$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS198231.roa File: AS198231.roa (raw, json) Hash identifier: VkTx37hy+9cgq13Sqg1pz7E/ESWivtB1F94DSilR/fU= Subject key identifier: E0:49:F0:1C:6D:CB:25:09:26:BD:0A:76:6C:5E:9C:98:9A:1C:D3:A7 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 61309D494BA715EA0ABDD2D5B12DB817B883D0AA Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS198231.roa Signing time: Fri 05 Jun 2026 07:12:43 +0000 ROA not before: Fri 05 Jun 2026 07:07:43 +0000 ROA not after: Fri 04 Jun 2027 07:12:43 +0000 asID: 198231 IP address blocks: 2a06:9f81:1100::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:30:9d:49:4b:a7:15:ea:0a:bd:d2:d5:b1:2d:b8:17:b8:83:d0:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:43 2026 GMT Not After : Jun 4 07:12:43 2027 GMT Subject: CN=E049F01C6DCB250926BD0A766C5E9C989A1CD3A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4b:7a:f1:82:c3:5c:ec:ea:cb:59:f0:3a:92: b2:76:15:90:0a:91:ed:68:da:0f:b3:97:2f:c4:ce: 8f:55:ed:0d:34:cc:55:f0:e8:78:52:3d:d3:74:6e: 32:c7:d4:97:70:7c:3b:6d:50:b3:17:b5:42:49:0d: de:38:e3:93:1b:f3:ac:74:5c:01:1b:b2:d0:fc:4f: 5b:63:44:de:ac:1c:f6:32:2e:8f:c8:7b:5a:16:8e: 15:a4:a3:f9:27:cb:c3:23:61:7a:aa:75:4e:36:79: b0:aa:ef:44:5c:c6:a3:b4:b0:07:36:9c:37:00:95: 0a:bc:ca:e4:30:3c:f1:16:b5:f1:65:ab:92:99:de: 22:8c:28:57:90:93:50:ab:2b:4f:ee:43:e3:49:12: a3:fc:3a:c9:81:3d:d8:31:5e:fb:85:58:f6:12:a7: f7:ad:52:d2:85:cf:82:a4:16:e0:dd:60:27:68:73: 73:3b:d1:c9:ac:af:94:81:3c:87:88:9a:ed:f8:38: 9a:39:54:b1:b5:df:2d:86:65:9f:33:fd:0c:fd:39: 86:aa:4f:37:bc:e1:5d:74:db:9f:ba:a3:ad:2c:ac: fa:92:19:1a:28:ed:d6:be:79:d4:19:6a:cf:69:9b: 8b:f4:86:af:02:a3:fb:84:d4:16:28:34:c2:aa:9e: b9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:49:F0:1C:6D:CB:25:09:26:BD:0A:76:6C:5E:9C:98:9A:1C:D3:A7 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS198231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:1100::/40 Signature Algorithm: sha256WithRSAEncryption 60:e0:c9:9f:55:bc:28:87:5e:ae:43:1f:fe:ab:b8:b1:7a:37: 12:cb:76:51:47:7c:b6:04:dc:d1:a5:12:00:d1:fb:8c:59:81: 0a:7f:3a:8a:f9:84:b3:63:98:bd:6f:64:3a:a0:50:c8:d2:1c: f1:12:57:0f:a4:b1:8d:46:f5:b6:9b:45:c2:db:ba:11:2c:7b: 28:78:a5:60:83:78:e7:48:f8:84:88:7e:de:c5:75:2c:27:ce: 13:cb:df:e8:05:08:ce:44:f7:df:be:ae:54:65:5f:01:f9:1a: 24:78:0b:d6:cb:7b:ac:13:4a:33:8f:02:73:4a:3b:f9:22:54: 40:24:4a:70:93:ae:c5:22:df:52:ca:0b:03:39:fb:24:9a:04: 21:6c:cf:e0:00:48:61:d2:b6:26:c1:d0:bb:4c:fd:79:4e:dd: a6:4c:3f:49:3c:97:66:a1:83:22:2d:a5:6c:ff:7a:b2:28:68: 4b:e4:19:d0:ad:dd:86:8e:8c:dc:51:fa:0f:31:4b:a9:41:91: 3e:37:b8:62:a3:2f:c4:42:a4:e4:f4:85:3c:bf:96:7e:45:1c: cd:79:c3:35:e5:8b:3d:2a:e7:50:4b:74:8e:27:cc:90:b9:ee: 2c:fe:1a:df:14:34:d9:d6:3d:86:15:ed:61:99:06:08:19:50: 24:19:73:25 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUYTCdSUunFeoKvdLVsS24F7iD0KowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3NDNaFw0yNzA2MDQwNzEyNDNaMDMxMTAvBgNV BAMTKEUwNDlGMDFDNkRDQjI1MDkyNkJEMEE3NjZDNUU5Qzk4OUExQ0QzQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHS3rxgsNc7OrLWfA6krJ2FZAK ke1o2g+zly/Ezo9V7Q00zFXw6HhSPdN0bjLH1JdwfDttULMXtUJJDd4445Mb86x0 XAEbstD8T1tjRN6sHPYyLo/Ie1oWjhWko/kny8MjYXqqdU42ebCq70RcxqO0sAc2 nDcAlQq8yuQwPPEWtfFlq5KZ3iKMKFeQk1CrK0/uQ+NJEqP8OsmBPdgxXvuFWPYS p/etUtKFz4KkFuDdYCdoc3M70cmsr5SBPIeImu34OJo5VLG13y2GZZ8z/Qz9OYaq Tze84V1025+6o60srPqSGRoo7da+edQZas9pm4v0hq8Co/uE1BYoNMKqnrnZAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU4EnwHG3LJQkmvQp2bF6cmJoc06cwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMTk4MjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgafgREwDQYJKoZIhvcNAQELBQADggEBAGDg yZ9VvCiHXq5DH/6ruLF6NxLLdlFHfLYE3NGlEgDR+4xZgQp/Oor5hLNjmL1vZDqg UMjSHPESVw+ksY1G9babRcLbuhEseyh4pWCDeOdI+ISIft7FdSwnzhPL3+gFCM5E 99++rlRlXwH5GiR4C9bLe6wTSjOPAnNKO/kiVEAkSnCTrsUi31LKCwM5+ySaBCFs z+AASGHStibB0LtM/XlO3aZMP0k8l2ahgyItpWz/erIoaEvkGdCt3YaOjNxR+g8x S6lBkT43uGKjL8RCpOT0hTy/ln5FHM15wzXliz0q51BLdI4nzJC57iz+Gt8UNNnW PYYV7WGZBggZUCQZcyU= -----END CERTIFICATE-----Generated at Sat Jun 13 09:11:14 2026 by rpki-client