$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS212271.roa File: AS212271.roa (raw, json) Hash identifier: 5g+5cmA7WIySarQ7EPZjKqtCCrzUwWCwzN2WeHeIQKI= Subject key identifier: 0B:F5:22:25:93:A5:F4:96:CA:8C:1C:29:E7:4E:E9:76:2A:D8:AC:C8 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 5D0B7CDC7339EAAA43460900C7361E527A7C0ADB Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS212271.roa Signing time: Fri 05 Jun 2026 07:12:45 +0000 ROA not before: Fri 05 Jun 2026 07:07:45 +0000 ROA not after: Fri 04 Jun 2027 07:12:45 +0000 asID: 212271 IP address blocks: 2a05:dfc1:3c00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 13:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:0b:7c:dc:73:39:ea:aa:43:46:09:00:c7:36:1e:52:7a:7c:0a:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:45 2026 GMT Not After : Jun 4 07:12:45 2027 GMT Subject: CN=0BF5222593A5F496CA8C1C29E74EE9762AD8ACC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e0:4f:18:ee:25:57:55:43:62:44:a7:f9:bd: d9:ed:63:72:9c:e1:1f:57:c2:f7:82:d4:21:43:5f: 05:b4:de:51:48:34:2f:77:5f:f6:3e:0c:cf:49:29: 90:86:58:c7:1b:e1:21:cd:01:da:d4:a5:10:9a:cc: 38:3c:72:83:6e:3b:10:2a:99:5c:91:de:c7:ff:1c: 50:87:f0:2b:1d:83:e5:c3:ec:bd:7e:65:37:07:4d: 0e:e6:11:54:f0:49:06:d7:6e:c9:03:2a:fe:db:06: 56:73:9d:23:9a:ad:12:93:75:00:fd:95:60:20:f0: 04:3c:38:fb:e0:64:56:0f:1e:9d:16:24:eb:a4:5a: db:35:21:f5:92:91:45:62:27:cb:9d:69:f7:50:8f: 26:8c:a9:12:19:0a:bb:95:11:22:a5:28:4e:24:64: 3f:9c:13:e8:5b:7e:c1:ac:b7:a2:44:95:a2:0e:d5: 3a:25:63:cb:0b:33:a3:a7:62:2e:e9:f6:30:02:ad: ae:7a:36:19:87:9f:84:2d:39:d4:4b:cb:48:cc:49: 63:dc:b9:c0:44:8b:6a:97:a2:29:14:e9:94:ce:60: 26:54:c7:57:fe:23:b0:df:fc:1a:cd:36:83:9e:12: 33:00:aa:6e:2b:3d:7a:a7:1f:34:6b:2f:79:49:85: 82:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F5:22:25:93:A5:F4:96:CA:8C:1C:29:E7:4E:E9:76:2A:D8:AC:C8 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS212271.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:3c00::/40 Signature Algorithm: sha256WithRSAEncryption d9:63:fe:7e:9c:20:eb:86:1e:74:f8:39:fe:df:59:5a:fe:49: 1d:5e:87:70:9d:d2:b8:ef:62:04:24:27:c3:4f:69:e7:52:5e: a9:6b:2a:f4:51:d1:67:f0:f9:49:d4:cb:57:72:b2:e2:a9:cd: 97:e0:16:36:ab:6c:ca:8c:9e:51:c5:82:49:16:cf:e9:67:1f: 58:09:7a:49:9a:48:6c:74:e7:50:9e:f6:a1:a6:c4:c6:94:44: b0:fc:32:d8:0c:66:07:d0:a0:b1:ae:92:9c:16:5a:42:1a:f7: b8:e7:f9:cd:6d:8c:03:79:d0:14:2a:66:95:5b:52:05:14:90: 59:d7:0c:92:5e:34:c7:a8:b9:f1:75:1e:79:39:98:a7:33:17: 35:5d:4b:26:d3:a3:2d:fa:f8:91:b2:55:9e:30:b0:06:15:33: 48:cf:84:1c:17:0a:a1:c3:40:04:d9:5e:00:f6:75:c8:47:c0: 2b:29:86:2f:a6:45:22:69:cc:bd:33:15:4e:69:de:43:a6:71: 72:7f:9d:67:a6:6a:62:84:d5:67:64:2f:fa:84:6c:2e:60:0f: 3f:e7:ad:59:ce:00:d5:1c:a4:c9:ec:f1:1f:eb:26:c0:b7:28: 5b:df:60:a8:75:e8:07:31:61:10:88:fa:7c:95:a8:b6:04:2c: 2c:e5:77:1f -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUXQt83HM56qpDRgkAxzYeUnp8CtswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3NDVaFw0yNzA2MDQwNzEyNDVaMDMxMTAvBgNV BAMTKDBCRjUyMjI1OTNBNUY0OTZDQThDMUMyOUU3NEVFOTc2MkFEOEFDQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC84E8Y7iVXVUNiRKf5vdntY3Kc 4R9XwveC1CFDXwW03lFINC93X/Y+DM9JKZCGWMcb4SHNAdrUpRCazDg8coNuOxAq mVyR3sf/HFCH8Csdg+XD7L1+ZTcHTQ7mEVTwSQbXbskDKv7bBlZznSOarRKTdQD9 lWAg8AQ8OPvgZFYPHp0WJOukWts1IfWSkUViJ8udafdQjyaMqRIZCruVESKlKE4k ZD+cE+hbfsGst6JElaIO1TolY8sLM6OnYi7p9jACra56NhmHn4QtOdRLy0jMSWPc ucBEi2qXoikU6ZTOYCZUx1f+I7Df/BrNNoOeEjMAqm4rPXqnHzRrL3lJhYIlAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUC/UiJZOl9JbKjBwp507pdirYrMgwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjEyMjcxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwTwwDQYJKoZIhvcNAQELBQADggEBANlj /n6cIOuGHnT4Of7fWVr+SR1eh3Cd0rjvYgQkJ8NPaedSXqlrKvRR0Wfw+UnUy1dy suKpzZfgFjarbMqMnlHFgkkWz+lnH1gJekmaSGx051Ce9qGmxMaURLD8MtgMZgfQ oLGukpwWWkIa97jn+c1tjAN50BQqZpVbUgUUkFnXDJJeNMeoufF1Hnk5mKczFzVd SybToy36+JGyVZ4wsAYVM0jPhBwXCqHDQATZXgD2dchHwCsphi+mRSJpzL0zFU5p 3kOmcXJ/nWemamKE1WdkL/qEbC5gDz/nrVnOANUcpMns8R/rJsC3KFvfYKh16Acx YRCI+nyVqLYELCzldx8= -----END CERTIFICATE-----Generated at Thu Jun 11 16:47:23 2026 by rpki-client