$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS197622.roa File: AS197622.roa (raw, json) Hash identifier: 5hllQbX5roE9QCFuz6rC/kR7qvKxM+gaMR5xLHRXlrA= Subject key identifier: F0:C0:D5:48:B9:15:DB:D1:B6:86:C8:27:62:3A:67:BE:C1:04:05:47 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 29AB7842BEC0A6DCB440974CC946249332F4901C Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS197622.roa Signing time: Fri 05 Jun 2026 07:12:22 +0000 ROA not before: Fri 05 Jun 2026 07:07:22 +0000 ROA not after: Fri 04 Jun 2027 07:12:22 +0000 asID: 197622 IP address blocks: 2a05:dfc1:7500::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:ab:78:42:be:c0:a6:dc:b4:40:97:4c:c9:46:24:93:32:f4:90:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:22 2026 GMT Not After : Jun 4 07:12:22 2027 GMT Subject: CN=F0C0D548B915DBD1B686C827623A67BEC1040547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3e:6c:1e:d6:6f:a7:1f:31:72:d0:3c:d8:61: fd:a9:21:c7:78:7c:14:e5:76:c0:41:0e:85:e9:cb: 74:ab:77:b7:33:dd:65:56:4e:b8:fc:20:41:5b:41: 3d:21:ff:5c:9b:49:6e:b5:84:e9:35:dd:1d:f3:fe: 6b:8f:b5:e1:a4:a3:35:84:fe:f1:5d:96:17:a2:2e: c9:b9:d7:ae:90:ab:0f:31:6b:39:35:ae:b8:a7:98: 30:51:79:f3:8c:23:b7:7d:aa:24:db:6c:c5:d2:5f: a8:c5:1c:a9:8b:97:21:19:35:03:e4:b3:d6:6b:87: 95:5c:30:5f:a1:e2:19:6c:bc:df:ea:ca:34:39:46: 5b:32:3b:38:78:76:ff:56:df:22:ab:33:37:c6:d8: d0:88:37:75:0d:ff:fd:c0:a7:bc:a2:eb:21:02:e8: 04:d2:94:6f:3e:8f:e8:01:ac:77:b4:b1:9d:e0:ee: 16:5a:63:fa:b7:73:46:33:63:c7:64:c4:78:da:db: b1:c3:7c:50:13:a4:8c:1e:f4:0f:76:e4:f1:86:fc: 0a:af:bc:ae:ee:22:64:62:56:a6:ae:33:62:9a:43: 5b:d2:d1:b9:93:fc:15:f9:f6:5e:50:c6:1f:68:f2: 9f:79:45:9e:ef:e2:1f:36:bf:c2:c9:46:26:a2:46: 7f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C0:D5:48:B9:15:DB:D1:B6:86:C8:27:62:3A:67:BE:C1:04:05:47 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS197622.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:7500::/40 Signature Algorithm: sha256WithRSAEncryption ab:34:0d:62:07:f7:fe:17:0f:09:01:24:07:65:ac:22:4a:a7: 30:a9:c0:1f:71:cf:55:f1:c5:d6:b2:8b:d1:d3:43:65:0a:0f: 7d:d8:dc:88:b5:fb:be:89:f3:6d:cb:7c:cb:7d:41:6e:ed:b0: 9a:24:54:86:74:70:c7:0a:d3:c3:35:fc:f4:e1:c6:ac:2f:f7: 7f:ef:b6:c8:8f:6f:44:12:8a:0f:94:2c:14:f5:c8:88:98:d9: 12:59:a2:22:3a:c2:e6:c5:24:17:5d:b3:40:99:31:07:54:95: b9:1a:af:9f:ec:6e:c7:9c:1f:a5:6d:ff:8d:c5:85:6c:7c:a4: 92:ea:d8:e2:5a:3e:ef:25:22:aa:c6:de:c0:a2:55:88:f1:a3: 0b:f3:bb:7b:5a:82:42:4c:e9:cb:ab:04:ef:a8:ca:82:bf:1f: 71:fc:de:19:3e:ff:bf:1f:83:0a:74:5f:d4:dc:8d:f2:6a:e1: 57:d9:ec:b5:94:0c:ef:19:59:40:61:55:d3:aa:45:b5:aa:d7: fc:51:bd:91:8c:15:1b:50:af:cb:c6:01:c6:aa:b3:37:c0:cb: 70:ac:6d:ac:f9:00:47:bf:d4:f9:60:cc:1d:12:06:d3:d7:32: a5:d8:3b:08:3d:59:f0:c2:bd:02:fd:e5:3c:44:8a:6e:5c:6d: c5:19:82:c2 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUKat4Qr7Apty0QJdMyUYkkzL0kBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MjJaFw0yNzA2MDQwNzEyMjJaMDMxMTAvBgNV BAMTKEYwQzBENTQ4QjkxNURCRDFCNjg2QzgyNzYyM0E2N0JFQzEwNDA1NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Pmwe1m+nHzFy0DzYYf2pIcd4 fBTldsBBDoXpy3Srd7cz3WVWTrj8IEFbQT0h/1ybSW61hOk13R3z/muPteGkozWE /vFdlheiLsm5166Qqw8xazk1rrinmDBRefOMI7d9qiTbbMXSX6jFHKmLlyEZNQPk s9Zrh5VcMF+h4hlsvN/qyjQ5RlsyOzh4dv9W3yKrMzfG2NCIN3UN//3Ap7yi6yEC 6ATSlG8+j+gBrHe0sZ3g7hZaY/q3c0YzY8dkxHja27HDfFATpIwe9A925PGG/Aqv vK7uImRiVqauM2KaQ1vS0bmT/BX59l5Qxh9o8p95RZ7v4h82v8LJRiaiRn+PAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU8MDVSLkV29G2hsgnYjpnvsEEBUcwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMTk3NjIyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwXUwDQYJKoZIhvcNAQELBQADggEBAKs0 DWIH9/4XDwkBJAdlrCJKpzCpwB9xz1Xxxdayi9HTQ2UKD33Y3Ii1+76J823LfMt9 QW7tsJokVIZ0cMcK08M1/PThxqwv93/vtsiPb0QSig+ULBT1yIiY2RJZoiI6wubF JBdds0CZMQdUlbkar5/sbsecH6Vt/43FhWx8pJLq2OJaPu8lIqrG3sCiVYjxowvz u3tagkJM6curBO+oyoK/H3H83hk+/78fgwp0X9TcjfJq4VfZ7LWUDO8ZWUBhVdOq RbWq1/xRvZGMFRtQr8vGAcaqszfAy3Csbaz5AEe/1PlgzB0SBtPXMqXYOwg9WfDC vQL95TxEim5cbcUZgsI= -----END CERTIFICATE-----Generated at Sat Jun 13 09:12:03 2026 by rpki-client