$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS202939.roa File: AS202939.roa (raw, json) Hash identifier: fXL/FeQHwz/SDL9608g1256zW4xo3bt6oZETcI4i6/w= Subject key identifier: 6A:4A:37:82:80:77:D6:90:9A:8E:27:9B:71:F7:7B:5A:78:4F:EC:E9 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 621BF96E42107D0115458EA098EBD0AEB5DF59C9 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS202939.roa Signing time: Fri 05 Jun 2026 07:12:37 +0000 ROA not before: Fri 05 Jun 2026 07:07:37 +0000 ROA not after: Fri 04 Jun 2027 07:12:37 +0000 asID: 202939 IP address blocks: 2a0a:6040:3500::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Jun 2026 21:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:1b:f9:6e:42:10:7d:01:15:45:8e:a0:98:eb:d0:ae:b5:df:59:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:37 2026 GMT Not After : Jun 4 07:12:37 2027 GMT Subject: CN=6A4A37828077D6909A8E279B71F77B5A784FECE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5e:b1:15:e7:22:d7:a9:a1:8c:04:14:37:36: 8e:82:d0:f3:06:01:73:e3:a4:d3:a7:e8:79:1f:fb: 71:52:e5:c3:b9:14:7d:dc:0b:b6:2f:50:13:68:f3: 91:fc:e5:0f:41:47:9e:06:cd:b3:0f:7f:49:97:d7: 2d:30:88:53:1a:25:85:9b:81:45:48:86:db:7d:5a: ea:46:61:70:c4:09:24:17:31:e7:d9:64:1b:2f:22: 18:58:6e:83:54:5d:81:db:7f:9d:4a:36:c5:e2:4d: fe:85:11:db:c8:d3:15:4c:d2:5f:fd:3b:39:84:19: 30:08:a6:c3:25:9d:eb:8b:0f:86:7c:d0:20:94:c0: fc:df:50:5c:48:46:8e:b6:f5:c9:50:69:e6:d3:35: 3a:c3:24:28:ec:41:0c:6f:ed:cc:d3:f0:04:08:ad: 50:dc:03:51:26:c7:e1:48:eb:bb:74:24:01:12:3b: d8:4a:3e:f9:dd:ef:99:d9:f7:0b:8a:d4:66:1a:6d: d3:64:79:ec:6e:c6:1e:19:19:b4:ce:56:35:bf:0e: 4a:1b:4b:7c:4f:26:a2:be:b6:c7:80:40:43:61:71: 68:a9:ac:21:0f:65:df:cf:53:ed:2d:7e:ff:b0:d3: ec:e9:35:b8:ab:c3:71:2e:72:c0:17:e6:5f:27:e9: 53:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:4A:37:82:80:77:D6:90:9A:8E:27:9B:71:F7:7B:5A:78:4F:EC:E9 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS202939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:3500::/40 Signature Algorithm: sha256WithRSAEncryption 4f:06:1f:94:1d:68:67:61:32:0b:30:f7:b4:ed:a3:94:4d:7f: ff:89:a0:03:e4:07:86:81:ea:41:e0:7b:48:e2:4d:2d:06:0c: ea:69:87:f9:a3:cc:30:8f:e6:1a:f4:b0:62:30:8e:e3:3d:2a: 0a:59:2e:ff:15:4c:d5:ac:cd:c8:d9:06:7d:a6:7b:b4:d1:d1: ba:f1:6f:50:39:83:50:db:18:cf:3f:8b:06:b1:a3:98:43:79: d3:0e:e8:96:ae:d1:69:ff:c9:a8:34:f1:2c:2a:fc:87:69:ac: 4d:57:ca:40:97:5f:c1:3c:da:c2:0c:92:42:10:1d:4c:e7:c7: 17:46:b2:c1:d2:d2:1a:b7:92:c1:dd:e8:5a:64:9c:30:69:e4: 99:48:ca:40:25:cd:7e:75:c5:63:41:4f:f8:ba:1f:18:d6:75: fb:55:3e:8a:8a:ef:ee:04:fd:c8:3d:6f:c8:7f:12:14:38:69: 71:c6:94:60:65:45:16:01:10:62:ad:a6:e5:d5:ea:eb:3a:44: 89:19:1a:d7:22:23:72:49:dc:7c:f0:b4:e8:a1:14:a9:0e:ca: 04:dd:32:6e:6f:81:2b:24:13:86:6a:ea:ff:bb:37:da:05:bd: 8e:f0:4e:dd:b3:a8:3c:08:ff:94:33:e1:29:00:13:6d:d4:1c: 51:96:40:02 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUYhv5bkIQfQEVRY6gmOvQrrXfWckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MzdaFw0yNzA2MDQwNzEyMzdaMDMxMTAvBgNV BAMTKDZBNEEzNzgyODA3N0Q2OTA5QThFMjc5QjcxRjc3QjVBNzg0RkVDRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbXrEV5yLXqaGMBBQ3No6C0PMG AXPjpNOn6Hkf+3FS5cO5FH3cC7YvUBNo85H85Q9BR54GzbMPf0mX1y0wiFMaJYWb gUVIhtt9WupGYXDECSQXMefZZBsvIhhYboNUXYHbf51KNsXiTf6FEdvI0xVM0l/9 OzmEGTAIpsMlneuLD4Z80CCUwPzfUFxIRo629clQaebTNTrDJCjsQQxv7czT8AQI rVDcA1Emx+FI67t0JAESO9hKPvnd75nZ9wuK1GYabdNkeexuxh4ZGbTOVjW/Dkob S3xPJqK+tseAQENhcWiprCEPZd/PU+0tfv+w0+zpNbirw3EucsAX5l8n6VOhAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUako3goB31pCajiebcfd7WnhP7OkwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAyOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQDUwDQYJKoZIhvcNAQELBQADggEBAE8G H5QdaGdhMgsw97Tto5RNf/+JoAPkB4aB6kHge0jiTS0GDOpph/mjzDCP5hr0sGIw juM9KgpZLv8VTNWszcjZBn2me7TR0brxb1A5g1DbGM8/iwaxo5hDedMO6Jau0Wn/ yag08Swq/IdprE1XykCXX8E82sIMkkIQHUznxxdGssHS0hq3ksHd6FpknDBp5JlI ykAlzX51xWNBT/i6HxjWdftVPoqK7+4E/cg9b8h/EhQ4aXHGlGBlRRYBEGKtpuXV 6us6RIkZGtciI3JJ3HzwtOihFKkOygTdMm5vgSskE4Zq6v+7N9oFvY7wTt2zqDwI /5Qz4SkAE23UHFGWQAI= -----END CERTIFICATE-----Generated at Sun Jun 7 02:56:20 2026 by rpki-client