$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS197434.roa File: AS197434.roa (raw, json) Hash identifier: JLdsQnv9DFfAG194iewtFXBixnCuBXIK58O0neGt1rQ= Subject key identifier: 1F:A1:00:6B:49:48:5E:CB:08:2D:05:2B:64:91:40:F1:FC:E0:08:8F Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 46C5EE11FE1B4991911D645E698C4ADC35BA7937 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS197434.roa Signing time: Fri 05 Jun 2026 07:12:43 +0000 ROA not before: Fri 05 Jun 2026 07:07:43 +0000 ROA not after: Fri 04 Jun 2027 07:12:43 +0000 asID: 197434 IP address blocks: 2a05:dfc1:7900::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:c5:ee:11:fe:1b:49:91:91:1d:64:5e:69:8c:4a:dc:35:ba:79:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:43 2026 GMT Not After : Jun 4 07:12:43 2027 GMT Subject: CN=1FA1006B49485ECB082D052B649140F1FCE0088F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:52:de:54:7c:58:29:0d:8c:a6:31:46:5c:bb: cb:7b:1c:70:9c:88:dd:34:91:ad:bf:74:1b:f1:3a: 2a:5c:b1:b3:65:21:17:3a:3e:8a:64:66:22:64:03: 02:36:b9:86:95:d1:e7:b9:7a:da:ff:19:17:a4:c6: 91:da:38:7a:89:b3:a7:50:18:ad:68:ca:47:09:76: 74:9c:60:0c:36:18:76:3a:e9:05:71:bd:7d:93:b4: 71:23:1a:60:45:f2:d6:f3:53:21:f2:a3:35:df:b6: c0:23:5b:81:a7:f7:90:f1:44:91:09:7b:e9:c2:4e: cc:69:db:fe:be:32:81:13:fa:50:65:50:39:f1:13: 56:ad:a5:67:34:ca:1f:0f:81:fb:f6:a1:1f:87:96: 0c:2d:ef:05:7d:1d:1d:eb:b6:0d:7a:5a:42:0d:91: 08:76:d8:37:7d:dc:07:2d:0b:1d:7a:a3:9e:8d:f1: a2:cf:76:f0:91:5f:bb:68:6f:17:66:68:26:a3:27: 4b:33:27:ae:ef:29:b0:c3:fe:2f:63:ac:0c:9b:55: 88:3c:d0:3a:6c:1f:97:4c:d0:fd:6b:e0:55:9c:8a: 12:86:05:73:8e:e4:97:39:70:3e:02:fc:a3:05:bc: c8:af:cf:4b:8e:13:5a:0b:ef:d8:4e:83:e7:8d:f2: e5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A1:00:6B:49:48:5E:CB:08:2D:05:2B:64:91:40:F1:FC:E0:08:8F X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS197434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:7900::/40 Signature Algorithm: sha256WithRSAEncryption 97:d2:44:27:00:df:3a:96:40:df:90:5d:11:bf:49:70:2b:4c: ee:93:95:3c:09:7b:e9:a2:a4:82:56:5c:1a:b9:dc:fd:2c:19: 55:f6:17:45:f8:16:a5:d8:f4:af:a7:c8:ee:e5:a7:d5:90:26: b5:2e:b3:ac:80:4e:dc:01:7b:7d:38:d7:b5:2c:8a:2c:a3:91: d6:b4:b1:96:84:e7:fd:13:a6:86:5e:84:d9:de:e1:43:d2:c3: 4c:04:78:31:26:8b:3a:5c:df:05:3f:76:64:4b:4e:c4:61:bf: f9:40:4a:cf:3d:13:b8:0f:76:ff:54:3e:1c:d6:a9:59:e8:64: 28:f4:f7:e1:15:ef:80:7f:ba:05:f7:3c:20:65:e5:30:3e:f2: 92:0c:17:13:6d:e4:b8:63:b5:f2:0e:1f:71:7b:e0:6d:3c:e7: 69:ed:ed:55:d7:4d:54:76:a9:96:d6:20:50:1c:24:94:7e:6d: ab:1a:ab:2a:3e:7a:15:54:1c:c4:59:ea:e5:f6:e3:27:36:3e: b3:6d:3e:90:65:bf:c2:aa:2f:41:4b:99:33:13:47:87:a3:28: 77:28:8d:b7:73:c6:2b:df:69:cc:4c:3f:90:27:2b:64:01:d9: a0:f4:d9:18:63:a3:cf:1f:c4:67:cc:70:5d:55:9c:2f:d0:fb: 50:ca:12:d6 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIURsXuEf4bSZGRHWReaYxK3DW6eTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3NDNaFw0yNzA2MDQwNzEyNDNaMDMxMTAvBgNV BAMTKDFGQTEwMDZCNDk0ODVFQ0IwODJEMDUyQjY0OTE0MEYxRkNFMDA4OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Ut5UfFgpDYymMUZcu8t7HHCc iN00ka2/dBvxOipcsbNlIRc6PopkZiJkAwI2uYaV0ee5etr/GRekxpHaOHqJs6dQ GK1oykcJdnScYAw2GHY66QVxvX2TtHEjGmBF8tbzUyHyozXftsAjW4Gn95DxRJEJ e+nCTsxp2/6+MoET+lBlUDnxE1atpWc0yh8Pgfv2oR+Hlgwt7wV9HR3rtg16WkIN kQh22Dd93ActCx16o56N8aLPdvCRX7tobxdmaCajJ0szJ67vKbDD/i9jrAybVYg8 0DpsH5dM0P1r4FWcihKGBXOO5Jc5cD4C/KMFvMivz0uOE1oL79hOg+eN8uWXAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUH6EAa0lIXssILQUrZJFA8fzgCI8wHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMTk3NDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwXkwDQYJKoZIhvcNAQELBQADggEBAJfS RCcA3zqWQN+QXRG/SXArTO6TlTwJe+mipIJWXBq53P0sGVX2F0X4FqXY9K+nyO7l p9WQJrUus6yATtwBe30417Usiiyjkda0sZaE5/0TpoZehNne4UPSw0wEeDEmizpc 3wU/dmRLTsRhv/lASs89E7gPdv9UPhzWqVnoZCj09+EV74B/ugX3PCBl5TA+8pIM FxNt5LhjtfIOH3F74G0852nt7VXXTVR2qZbWIFAcJJR+basaqyo+ehVUHMRZ6uX2 4yc2PrNtPpBlv8KqL0FLmTMTR4ejKHcojbdzxivfacxMP5AnK2QB2aD02Rhjo88f xGfMcF1VnC/Q+1DKEtY= -----END CERTIFICATE-----Generated at Sat Jun 13 09:11:46 2026 by rpki-client