$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS151194.roa File: AS151194.roa (raw, json) Hash identifier: USbXURMs3OHbWfMk8DA3UVkEqnhgSXgQ/m62kVxDm2I= Subject key identifier: 54:88:59:2F:0D:BF:43:41:E6:43:72:77:D7:D0:F3:4C:C5:A9:20:75 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 579986FAB90A1A1FB880C64064436C7E4AC2147E Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS151194.roa Signing time: Fri 05 Jun 2026 07:12:20 +0000 ROA not before: Fri 05 Jun 2026 07:07:20 +0000 ROA not after: Fri 04 Jun 2027 07:12:20 +0000 asID: 151194 IP address blocks: 2a05:dfc1:5980::/41 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:99:86:fa:b9:0a:1a:1f:b8:80:c6:40:64:43:6c:7e:4a:c2:14:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:20 2026 GMT Not After : Jun 4 07:12:20 2027 GMT Subject: CN=5488592F0DBF4341E6437277D7D0F34CC5A92075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2e:22:45:22:a2:b8:ca:55:09:9a:19:68:9c: 3a:e6:18:0e:38:5c:c3:3f:cd:53:ba:65:12:af:89: 9c:e3:f8:2a:4e:35:a4:d9:8f:b4:1e:75:3a:99:62: e6:d1:ed:24:f4:ff:5a:35:ac:5c:ec:61:a8:cd:71: 22:76:0e:c6:d9:d7:38:97:13:0f:e2:13:c2:9e:4e: 7c:69:f7:dc:34:83:31:e7:6f:f2:68:10:1c:85:65: 7f:51:fb:50:55:a6:12:a8:59:dc:c7:0c:af:ff:86: 5e:42:9a:60:d6:9c:e1:51:4c:a7:d4:13:d6:c5:e7: c8:89:2c:41:15:28:69:59:c0:b1:94:4a:ef:af:9f: 87:49:12:21:0c:9a:54:f4:24:f7:3f:dd:f4:80:f5: 25:82:f6:1b:52:f2:7a:85:42:e1:b6:99:5c:11:e7: fc:a9:50:0e:c2:a2:8c:06:95:3d:43:d1:f1:a2:0c: c0:44:d3:93:eb:db:41:e1:94:96:6a:ba:f7:62:3f: fd:45:53:ea:21:f6:50:a6:43:da:04:7a:2e:c8:4d: 23:6e:e2:0c:04:ea:75:18:d2:0e:13:ad:a9:7f:76: c0:06:4d:55:b7:03:b4:c6:35:d4:1b:ec:63:f2:0b: 72:4c:ee:0d:5c:88:4a:49:50:84:32:86:24:31:21: d1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:88:59:2F:0D:BF:43:41:E6:43:72:77:D7:D0:F3:4C:C5:A9:20:75 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS151194.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:5980::/41 Signature Algorithm: sha256WithRSAEncryption 9a:75:90:17:7b:c1:66:57:fa:fe:89:87:fb:d0:de:b6:c3:cd: e0:51:db:e9:ad:11:0b:c5:3b:1a:e4:da:aa:be:0c:df:90:cd: 2d:3b:95:77:90:30:bb:11:67:3d:0f:ab:4d:de:1a:61:16:2f: fc:d6:b9:19:bb:0c:f1:e2:ba:ac:fc:26:07:b7:c4:9d:71:3d: 54:d0:43:5f:a2:dd:6a:f0:04:40:67:20:59:5a:5d:71:fa:52: dd:fa:c6:51:04:22:7f:c9:54:f1:49:92:92:fb:6b:53:55:4f: 99:9d:75:fc:ff:fd:8e:47:7e:df:d5:5c:f0:00:12:3a:aa:82: d0:7e:57:22:8c:67:ba:f5:a7:32:2c:d0:a4:fe:6d:03:e8:d1: e3:13:79:1c:67:82:78:4d:27:08:88:7d:a7:b5:6e:03:d0:f6: d2:63:f7:78:da:65:af:1b:ad:a1:7e:71:4e:83:46:57:5c:99: 9a:d1:7f:6a:fd:c4:db:d5:30:d6:cb:e7:56:11:8a:d3:32:62: 3b:85:21:04:46:8b:3a:2d:7d:9c:9f:44:23:7f:92:1d:af:39: ec:50:b2:10:a1:b2:a6:7a:97:e7:2b:b3:bf:1a:7d:2c:72:53: a5:56:4d:c1:0e:b0:9f:9f:ed:d0:6e:48:fa:e1:be:14:2a:c6: 8d:53:ca:55 -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgIUV5mG+rkKGh+4gMZAZENsfkrCFH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MjBaFw0yNzA2MDQwNzEyMjBaMDMxMTAvBgNV BAMTKDU0ODg1OTJGMERCRjQzNDFFNjQzNzI3N0Q3RDBGMzRDQzVBOTIwNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlLiJFIqK4ylUJmhlonDrmGA44 XMM/zVO6ZRKviZzj+CpONaTZj7QedTqZYubR7ST0/1o1rFzsYajNcSJ2DsbZ1ziX Ew/iE8KeTnxp99w0gzHnb/JoEByFZX9R+1BVphKoWdzHDK//hl5CmmDWnOFRTKfU E9bF58iJLEEVKGlZwLGUSu+vn4dJEiEMmlT0JPc/3fSA9SWC9htS8nqFQuG2mVwR 5/ypUA7CoowGlT1D0fGiDMBE05Pr20HhlJZquvdiP/1FU+oh9lCmQ9oEei7ITSNu 4gwE6nUY0g4Tral/dsAGTVW3A7TGNdQb7GPyC3JM7g1ciEpJUIQyhiQxIdGbAgMB AAGjggH1MIIB8TAdBgNVHQ4EFgQUVIhZLw2/Q0HmQ3J319DzTMWpIHUwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMTUxMTk0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcHKgXfwVmAMA0GCSqGSIb3DQEBCwUAA4IBAQCa dZAXe8FmV/r+iYf70N62w83gUdvprRELxTsa5NqqvgzfkM0tO5V3kDC7EWc9D6tN 3hphFi/81rkZuwzx4rqs/CYHt8SdcT1U0ENfot1q8ARAZyBZWl1x+lLd+sZRBCJ/ yVTxSZKS+2tTVU+ZnXX8//2OR37f1VzwABI6qoLQflcijGe69acyLNCk/m0D6NHj E3kcZ4J4TScIiH2ntW4D0PbSY/d42mWvG62hfnFOg0ZXXJma0X9q/cTb1TDWy+dW EYrTMmI7hSEERos6LX2cn0Qjf5IdrznsULIQobKmepfnK7O/Gn0sclOlVk3BDrCf n+3Qbkj64b4UKsaNU8pV -----END CERTIFICATE-----Generated at Sat Jun 13 09:11:26 2026 by rpki-client