$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216369.roa File: AS216369.roa (raw, json) Hash identifier: 28LbPDpkUIvo0aSsu6DqH4L4R4CFtjgt3bDnZPGvm7o= Subject key identifier: D4:BB:86:C5:18:16:82:11:BC:98:86:D3:A3:70:41:9A:CF:89:27:6F Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 2FCB577F5A903F87263BB26E6D796525003F7AE1 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216369.roa Signing time: Fri 04 Jul 2025 06:53:00 +0000 ROA not before: Fri 04 Jul 2025 06:48:00 +0000 ROA not after: Fri 03 Jul 2026 06:53:00 +0000 asID: 216369 IP address blocks: 2a05:dfc1:d100::/40 maxlen: 48 2a06:9f81:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:cb:57:7f:5a:90:3f:87:26:3b:b2:6e:6d:79:65:25:00:3f:7a:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:00 2025 GMT Not After : Jul 3 06:53:00 2026 GMT Subject: CN=D4BB86C518168211BC9886D3A370419ACF89276F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8a:58:3f:ad:2c:58:fa:2f:ea:78:9e:52:14: f3:78:70:5b:21:76:d3:20:a9:75:34:c8:6c:17:b9: 5a:df:4a:2e:94:ed:3e:4e:c3:f9:b4:10:1b:71:5b: 9d:2e:7a:29:0b:bb:d7:ec:21:ed:64:ac:1d:7e:a8: 14:f9:ba:6b:b7:01:2f:60:9d:e0:28:80:c0:e5:02: 5c:0c:41:a4:ea:9f:8d:00:8a:b0:74:55:92:f4:22: 27:7c:d0:cb:93:18:cb:ba:06:04:d4:ca:69:90:5e: e2:fa:62:8c:24:e6:32:d7:29:eb:e9:cb:34:74:66: 33:49:11:8d:da:1b:7c:6f:30:a3:0c:29:be:3a:e6: 86:cb:7f:e3:f2:09:13:1a:d6:b1:d4:67:09:44:4f: 13:c6:f8:e5:5e:50:6f:2b:f1:03:df:9c:66:1a:14: e5:28:3b:c5:dc:e2:0e:50:78:24:7a:ae:58:1f:af: 68:4c:d0:4f:72:99:33:8a:70:05:a9:77:20:ba:dc: 56:2f:2a:7d:c7:93:59:24:1b:48:0d:d0:51:b1:bc: 86:16:d0:ad:0a:de:0b:91:49:ee:b6:88:55:6e:e2: 3c:f5:e4:50:12:8c:19:5f:82:9e:95:7d:bc:a4:12: 19:99:b7:8a:fa:b2:6d:6c:30:e4:e8:60:66:ef:28: e4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:BB:86:C5:18:16:82:11:BC:98:86:D3:A3:70:41:9A:CF:89:27:6F X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216369.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:d100::/40 2a06:9f81:1000::/40 Signature Algorithm: sha256WithRSAEncryption 96:3c:15:23:d1:66:71:dc:e6:0a:b2:fe:2a:e5:0b:fa:e6:16: 03:0a:8e:9c:d8:6a:df:00:d7:88:35:bf:37:f0:de:88:ef:2f: d4:bd:cc:95:35:43:1c:6d:0e:04:5e:1b:27:63:8b:7b:45:fa: bc:da:1c:41:9c:77:a4:53:ce:b2:ec:15:6a:5f:d9:1b:6d:a8: 52:7c:f0:1d:93:b1:53:ee:21:e9:4b:dc:df:1e:53:87:89:e9: b9:28:b8:de:7f:fc:d6:64:e8:66:18:42:b9:df:9b:0a:0f:28: aa:9e:b1:9a:d3:9f:47:b2:c3:8d:db:89:79:74:67:17:76:51: 3d:0c:33:40:68:b9:d1:fa:0f:06:c4:db:f5:ca:f8:91:25:86: 0e:9b:d9:de:e0:50:4b:82:76:c3:8c:c2:02:ad:d7:13:1f:f5: 3b:d2:3a:e5:17:59:7b:98:04:4a:af:0a:0a:42:fb:82:49:06: cd:77:ff:9f:23:51:e8:dc:50:3e:54:d5:73:d4:74:29:a1:6e: 3a:a9:89:e2:73:1f:74:e7:16:43:8c:35:7c:be:5f:b4:d1:e9: ef:b1:d9:2d:6f:b3:ae:fa:e1:14:2a:10:d7:3e:20:73:ec:45: a7:35:fe:17:94:bd:77:af:9c:8b:fb:c1:d4:f3:7d:be:0b:73: d9:cb:fe:c4 -----BEGIN CERTIFICATE----- MIIE8jCCA9qgAwIBAgIUL8tXf1qQP4cmO7JubXllJQA/euEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MDBaFw0yNjA3MDMwNjUzMDBaMDMxMTAvBgNV BAMTKEQ0QkI4NkM1MTgxNjgyMTFCQzk4ODZEM0EzNzA0MTlBQ0Y4OTI3NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFilg/rSxY+i/qeJ5SFPN4cFsh dtMgqXU0yGwXuVrfSi6U7T5Ow/m0EBtxW50ueikLu9fsIe1krB1+qBT5umu3AS9g neAogMDlAlwMQaTqn40AirB0VZL0Iid80MuTGMu6BgTUymmQXuL6Yowk5jLXKevp yzR0ZjNJEY3aG3xvMKMMKb465obLf+PyCRMa1rHUZwlETxPG+OVeUG8r8QPfnGYa FOUoO8Xc4g5QeCR6rlgfr2hM0E9ymTOKcAWpdyC63FYvKn3Hk1kkG0gN0FGxvIYW 0K0K3guRSe62iFVu4jz15FASjBlfgp6VfbykEhmZt4r6sm1sMOToYGbvKOQ5AgMB AAGjggH8MIIB+DAdBgNVHQ4EFgQU1LuGxRgWghG8mIbTo3BBms+JJ28wHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjE2MzY5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCkGCCsGAQUF BwEHAQH/BBowGDAWBAIAAjAQAwYAKgXfwdEDBgAqBp+BEDANBgkqhkiG9w0BAQsF AAOCAQEAljwVI9FmcdzmCrL+KuUL+uYWAwqOnNhq3wDXiDW/N/DeiO8v1L3MlTVD HG0OBF4bJ2OLe0X6vNocQZx3pFPOsuwVal/ZG22oUnzwHZOxU+4h6Uvc3x5Th4np uSi43n/81mToZhhCud+bCg8oqp6xmtOfR7LDjduJeXRnF3ZRPQwzQGi50foPBsTb 9cr4kSWGDpvZ3uBQS4J2w4zCAq3XEx/1O9I65RdZe5gESq8KCkL7gkkGzXf/nyNR 6NxQPlTVc9R0KaFuOqmJ4nMfdOcWQ4w1fL5ftNHp77HZLW+zrvrhFCoQ1z4gc+xF pzX+F5S9d6+ci/vB1PN9vgtz2cv+xA== -----END CERTIFICATE-----Generated at Wed Nov 5 08:43:42 2025 by rpki-client