
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS197510.roa
File: AS197510.roa (raw, json)
Hash identifier: Km3p/f5wwf+0vSc3kEEw2qAqaUqidT3C/IjN8DMd2Eo=
Subject key identifier: 48:20:BC:72:73:51:B1:0F:0D:F5:E3:17:10:56:25:37:B3:40:F3:A2
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 77B0646F96AD85CAE67C76B787F917DF5A406807
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS197510.roa
Signing time: Fri 05 Jun 2026 07:12:20 +0000
ROA not before: Fri 05 Jun 2026 07:07:20 +0000
ROA not after: Fri 04 Jun 2027 07:12:20 +0000
asID: 197510
IP address blocks: 2a05:dfc1:7600::/40 maxlen: 48
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:b0:64:6f:96:ad:85:ca:e6:7c:76:b7:87:f9:17:df:5a:40:68:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jun 5 07:07:20 2026 GMT
Not After : Jun 4 07:12:20 2027 GMT
Subject: CN=4820BC727351B10F0DF5E31710562537B340F3A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:71:5f:07:35:0d:91:9a:46:2a:88:23:3b:13:
c7:c4:d4:cc:56:31:7c:91:08:0b:31:70:bc:4f:05:
fc:2d:54:35:95:36:d7:7e:b7:b6:0c:5e:2d:50:0c:
f6:7d:1e:57:bb:20:01:90:df:01:d2:20:ed:01:c5:
3b:4e:a1:ba:15:f3:82:b7:72:1f:e1:77:e3:09:82:
4e:4f:18:44:43:ca:b5:14:61:80:01:e8:79:a7:0d:
8a:31:f7:e8:b8:ac:8b:e8:7f:f5:1f:34:09:91:bb:
63:d9:a6:56:ee:ac:1a:56:92:61:b9:2d:fe:88:92:
b6:8a:2b:1e:d2:b2:5e:b8:4b:94:b4:8a:da:14:52:
78:68:b4:68:f1:0c:f6:fd:1f:28:00:20:af:18:c1:
47:99:81:bd:73:29:e0:e5:93:39:6e:8e:6b:c6:67:
44:67:81:dc:69:e3:37:3f:2a:0d:b1:8a:c9:e4:c1:
2a:a8:50:0f:5e:db:be:3f:01:e0:11:97:be:55:70:
3e:5a:c3:49:66:93:63:7c:7c:76:29:e8:6f:58:ed:
f9:0f:27:94:1a:2b:72:bc:52:9e:4f:2c:84:9e:48:
4e:4e:ae:69:46:7b:0d:b1:3c:bf:2b:b8:89:29:1f:
a7:6b:9d:db:8b:4d:8c:e2:f6:1c:7a:6e:14:50:e2:
7c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:20:BC:72:73:51:B1:0F:0D:F5:E3:17:10:56:25:37:B3:40:F3:A2
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS197510.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:7600::/40
Signature Algorithm: sha256WithRSAEncryption
52:81:74:7c:09:c5:3e:28:bf:9f:8e:47:3d:7d:54:8e:dd:d4:
8a:0f:64:4d:3c:af:f8:6b:7c:c0:ef:d2:2c:90:70:31:11:3d:
4e:07:a2:7c:87:ab:76:b2:72:6f:b8:d3:75:c9:10:90:c8:0d:
b4:7c:c1:2a:3e:a7:d7:5b:ae:22:d7:af:c1:6f:d3:38:ee:70:
ff:5d:d2:66:bc:96:f2:9b:e0:02:a5:a1:75:76:0c:90:98:a7:
6c:e0:cd:a0:65:6c:03:0c:af:d7:b9:d0:ff:28:90:a8:1f:3e:
bd:8a:07:3c:f3:bc:08:85:fb:25:54:7a:9f:84:74:b4:e7:27:
6c:e5:0b:3a:59:eb:c0:a2:f9:e9:99:93:75:e4:2f:ba:df:ba:
57:90:6f:15:16:ed:30:58:2d:98:f7:c5:f9:25:a0:ad:8a:d9:
be:d6:55:70:ec:7e:c8:31:64:89:a8:e8:66:4b:ef:d2:cc:f3:
42:fd:85:dd:72:57:1b:6d:f5:bb:01:29:55:3c:d4:c5:96:05:
b9:ad:80:f6:fb:23:9e:72:33:77:6f:95:3b:03:ca:ef:fb:b4:
65:23:45:c2:8d:87:a9:2b:27:9a:b9:e1:6d:4f:54:32:d4:f0:
53:06:95:b0:02:d0:0e:20:14:3f:85:01:0c:94:0e:38:d9:87:
9f:b6:fc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:57 2026 by rpki-client