$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS197624.roa File: AS197624.roa (raw, json) Hash identifier: FJ+VdQ+p5Mfo0Np2SiraJkKGEVO8d0q1+In33U/2KaY= Subject key identifier: C4:97:EA:8C:1E:9B:E8:13:34:E5:C2:BF:20:80:C9:34:B9:FE:B0:1B Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 7B5D566ACA63210A6E16DE6262B803ADC48BA922 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS197624.roa Signing time: Fri 05 Jun 2026 07:12:17 +0000 ROA not before: Fri 05 Jun 2026 07:07:17 +0000 ROA not after: Fri 04 Jun 2027 07:12:17 +0000 asID: 197624 IP address blocks: 2a05:dfc1:7300::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:5d:56:6a:ca:63:21:0a:6e:16:de:62:62:b8:03:ad:c4:8b:a9:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:17 2026 GMT Not After : Jun 4 07:12:17 2027 GMT Subject: CN=C497EA8C1E9BE81334E5C2BF2080C934B9FEB01B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:15:d3:1e:c6:b1:28:6d:b2:92:dd:e6:9f:e2: d0:fb:24:d2:49:5e:21:ed:a8:fd:c4:54:05:3f:54: 05:71:2c:67:77:f0:5c:9c:2e:32:2c:45:32:3e:79: 20:15:b7:a0:c2:4f:6d:7d:1c:3a:dd:ec:58:24:de: 42:77:05:32:1d:0e:a0:a0:cf:3d:71:8d:64:f2:81: 9d:9b:cf:44:9d:71:7f:c9:74:36:a2:3f:0b:13:06: 02:92:ac:40:b6:c7:c8:e5:c7:34:c2:43:fd:ba:13: ed:88:18:3b:6a:61:13:37:12:44:6d:33:bf:c5:a1: 5a:17:ba:05:ec:f0:c9:88:a6:01:11:13:2d:e8:f1: a4:2b:bf:63:ca:7c:c2:62:a4:cb:6b:03:0f:fa:11: e1:5e:96:3c:b0:60:b4:db:c3:be:9f:b0:e7:c0:b7: 9f:10:92:50:e5:f7:92:9e:0d:58:bf:66:d2:df:d1: bf:df:8f:11:40:14:cb:35:1c:59:8d:e7:6c:ae:27: 9f:8c:36:e4:5a:f6:22:46:2c:4f:8d:a2:11:18:69: 56:ac:a9:97:35:96:af:0c:aa:89:01:ea:da:c5:4b: 62:0f:8d:b0:d7:87:12:ca:01:10:e9:00:0c:d8:4b: 2b:5d:67:e3:b2:5a:71:d1:c2:64:ac:84:a2:ba:0d: 16:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:97:EA:8C:1E:9B:E8:13:34:E5:C2:BF:20:80:C9:34:B9:FE:B0:1B X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS197624.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:7300::/40 Signature Algorithm: sha256WithRSAEncryption ba:be:19:c7:26:bc:ab:99:52:78:41:72:5c:7a:ad:0a:7f:a4: 76:51:a8:8b:f4:c8:ca:93:08:4d:87:95:8e:83:1e:73:b1:0e: 61:e6:39:e0:69:68:cc:20:8f:ef:4e:08:92:fe:1e:28:d1:d7: 06:29:61:37:76:08:64:30:4b:24:50:2f:1a:8c:78:86:b6:ac: 66:f8:48:4e:e3:c1:49:73:e4:4b:4a:49:f1:5c:b9:32:25:a2: 74:b5:34:ba:a7:e7:ed:0a:d7:b0:3a:40:df:14:dd:ee:ff:ed: f1:35:d6:29:37:84:3d:d6:81:64:fa:f2:22:23:74:f3:cf:09: 2b:b8:6b:cf:7c:01:dc:a9:68:b2:45:7e:ac:cc:0b:d8:c2:72: 7c:de:a1:76:03:8a:00:88:23:35:8d:76:9c:ca:d6:44:cc:ad: d6:79:a7:4f:10:b8:74:e0:6f:f1:3a:98:c7:79:f2:de:04:5c: b0:0a:2b:81:47:95:b5:7b:ef:78:34:3f:c7:7d:3c:a5:3d:77: 9e:3e:69:99:6a:cd:14:a1:31:b4:b0:ed:d3:7a:72:67:f8:04: d8:de:ea:c0:e3:df:b6:b9:0f:15:08:a6:91:7b:72:7b:9d:6f: b9:bf:c8:3d:ee:11:29:a2:b0:29:b2:47:86:ad:7b:53:48:c1: fb:69:14:55 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUe11WaspjIQpuFt5iYrgDrcSLqSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MTdaFw0yNzA2MDQwNzEyMTdaMDMxMTAvBgNV BAMTKEM0OTdFQThDMUU5QkU4MTMzNEU1QzJCRjIwODBDOTM0QjlGRUIwMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5FdMexrEobbKS3eaf4tD7JNJJ XiHtqP3EVAU/VAVxLGd38FycLjIsRTI+eSAVt6DCT219HDrd7Fgk3kJ3BTIdDqCg zz1xjWTygZ2bz0SdcX/JdDaiPwsTBgKSrEC2x8jlxzTCQ/26E+2IGDtqYRM3EkRt M7/FoVoXugXs8MmIpgEREy3o8aQrv2PKfMJipMtrAw/6EeFeljywYLTbw76fsOfA t58QklDl95KeDVi/ZtLf0b/fjxFAFMs1HFmN52yuJ5+MNuRa9iJGLE+NohEYaVas qZc1lq8MqokB6trFS2IPjbDXhxLKARDpAAzYSytdZ+OyWnHRwmSshKK6DRalAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUxJfqjB6b6BM05cK/IIDJNLn+sBswHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMTk3NjI0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwXMwDQYJKoZIhvcNAQELBQADggEBALq+ GccmvKuZUnhBclx6rQp/pHZRqIv0yMqTCE2HlY6DHnOxDmHmOeBpaMwgj+9OCJL+ HijR1wYpYTd2CGQwSyRQLxqMeIa2rGb4SE7jwUlz5EtKSfFcuTIlonS1NLqn5+0K 17A6QN8U3e7/7fE11ik3hD3WgWT68iIjdPPPCSu4a898AdypaLJFfqzMC9jCcnze oXYDigCIIzWNdpzK1kTMrdZ5p08QuHTgb/E6mMd58t4EXLAKK4FHlbV773g0P8d9 PKU9d54+aZlqzRShMbSw7dN6cmf4BNje6sDj37a5DxUIppF7cnudb7m/yD3uESmi sCmyR4ate1NIwftpFFU= -----END CERTIFICATE-----Generated at Sat Jun 13 09:12:01 2026 by rpki-client