$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer File: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer (raw, json) Hash identifier: AOBb07/LO1XmKkB4d7jzeN0Gnu+kbnmWk9U62aUWgIM= Subject key identifier: B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 3E5312A8A54EE6DCB9FFDD4B6BC25EE21B336C Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Mon 27 Jul 2026 20:41:36 +0000 Certificate not after: Mon 26 Jul 2027 20:46:36 +0000 Subordinate resources: IP: 2a0a:6040:1300::/40 IP: 2a0a:6040:9f00::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 07:17:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:53:12:a8:a5:4e:e6:dc:b9:ff:dd:4b:6b:c2:5e:e2:1b:33:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 27 20:41:36 2026 GMT Not After : Jul 26 20:46:36 2027 GMT Subject: CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a4:bd:8d:56:30:85:cc:5e:75:9f:ae:74:20: 14:93:77:e2:25:75:ff:a2:4a:1c:4d:f1:d7:86:9c: a2:c7:e9:e5:53:a2:cc:b0:0e:ca:92:88:88:f7:e7: 33:b4:3d:98:7d:7b:fb:6a:23:8d:fe:04:23:d3:9e: 51:8b:13:06:6e:b3:e7:16:46:c4:b2:25:c5:c0:51: f7:4f:b0:0c:0b:af:19:d0:18:7b:ac:9a:3c:52:f7: 47:e6:51:0e:4e:5f:0e:f4:ec:70:bc:fb:b2:28:3f: 9d:90:8b:18:eb:ef:06:9a:55:f9:e4:4e:fc:53:db: 04:03:db:31:9f:d5:64:5c:2f:67:b9:18:79:63:bf: 9e:8b:19:5f:37:0d:e2:56:f9:07:5b:f7:18:f4:80: 2d:f8:39:42:eb:32:f8:57:27:71:ad:4b:71:aa:d7: e2:b1:00:27:e4:f1:1b:e6:17:88:51:7f:34:56:30: c0:26:b8:5a:77:3f:27:f7:6e:ef:86:96:73:b7:6c: 6b:8f:0a:43:a2:35:41:1a:ff:12:a9:38:26:6f:46: 82:6e:5b:55:a0:65:1d:3f:65:81:8c:92:be:f9:cf: 4a:c6:23:36:50:c4:eb:8c:94:8c:51:09:b9:85:f2: 7a:38:67:ce:b4:10:9e:a1:36:92:89:a6:d6:48:60: 06:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:1300::/40 2a0a:6040:9f00::/40 Signature Algorithm: sha256WithRSAEncryption 5c:89:6b:51:61:20:27:b7:c0:ae:58:41:c9:bf:5f:7a:af:76: 3d:d7:f0:7f:68:2c:76:c5:18:f4:c1:62:46:53:13:51:a7:77: 67:f2:e2:ab:6a:19:b2:c0:e1:49:35:5f:29:4a:7b:02:b3:e7: c4:32:1b:83:9e:4e:fe:b6:bb:bc:d1:00:38:62:6f:04:cf:59: 60:f4:34:dd:c9:72:50:78:c6:32:14:02:fc:25:f1:e0:ee:40: 92:17:1c:dc:16:b2:d6:9b:80:34:6d:99:d0:aa:4e:f8:e3:5c: 5b:ae:96:a1:18:6c:f6:6e:e5:9b:de:d3:0a:60:36:09:b6:ad: 50:46:bd:9c:03:5b:05:58:cb:02:ca:29:bf:74:bb:5f:fc:eb: 3c:56:e0:11:64:df:7e:68:3f:1c:db:f8:5f:f3:3d:79:0f:b0: 8b:ba:63:b5:e3:40:be:b6:54:0f:8c:57:01:54:2d:a6:40:29: 7f:df:0d:bc:d1:9f:a3:0a:45:c8:f1:05:32:7c:62:1c:4d:4b: 