$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216382.roa File: AS216382.roa (raw, json) Hash identifier: q01SqzsOEkAZSdmor9M+Gh+GSsp1EUXmlGupcI0i2yM= Subject key identifier: 73:8D:D8:03:82:F5:FE:20:03:B9:FB:56:A0:F3:05:49:62:E3:A2:D8 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 039DAB03E931D1334CFC04155F58F1414F9EB639 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216382.roa Signing time: Fri 04 Jul 2025 06:53:17 +0000 ROA not before: Fri 04 Jul 2025 06:48:17 +0000 ROA not after: Fri 03 Jul 2026 06:53:17 +0000 asID: 216382 IP address blocks: 2a05:dfc1:7f00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:9d:ab:03:e9:31:d1:33:4c:fc:04:15:5f:58:f1:41:4f:9e:b6:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:17 2025 GMT Not After : Jul 3 06:53:17 2026 GMT Subject: CN=738DD80382F5FE2003B9FB56A0F3054962E3A2D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:08:4e:95:f8:e1:28:e2:44:a8:24:dc:e2:ef: ed:36:6a:c7:48:89:17:53:3f:11:de:42:c0:2d:90: c4:7e:7a:7a:7d:13:06:3f:c1:de:32:97:41:50:83: a0:49:cb:44:7d:3b:47:2c:c5:1a:4b:35:bd:51:fe: 7b:66:88:b1:6c:f9:5b:3e:9e:3b:a9:66:a7:5b:cd: e4:45:12:04:b6:b6:21:52:1c:dd:ba:07:e4:b6:cc: c5:9c:ea:c5:17:c4:34:89:01:dd:b7:46:b3:76:5c: dc:ad:e4:91:52:a7:fa:8f:ad:f1:f6:c6:e6:24:df: bd:6e:3f:29:e8:25:bb:d6:26:40:7d:ec:10:f9:6b: 52:95:8c:51:ac:54:4c:5a:de:14:e5:f9:b9:e0:4c: 3c:94:c7:cb:24:fd:ca:17:97:41:4f:26:10:a2:51: a9:93:04:ae:ee:3b:3a:59:88:65:e0:81:22:73:53: f5:78:cc:5b:62:db:5d:cc:ec:e9:60:45:76:63:bb: 2b:25:a3:1b:f9:5c:17:ef:8f:10:b5:59:2a:97:d8: 7e:6c:0d:c2:45:6f:c0:6b:ac:de:67:65:08:3d:df: ed:be:3d:e5:e6:8f:c6:c8:7f:fb:13:77:68:e9:0d: f5:c4:45:00:8e:67:3d:89:d0:b6:7d:37:b8:e9:71: 84:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:8D:D8:03:82:F5:FE:20:03:B9:FB:56:A0:F3:05:49:62:E3:A2:D8 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216382.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:7f00::/40 Signature Algorithm: sha256WithRSAEncryption 8c:d5:9d:54:6e:20:28:7b:2e:85:97:17:e9:66:94:ed:8c:c3: 2d:e9:cf:11:fe:c8:62:73:f3:b9:9f:73:f3:e3:6f:29:71:8d: 71:99:4d:b2:e1:29:d9:94:a6:b1:08:a4:48:84:15:46:92:c5: 11:b8:93:79:eb:26:67:55:12:50:0b:f4:ee:e8:37:17:8a:87: f8:94:73:25:b3:10:e6:fe:35:6f:09:e5:6e:30:83:5b:e8:89: 72:35:2e:81:91:29:b0:d9:89:77:d4:a5:f0:ff:6e:3b:59:4b: 98:15:69:a0:76:49:b0:c9:a9:02:10:47:b5:cf:9a:31:b2:f4: 0d:f1:88:47:db:f9:d5:ba:7d:8e:e6:1d:82:42:d9:03:bf:b4: c7:89:2b:87:93:a6:2b:a4:50:73:1b:52:21:ca:6b:21:84:b4: 65:ce:0c:51:91:19:d1:c8:e8:79:7c:f2:4f:87:c4:c8:e1:39: 42:78:96:2e:b5:52:48:76:72:82:ce:49:71:6f:89:f8:94:7d: 21:12:15:9d:7e:6d:ea:ac:ff:21:0a:14:c5:a6:47:69:8a:13: f0:ce:9c:fb:9c:aa:d9:20:d8:6d:2c:e0:61:ab:ca:d3:76:56: db:ba:e1:2a:f7:79:f3:43:28:82:90:26:b5:b6:8a:68:f2:ab: a7:fe:24:c2 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUA52rA+kx0TNM/AQVX1jxQU+etjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MTdaFw0yNjA3MDMwNjUzMTdaMDMxMTAvBgNV BAMTKDczOEREODAzODJGNUZFMjAwM0I5RkI1NkEwRjMwNTQ5NjJFM0EyRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuCE6V+OEo4kSoJNzi7+02asdI iRdTPxHeQsAtkMR+enp9EwY/wd4yl0FQg6BJy0R9O0csxRpLNb1R/ntmiLFs+Vs+ njupZqdbzeRFEgS2tiFSHN26B+S2zMWc6sUXxDSJAd23RrN2XNyt5JFSp/qPrfH2 xuYk371uPynoJbvWJkB97BD5a1KVjFGsVExa3hTl+bngTDyUx8sk/coXl0FPJhCi UamTBK7uOzpZiGXggSJzU/V4zFti213M7OlgRXZjuysloxv5XBfvjxC1WSqX2H5s DcJFb8BrrN5nZQg93+2+PeXmj8bIf/sTd2jpDfXERQCOZz2J0LZ9N7jpcYRHAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUc43YA4L1/iADuftWoPMFSWLjotgwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjE2MzgyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwX8wDQYJKoZIhvcNAQELBQADggEBAIzV nVRuICh7LoWXF+lmlO2Mwy3pzxH+yGJz87mfc/PjbylxjXGZTbLhKdmUprEIpEiE FUaSxRG4k3nrJmdVElAL9O7oNxeKh/iUcyWzEOb+NW8J5W4wg1voiXI1LoGRKbDZ iXfUpfD/bjtZS5gVaaB2SbDJqQIQR7XPmjGy9A3xiEfb+dW6fY7mHYJC2QO/tMeJ K4eTpiukUHMbUiHKayGEtGXODFGRGdHI6Hl88k+HxMjhOUJ4li61Ukh2coLOSXFv ifiUfSESFZ1+beqs/yEKFMWmR2mKE/DOnPucqtkg2G0s4GGrytN2Vtu64Sr3efND KIKQJrW2imjyq6f+JMI= -----END CERTIFICATE-----Generated at Sat Jul 5 06:10:57 2025 by rpki-client