$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS213236.roa File: AS213236.roa (raw, json) Hash identifier: Wfqhmt3iFK51oEq59vSklad8xqTArjR8+w8qfxaqiRE= Subject key identifier: C7:16:CC:A9:77:E9:08:30:1D:7D:74:EB:7F:30:F4:56:4E:35:A5:53 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 78E0778271ED5C38628DDB74EBC7DCE138322C94 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS213236.roa Signing time: Fri 04 Jul 2025 06:53:24 +0000 ROA not before: Fri 04 Jul 2025 06:48:24 +0000 ROA not after: Fri 03 Jul 2026 06:53:24 +0000 asID: 213236 IP address blocks: 2a05:dfc1:4600::/40 maxlen: 48 2a05:dfc1:4700::/40 maxlen: 40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:e0:77:82:71:ed:5c:38:62:8d:db:74:eb:c7:dc:e1:38:32:2c:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:24 2025 GMT Not After : Jul 3 06:53:24 2026 GMT Subject: CN=C716CCA977E908301D7D74EB7F30F4564E35A553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bc:15:87:43:76:d0:f4:f0:f0:62:cb:6c:30: 61:e8:79:59:1d:56:1b:e9:98:0c:bf:68:ed:a3:2b: 5d:be:ea:33:2a:1b:8d:f8:81:b2:bf:f8:5f:be:8d: 0e:c4:3d:9c:6d:4a:4b:d3:7a:ea:30:57:7c:37:e2: 4b:c0:3e:dd:45:67:3f:f4:2f:5a:d8:96:9d:0d:a5: 24:84:87:60:fd:8d:dd:61:f1:d8:de:ae:a2:20:ba: 30:a8:a3:d2:bb:d3:91:3c:f9:3b:d6:d9:20:7c:3e: 58:bf:9f:88:b3:b6:c9:6b:d8:be:ad:26:9a:87:a0: 99:a5:2b:01:e7:bb:2b:a3:ca:80:63:26:eb:dc:47: f3:6e:77:c9:2e:dc:81:b8:17:4e:a1:a8:8b:74:9a: 93:c2:43:2f:89:26:a9:20:13:ba:45:a7:29:35:4e: 47:3b:4a:71:a3:55:15:b9:fc:d2:e0:d4:2c:81:2e: 1d:d6:8a:17:1d:a6:6f:9d:f6:a4:cb:39:6e:3b:f8: 36:6a:8f:91:32:18:98:56:7b:e9:72:a6:60:94:8f: 7e:33:f8:f8:fa:a4:69:10:0c:3f:74:65:b3:2e:fa: df:35:a4:be:02:ef:ad:ee:ca:1d:a7:53:5e:97:32: a4:f5:59:60:27:91:50:8a:10:fd:f7:00:d3:a1:d8: dc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:16:CC:A9:77:E9:08:30:1D:7D:74:EB:7F:30:F4:56:4E:35:A5:53 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS213236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:4600::/39 Signature Algorithm: sha256WithRSAEncryption 65:a4:56:d4:9c:96:56:56:af:1c:d3:26:a9:de:91:27:c8:59: 32:cf:af:97:c5:d0:c6:2f:bc:fc:59:e6:13:15:83:7d:69:4b: 5b:f6:28:61:5e:36:a4:c6:b3:5c:c6:ea:88:27:74:da:25:50: 64:61:3a:3b:8c:5e:96:7d:43:b1:a5:8a:8c:d1:00:5f:b8:16: d5:65:28:7d:25:44:e2:ed:cb:c4:56:ff:e8:93:4d:8c:cc:03: 96:92:bd:4b:cc:8d:59:f7:a9:a1:56:6e:31:22:e3:76:66:19: 57:12:01:d2:54:a6:58:f4:d0:5f:fe:fc:d5:36:2c:22:3c:9e: 72:b9:d1:5a:0d:20:24:d4:db:a2:aa:bd:05:d3:9d:3a:27:c2: 21:4a:22:05:ec:0f:75:c4:38:db:05:00:93:c8:14:e5:54:47: f7:66:19:a7:73:a9:92:37:04:c2:88:ee:22:3e:bf:d5:88:af: 9e:c4:e2:61:1c:73:2c:24:e8:50:7b:9e:91:03:7d:28:89:48: 37:75:b2:83:5b:39:63:25:12:1f:82:81:89:80:51:9e:3f:0a: d8:77:f8:5b:eb:0e:97:ef:a7:68:b5:c2:0d:8f:8b:42:1d:37: ce:cc:bf:d5:80:25:4f:c1:52:a0:c5:93:ab:10:c0:d6:8e:45: f0:ce:83:04 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUeOB3gnHtXDhijdt068fc4TgyLJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MjRaFw0yNjA3MDMwNjUzMjRaMDMxMTAvBgNV BAMTKEM3MTZDQ0E5NzdFOTA4MzAxRDdENzRFQjdGMzBGNDU2NEUzNUE1NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmvBWHQ3bQ9PDwYstsMGHoeVkd VhvpmAy/aO2jK12+6jMqG434gbK/+F++jQ7EPZxtSkvTeuowV3w34kvAPt1FZz/0 L1rYlp0NpSSEh2D9jd1h8djerqIgujCoo9K705E8+TvW2SB8Pli/n4iztslr2L6t JpqHoJmlKwHnuyujyoBjJuvcR/Nud8ku3IG4F06hqIt0mpPCQy+JJqkgE7pFpyk1 Tkc7SnGjVRW5/NLg1CyBLh3Wihcdpm+d9qTLOW47+DZqj5EyGJhWe+lypmCUj34z +Pj6pGkQDD90ZbMu+t81pL4C763uyh2nU16XMqT1WWAnkVCKEP33ANOh2NxvAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUxxbMqXfpCDAdfXTrfzD0Vk41pVMwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjEzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYBKgXfwUYwDQYJKoZIhvcNAQELBQADggEBAGWk VtScllZWrxzTJqnekSfIWTLPr5fF0MYvvPxZ5hMVg31pS1v2KGFeNqTGs1zG6ogn dNolUGRhOjuMXpZ9Q7GliozRAF+4FtVlKH0lROLty8RW/+iTTYzMA5aSvUvMjVn3 qaFWbjEi43ZmGVcSAdJUplj00F/+/NU2LCI8nnK50VoNICTU26KqvQXTnTonwiFK IgXsD3XEONsFAJPIFOVUR/dmGadzqZI3BMKI7iI+v9WIr57E4mEccywk6FB7npED fSiJSDd1soNbOWMlEh+CgYmAUZ4/Cth3+FvrDpfvp2i1wg2Pi0IdN87Mv9WAJU/B UqDFk6sQwNaORfDOgwQ= -----END CERTIFICATE-----Generated at Sat Jul 5 04:18:44 2025 by rpki-client