$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer File: BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer (raw, json) Hash identifier: 2jnG/Sbq1RxTDDXQNZuQQsOaJ+dY7GumSPyAMk9CdCY= Subject key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 7E24CC3094032DE9DA4786AB9FE0C5A0BC40130F Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 06 Jun 2026 04:30:40 +0000 Certificate not after: Sat 05 Jun 2027 04:35:40 +0000 Subordinate resources: IP: 2a05:dfc1:5f00::/40 IP: 2a05:dfc1:8e00::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 13:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:24:cc:30:94:03:2d:e9:da:47:86:ab:9f:e0:c5:a0:bc:40:13:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 6 04:30:40 2026 GMT Not After : Jun 5 04:35:40 2027 GMT Subject: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:01:66:e4:f5:ce:61:17:f2:f7:69:8f:72:ea: db:e3:55:a9:db:37:65:cb:1d:d0:f5:03:58:55:c9: a1:4c:a4:e4:9e:1f:de:d6:78:9d:ba:fc:44:ed:27: 13:d5:0b:69:71:e7:8e:89:74:d7:63:2b:c8:af:a2: 54:9a:25:06:72:8a:e5:d3:6a:72:ee:4e:b8:c0:55: 40:6e:ac:ec:fc:87:1c:2f:58:52:02:9c:1e:fa:b5: ba:9a:e5:6d:f7:8a:1e:19:39:6e:e0:53:67:dd:85: ec:97:66:c2:8f:51:94:06:ec:91:20:d1:ef:e4:fd: c6:eb:7c:96:be:5e:53:06:9c:eb:29:df:40:9c:fe: b0:24:19:cb:67:1d:a3:57:cb:ca:8b:a7:54:13:78: 01:8b:a2:19:d9:8c:d6:b1:bf:48:aa:ff:95:a4:88: a4:04:14:0d:08:f5:d0:66:9e:a2:b6:0d:3a:61:16: b9:ae:8f:4c:53:07:88:d1:fa:52:55:d7:99:db:63: 6d:14:59:ec:b6:7c:f2:45:4b:f5:88:8f:de:5d:d7: 00:f3:be:79:73:50:6b:b9:73:ae:29:bd:e9:a5:54: 92:d8:79:dd:d6:62:ab:b0:7d:7d:1f:27:8d:07:a8: b8:39:dc:00:cc:5a:e2:c9:3c:01:68:38:4b:03:37: c6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:5f00::/40 2a05:dfc1:8e00::/40 Signature Algorithm: sha256WithRSAEncryption 70:ef:77:cb:a5:88:25:a0:c8:87:bd:2c:c2:2b:2a:8b:5d:71: ac:fb:7a:7e:d4:43:26:3d:72:2c:94:77:34:57:4d:bd:58:95: 41:2c:32:28:a6:9c:ba:20:2f:36:14:99:a6:8e:ee:5e:e7:ea: da:f0:91:66:19:86:60:65:d7:3d:98:0b:41:4c:04:e7:8f:72: 0b:4c:cd:47:4a:af:67:7e:c7:07:17:f3:d4:37:a5:b4:6a:f9: 41:b3:a6:b9:82:c6:ab:d8:7b:56:7b:1e:8a:d5:9b:ac:23:30: 42:4a:9c:08:d7:7c:0b:d3:02:18:43:98:b7:a4:8c:fd:1b:8c: 2a:58:2b:d5:e0:c8:ae:6d:83:4a:bb:b0:57:6f:ae:5d:7c:1c: 7f:fd:c4:a9:24:89:01:37:75:95:97:d4:7a:f3:37:64:cb:be: cc:33:cc:68:04:2c:a7:a6:27:b2:5f:ba:f8:1e:28:eb:88:8c: 48:42:df:c5:0e:70:35:71:0e:d8:41:9a:29:e9:ca:dc:43:32: 7d:9e:0e:a2:74:05:92:17:a6:c1:9a:67:e9:83:92:f3:bd:fa: 4e:4d:a8:b1:1c:f0:2d:52:9c:e9:4f:8b:35:ca:11:0d:eb:a0: 5f:97:09:41:f0:20:9e:48:a4:91:ef:3d:a3:0f:59:97:15:1a: f9:67:be:95 -----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgIUfiTMMJQDLenaR4arn+DFoLxAEw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDYwNDMwNDBaFw0yNzA2MDUwNDM1NDBaMDMxMTAvBgNV BAMTKEJFM0RDNjYxNEUwQTJGM0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqAWbk9c5hF/L3aY9y6tvjVanb N2XLHdD1A1hVyaFMpOSeH97WeJ26/ETtJxPVC2lx546JdNdjK8ivolSaJQZyiuXT anLuTrjAVUBurOz8hxwvWFICnB76tbqa5W33ih4ZOW7gU2fdheyXZsKPUZQG7JEg 0e/k/cbrfJa+XlMGnOsp30Cc/rAkGctnHaNXy8qLp1QTeAGLohnZjNaxv0iq/5Wk iKQEFA0I9dBmnqK2DTphFrmuj0xTB4jR+lJV15nbY20UWey2fPJFS/WIj95d1wDz vnlzUGu5c64pvemlVJLYed3WYquwfX0fJ40HqLg53ADMWuLJPAFoOEsDN8apAgMB AAGjggL0MIIC8DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS+PcZhTgovOz1v CNwEobw0yPvJwzAfBgNVHSMEGDAWgBSPw8+13z6PchwIuLX+f2HWewvhOzAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvNC84RkMzQ0ZCNURGM0U4Rjcy MUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy84RkMzQ0ZCNURG M0U4RjcyMUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNlcjCCAT8GCCsGAQUFBwEL BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZi ZTZlMTI5LzMvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9hY2VjZmRjNy02ZGI5LTQyNWItYWNhZS03ZTIw ZmJlNmUxMjkvMy9CRTNEQzY2MTRFMEEyRjNCM0Q2RjA4REMwNEExQkMzNEM4RkJD OUMzLm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw KQYIKwYBBQUHAQcBAf8EGjAYMBYEAgACMBADBgAqBd/BXwMGACoF38GOMA0GCSqG SIb3DQEBCwUAA4IBAQBw73fLpYgloMiHvSzCKyqLXXGs+3p+1EMmPXIslHc0V029 WJVBLDIoppy6IC82FJmmju5e5+ra8JFmGYZgZdc9mAtBTATnj3ILTM1HSq9nfscH F/PUN6W0avlBs6a5gsar2HtWex6K1ZusIzBCSpwI13wL0wIYQ5i3pIz9G4wqWCvV 4MiubYNKu7BXb65dfBx//cSpJIkBN3WVl9R68zdky77MM8xoBCynpieyX7r4Hijr iIxIQt/FDnA1cQ7YQZop6crcQzJ9ng6idAWSF6bBmmfpg5LzvfpOTaixHPAtUpzp T4s1yhEN66BflwlB8CCeSKSR7z2jD1mXFRr5Z76V -----END CERTIFICATE-----Generated at Thu Jun 11 23:42:09 2026 by rpki-client