$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216124.roa File: AS216124.roa (raw, json) Hash identifier: Dstttsb7hVnQVeWuVAeRDK/+pJ5rit6AfvqRBcWKFyM= Subject key identifier: 60:16:B4:16:BC:C6:87:6D:29:51:5F:73:6E:6B:57:CE:E9:97:60:BA Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 0F5DCE473CC53BCF002B2F462BB098F0C75C75E7 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216124.roa Signing time: Fri 04 Jul 2025 06:53:21 +0000 ROA not before: Fri 04 Jul 2025 06:48:21 +0000 ROA not after: Fri 03 Jul 2026 06:53:21 +0000 asID: 216124 IP address blocks: 2a05:dfc1:aa00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:5d:ce:47:3c:c5:3b:cf:00:2b:2f:46:2b:b0:98:f0:c7:5c:75:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:21 2025 GMT Not After : Jul 3 06:53:21 2026 GMT Subject: CN=6016B416BCC6876D29515F736E6B57CEE99760BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a9:bd:dc:fb:62:c1:3f:aa:ef:40:ba:1c:6b: c1:8f:21:ee:64:b6:56:a2:3e:19:70:43:aa:ea:29: e2:c5:6b:df:48:71:f1:2e:d1:a3:ac:6c:74:58:0a: 85:0a:e7:0d:0d:17:b5:5d:74:e4:21:71:8b:66:16: 71:af:42:64:47:8f:56:c7:f9:11:06:7d:a1:f5:13: a0:af:db:5d:7f:2e:3d:00:43:34:1a:f5:67:9d:b3: 83:d8:fa:9d:3a:1f:65:3d:05:c9:7c:b1:f1:81:6a: be:5f:9f:0f:34:56:54:fe:4d:82:3b:0d:18:e4:1a: ff:76:42:0c:77:8c:c4:2e:1f:5f:03:17:0d:24:ab: 53:2c:a6:db:45:96:ca:cb:32:79:36:8d:65:a8:45: c3:d8:2e:8d:36:2e:c2:aa:e9:ba:22:3e:d2:5d:29: 47:6d:e8:16:5c:64:dc:fe:67:5b:c8:2a:74:01:7e: 5b:75:29:09:8e:6c:2f:8c:73:02:2a:f2:1b:90:85: 91:ec:da:dc:4a:0e:7d:8e:dd:30:9d:8c:39:85:c9: 3b:21:f6:ef:85:41:bf:62:ea:de:52:fa:17:c4:d9: 4e:3a:6e:5e:38:ee:e2:8e:fe:9d:5e:86:37:c3:00: 3a:b7:86:75:2e:d7:72:a7:e1:27:8c:0b:82:1d:e7: ba:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:16:B4:16:BC:C6:87:6D:29:51:5F:73:6E:6B:57:CE:E9:97:60:BA X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216124.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:aa00::/40 Signature Algorithm: sha256WithRSAEncryption 4f:b1:9a:31:03:34:18:43:60:3d:2a:d1:f6:4c:dc:b4:d8:ae: 85:d6:28:6d:e3:fb:b0:13:26:4f:d6:cc:7e:28:ff:f3:d5:42: 0d:5e:d7:80:b7:d4:dc:59:16:8f:bf:7c:b6:20:39:f0:a3:de: 68:1a:76:17:09:5f:d1:4b:9f:ca:66:d4:24:ba:a9:6d:32:01: 78:f7:02:ed:8b:d3:76:17:dd:f7:23:1b:93:60:0e:c0:e1:90: 5f:8d:60:fe:88:9a:1d:f9:04:86:f1:cf:e9:34:2d:53:c3:a6: 3c:9a:0a:a2:51:d1:b6:bc:f6:22:41:b2:3e:08:4c:88:96:0f: 6a:65:c6:41:ee:90:ae:91:0e:04:41:9a:35:16:bb:ad:cf:df: 72:8c:8c:c4:30:be:2d:85:2f:6f:24:3e:f5:6e:ad:0e:1e:04: f8:35:d8:10:8d:c7:1a:81:1a:86:ba:e8:a2:5a:a8:6d:50:a6: d6:f5:74:fe:06:40:af:7c:d7:ec:91:f7:27:ed:93:e4:54:b3: 5e:01:56:88:50:9a:3a:cb:79:da:d2:da:74:e3:33:f0:4c:50: 1a:d9:ba:b3:12:23:94:55:7b:e7:34:ea:53:9b:fe:3f:79:29: a1:71:0f:8b:12:d0:f5:7d:79:70:10:99:d4:f8:73:fe:a6:71: eb:60:b7:20 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUD13ORzzFO88AKy9GK7CY8MdcdecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MjFaFw0yNjA3MDMwNjUzMjFaMDMxMTAvBgNV BAMTKDYwMTZCNDE2QkNDNjg3NkQyOTUxNUY3MzZFNkI1N0NFRTk5NzYwQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0qb3c+2LBP6rvQLoca8GPIe5k tlaiPhlwQ6rqKeLFa99IcfEu0aOsbHRYCoUK5w0NF7VddOQhcYtmFnGvQmRHj1bH +REGfaH1E6Cv211/Lj0AQzQa9Weds4PY+p06H2U9Bcl8sfGBar5fnw80VlT+TYI7 DRjkGv92Qgx3jMQuH18DFw0kq1MspttFlsrLMnk2jWWoRcPYLo02LsKq6boiPtJd KUdt6BZcZNz+Z1vIKnQBflt1KQmObC+McwIq8huQhZHs2txKDn2O3TCdjDmFyTsh 9u+FQb9i6t5S+hfE2U46bl447uKO/p1ehjfDADq3hnUu13Kn4SeMC4Id57oTAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUYBa0FrzGh20pUV9zbmtXzumXYLowHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjE2MTI0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwaowDQYJKoZIhvcNAQELBQADggEBAE+x mjEDNBhDYD0q0fZM3LTYroXWKG3j+7ATJk/WzH4o//PVQg1e14C31NxZFo+/fLYg OfCj3mgadhcJX9FLn8pm1CS6qW0yAXj3Au2L03YX3fcjG5NgDsDhkF+NYP6Imh35 BIbxz+k0LVPDpjyaCqJR0ba89iJBsj4ITIiWD2plxkHukK6RDgRBmjUWu63P33KM jMQwvi2FL28kPvVurQ4eBPg12BCNxxqBGoa66KJaqG1Qptb1dP4GQK981+yR9yft k+RUs14BVohQmjrLedrS2nTjM/BMUBrZurMSI5RVe+c06lOb/j95KaFxD4sS0PV9 eXAQmdT4c/6mcetgtyA= -----END CERTIFICATE-----Generated at Sat Jul 5 04:02:05 2025 by rpki-client