$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS924.roa File: AS924.roa (raw, json) Hash identifier: nNm+G5Ql0tyBBdiCS+y0POByZlleXf/wGSs3J3LIuvg= Subject key identifier: 00:B1:C0:A5:D8:25:C5:90:D0:75:72:F3:A0:02:DD:5A:D8:30:11:13 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 73C6FC354603B48FA61BA35467802D0F07EEC1EE Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS924.roa Signing time: Fri 05 Jun 2026 07:12:27 +0000 ROA not before: Fri 05 Jun 2026 07:07:27 +0000 ROA not after: Fri 04 Jun 2027 07:12:27 +0000 asID: 924 IP address blocks: 2a0a:6040:ff00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:c6:fc:35:46:03:b4:8f:a6:1b:a3:54:67:80:2d:0f:07:ee:c1:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:27 2026 GMT Not After : Jun 4 07:12:27 2027 GMT Subject: CN=00B1C0A5D825C590D07572F3A002DD5AD8301113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:bb:fd:f2:e5:27:58:06:c6:25:1d:96:e9:00: 08:a7:cd:85:e1:bd:e5:b4:b5:e9:cd:c4:b4:9f:f0: ea:5a:68:ec:0e:7e:26:db:b3:d6:90:82:64:be:47: c1:8b:d3:dd:22:2d:b5:1e:e7:88:ef:61:b4:70:7a: f8:08:1b:36:a3:34:36:b3:ea:0f:81:04:81:f2:b9: 1e:45:a8:5b:c8:f4:f4:bc:8b:43:ce:e7:dc:d7:24: 8a:a6:a4:b3:ff:df:da:55:61:87:44:f9:3c:d9:f8: 49:ec:0d:eb:6b:a0:fe:9a:d2:0c:4d:9e:63:bb:2d: 78:3c:9d:d2:3a:be:18:44:7d:38:56:ef:9c:dd:e2: 31:6c:13:75:63:2e:ce:e6:51:33:a7:a3:f3:02:4e: 88:03:4f:19:45:2b:9f:7e:f0:8a:67:10:71:57:e4: 89:85:f6:f1:d4:1f:04:f4:4a:4b:1c:ea:4f:91:1d: d4:de:2a:12:bd:a5:08:88:12:b7:ad:35:71:fa:62: cb:ae:62:1b:e8:06:51:f6:36:65:54:66:70:db:96: af:a7:bf:37:73:33:af:5f:20:3e:2f:0b:65:5c:1e: bd:e7:bd:21:c6:7c:b2:d4:87:09:fa:c7:4b:5c:6d: 7b:02:7b:49:14:4c:68:3d:65:6b:d7:14:fc:fa:80: e8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B1:C0:A5:D8:25:C5:90:D0:75:72:F3:A0:02:DD:5A:D8:30:11:13 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS924.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:ff00::/40 Signature Algorithm: sha256WithRSAEncryption 42:c2:12:ad:a1:35:4e:73:70:90:ac:90:92:9c:c9:c5:ca:e5: b2:2b:66:81:22:57:19:ee:98:4a:78:86:f7:6e:d3:d4:3f:90: c5:f8:a3:3c:07:db:c8:a9:08:8a:1c:63:60:fb:db:ca:d4:d1: d4:ba:24:b0:46:5b:ef:17:b2:70:be:25:37:0b:27:9c:74:a5: f8:68:b5:db:61:7c:1c:8b:a1:06:00:25:f0:b2:0e:2f:90:22: 7e:b9:22:80:5e:b6:7c:24:c0:80:4c:d3:7a:7c:c8:24:4d:26: ee:b2:cd:eb:60:20:3c:b0:fd:ab:9d:ee:0e:62:e4:63:10:41: d3:5e:5d:0d:76:57:00:6b:e9:a0:b0:c5:bd:a1:21:33:95:72: ba:34:9b:8d:ed:ae:4d:4e:94:d3:42:bb:77:f6:12:35:09:fb: 8d:68:f4:7f:ac:f4:c6:83:1d:66:29:03:1c:4d:9a:75:f8:8b: 7c:2d:94:11:8b:f6:50:a4:b6:3f:a4:79:c9:80:9a:61:bd:c2: d0:da:9b:90:7a:03:dc:5f:e3:03:b0:40:0f:0c:bc:0b:fe:37: 1b:1d:d5:8c:f5:56:56:e8:47:f7:4d:ee:d3:c6:10:34:cd:a9: 8c:40:29:30:a5:29:7f:f4:7f:45:e8:30:56:43:46:c8:f4:b0: 20:9c:dd:dc -----BEGIN CERTIFICATE----- MIIE5zCCA8+gAwIBAgIUc8b8NUYDtI+mG6NUZ4AtDwfuwe4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MjdaFw0yNzA2MDQwNzEyMjdaMDMxMTAvBgNV BAMTKDAwQjFDMEE1RDgyNUM1OTBEMDc1NzJGM0EwMDJERDVBRDgzMDExMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfu/3y5SdYBsYlHZbpAAinzYXh veW0tenNxLSf8OpaaOwOfibbs9aQgmS+R8GL090iLbUe54jvYbRwevgIGzajNDaz 6g+BBIHyuR5FqFvI9PS8i0PO59zXJIqmpLP/39pVYYdE+TzZ+EnsDetroP6a0gxN nmO7LXg8ndI6vhhEfThW75zd4jFsE3VjLs7mUTOno/MCTogDTxlFK59+8IpnEHFX 5ImF9vHUHwT0Sksc6k+RHdTeKhK9pQiIEretNXH6YsuuYhvoBlH2NmVUZnDblq+n vzdzM69fID4vC2VcHr3nvSHGfLLUhwn6x0tcbXsCe0kUTGg9ZWvXFPz6gOhzAgMB AAGjggHxMIIB7TAdBgNVHQ4EFgQUALHApdglxZDQdXLzoALdWtgwERMwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjty c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTOTI0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH AQH/BBIwEDAOBAIAAjAIAwYAKgpgQP8wDQYJKoZIhvcNAQELBQADggEBAELCEq2h NU5zcJCskJKcycXK5bIrZoEiVxnumEp4hvdu09Q/kMX4ozwH28ipCIocY2D728rU 0dS6JLBGW+8XsnC+JTcLJ5x0pfhotdthfByLoQYAJfCyDi+QIn65IoBetnwkwIBM 03p8yCRNJu6yzetgIDyw/aud7g5i5GMQQdNeXQ12VwBr6aCwxb2hITOVcro0m43t rk1OlNNCu3f2EjUJ+41o9H+s9MaDHWYpAxxNmnX4i3wtlBGL9lCktj+kecmAmmG9 wtDam5B6A9xf4wOwQA8MvAv+Nxsd1Yz1VlboR/dN7tPGEDTNqYxAKTClKX/0f0Xo MFZDRsj0sCCc3dw= -----END CERTIFICATE-----Generated at Sat Jun 13 10:22:58 2026 by rpki-client