$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS210562.roa File: AS210562.roa (raw, json) Hash identifier: SZjQL3qJuYb7G06+kAAUGYuXyZs4gSLH59M1+LTZYKw= Subject key identifier: BD:21:6B:ED:15:71:5C:5C:30:38:A1:CC:3C:2A:E5:6D:6A:07:A7:48 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 7A4390475F4F176E4563DDFFE9A714E7C087D2AA Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS210562.roa Signing time: Fri 04 Jul 2025 06:53:11 +0000 ROA not before: Fri 04 Jul 2025 06:48:11 +0000 ROA not after: Fri 03 Jul 2026 06:53:11 +0000 asID: 210562 IP address blocks: 2a0a:6040:ca00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:43:90:47:5f:4f:17:6e:45:63:dd:ff:e9:a7:14:e7:c0:87:d2:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:11 2025 GMT Not After : Jul 3 06:53:11 2026 GMT Subject: CN=BD216BED15715C5C3038A1CC3C2AE56D6A07A748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0b:c2:3b:b2:3d:18:b1:6f:cf:ab:ea:fb:99: ac:20:b6:52:87:3e:2a:45:25:da:02:65:cc:00:34: ea:9e:49:6c:2f:a0:9f:1d:82:93:d9:dc:b9:97:da: 02:c2:9d:86:c2:51:4a:1d:21:04:02:b5:07:39:c9: 04:d3:7e:c8:07:46:d3:ad:57:29:32:99:7b:e2:51: 05:26:05:74:a4:a1:97:73:60:ad:78:2b:24:db:b2: 26:00:cb:b3:db:eb:d6:52:fa:64:39:df:62:27:7e: 07:be:33:3c:1e:87:9a:2f:a3:c5:0e:3c:b8:05:d5: 89:2b:65:45:55:ad:34:82:b5:77:94:06:24:ec:e5: 9f:0e:01:d0:14:38:00:90:3d:4a:ff:9b:7c:0f:8c: 54:48:64:d9:dd:f8:c5:fd:68:ec:b4:1e:a5:47:94: 3d:6c:4c:0f:62:40:4b:c0:cf:84:01:1d:3e:11:3a: 94:a4:ce:ca:25:83:8a:89:85:1c:ad:21:b7:ed:f2: 51:ba:2c:40:6e:b5:51:9f:6a:6f:2e:56:c3:e8:7f: 6e:f7:90:68:6c:01:54:51:c9:d2:11:0b:7b:e5:99: c1:34:02:cd:1f:f5:c1:cb:6f:1f:f7:51:2f:ed:b4: 71:1f:2f:56:a0:1f:b4:e1:30:50:07:71:a6:72:23: 9d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:21:6B:ED:15:71:5C:5C:30:38:A1:CC:3C:2A:E5:6D:6A:07:A7:48 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS210562.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:ca00::/40 Signature Algorithm: sha256WithRSAEncryption a5:84:07:1e:a4:75:f5:af:87:3d:4f:2c:a1:04:91:0b:c2:74: ac:8d:9d:ba:78:11:aa:bc:d1:3f:e6:c0:9c:4d:04:90:35:ad: 4c:0e:db:e6:d3:0f:00:9c:b1:eb:80:a5:e2:98:af:de:47:a7: 09:09:a1:3d:52:6b:de:56:a9:b8:2d:a1:25:33:68:28:79:95: 4b:fa:f5:38:7e:e7:17:f5:b4:fe:d1:84:95:3e:25:88:d5:e2: f2:52:42:33:7f:2a:77:61:32:1b:20:bd:e5:57:ba:51:67:92: 98:60:a2:fb:f0:db:f9:3e:2e:33:87:ae:2c:b5:11:0e:78:52: f2:49:e1:13:e0:06:85:fc:e5:8e:5c:82:1a:4d:fc:63:d6:19: 0c:86:92:10:e6:75:54:ca:47:20:bc:94:e8:31:05:73:69:8b: 31:ed:0f:cf:bb:0a:a9:69:a9:71:ef:b7:42:32:18:fb:d5:69: e6:23:78:e5:55:f7:a9:92:41:19:eb:b5:1f:cc:1a:eb:4c:88: 41:bb:cb:4f:51:11:80:e3:07:8f:2b:1c:ce:68:24:80:27:e5: 9f:4d:5b:c7:d8:6a:fd:95:4d:0f:30:53:bf:fd:fa:a5:da:c8: ad:e8:04:f3:87:a6:be:35:6c:d7:ae:ef:11:7c:1a:03:c6:a4: a1:ad:1a:38 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUekOQR19PF25FY93/6acU58CH0qowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MTFaFw0yNjA3MDMwNjUzMTFaMDMxMTAvBgNV BAMTKEJEMjE2QkVEMTU3MTVDNUMzMDM4QTFDQzNDMkFFNTZENkEwN0E3NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5C8I7sj0YsW/Pq+r7mawgtlKH PipFJdoCZcwANOqeSWwvoJ8dgpPZ3LmX2gLCnYbCUUodIQQCtQc5yQTTfsgHRtOt VykymXviUQUmBXSkoZdzYK14KyTbsiYAy7Pb69ZS+mQ532Infge+Mzweh5ovo8UO PLgF1YkrZUVVrTSCtXeUBiTs5Z8OAdAUOACQPUr/m3wPjFRIZNnd+MX9aOy0HqVH lD1sTA9iQEvAz4QBHT4ROpSkzsolg4qJhRytIbft8lG6LEButVGfam8uVsPof273 kGhsAVRRydIRC3vlmcE0As0f9cHLbx/3US/ttHEfL1agH7ThMFAHcaZyI53fAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUvSFr7RVxXFwwOKHMPCrlbWoHp0gwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjEwNTYyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQMowDQYJKoZIhvcNAQELBQADggEBAKWE Bx6kdfWvhz1PLKEEkQvCdKyNnbp4Eaq80T/mwJxNBJA1rUwO2+bTDwCcseuApeKY r95HpwkJoT1Sa95WqbgtoSUzaCh5lUv69Th+5xf1tP7RhJU+JYjV4vJSQjN/Kndh MhsgveVXulFnkphgovvw2/k+LjOHriy1EQ54UvJJ4RPgBoX85Y5cghpN/GPWGQyG khDmdVTKRyC8lOgxBXNpizHtD8+7CqlpqXHvt0IyGPvVaeYjeOVV96mSQRnrtR/M GutMiEG7y09REYDjB48rHM5oJIAn5Z9NW8fYav2VTQ8wU7/9+qXayK3oBPOHpr41 bNeu7xF8GgPGpKGtGjg= -----END CERTIFICATE-----Generated at Sat Jul 5 06:04:10 2025 by rpki-client