$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS23449.roa File: AS23449.roa (raw, json) Hash identifier: GxDzScLBHKnxFLHjI6Nj/qsnIyoiAf6qpZHk+8c8az0= Subject key identifier: 9E:7D:CC:EC:B9:7C:08:40:88:C0:26:EC:F8:1D:39:38:2E:07:1A:78 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 76D15DD80D73E1B14CC8C71DB466B751C2523EE9 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS23449.roa Signing time: Fri 05 Jun 2026 07:12:22 +0000 ROA not before: Fri 05 Jun 2026 07:07:22 +0000 ROA not after: Fri 04 Jun 2027 07:12:22 +0000 asID: 23449 IP address blocks: 2a05:dfc1:9700::/40 maxlen: 48 2a06:9f81:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:d1:5d:d8:0d:73:e1:b1:4c:c8:c7:1d:b4:66:b7:51:c2:52:3e:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:22 2026 GMT Not After : Jun 4 07:12:22 2027 GMT Subject: CN=9E7DCCECB97C084088C026ECF81D39382E071A78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5c:f4:7c:97:ef:9c:18:b7:a1:20:22:5a:b8: 18:83:2b:39:f3:01:26:09:34:8a:02:3e:68:20:4c: 56:b4:a8:bb:f4:d4:26:76:1d:5c:ff:4b:de:89:ce: b9:b4:a8:11:35:1d:a7:a1:ed:fa:e9:30:8c:36:5d: 6d:c8:65:37:5e:25:38:0f:b0:4a:5d:ad:8e:b0:3a: f1:2e:7a:18:2e:25:a2:71:12:95:64:cf:91:f3:9d: 55:d6:5b:16:95:6e:fc:87:01:62:72:ae:24:d7:e0: 08:38:ec:1c:fe:86:ea:5f:81:70:63:d5:ca:8b:86: 4e:7a:be:72:d4:2a:73:41:3f:a9:57:ac:74:5e:3b: 02:43:4d:a2:56:ec:80:48:55:02:2b:d4:ff:e0:00: 5d:81:20:89:a8:da:06:ad:2b:b6:8c:12:07:5f:ba: e6:7f:5b:29:fc:8e:7c:87:4d:ab:d2:6a:28:6b:ce: d9:ce:e7:e5:6a:df:13:e1:1a:8d:eb:c4:c1:9f:fc: 6e:0b:39:0f:c4:59:c8:4d:9e:7a:77:b6:48:f8:64: 8c:2e:99:bb:46:92:f4:39:61:d6:78:53:eb:da:8c: 53:50:e2:47:f0:b3:f5:79:76:ba:c5:82:22:37:45: 7b:58:ce:75:45:13:5e:83:78:b8:c7:cb:05:d0:79: 29:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7D:CC:EC:B9:7C:08:40:88:C0:26:EC:F8:1D:39:38:2E:07:1A:78 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS23449.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:9700::/40 2a06:9f81:6000::/40 Signature Algorithm: sha256WithRSAEncryption 5a:c4:51:80:8f:4c:86:9b:51:80:e9:20:97:78:1e:92:1a:94: a5:61:4f:01:4c:00:99:00:3c:ba:6d:0e:c5:ef:25:79:00:bc: ef:3b:72:3d:13:72:13:aa:d0:68:d0:8a:58:11:9e:c8:42:80: 8b:f0:0f:d3:8c:2b:4f:38:b0:d1:06:8b:39:f4:42:a4:02:c4: f1:10:85:a6:92:20:1f:dd:44:26:9b:f8:f6:90:50:32:c5:7e: fb:af:e2:bd:77:03:8d:49:05:00:f2:65:43:05:5f:0f:b9:88: 76:33:0e:94:56:01:c9:c3:b2:50:07:1c:5d:26:10:9b:90:c9: ec:ae:c6:f6:d8:b6:bf:ae:ef:55:5e:49:53:ea:42:bf:79:78: 36:f9:a3:36:22:40:a6:6c:52:2c:1b:98:f6:f4:0a:23:00:44: 8a:88:5b:ae:80:d5:4d:c0:b4:f8:e5:57:cb:3b:96:e7:3b:e1: c3:7e:36:d2:5b:62:78:0e:8c:0a:fa:a7:c1:c2:92:89:03:61: 1e:8a:c8:13:91:1f:d0:86:a8:71:9b:bb:d8:bd:9a:cd:2e:b9: f7:0c:37:e8:06:78:a0:f1:2b:43:80:ee:ed:dd:09:41:53:8a: dc:6b:a4:29:c3:38:a2:65:50:a1:72:63:7a:44:44:91:ab:c9: 4e:b1:83:dd -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUdtFd2A1z4bFMyMcdtGa3UcJSPukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MjJaFw0yNzA2MDQwNzEyMjJaMDMxMTAvBgNV BAMTKDlFN0RDQ0VDQjk3QzA4NDA4OEMwMjZFQ0Y4MUQzOTM4MkUwNzFBNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfXPR8l++cGLehICJauBiDKznz ASYJNIoCPmggTFa0qLv01CZ2HVz/S96Jzrm0qBE1Haeh7frpMIw2XW3IZTdeJTgP sEpdrY6wOvEuehguJaJxEpVkz5HznVXWWxaVbvyHAWJyriTX4Ag47Bz+hupfgXBj 1cqLhk56vnLUKnNBP6lXrHReOwJDTaJW7IBIVQIr1P/gAF2BIImo2gatK7aMEgdf uuZ/Wyn8jnyHTavSaihrztnO5+Vq3xPhGo3rxMGf/G4LOQ/EWchNnnp3tkj4ZIwu mbtGkvQ5YdZ4U+vajFNQ4kfws/V5drrFgiI3RXtYznVFE16DeLjHywXQeSmrAgMB AAGjggH7MIIB9zAdBgNVHQ4EFgQUnn3M7Ll8CECIwCbs+B05OC4HGngwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjM0NDkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKQYIKwYBBQUH AQcBAf8EGjAYMBYEAgACMBADBgAqBd/BlwMGACoGn4FgMA0GCSqGSIb3DQEBCwUA A4IBAQBaxFGAj0yGm1GA6SCXeB6SGpSlYU8BTACZADy6bQ7F7yV5ALzvO3I9E3IT qtBo0IpYEZ7IQoCL8A/TjCtPOLDRBos59EKkAsTxEIWmkiAf3UQmm/j2kFAyxX77 r+K9dwONSQUA8mVDBV8PuYh2Mw6UVgHJw7JQBxxdJhCbkMnsrsb22La/ru9VXklT 6kK/eXg2+aM2IkCmbFIsG5j29AojAESKiFuugNVNwLT45VfLO5bnO+HDfjbSW2J4 DowK+qfBwpKJA2EeisgTkR/Qhqhxm7vYvZrNLrn3DDfoBnig8StDgO7t3QlBU4rc a6QpwziiZVChcmN6RESRq8lOsYPd -----END CERTIFICATE-----Generated at Sat Jun 13 09:11:23 2026 by rpki-client