
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS198308.roa
File: AS198308.roa (raw, json)
Hash identifier: NOPTfDPmBouCxp4cK/9g4YFeA25nukRRV+PNTCvq4qA=
Subject key identifier: BE:C1:7B:E0:DB:0C:A4:CD:CB:9C:67:29:E3:39:DB:C2:23:D7:89:F6
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 40B0BF4B34361E37C537CE279A96FEB5E51A54DE
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS198308.roa
Signing time: Fri 05 Jun 2026 07:12:30 +0000
ROA not before: Fri 05 Jun 2026 07:07:30 +0000
ROA not after: Fri 04 Jun 2027 07:12:30 +0000
asID: 198308
IP address blocks: 2a05:dfc1:4d00::/40 maxlen: 48
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:b0:bf:4b:34:36:1e:37:c5:37:ce:27:9a:96:fe:b5:e5:1a:54:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jun 5 07:07:30 2026 GMT
Not After : Jun 4 07:12:30 2027 GMT
Subject: CN=BEC17BE0DB0CA4CDCB9C6729E339DBC223D789F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:13:50:4d:cd:d6:46:4d:3c:03:e8:b5:fd:d9:
12:b3:74:49:65:71:e7:e8:72:33:48:0b:ea:2e:fe:
fc:42:00:10:3a:5f:f1:dd:f6:d6:ae:6b:04:3e:5d:
06:dd:31:8d:f8:df:f0:9d:12:b4:59:92:26:9b:f7:
bd:08:83:17:15:0d:11:0f:99:06:ec:6d:52:6e:5d:
10:5c:ee:ad:e5:cf:03:0b:39:ba:89:30:47:50:af:
b9:fc:1d:ca:07:f0:5e:e7:99:6f:15:a4:1a:96:9a:
b3:24:aa:99:ca:56:28:c2:40:9f:51:01:84:50:c8:
a4:83:d3:11:9b:00:5f:9d:c5:3a:e6:de:b5:d2:37:
e8:0d:10:ef:38:0f:fb:00:4d:ad:66:ef:01:10:30:
1c:57:c4:83:fa:f7:0c:e2:e8:1e:8c:5c:ab:71:d7:
d5:aa:ae:bc:ff:10:10:1f:9f:cb:97:b7:a8:83:f9:
18:b5:c3:90:46:b9:d9:a4:fc:2b:12:af:93:b0:10:
25:84:f8:a2:44:1e:0a:35:bd:05:76:4a:31:74:01:
ad:78:74:c3:49:87:59:49:9e:b6:a6:6c:d2:33:63:
66:1e:00:32:a1:eb:76:72:db:1f:56:1d:aa:29:f9:
46:18:ca:f2:d5:a0:e3:6a:2a:2f:7f:b7:d5:f6:af:
17:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C1:7B:E0:DB:0C:A4:CD:CB:9C:67:29:E3:39:DB:C2:23:D7:89:F6
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS198308.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:4d00::/40
Signature Algorithm: sha256WithRSAEncryption
d8:48:2e:be:0b:77:94:78:ee:ae:76:b8:82:30:c9:d2:c2:60:
54:9b:6c:5a:ac:a4:eb:bd:91:b3:d6:0a:aa:cf:04:16:20:cf:
b5:90:6f:5a:a2:a0:5b:79:94:00:4e:aa:85:ce:82:64:0d:dd:
76:28:58:fb:3e:57:d7:4f:a3:39:dc:62:9b:f3:8c:f3:65:06:
2b:80:83:b6:73:9a:60:cc:f3:ec:71:ed:f0:73:64:26:e3:10:
9b:4e:ef:32:fc:cb:0a:0d:5d:2e:99:89:5f:91:3f:79:fb:09:
3d:50:b2:84:72:29:39:ab:3b:26:3c:50:6d:4f:18:de:42:ef:
05:65:0a:ee:ff:fe:91:f4:1f:6b:f2:e4:41:a8:cb:ff:88:b5:
28:5f:a8:9a:2a:ab:f9:7b:b0:8d:b7:00:08:cc:48:c9:86:e8:
d3:3c:8a:1e:1f:89:8e:97:28:12:1b:79:c7:68:71:56:c0:e4:
e4:0c:07:99:89:51:59:b5:80:75:58:3e:cc:5e:54:f2:cf:d3:
01:cb:65:83:51:89:28:1a:0b:bf:fb:5b:a6:d5:e4:d0:8b:78:
85:f9:0b:16:34:6d:77:18:97:ad:98:7b:1b:7a:91:c4:0a:45:
5c:d6:17:5a:0c:53:26:37:92:6b:e0:89:d0:b8:56:89:09:b1:
3b:7f:9a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:10:53 2026 by rpki-client