$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer File: BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer (raw, json) Hash identifier: qXpgatX6hUMor3TM3QD43j/XuaO6R/x/APYHFYpSo24= Subject key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 3D4D4331911E15C150FB90D2BC4130FB169F3EB5 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 04 Jul 2025 19:47:51 +0000 Certificate not after: Fri 03 Jul 2026 19:52:51 +0000 Subordinate resources: IP: 2a05:dfc1:5f00::/40 IP: 2a05:dfc1:8e00::/40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:4d:43:31:91:1e:15:c1:50:fb:90:d2:bc:41:30:fb:16:9f:3e:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 19:47:51 2025 GMT Not After : Jul 3 19:52:51 2026 GMT Subject: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:01:66:e4:f5:ce:61:17:f2:f7:69:8f:72:ea: db:e3:55:a9:db:37:65:cb:1d:d0:f5:03:58:55:c9: a1:4c:a4:e4:9e:1f:de:d6:78:9d:ba:fc:44:ed:27: 13:d5:0b:69:71:e7:8e:89:74:d7:63:2b:c8:af:a2: 54:9a:25:06:72:8a:e5:d3:6a:72:ee:4e:b8:c0:55: 40:6e:ac:ec:fc:87:1c:2f:58:52:02:9c:1e:fa:b5: ba:9a:e5:6d:f7:8a:1e:19:39:6e:e0:53:67:dd:85: ec:97:66:c2:8f:51:94:06:ec:91:20:d1:ef:e4:fd: c6:eb:7c:96:be:5e:53:06:9c:eb:29:df:40:9c:fe: b0:24:19:cb:67:1d:a3:57:cb:ca:8b:a7:54:13:78: 01:8b:a2:19:d9:8c:d6:b1:bf:48:aa:ff:95:a4:88: a4:04:14:0d:08:f5:d0:66:9e:a2:b6:0d:3a:61:16: b9:ae:8f:4c:53:07:88:d1:fa:52:55:d7:99:db:63: 6d:14:59:ec:b6:7c:f2:45:4b:f5:88:8f:de:5d:d7: 00:f3:be:79:73:50:6b:b9:73:ae:29:bd:e9:a5:54: 92:d8:79:dd:d6:62:ab:b0:7d:7d:1f:27:8d:07:a8: b8:39:dc:00:cc:5a:e2:c9:3c:01:68:38:4b:03:37: c6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:5f00::/40 2a05:dfc1:8e00::/40 Signature Algorithm: sha256WithRSAEncryption df:b6:d0:10:5b:16:ff:76:19:3f:eb:cb:be:48:e2:c5:d2:c0: 01:81:2a:67:d8:c4:0e:c6:89:fa:b3:88:35:45:3f:79:2d:59: 30:9d:d2:3f:77:4e:95:31:2d:a1:11:f0:83:c2:d7:3d:5d:92: 2b:1c:f5:74:dd:61:6c:5a:6d:d5:e6:32:80:4b:db:fb:24:34: c3:32:6a:eb:b7:e9:60:95:7e:02:d9:b7:26:22:17:18:b0:dd: e8:f7:e0:fa:98:b7:a6:2b:90:68:07:b7:a4:43:84:82:e9:dd: ed:58:b9:de:cd:db:4a:af:cb:3d:23:c7:48:14:41:7a:69:44: e7:63:50:ee:14:6b:ae:98:d3:7a:8c:e3:ec:8b:e3:75:f4:d3: 33:78:8e:62:f7:32:03:27:2b:a9:2b:15:b8:09:d3:4c:23:ff: 4c:71:b1:e7:21:97:7d:0f:f4:60:c2:ae:af:bd:1f:8c:50:ea: 5e:b3:4a:bd:66:d6:01:a3:5c:b1:53:fc:df:0b:09:e3:5f:cf: 69:d3:7f:79:2a:7e:26:e5:13:9b:f2:22:58:38:84:5f:99:ae: a9:ea:5d:6a:9c:8d:ff:9a:6c:44:f8:50:77:16:77:3b:fb:3b: b0:7d:8d:7b:6d:ed:f9:1c:48:12:0c:51:03:75:ad:2d:6d:03: de:7d:94:4e -----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgIUPU1DMZEeFcFQ+5DSvEEw+xafPrUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQxOTQ3NTFaFw0yNjA3MDMxOTUyNTFaMDMxMTAvBgNV BAMTKEJFM0RDNjYxNEUwQTJGM0IzRDZGMDhEQzA0QTFCQzM0QzhGQkM5QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqAWbk9c5hF/L3aY9y6tvjVanb N2XLHdD1A1hVyaFMpOSeH97WeJ26/ETtJxPVC2lx546JdNdjK8ivolSaJQZyiuXT anLuTrjAVUBurOz8hxwvWFICnB76tbqa5W33ih4ZOW7gU2fdheyXZsKPUZQG7JEg 0e/k/cbrfJa+XlMGnOsp30Cc/rAkGctnHaNXy8qLp1QTeAGLohnZjNaxv0iq/5Wk iKQEFA0I9dBmnqK2DTphFrmuj0xTB4jR+lJV15nbY20UWey2fPJFS/WIj95d1wDz vnlzUGu5c64pvemlVJLYed3WYquwfX0fJ40HqLg53ADMWuLJPAFoOEsDN8apAgMB AAGjggL0MIIC8DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS+PcZhTgovOz1v CNwEobw0yPvJwzAfBgNVHSMEGDAWgBSPw8+13z6PchwIuLX+f2HWewvhOzAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvNC84RkMzQ0ZCNURGM0U4Rjcy MUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy84RkMzQ0ZCNURG M0U4RjcyMUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNlcjCCAT8GCCsGAQUFBwEL BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZi ZTZlMTI5LzMvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9hY2VjZmRjNy02ZGI5LTQyNWItYWNhZS03ZTIw ZmJlNmUxMjkvMy9CRTNEQzY2MTRFMEEyRjNCM0Q2RjA4REMwNEExQkMzNEM4RkJD OUMzLm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw KQYIKwYBBQUHAQcBAf8EGjAYMBYEAgACMBADBgAqBd/BXwMGACoF38GOMA0GCSqG SIb3DQEBCwUAA4IBAQDfttAQWxb/dhk/68u+SOLF0sABgSpn2MQOxon6s4g1RT95 LVkwndI/d06VMS2hEfCDwtc9XZIrHPV03WFsWm3V5jKAS9v7JDTDMmrrt+lglX4C 2bcmIhcYsN3o9+D6mLemK5BoB7ekQ4SC6d3tWLnezdtKr8s9I8dIFEF6aUTnY1Du FGuumNN6jOPsi+N19NMzeI5i9zIDJyupKxW4CdNMI/9McbHnIZd9D/Rgwq6vvR+M UOpes0q9ZtYBo1yxU/zfCwnjX89p0395Kn4m5ROb8iJYOIRfma6p6l1qnI3/mmxE +FB3Fnc7+zuwfY17be35HEgSDFEDda0tbQPefZRO -----END CERTIFICATE-----Generated at Sat Jul 5 04:34:28 2025 by rpki-client