4e:c4:d7:22:4a:04:b7:f5:d1:1e:83:ba:ab:8e:bd:1c:f2:b1: c4:05:12:a8:58:31:c6:94:c6:ee:dd:32:7a:b5:04:52:c6:f6: 5e:55:b0:85:54:7e:ca:9b:8f:39:69:ad:b2:92:dd:d2:09:d1: 08:c4:9c:81 -----BEGIN CERTIFICATE----- MIIF6TCCBNGgAwIBAgITPlMSqKVO5ty5/91La8Je4hszbDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg4RkMzQ0ZCNURGM0U4RjcyMUMwOEI4QjVGRTdGNjFENjdC MEJFMTNCMB4XDTI2MDcyNzIwNDEzNloXDTI3MDcyNjIwNDYzNlowMzExMC8GA1UE AxMoQjIxNzI4NEVBM0Q1Mzg0NEIyQUY1MjcwQUJCQUEzMTA1QjhCM0Y0NTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKqkvY1WMIXMXnWfrnQgFJN34iV1 /6JKHE3x14acosfp5VOizLAOypKIiPfnM7Q9mH17+2ojjf4EI9OeUYsTBm6z5xZG xLIlxcBR90+wDAuvGdAYe6yaPFL3R+ZRDk5fDvTscLz7sig/nZCLGOvvBppV+eRO /FPbBAPbMZ/VZFwvZ7kYeWO/nosZXzcN4lb5B1v3GPSALfg5Qusy+Fcnca1LcarX 4rEAJ+TxG+YXiFF/NFYwwCa4Wnc/J/du74aWc7dsa48KQ6I1QRr/Eqk4Jm9Ggm5b VaBlHT9lgYySvvnPSsYjNlDE64yUjFEJuYXyejhnzrQQnqE2komm1khgBtsCAwEA AaOCAvQwggLwMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFLIXKE6j1ThEsq9S cKu6oxBbiz9FMB8GA1UdIwQYMBaAFI/Dz7XfPo9yHAi4tf5/YdZ7C+E7MA4GA1Ud DwEB/wQEAwIBBjBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzovL2Nsb3VkaWUtcmVw by5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzhGQzNDRkI1REYzRThGNzIx QzA4QjhCNUZFN0Y2MUQ2N0IwQkUxM0IuY3JsMIGTBggrBgEFBQcBAQSBhjCBgzCB gAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9y eS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83LzhGQzNDRkI1REYz RThGNzIxQzA4QjhCNUZFN0Y2MUQ2N0IwQkUxM0IuY2VyMIIBPwYIKwYBBQUHAQsE ggExMIIBLTBfBggrBgEFBQcwBYZTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRkYjUtYmJkMy01Y2NhNjMz Y2FlM2YvNS8wgYsGCCsGAQUFBzAKhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWItNGRiNS1iYmQzLTVjY2E2 MzNjYWUzZi81L0IyMTcyODRFQTNENTM4NDRCMkFGNTI3MEFCQkFBMzEwNUI4QjNG NDUubWZ0MDwGCCsGAQUFBzANhjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJpcGUu bmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAp BggrBgEFBQcBBwEB/wQaMBgwFgQCAAIwEAMGACoKYEATAwYAKgpgQJ8wDQYJKoZI hvcNAQELBQADggEBAFyJa1FhICe3wK5YQcm/X3qvdj3X8H9oLHbFGPTBYkZTE1Gn d2fy4qtqGbLA4Uk1XylKewKz58QyG4OeTv62u7zRADhibwTPWWD0NN3JclB4xjIU Avwl8eDuQJIXHNwWstabgDRtmdCqTvjjXFuulqEYbPZu5Zve0wpgNgm2rVBGvZwD WwVYywLKKb90u1/86zxW4BFk335oPxzb+F/zPXkPsIu6Y7XjQL62VA+MVwFULaZA KX/fDbzRn6MKRcjxBTJ8YhxNS07E1yJKBLf10R6DuquOvRzyscQFEqhYMcaUxu7d Mnq1BFLG9l5VsIVUfsqbjzlprbKS3dIJ0QjEnIE= -----END CERTIFICATE-----Generated at Tue Jul 28 16:05:15 2026 by rpki-client