$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS198092.roa File: AS198092.roa (raw, json) Hash identifier: 3D3Nbysh1vYuQWQuP79Goj1kmx3LFvMpN3fBGletnDc= Subject key identifier: 46:E1:37:F6:66:DE:19:1A:24:00:57:06:49:5B:72:F7:38:2F:D4:59 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 7D7A4793EE06BA751B24E8DA1FF20CFB9C9C7543 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS198092.roa Signing time: Fri 05 Jun 2026 07:12:31 +0000 ROA not before: Fri 05 Jun 2026 07:07:31 +0000 ROA not after: Fri 04 Jun 2027 07:12:31 +0000 asID: 198092 IP address blocks: 2a05:dfc1:5800::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:7a:47:93:ee:06:ba:75:1b:24:e8:da:1f:f2:0c:fb:9c:9c:75:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:31 2026 GMT Not After : Jun 4 07:12:31 2027 GMT Subject: CN=46E137F666DE191A24005706495B72F7382FD459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c1:68:15:fe:2a:5e:e0:af:8f:38:ac:6a:86: f4:7c:8c:66:3c:ec:f7:29:cf:08:ea:1d:e8:5f:92: 82:fb:de:d6:a2:d2:27:6d:ad:c6:73:66:c6:a4:19: 47:63:40:c6:ea:dd:ab:03:2f:f0:64:96:4e:81:08: ba:91:d8:1c:1e:6a:9c:12:df:a6:ed:fb:97:d2:54: 95:1e:db:76:7c:97:d2:2a:ad:77:4d:39:29:e3:f5: a2:04:cc:ce:08:95:50:e8:d5:0c:49:54:45:a5:17: 17:57:d9:fe:90:57:34:37:10:84:21:12:8f:c4:22: a5:d0:4d:dd:f7:dd:53:43:f7:c2:86:1c:79:85:09: 2c:0c:68:bd:f2:d8:d2:9c:31:91:2a:e5:7f:41:5a: 49:4a:f0:68:96:96:f7:d9:bc:d3:bd:26:a5:57:0e: 8c:b2:f0:e8:86:3c:70:34:08:1a:11:b1:0d:ca:71: fc:c8:f1:90:84:9d:23:ec:b3:d4:fa:d1:1e:ae:d3: 12:87:e7:0a:3d:6c:d4:98:64:5a:57:61:30:63:6b: 28:ef:e5:35:ee:10:81:65:42:47:ec:b0:7e:f8:60: 7e:2c:1b:47:7a:32:66:c1:3b:8e:7a:11:27:b5:0e: 94:56:cc:6d:dd:12:92:97:cd:ad:50:4b:03:e2:ba: d6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E1:37:F6:66:DE:19:1A:24:00:57:06:49:5B:72:F7:38:2F:D4:59 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS198092.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:5800::/40 Signature Algorithm: sha256WithRSAEncryption 01:07:17:e6:4f:09:f0:ae:b9:39:ec:d3:b8:5b:cb:d8:95:93: 75:9a:33:a5:73:11:d4:97:3f:63:a0:a1:1a:58:3b:72:14:2a: 3e:a9:79:3a:d0:c2:e0:0c:87:55:98:0e:87:f5:6f:9e:cd:ec: 38:5d:2e:da:53:d0:57:25:5b:a4:50:dd:64:2b:a2:64:b4:56: 7b:d1:f7:ba:db:f8:ef:93:53:8f:f9:43:9d:54:86:5f:3d:70: 09:c8:36:86:f7:a8:82:96:70:6d:fc:60:27:c0:f9:9a:59:4f: 6f:54:f5:4e:83:2d:87:d5:a9:d8:92:25:52:04:ea:f1:b1:b3: de:bf:e8:40:76:58:d1:62:fe:09:aa:67:f1:a7:1e:f0:3b:f9: f2:52:7d:94:54:98:a1:4b:c5:a8:e7:ee:33:12:cc:bc:19:1a: 48:73:7f:ee:c0:a6:0e:b2:83:b8:25:7d:c4:56:2e:28:2e:91: bf:5b:9d:7c:2a:c5:1d:8b:6a:ae:5f:8f:69:8c:ed:9e:92:7d: e8:cb:89:7c:90:83:3c:41:89:1b:43:df:ad:33:d6:55:e9:3e: 53:76:a3:5d:8c:4f:f8:e0:a5:08:ab:03:a7:99:b6:e9:34:5f: b8:34:05:98:e8:12:fc:a3:2a:ae:85:08:01:29:08:3c:ba:14: 17:dc:ce:ac -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUfXpHk+4GunUbJOjaH/IM+5ycdUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MzFaFw0yNzA2MDQwNzEyMzFaMDMxMTAvBgNV BAMTKDQ2RTEzN0Y2NjZERTE5MUEyNDAwNTcwNjQ5NUI3MkY3MzgyRkQ0NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdwWgV/ipe4K+POKxqhvR8jGY8 7PcpzwjqHehfkoL73tai0idtrcZzZsakGUdjQMbq3asDL/Bklk6BCLqR2BweapwS 36bt+5fSVJUe23Z8l9IqrXdNOSnj9aIEzM4IlVDo1QxJVEWlFxdX2f6QVzQ3EIQh Eo/EIqXQTd333VND98KGHHmFCSwMaL3y2NKcMZEq5X9BWklK8GiWlvfZvNO9JqVX Doyy8OiGPHA0CBoRsQ3KcfzI8ZCEnSPss9T60R6u0xKH5wo9bNSYZFpXYTBjayjv 5TXuEIFlQkfssH74YH4sG0d6MmbBO456ESe1DpRWzG3dEpKXza1QSwPiutZtAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQURuE39mbeGRokAFcGSVty9zgv1FkwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMTk4MDkyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwVgwDQYJKoZIhvcNAQELBQADggEBAAEH F+ZPCfCuuTns07hby9iVk3WaM6VzEdSXP2OgoRpYO3IUKj6peTrQwuAMh1WYDof1 b57N7DhdLtpT0FclW6RQ3WQromS0VnvR97rb+O+TU4/5Q51Uhl89cAnINob3qIKW cG38YCfA+ZpZT29U9U6DLYfVqdiSJVIE6vGxs96/6EB2WNFi/gmqZ/GnHvA7+fJS fZRUmKFLxajn7jMSzLwZGkhzf+7Apg6yg7glfcRWLigukb9bnXwqxR2Laq5fj2mM 7Z6SfejLiXyQgzxBiRtD360z1lXpPlN2o12MT/jgpQirA6eZtuk0X7g0BZjoEvyj Kq6FCAEpCDy6FBfczqw= -----END CERTIFICATE-----Generated at Sat Jun 13 09:12:06 2026 by rpki-client