$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS197433.roa File: AS197433.roa (raw, json) Hash identifier: sIrLJ/SOkj3vm2seoS59wxZuupK93GI4Gma5jKmiLAo= Subject key identifier: 98:8B:C5:F8:9B:C4:93:E3:6C:C0:8B:AD:88:4A:4C:A6:33:B6:81:7B Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 746D718738FBA5A1FB15ADBC6A2BFB921EE2C6CA Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS197433.roa Signing time: Fri 05 Jun 2026 07:12:43 +0000 ROA not before: Fri 05 Jun 2026 07:07:43 +0000 ROA not after: Fri 04 Jun 2027 07:12:43 +0000 asID: 197433 IP address blocks: 2a05:dfc1:8c00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:6d:71:87:38:fb:a5:a1:fb:15:ad:bc:6a:2b:fb:92:1e:e2:c6:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:43 2026 GMT Not After : Jun 4 07:12:43 2027 GMT Subject: CN=988BC5F89BC493E36CC08BAD884A4CA633B6817B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1a:fe:38:e9:21:a1:1d:4f:9d:0b:43:a7:5e: 60:5c:4f:ac:89:af:55:cb:f5:ba:2b:bb:5b:04:e6: eb:9f:c5:de:a8:68:1a:dc:a2:bf:c0:e6:e3:82:08: 84:c1:9e:52:e7:f2:7d:ae:d1:36:5c:a1:ab:33:5a: fa:3f:44:04:8b:3f:03:22:b1:b8:9c:03:10:1b:c6: 1d:64:db:7d:2e:76:a1:e2:92:35:f2:84:4c:19:18: 2d:c7:a3:fb:88:83:43:2c:a1:b7:d9:eb:29:17:f5: 30:94:60:0b:e2:26:e2:91:24:51:60:b2:2e:8c:91: 9c:c3:92:90:51:c2:70:51:89:44:82:ed:9f:81:f7: d0:07:30:ff:8f:11:83:b2:2d:11:b3:eb:fe:33:b0: d4:6b:a4:65:93:e1:b9:00:9d:98:c1:d5:42:f5:ac: 18:94:ea:54:79:63:1a:59:63:4b:7b:ad:4a:16:e7: 6f:84:b3:b5:d4:3d:ca:6d:25:c3:fd:7c:68:17:a7: d8:c6:ec:71:d4:62:16:4b:80:54:b5:3e:11:be:76: 20:07:ee:3d:72:6a:d2:9a:62:e7:53:d1:18:6e:37: 9d:e5:8f:00:05:ac:09:ed:3d:32:2d:34:33:e0:bc: 78:e7:f6:4e:13:00:69:ef:8f:d5:d6:23:b9:e3:76: 00:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:8B:C5:F8:9B:C4:93:E3:6C:C0:8B:AD:88:4A:4C:A6:33:B6:81:7B X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS197433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8c00::/40 Signature Algorithm: sha256WithRSAEncryption 73:f8:67:6a:7c:5a:a4:65:a9:6e:24:4f:1c:5c:0a:62:b8:9e: 56:f7:0e:85:9f:13:02:b5:65:f6:c6:3b:93:82:e0:a4:19:39: 4b:bb:6b:ae:d7:b8:ea:37:9c:ab:cb:9d:b2:9c:9c:5a:d2:c6: 1d:04:c2:ef:46:f9:8a:cc:cb:bb:7f:76:48:93:0c:9a:6d:06: 92:6e:41:08:45:26:6e:91:14:4b:f7:d2:a9:fc:b5:f7:bc:bf: 34:2f:79:41:b5:7a:2d:d4:ab:cd:69:05:85:1f:1d:0e:51:00: 47:08:e7:cc:d2:d5:f3:64:73:27:a4:e2:58:28:db:66:97:e4: 14:d0:c5:32:e9:2d:2f:bd:35:8a:e0:71:d0:bc:f0:85:96:24: 1c:5b:62:fc:b3:e4:2f:f5:25:87:a2:b9:9b:6a:e6:bb:9a:50: 52:95:c3:f2:71:72:db:5b:60:54:5a:9d:a2:de:d8:c4:71:40: ff:02:e5:64:31:94:8a:e1:e6:41:91:31:14:6d:a8:8c:4f:fd: 1c:68:a8:36:5d:37:6b:e5:9d:11:77:ef:07:71:87:ac:ba:3a: 66:85:05:df:d1:bd:0f:1a:de:ed:ab:e1:e2:9e:fc:bd:c2:b0: ec:f6:f5:09:83:f7:3b:26:2b:30:58:6e:e0:a7:c4:76:52:f9: 67:3e:50:49 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUdG1xhzj7paH7Fa28aiv7kh7ixsowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3NDNaFw0yNzA2MDQwNzEyNDNaMDMxMTAvBgNV BAMTKDk4OEJDNUY4OUJDNDkzRTM2Q0MwOEJBRDg4NEE0Q0E2MzNCNjgxN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFGv446SGhHU+dC0OnXmBcT6yJ r1XL9boru1sE5uufxd6oaBrcor/A5uOCCITBnlLn8n2u0TZcoaszWvo/RASLPwMi sbicAxAbxh1k230udqHikjXyhEwZGC3Ho/uIg0MsobfZ6ykX9TCUYAviJuKRJFFg si6MkZzDkpBRwnBRiUSC7Z+B99AHMP+PEYOyLRGz6/4zsNRrpGWT4bkAnZjB1UL1 rBiU6lR5YxpZY0t7rUoW52+Es7XUPcptJcP9fGgXp9jG7HHUYhZLgFS1PhG+diAH 7j1yatKaYudT0RhuN53ljwAFrAntPTItNDPgvHjn9k4TAGnvj9XWI7njdgDXAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUmIvF+JvEk+NswIutiEpMpjO2gXswHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMTk3NDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwYwwDQYJKoZIhvcNAQELBQADggEBAHP4 Z2p8WqRlqW4kTxxcCmK4nlb3DoWfEwK1ZfbGO5OC4KQZOUu7a67XuOo3nKvLnbKc nFrSxh0Ewu9G+YrMy7t/dkiTDJptBpJuQQhFJm6RFEv30qn8tfe8vzQveUG1ei3U q81pBYUfHQ5RAEcI58zS1fNkcyek4lgo22aX5BTQxTLpLS+9NYrgcdC88IWWJBxb Yvyz5C/1JYeiuZtq5ruaUFKVw/JxcttbYFRanaLe2MRxQP8C5WQxlIrh5kGRMRRt qIxP/RxoqDZdN2vlnRF37wdxh6y6OmaFBd/RvQ8a3u2r4eKe/L3CsOz29QmD9zsm KzBYbuCnxHZS+Wc+UEk= -----END CERTIFICATE-----Generated at Sat Jun 13 09:11:49 2026 by rpki-client