$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS135330.roa File: AS135330.roa (raw, json) Hash identifier: kdDEtJszdHTCMTJBQjtd0W+X5M2tpxVdBHQz8Wv5rgo= Subject key identifier: D0:CF:26:EE:5C:CB:3A:E0:0C:9D:2E:97:3B:C3:44:4A:58:C2:72:9D Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 6ADB2A30A9634B5F8B102FAEF0C308EADE82EEC9 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS135330.roa Signing time: Fri 05 Jun 2026 07:12:38 +0000 ROA not before: Fri 05 Jun 2026 07:07:38 +0000 ROA not after: Fri 04 Jun 2027 07:12:38 +0000 asID: 135330 IP address blocks: 2a05:dfc1:6e00::/40 maxlen: 48 2a05:dfc1:6e00::/48 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 22:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:db:2a:30:a9:63:4b:5f:8b:10:2f:ae:f0:c3:08:ea:de:82:ee:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:38 2026 GMT Not After : Jun 4 07:12:38 2027 GMT Subject: CN=D0CF26EE5CCB3AE00C9D2E973BC3444A58C2729D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:db:13:ad:2c:b3:8a:b6:96:d7:59:2a:8a:7c: 2e:90:81:91:86:79:34:70:db:73:44:24:9b:2d:8b: b9:88:d9:db:9f:7d:0e:9e:0e:b4:e5:8d:d1:91:49: ab:4e:67:42:de:bd:42:fc:4e:ca:3b:74:5d:3a:1b: f6:5d:6b:f3:3a:22:80:9d:24:f6:4c:27:bf:29:94: 19:ed:3b:71:ac:04:1a:4f:86:c3:e7:49:e7:ea:fe: 86:a8:c1:4a:5a:0a:91:f2:af:ff:59:dc:74:0d:9a: 9f:cf:1a:37:70:a7:6e:74:b6:74:e1:72:cc:d2:00: 20:27:08:59:fd:2d:9f:d9:ff:8b:64:9f:34:dc:3f: 5a:21:af:ff:bb:9c:76:fc:6b:27:f9:f2:7f:f7:89: ab:85:1e:d7:b2:17:f5:26:c9:82:87:93:0c:7a:4c: 8d:0e:67:80:ff:01:47:a2:fe:4b:04:dc:d9:78:15: 65:f2:98:f8:0c:d7:f7:eb:d1:b1:1f:02:81:70:42: 60:a1:e7:2b:6b:d8:20:e8:f1:b1:58:3d:63:61:da: 1e:ae:65:97:be:7a:08:13:2b:72:0b:00:ed:c2:fe: cc:47:b8:d5:2e:cd:9c:c8:80:da:42:5f:6e:5d:6f: 8d:50:bf:4d:f4:e4:50:00:43:9a:90:d4:fc:a3:75: e5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:CF:26:EE:5C:CB:3A:E0:0C:9D:2E:97:3B:C3:44:4A:58:C2:72:9D X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS135330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:6e00::/40 Signature Algorithm: sha256WithRSAEncryption 53:7e:b7:8f:63:49:9a:a1:88:72:45:78:92:c2:cc:c2:f1:35: d3:ae:0d:1d:6e:8f:17:58:de:ca:4f:06:52:e1:e0:62:ae:90: e6:bc:74:13:9d:70:d9:56:43:20:f4:3d:47:7f:7b:21:2e:0e: 6a:91:8d:2e:6c:52:6f:ca:03:dd:3e:3e:21:cc:83:e2:24:62: d3:02:a6:a1:f4:84:7b:ef:2d:1e:8c:53:0c:a2:f7:fe:15:eb: 7f:8d:f0:0c:68:d2:50:3e:a7:84:b7:8d:0b:ae:44:fe:ba:35: ce:c3:62:70:28:ef:69:16:cc:f5:c3:4b:b7:a6:d9:a8:eb:43: 37:c8:dd:16:7f:e9:17:95:d4:20:62:2d:3b:7b:43:fb:e3:f3: 3c:5b:a2:9e:44:83:fa:1f:3a:61:67:ac:de:6a:98:dd:d7:67: 74:fd:07:0c:91:aa:84:91:94:b3:17:f6:e0:1e:57:ee:42:f5: b7:79:71:94:45:a0:72:0a:7a:23:d8:27:6f:24:59:9c:18:34: bf:8f:e2:fe:a4:0b:ed:38:63:4f:d8:c2:88:d8:c1:80:56:1a: ad:d5:55:71:86:20:c5:b9:90:c9:aa:88:9c:24:94:44:68:6c: 98:07:73:68:3f:e2:f1:52:35:1c:82:65:81:0b:23:fb:9c:e6: a1:ce:25:ae -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUatsqMKljS1+LEC+u8MMI6t6C7skwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MzhaFw0yNzA2MDQwNzEyMzhaMDMxMTAvBgNV BAMTKEQwQ0YyNkVFNUNDQjNBRTAwQzlEMkU5NzNCQzM0NDRBNThDMjcyOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg2xOtLLOKtpbXWSqKfC6QgZGG eTRw23NEJJsti7mI2duffQ6eDrTljdGRSatOZ0LevUL8Tso7dF06G/Zda/M6IoCd JPZMJ78plBntO3GsBBpPhsPnSefq/oaowUpaCpHyr/9Z3HQNmp/PGjdwp250tnTh cszSACAnCFn9LZ/Z/4tknzTcP1ohr/+7nHb8ayf58n/3iauFHteyF/UmyYKHkwx6 TI0OZ4D/AUei/ksE3Nl4FWXymPgM1/fr0bEfAoFwQmCh5ytr2CDo8bFYPWNh2h6u ZZe+eggTK3ILAO3C/sxHuNUuzZzIgNpCX25db41Qv0305FAAQ5qQ1PyjdeUFAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU0M8m7lzLOuAMnS6XO8NESljCcp0wHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMTM1MzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwW4wDQYJKoZIhvcNAQELBQADggEBAFN+ t49jSZqhiHJFeJLCzMLxNdOuDR1ujxdY3spPBlLh4GKukOa8dBOdcNlWQyD0PUd/ eyEuDmqRjS5sUm/KA90+PiHMg+IkYtMCpqH0hHvvLR6MUwyi9/4V63+N8Axo0lA+ p4S3jQuuRP66Nc7DYnAo72kWzPXDS7em2ajrQzfI3RZ/6ReV1CBiLTt7Q/vj8zxb op5Eg/ofOmFnrN5qmN3XZ3T9BwyRqoSRlLMX9uAeV+5C9bd5cZRFoHIKeiPYJ28k WZwYNL+P4v6kC+04Y0/YwojYwYBWGq3VVXGGIMW5kMmqiJwklERobJgHc2g/4vFS NRyCZYELI/uc5qHOJa4= -----END CERTIFICATE-----Generated at Fri Jun 12 07:02:47 2026 by rpki-client