$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS198057.roa File: AS198057.roa (raw, json) Hash identifier: c7sP90+iupGhjbHi7lGQCRfzHD7/yZ+An+y7dsqYWSo= Subject key identifier: 4F:39:7D:C9:7D:AA:FB:6D:AB:6C:04:B0:6B:89:DD:7B:8A:E8:3C:00 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 510390E6C99691A9E835D62B1C8584AC352BA394 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS198057.roa Signing time: Fri 05 Jun 2026 07:12:46 +0000 ROA not before: Fri 05 Jun 2026 07:07:46 +0000 ROA not after: Fri 04 Jun 2027 07:12:46 +0000 asID: 198057 IP address blocks: 2a05:dfc1:7800::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:03:90:e6:c9:96:91:a9:e8:35:d6:2b:1c:85:84:ac:35:2b:a3:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:46 2026 GMT Not After : Jun 4 07:12:46 2027 GMT Subject: CN=4F397DC97DAAFB6DAB6C04B06B89DD7B8AE83C00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d3:56:66:95:e8:04:30:3d:61:41:6c:16:eb: ac:97:97:58:48:4c:ba:c0:6c:25:73:5d:81:3c:9c: 0d:bc:4a:48:a4:fb:93:72:68:f4:67:72:83:cf:ab: 05:e4:b2:87:af:6a:7b:0e:4e:88:ba:2d:64:7a:fe: 35:ff:3f:7f:08:66:e5:94:86:e3:02:1f:5a:88:cd: fc:c6:a4:7d:75:f9:ec:e6:a1:d9:9c:1c:ad:24:c8: 37:d4:2d:e3:72:8d:d4:94:eb:e6:bf:31:d4:7d:5d: d1:a7:e4:bd:5a:16:d2:31:81:b3:1b:4d:ac:13:40: a4:59:9b:a8:d5:04:22:de:ac:6c:2f:3a:bc:c2:b1: 72:68:fc:fc:bd:50:72:c1:7a:06:e1:31:d2:d7:44: c9:be:f4:0e:d8:fe:07:73:6a:78:37:47:97:9d:5b: c2:98:6e:ec:8e:03:81:1c:1b:c3:fb:83:fb:ad:51: fb:a7:11:7d:c6:c3:bf:6a:fd:25:f2:8c:14:1a:d5: c0:1d:30:32:bd:0c:0a:f4:da:eb:0a:43:de:68:8f: fa:27:61:92:ee:be:a0:75:48:e0:34:2e:37:79:88: 6b:ea:55:c2:09:eb:e2:f1:0d:14:1d:7a:ec:e9:79: 73:ce:0b:e0:bf:de:6f:8b:26:5c:ab:94:27:14:7d: 1e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:39:7D:C9:7D:AA:FB:6D:AB:6C:04:B0:6B:89:DD:7B:8A:E8:3C:00 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS198057.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:7800::/40 Signature Algorithm: sha256WithRSAEncryption 8f:75:47:cf:74:2e:50:bf:d5:d4:91:15:df:66:f8:10:48:ea: 20:7b:04:20:07:ec:35:f4:55:35:8f:45:d6:7f:b7:ae:90:f4: f5:28:97:ac:09:fb:e6:25:95:89:59:74:79:c3:0c:27:89:f5: cc:71:b3:fd:dd:ad:72:29:c9:10:ae:68:4f:96:67:b0:48:f9: 03:54:35:55:ca:2b:80:0f:4e:0e:ac:36:09:15:43:79:54:1c: 01:d0:99:b6:76:41:97:55:f4:f3:5d:4a:a5:49:15:fb:14:55: 00:f3:a3:e8:da:54:27:8b:3f:db:ca:5d:1f:68:d9:17:a9:6a: b6:3f:3b:e3:79:98:51:51:f3:db:37:5f:a8:bf:d6:7a:b9:38: 83:f5:a2:e4:b4:f1:19:2e:b0:9a:2f:59:36:5b:cf:3c:9f:43: 83:b0:80:54:60:c2:15:32:d3:12:e7:70:5e:c9:02:0f:8a:f8: 2d:2e:be:fa:ff:eb:f1:d7:fa:97:01:3d:08:e1:59:89:9c:09: 38:51:48:30:e4:e2:77:c4:6a:db:b3:ab:8e:0a:12:23:53:ef: ba:6e:19:b6:a2:d7:28:b9:9a:20:2f:0c:cf:55:08:ce:c2:dd: 10:a4:8c:15:bf:39:2d:67:34:99:20:a7:30:b8:9f:69:e8:17: 61:e0:12:e5 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUUQOQ5smWkanoNdYrHIWErDUro5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3NDZaFw0yNzA2MDQwNzEyNDZaMDMxMTAvBgNV BAMTKDRGMzk3REM5N0RBQUZCNkRBQjZDMDRCMDZCODlERDdCOEFFODNDMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx01ZmlegEMD1hQWwW66yXl1hI TLrAbCVzXYE8nA28Skik+5NyaPRncoPPqwXksoevansOToi6LWR6/jX/P38IZuWU huMCH1qIzfzGpH11+ezmodmcHK0kyDfULeNyjdSU6+a/MdR9XdGn5L1aFtIxgbMb TawTQKRZm6jVBCLerGwvOrzCsXJo/Py9UHLBegbhMdLXRMm+9A7Y/gdzang3R5ed W8KYbuyOA4EcG8P7g/utUfunEX3Gw79q/SXyjBQa1cAdMDK9DAr02usKQ95oj/on YZLuvqB1SOA0Ljd5iGvqVcIJ6+LxDRQdeuzpeXPOC+C/3m+LJlyrlCcUfR4pAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUTzl9yX2q+22rbASwa4nde4roPAAwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMTk4MDU3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwXgwDQYJKoZIhvcNAQELBQADggEBAI91 R890LlC/1dSRFd9m+BBI6iB7BCAH7DX0VTWPRdZ/t66Q9PUol6wJ++YllYlZdHnD DCeJ9cxxs/3drXIpyRCuaE+WZ7BI+QNUNVXKK4APTg6sNgkVQ3lUHAHQmbZ2QZdV 9PNdSqVJFfsUVQDzo+jaVCeLP9vKXR9o2ReparY/O+N5mFFR89s3X6i/1nq5OIP1 ouS08RkusJovWTZbzzyfQ4OwgFRgwhUy0xLncF7JAg+K+C0uvvr/6/HX+pcBPQjh WYmcCThRSDDk4nfEatuzq44KEiNT77puGbai1yi5miAvDM9VCM7C3RCkjBW/OS1n NJkgpzC4n2noF2HgEuU= -----END CERTIFICATE-----Generated at Sat Jun 13 09:11:55 2026 by rpki-client