$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS212271.roa File: AS212271.roa (raw, json) Hash identifier: 0HHiIqL60Xjth5k8Uu7tBpg5Wox5YzZAq+JO+FowOqE= Subject key identifier: 85:4C:DD:B2:EE:0D:82:C7:AD:EA:FA:F5:A6:45:D3:11:D3:28:C5:97 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 7A45DE524AAE040A1BC129A2B25E5774728115CF Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS212271.roa Signing time: Fri 04 Jul 2025 06:53:14 +0000 ROA not before: Fri 04 Jul 2025 06:48:14 +0000 ROA not after: Fri 03 Jul 2026 06:53:14 +0000 asID: 212271 IP address blocks: 2a05:dfc1:3c00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:45:de:52:4a:ae:04:0a:1b:c1:29:a2:b2:5e:57:74:72:81:15:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:14 2025 GMT Not After : Jul 3 06:53:14 2026 GMT Subject: CN=854CDDB2EE0D82C7ADEAFAF5A645D311D328C597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3b:5a:14:1a:b2:fb:30:ab:38:7e:fb:2f:40: d9:03:f5:27:92:3c:8f:63:bb:f5:f9:6e:b8:c5:b5: d2:17:dc:52:e9:f8:ea:ae:64:3e:e0:01:b6:de:95: eb:35:98:93:d6:25:72:3f:c2:04:db:10:53:ef:e4: 9c:1c:46:70:88:e0:64:f8:a4:2f:a4:66:21:cc:2d: f1:27:21:82:b9:ae:9b:7b:0c:cd:40:e8:9f:e1:3c: f6:43:71:8c:d1:4d:ac:7a:59:5e:e9:38:49:39:46: 71:1a:c3:22:5e:87:fd:ea:6c:2f:1d:f5:fe:9c:6b: ce:3e:ad:9c:d6:5b:af:a8:24:53:14:a9:82:99:5c: 99:6b:a3:0e:18:c9:05:00:8e:5d:bf:85:a5:60:2e: af:e0:33:06:bd:0c:54:db:ba:b1:a4:a9:37:4a:37: d4:70:bd:5b:04:28:17:0a:f0:7f:c0:9d:71:69:9a: 44:51:17:aa:22:29:6b:0d:9c:ab:21:e6:29:29:2c: d0:51:a1:f8:da:e7:40:aa:46:e1:af:36:21:85:e9: 01:d3:7d:63:47:70:13:57:36:5d:61:5f:d5:62:be: 21:44:30:87:3a:07:84:0f:5e:82:33:ae:77:db:00: 52:95:ca:be:0e:4e:8c:46:f7:cc:91:dc:f2:15:03: 37:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:4C:DD:B2:EE:0D:82:C7:AD:EA:FA:F5:A6:45:D3:11:D3:28:C5:97 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS212271.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:3c00::/40 Signature Algorithm: sha256WithRSAEncryption c8:3a:ba:0b:4c:2b:7d:e1:c4:a2:c5:ce:f0:35:54:e5:86:bb: 09:58:44:88:88:27:b5:8a:59:cb:a0:71:1f:3b:e0:af:9c:33: 16:ad:7f:d5:95:33:e0:20:3f:7d:ba:63:ef:20:f5:d9:d9:35: 89:e2:07:f0:0e:5d:1e:39:20:e2:71:f6:a5:d3:ad:34:15:21: 22:40:7c:14:9b:54:35:7c:45:be:74:43:1f:4e:56:21:cb:bc: e4:c8:33:12:0b:4a:e8:05:8a:aa:1f:fd:88:26:49:4a:c4:70: d9:45:11:2e:4b:3e:00:f1:67:3c:5b:df:77:90:e2:69:8a:cc: cd:f7:83:aa:8a:7f:86:e2:d4:4d:0b:a8:1d:c1:c0:fe:ca:eb: d5:5d:94:ed:df:d2:01:0e:65:dc:6a:bd:9e:cc:45:49:f5:41: e0:f6:37:5e:bf:2b:c2:c4:a0:e0:99:3d:eb:ac:12:9a:f9:59: 09:23:fb:6d:ab:32:aa:a0:e5:f3:77:2b:c4:6f:99:95:2c:c6: 03:bb:97:ad:a4:59:81:7c:70:95:67:f4:a7:2d:f7:57:9c:03: 3f:2b:1c:e3:23:fd:5e:cc:ee:cf:44:a8:4b:b8:3e:6c:89:9c: 89:81:87:ec:70:45:ef:d8:55:fd:0c:63:0e:33:e4:dc:f2:14: ee:7c:4f:a3 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUekXeUkquBAobwSmisl5XdHKBFc8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MTRaFw0yNjA3MDMwNjUzMTRaMDMxMTAvBgNV BAMTKDg1NENEREIyRUUwRDgyQzdBREVBRkFGNUE2NDVEMzExRDMyOEM1OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4O1oUGrL7MKs4fvsvQNkD9SeS PI9ju/X5brjFtdIX3FLp+OquZD7gAbbeles1mJPWJXI/wgTbEFPv5JwcRnCI4GT4 pC+kZiHMLfEnIYK5rpt7DM1A6J/hPPZDcYzRTax6WV7pOEk5RnEawyJeh/3qbC8d 9f6ca84+rZzWW6+oJFMUqYKZXJlrow4YyQUAjl2/haVgLq/gMwa9DFTburGkqTdK N9RwvVsEKBcK8H/AnXFpmkRRF6oiKWsNnKsh5ikpLNBRofja50CqRuGvNiGF6QHT fWNHcBNXNl1hX9ViviFEMIc6B4QPXoIzrnfbAFKVyr4OToxG98yR3PIVAzfbAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUhUzdsu4Ngset6vr1pkXTEdMoxZcwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjEyMjcxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwTwwDQYJKoZIhvcNAQELBQADggEBAMg6 ugtMK33hxKLFzvA1VOWGuwlYRIiIJ7WKWcugcR874K+cMxatf9WVM+AgP326Y+8g 9dnZNYniB/AOXR45IOJx9qXTrTQVISJAfBSbVDV8Rb50Qx9OViHLvOTIMxILSugF iqof/YgmSUrEcNlFES5LPgDxZzxb33eQ4mmKzM33g6qKf4bi1E0LqB3BwP7K69Vd lO3f0gEOZdxqvZ7MRUn1QeD2N16/K8LEoOCZPeusEpr5WQkj+22rMqqg5fN3K8Rv mZUsxgO7l62kWYF8cJVn9Kct91ecAz8rHOMj/V7M7s9EqEu4PmyJnImBh+xwRe/Y Vf0MYw4z5NzyFO58T6M= -----END CERTIFICATE-----Generated at Sat Jul 5 04:03:38 2025 by rpki-client