$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS206919.roa File: AS206919.roa (raw, json) Hash identifier: loiUAEO4dG44YGDDxFhwUOJbo4QXVdW5vGa3sTwI/QU= Subject key identifier: CF:6F:5A:C0:C4:F7:1A:B9:62:9E:03:19:C8:6D:85:10:82:7E:90:A8 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 7046C8E8041A1C299F63CC19F3DA6A636DDE9EC6 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS206919.roa Signing time: Fri 04 Jul 2025 06:53:27 +0000 ROA not before: Fri 04 Jul 2025 06:48:27 +0000 ROA not after: Fri 03 Jul 2026 06:53:27 +0000 asID: 206919 IP address blocks: 2a05:dfc1:1600::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 01:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:46:c8:e8:04:1a:1c:29:9f:63:cc:19:f3:da:6a:63:6d:de:9e:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:27 2025 GMT Not After : Jul 3 06:53:27 2026 GMT Subject: CN=CF6F5AC0C4F71AB9629E0319C86D8510827E90A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3c:bd:65:50:6c:6c:51:9f:ce:f6:6f:14:c7: 9f:dc:c0:66:85:15:77:ae:c8:c9:8a:6d:93:6d:ad: 56:22:08:e5:5a:92:0a:f3:f6:1d:9e:54:89:16:a2: 38:65:ce:96:eb:02:85:42:6e:98:26:c7:94:cd:fc: a2:87:2c:0b:b1:5c:6c:d4:8f:70:a9:d3:63:e8:08: 5c:f8:96:70:b9:be:e7:ab:f7:7c:be:5a:2a:b3:a5: c7:0d:65:30:d5:09:aa:a2:82:53:7f:3c:4d:ef:5b: 02:90:61:68:a4:48:6e:05:94:e9:52:a3:22:93:07: b7:2b:dd:e5:21:10:ec:6b:9a:85:58:73:d3:fc:34: 51:f4:e2:bf:9c:65:e1:26:6f:6f:10:12:bc:0e:48: 2b:db:f3:93:18:ba:d5:1b:cb:89:ea:d8:24:74:74: 9b:91:48:8a:97:d9:05:77:ef:09:9f:23:b7:9d:de: d3:a4:b3:d0:fc:4b:4e:1b:74:97:5a:3a:98:dc:70: 93:35:f0:ac:50:e9:b2:e8:7c:5c:77:d7:a3:0b:f6: b6:e2:a3:2e:29:ac:b5:af:b7:32:71:09:eb:49:0f: 32:dc:ae:5b:e5:80:99:cd:dd:ad:e5:d7:4e:5c:cb: c7:77:b2:1d:98:89:3d:78:d5:a2:ee:c0:af:f0:2a: fb:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:6F:5A:C0:C4:F7:1A:B9:62:9E:03:19:C8:6D:85:10:82:7E:90:A8 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS206919.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:1600::/40 Signature Algorithm: sha256WithRSAEncryption 45:9a:22:bd:87:22:fc:b1:5e:9f:a2:26:32:c2:d8:27:17:2e: 6f:d0:07:af:60:a6:39:fa:4c:9e:69:19:e6:43:0c:8a:7e:63: aa:fa:cd:3a:14:2c:3b:ec:24:9e:ff:33:68:be:98:b3:81:51: 0c:37:c5:e7:84:78:04:5d:12:66:41:7a:a8:db:95:01:8d:d4: a5:23:2b:f8:5b:70:af:5b:0f:6b:97:10:6d:a3:91:33:96:87: 7a:5c:15:ae:1f:ef:d6:91:81:41:8f:28:ff:77:61:34:33:9b: d4:dc:c4:77:f8:a5:da:a5:e8:31:24:fe:fc:be:03:8a:45:b0: 15:29:67:06:ab:52:ee:f9:0e:f3:f4:2f:cf:ef:71:62:75:89: 29:6e:5a:26:f7:ff:b3:45:b6:3d:47:f9:53:05:0c:cf:fc:ae: aa:73:08:b5:78:91:94:ea:e0:68:44:17:79:cb:61:5a:a2:ce: 0c:5e:e7:28:7d:8a:4f:f3:ac:9b:3b:16:e9:2e:d8:73:f6:71: 2c:64:15:d9:3e:f1:c3:1b:28:0a:95:80:5a:8f:e9:5b:be:a6: f0:dc:fa:67:27:63:83:a6:6d:6b:e4:fe:27:4b:1a:4f:7c:97: 86:08:42:f8:bf:e4:69:68:d7:02:eb:9c:e1:7e:7b:fa:ee:18: 23:19:3e:96 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUcEbI6AQaHCmfY8wZ89pqY23ensYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MjdaFw0yNjA3MDMwNjUzMjdaMDMxMTAvBgNV BAMTKENGNkY1QUMwQzRGNzFBQjk2MjlFMDMxOUM4NkQ4NTEwODI3RTkwQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLPL1lUGxsUZ/O9m8Ux5/cwGaF FXeuyMmKbZNtrVYiCOVakgrz9h2eVIkWojhlzpbrAoVCbpgmx5TN/KKHLAuxXGzU j3Cp02PoCFz4lnC5vuer93y+WiqzpccNZTDVCaqiglN/PE3vWwKQYWikSG4FlOlS oyKTB7cr3eUhEOxrmoVYc9P8NFH04r+cZeEmb28QErwOSCvb85MYutUby4nq2CR0 dJuRSIqX2QV37wmfI7ed3tOks9D8S04bdJdaOpjccJM18KxQ6bLofFx316ML9rbi oy4prLWvtzJxCetJDzLcrlvlgJnN3a3l105cy8d3sh2YiT141aLuwK/wKvsLAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUz29awMT3GrlingMZyG2FEIJ+kKgwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjA2OTE5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwRYwDQYJKoZIhvcNAQELBQADggEBAEWa Ir2HIvyxXp+iJjLC2CcXLm/QB69gpjn6TJ5pGeZDDIp+Y6r6zToULDvsJJ7/M2i+ mLOBUQw3xeeEeARdEmZBeqjblQGN1KUjK/hbcK9bD2uXEG2jkTOWh3pcFa4f79aR gUGPKP93YTQzm9TcxHf4pdql6DEk/vy+A4pFsBUpZwarUu75DvP0L8/vcWJ1iSlu Wib3/7NFtj1H+VMFDM/8rqpzCLV4kZTq4GhEF3nLYVqizgxe5yh9ik/zrJs7Fuku 2HP2cSxkFdk+8cMbKAqVgFqP6Vu+pvDc+mcnY4OmbWvk/idLGk98l4YIQvi/5Glo 1wLrnOF+e/ruGCMZPpY= -----END CERTIFICATE-----Generated at Sat Jul 5 04:05:59 2025 by rpki-client