$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216382.roa File: AS216382.roa (raw, json) Hash identifier: fP3CznDsn5ILD/R8tlaNaMkLd1tMA8EAuOjw9pvGFMc= Subject key identifier: 95:B9:82:80:BA:C9:42:28:C8:68:76:20:A2:E4:C6:84:44:27:80:5B Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 7462B0D1057972D3C41A0A9B6DA6BCF8F54042FB Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216382.roa Signing time: Fri 05 Jun 2026 07:12:18 +0000 ROA not before: Fri 05 Jun 2026 07:07:18 +0000 ROA not after: Fri 04 Jun 2027 07:12:18 +0000 asID: 216382 IP address blocks: 2a05:dfc1:7f00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:62:b0:d1:05:79:72:d3:c4:1a:0a:9b:6d:a6:bc:f8:f5:40:42:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:18 2026 GMT Not After : Jun 4 07:12:18 2027 GMT Subject: CN=95B98280BAC94228C8687620A2E4C6844427805B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fb:2d:4e:d9:28:2d:35:f9:c7:33:b2:87:45: 94:45:1a:f7:9d:44:dd:e7:81:4b:ab:7a:1e:18:86: 90:b0:5e:06:90:d9:8c:39:ef:1d:69:c2:e2:e3:61: 31:08:3c:78:44:4b:cf:dd:4c:6e:d7:99:a5:9f:b3: 6a:40:57:a4:01:6d:d5:b2:ae:24:b4:13:a9:70:6d: 23:5c:5d:ab:e8:0d:bc:7d:6b:fd:aa:e7:a5:5b:01: 91:04:93:ef:47:43:c0:bb:13:a3:90:a8:95:36:a2: 2f:d9:5a:03:7e:b3:23:e1:c6:16:fe:4f:4e:29:9d: d2:c7:ca:6d:0c:14:7c:cf:05:64:9f:65:a1:13:09: 0c:2f:52:b0:d6:7f:6b:00:1d:55:44:7c:ce:37:c6: 34:51:be:aa:59:f7:ae:22:2c:80:9b:65:a9:8a:78: 82:ec:f8:4a:cf:e3:e0:de:8c:17:05:ba:ba:e7:89: 4c:08:ec:94:47:9e:0b:0f:c1:b6:c2:ea:d6:e7:2a: 1d:0a:c8:9a:32:b4:18:73:ff:3c:60:48:85:30:af: 8b:53:fa:e4:17:d5:b7:30:e3:58:64:e8:14:19:0f: b0:c6:97:11:9d:db:68:e2:68:75:e5:81:66:c5:4b: d3:ce:df:4b:99:a8:52:cd:fa:5f:ca:6d:5b:26:2c: 1e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B9:82:80:BA:C9:42:28:C8:68:76:20:A2:E4:C6:84:44:27:80:5B X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216382.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:7f00::/40 Signature Algorithm: sha256WithRSAEncryption 59:c2:62:5a:11:37:8f:d3:8f:dc:42:a0:e8:ca:36:fd:14:e8: 91:f9:02:28:90:49:d6:ca:7c:1f:9a:6d:60:e6:ed:56:29:32: cd:2f:eb:02:dd:91:c5:f6:ba:e8:3a:50:3f:96:9c:fe:c7:af: a1:06:a0:e2:58:48:12:78:79:ca:69:d3:51:86:a9:25:ce:da: 47:24:fa:49:f6:00:d9:63:89:98:03:7c:d8:46:36:23:e6:33: 0b:df:41:a1:0b:bf:1c:0e:4d:29:f4:ac:c8:a3:1e:6d:51:2b: 40:08:67:4b:1f:ae:98:c4:3b:4b:aa:2a:cd:aa:26:2a:29:5c: 46:a8:67:12:70:7b:3a:bc:6a:a4:fc:3b:31:51:fd:5f:19:6d: 8e:1f:dc:d0:8a:a6:2e:a2:df:5d:4b:d2:6a:b0:3b:e8:ae:e9: ee:1a:49:7a:10:a5:06:78:2d:99:93:27:c2:3f:13:7f:40:06: 69:4b:47:e5:ff:6e:45:be:c1:d4:fd:d6:43:e4:90:77:cb:8e: d5:e8:3e:0f:af:be:92:c7:a2:15:e6:15:e2:22:4a:18:9d:9b: 43:bf:07:04:6b:36:90:0f:d4:0c:9b:27:68:1f:d9:f5:ac:6a: c9:51:84:52:c2:c6:4c:06:e8:89:29:14:3c:77:4c:8e:9d:5c: 23:48:9d:42 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUdGKw0QV5ctPEGgqbbaa8+PVAQvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MThaFw0yNzA2MDQwNzEyMThaMDMxMTAvBgNV BAMTKDk1Qjk4MjgwQkFDOTQyMjhDODY4NzYyMEEyRTRDNjg0NDQyNzgwNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG+y1O2SgtNfnHM7KHRZRFGved RN3ngUureh4YhpCwXgaQ2Yw57x1pwuLjYTEIPHhES8/dTG7XmaWfs2pAV6QBbdWy riS0E6lwbSNcXavoDbx9a/2q56VbAZEEk+9HQ8C7E6OQqJU2oi/ZWgN+syPhxhb+ T04pndLHym0MFHzPBWSfZaETCQwvUrDWf2sAHVVEfM43xjRRvqpZ964iLICbZamK eILs+ErP4+DejBcFurrniUwI7JRHngsPwbbC6tbnKh0KyJoytBhz/zxgSIUwr4tT +uQX1bcw41hk6BQZD7DGlxGd22jiaHXlgWbFS9PO30uZqFLN+l/KbVsmLB79AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUlbmCgLrJQijIaHYgouTGhEQngFswHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjE2MzgyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwX8wDQYJKoZIhvcNAQELBQADggEBAFnC YloRN4/Tj9xCoOjKNv0U6JH5AiiQSdbKfB+abWDm7VYpMs0v6wLdkcX2uug6UD+W nP7Hr6EGoOJYSBJ4ecpp01GGqSXO2kck+kn2ANljiZgDfNhGNiPmMwvfQaELvxwO TSn0rMijHm1RK0AIZ0sfrpjEO0uqKs2qJiopXEaoZxJwezq8aqT8OzFR/V8ZbY4f 3NCKpi6i311L0mqwO+iu6e4aSXoQpQZ4LZmTJ8I/E39ABmlLR+X/bkW+wdT91kPk kHfLjtXoPg+vvpLHohXmFeIiShidm0O/BwRrNpAP1AybJ2gf2fWsaslRhFLCxkwG 6IkpFDx3TI6dXCNInUI= -----END CERTIFICATE-----Generated at Sat Jun 13 09:11:46 2026 by rpki-client