06:74:3c:1c: 07:d0:ba:30:16:d4:24:32:9a:f3:f8:ca:b5:9d:c9:70:78:a5: e7:05:cc:07:d9:01:a8:b6:5e:e5:4a:c3:a9:0d:3a:14:b2:dd: 2b:6e:4e:33:a3:0a:2c:ed:f7:cc:b5:e0:86:26:fd:1e:b7:c6: 3b:1b:98:98:a5:ee:36:35:4f:73:17:04:d1:b9:85:64:c2:ce: 70:d7:0c:a3:60:87:71:02:04:be:53:2f:ae:95:39:e9:3d:6b: 4a:ae:21:b4:dd:a9:36:34:77:8e:14:49:01:e3:dc:21:c3:d4: d0:41:4b:bd:82:ec:81:4e:3e:d2:b9:39:40:31:78:94:9c:e3: 2b:b6:f5:0e:bc:e5:5d:24:8b:83:1d:8f:3a:68:fa:77:cc:5b: 05:a8:70:50:8f:09:f5:14:97:b9:31:54:8f:90:e6:33:b7:02: 31:8e:4a:45:1e:41:3c:6f:24:3a:34:b5:9d:a0:5e:e5:b4:a2: 3d:c6:28:3c:dd:10:d8:d1:b4:71:1f:54:16:8e:82:37:69:17: da:eb:11:a8 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUOacOCNsIVFc1lZHG5nxdeQ0AC18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MzZaFw0yNzA2MDQwNzEyMzZaMDMxMTAvBgNV BAMTKDY5MDEyRTVCRjNENEJEMTFEMEI0QjYyQzA5Mzc4RDlEMTVDQ0QwM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/j78oITbZy3SomPof8ChmsR+w 8D5rZi7zXswjaGnKeJ5HjtA/1l0OePNgr+g90GoCubBEk8zqLYcm+ar8MVwkCSea tEIp9QP9tvr2SiPh/ToNqPGXuXMcLfeN3X3tcKGo4xr6yd1W74ZlLYdKAP3KIkS/ 2VJcDUyzf7teMMyGeX64i3fCcskhl7kBsCPxU//J8m2cCPEyoq61Ns4nBSOn8+Mo h7rc7LRuhjmmVMrU9suZ/g+QajlWNJLd1shcvPCGoeV9iQj2RNATKY/ieCo45VE/ EkgDEznsK8iuk8rNw4RZLeOxmRyoUHFCDJwZYyUz/Sxg+S/YhjqPDBfUQgM7AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUaQEuW/PUvRHQtLYsCTeNnRXM0D8wHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjE2MTI0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwaowDQYJKoZIhvcNAQELBQADggEBAKGc YOYYcKxXSP0Fsli52rUDjR+PVWmwNJSYEiqfNekJWRfrONXnzc8UwDY0dp0oH3yu BnQ8HAfQujAW1CQymvP4yrWdyXB4pecFzAfZAai2XuVKw6kNOhSy3StuTjOjCizt 98y14IYm/R63xjsbmJil7jY1T3MXBNG5hWTCznDXDKNgh3ECBL5TL66VOek9a0qu IbTdqTY0d44USQHj3CHD1NBBS72C7IFOPtK5OUAxeJSc4yu29Q685V0ki4Mdjzpo +nfMWwWocFCPCfUUl7kxVI+Q5jO3AjGOSkUeQTxvJDo0tZ2gXuW0oj3GKDzdENjR tHEfVBaOgjdpF9rrEag= -----END CERTIFICATE-----Generated at Sat Jun 13 09:11:50 2026 by rpki-client