$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS49975.roa File: AS49975.roa (raw, json) Hash identifier: tJDKgeSN9A4R6lWOjcuHnUx9Z6LTX41CPWitquzgKgY= Subject key identifier: 6F:85:09:B8:F0:80:03:3F:90:76:32:9C:17:72:04:FB:43:20:EA:9D Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 664C25EA63355F62F4796792684B80788C811D51 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS49975.roa Signing time: Fri 05 Jun 2026 07:12:35 +0000 ROA not before: Fri 05 Jun 2026 07:07:35 +0000 ROA not after: Fri 04 Jun 2027 07:12:35 +0000 asID: 49975 IP address blocks: 2a0a:6040:6d00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:4c:25:ea:63:35:5f:62:f4:79:67:92:68:4b:80:78:8c:81:1d:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:35 2026 GMT Not After : Jun 4 07:12:35 2027 GMT Subject: CN=6F8509B8F080033F9076329C177204FB4320EA9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:85:14:ca:66:6d:7e:07:37:73:c5:19:5f:8f: 8a:29:28:fd:8c:71:af:eb:35:f9:66:85:9e:31:0a: 61:44:2d:08:32:a5:2c:ad:2f:31:39:cd:d2:01:36: 6b:44:7e:34:fa:32:50:72:10:fe:14:3e:13:aa:b6: 25:9f:14:a9:44:a8:f3:7a:b9:2a:f9:da:c2:53:99: 04:31:62:7a:31:a9:8b:2d:4a:05:6f:70:eb:88:6d: 0b:bb:7e:06:e7:c3:b5:7a:9d:e2:dd:2e:d6:f7:de: e3:bb:09:49:b9:67:2a:8f:18:0a:31:b4:ac:57:05: 50:d5:7b:a5:07:57:02:52:c2:fe:24:1e:f7:cd:c3: 6f:d5:97:0e:b7:1b:b0:a8:20:84:32:8b:e2:ea:3d: a1:ff:f1:33:4a:e7:92:f5:ff:d8:22:21:ce:8d:c8: d3:b5:d3:12:93:c2:04:cb:f9:35:fa:9a:2c:f7:9d: e3:2d:ab:97:92:75:52:9e:f9:6e:c3:2f:44:ce:ef: db:30:7b:86:d0:18:5c:ee:e4:cf:9f:e7:c0:88:c9: a8:e4:78:a1:b8:9d:77:86:a3:31:1e:a0:84:37:84: fd:66:6c:84:b9:c5:90:b1:41:14:c9:2d:2b:36:6c: f2:73:0a:35:9e:b7:fc:79:79:41:eb:d4:4f:c1:07: 6c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:85:09:B8:F0:80:03:3F:90:76:32:9C:17:72:04:FB:43:20:EA:9D X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS49975.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:6d00::/40 Signature Algorithm: sha256WithRSAEncryption db:98:77:83:e0:6d:b7:e6:48:a4:65:96:e6:ea:9f:4b:b1:e5: 49:c1:17:83:b7:09:90:61:c1:e0:70:af:21:a9:fe:03:68:ba: d6:bf:74:9e:b6:3b:2c:bc:95:29:ab:0f:d5:15:c0:0b:06:f9: 09:86:84:46:68:1f:b6:fc:e1:4d:2d:19:fa:27:fb:93:ff:7d: 05:76:1d:c4:2f:4f:1c:bf:df:9e:7e:f3:b2:d7:6f:4c:f1:4a: b6:68:80:91:2c:25:5a:4b:b8:fa:f8:f6:8a:f5:41:7d:31:cf: 77:6c:77:a3:23:f7:a5:b8:51:b4:d5:97:b9:95:7d:27:44:9c: 2e:d3:a5:69:ee:00:c7:15:0d:b5:6e:32:95:5a:12:e2:44:dd: b8:a6:1f:cc:66:3f:34:a4:98:34:f7:5d:3b:bb:fe:5f:96:a5: 11:0d:14:07:1d:e2:ce:80:98:bc:e0:f2:e1:ec:91:59:af:5a: cf:e9:bb:74:4c:17:bd:b9:f9:f6:c4:f0:71:6d:72:00:b4:5b: ac:95:e1:2f:f0:a5:53:0b:86:16:88:4f:ba:eb:fc:06:4e:b4: 51:44:97:cb:86:f1:b9:d4:4d:98:55:3f:9c:b3:ad:d9:98:fd: 18:1b:29:6d:08:47:fa:0e:94:8c:09:1b:de:63:1d:77:b9:d4: d2:a3:12:7f -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUZkwl6mM1X2L0eWeSaEuAeIyBHVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MzVaFw0yNzA2MDQwNzEyMzVaMDMxMTAvBgNV BAMTKDZGODUwOUI4RjA4MDAzM0Y5MDc2MzI5QzE3NzIwNEZCNDMyMEVBOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzhRTKZm1+BzdzxRlfj4opKP2M ca/rNflmhZ4xCmFELQgypSytLzE5zdIBNmtEfjT6MlByEP4UPhOqtiWfFKlEqPN6 uSr52sJTmQQxYnoxqYstSgVvcOuIbQu7fgbnw7V6neLdLtb33uO7CUm5ZyqPGAox tKxXBVDVe6UHVwJSwv4kHvfNw2/Vlw63G7CoIIQyi+LqPaH/8TNK55L1/9giIc6N yNO10xKTwgTL+TX6miz3neMtq5eSdVKe+W7DL0TO79swe4bQGFzu5M+f58CIyajk eKG4nXeGozEeoIQ3hP1mbIS5xZCxQRTJLSs2bPJzCjWet/x5eUHr1E/BB2wLAgMB AAGjggHzMIIB7zAdBgNVHQ4EFgQUb4UJuPCAAz+QdjKcF3IE+0Mg6p0wHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTNDk5NzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqCmBAbTANBgkqhkiG9w0BAQsFAAOCAQEA25h3 g+Btt+ZIpGWW5uqfS7HlScEXg7cJkGHB4HCvIan+A2i61r90nrY7LLyVKasP1RXA Cwb5CYaERmgftvzhTS0Z+if7k/99BXYdxC9PHL/fnn7zstdvTPFKtmiAkSwlWku4 +vj2ivVBfTHPd2x3oyP3pbhRtNWXuZV9J0ScLtOlae4AxxUNtW4ylVoS4kTduKYf zGY/NKSYNPddO7v+X5alEQ0UBx3izoCYvODy4eyRWa9az+m7dEwXvbn59sTwcW1y ALRbrJXhL/ClUwuGFohPuuv8Bk60UUSXy4bxudRNmFU/nLOt2Zj9GBspbQhH+g6U jAkb3mMdd7nU0qMSfw== -----END CERTIFICATE-----Generated at Sat Jun 13 09:11:24 2026 by rpki-client