$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS198663.roa File: AS198663.roa (raw, json) Hash identifier: Q+ZqU0wXkE7H/AyIwXIO6aj3DDge24tiMED4ue9qs/Q= Subject key identifier: 15:A4:B1:9D:C4:13:11:1A:BC:F1:8C:37:87:A7:15:16:FC:2A:34:21 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 731508823ECA63CD52C0A08E2474C3EF485A7FF2 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS198663.roa Signing time: Fri 05 Jun 2026 07:12:31 +0000 ROA not before: Fri 05 Jun 2026 07:07:31 +0000 ROA not after: Fri 04 Jun 2027 07:12:31 +0000 asID: 198663 IP address blocks: 2a05:dfc1:2f00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:15:08:82:3e:ca:63:cd:52:c0:a0:8e:24:74:c3:ef:48:5a:7f:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:31 2026 GMT Not After : Jun 4 07:12:31 2027 GMT Subject: CN=15A4B19DC413111ABCF18C3787A71516FC2A3421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d5:b2:c5:23:fb:6e:42:4b:cb:c9:70:79:b0: 9a:03:1c:97:ea:d2:36:fa:70:71:72:df:aa:7e:ca: ba:94:0f:0a:f5:44:96:8f:4b:3f:d4:97:39:b2:79: 76:1b:b8:6b:33:58:44:cf:9e:fc:da:32:f7:ef:2b: 74:5e:20:c3:7f:75:fa:56:30:22:ba:f1:00:6a:0d: 35:63:d3:b7:32:d1:de:f6:d6:98:d0:be:db:08:6d: e9:eb:6a:83:24:c8:70:5c:3c:c0:97:f4:2a:d0:03: 32:c5:a9:8e:79:e0:bb:fa:1b:5b:fe:d0:6f:51:46: dd:b2:f1:a0:d4:70:55:d3:b8:73:5b:c9:98:1e:28: ea:ed:08:e2:4c:be:e2:cd:c2:51:f5:ad:8d:91:d5: d4:8a:63:03:8f:c4:2f:64:59:58:95:f4:82:38:cf: 78:2f:12:f9:fd:d4:94:21:66:50:21:19:30:8b:55: 18:17:ea:c3:49:03:dc:70:e4:7f:38:1e:6f:5e:f8: 66:d1:c0:b3:f1:d1:b7:84:51:9a:58:24:b5:ab:cc: 7d:3a:9b:02:eb:c2:be:2b:7c:6e:0a:ad:7f:ab:96: e2:d2:d3:0b:43:8f:7b:8f:d2:1d:96:5e:f9:ff:05: fb:ff:ae:4b:46:b6:34:c0:b8:33:19:47:d9:d6:ab: 12:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A4:B1:9D:C4:13:11:1A:BC:F1:8C:37:87:A7:15:16:FC:2A:34:21 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS198663.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:2f00::/40 Signature Algorithm: sha256WithRSAEncryption a1:0d:12:b8:02:23:fc:48:2d:17:d4:4d:34:20:1e:4b:cb:2c: 39:5d:35:88:77:87:f9:9b:df:cf:3f:9c:87:d7:f9:e1:90:43: 38:b5:4c:81:7c:1e:ec:31:41:d9:93:a8:7e:e4:59:e7:a4:0e: 9c:d6:b7:8b:7a:b4:21:34:75:96:bc:1d:e2:21:a4:34:f4:c7: 4d:64:61:20:47:a5:f3:6e:f4:fa:6d:56:0a:ec:da:e7:59:a5: 88:f0:3b:c3:cb:3f:f8:22:24:13:f3:96:ac:25:6d:9d:aa:8b: d7:c6:54:bb:00:34:7f:38:ab:e9:8a:fd:b5:32:56:f6:e6:5f: a0:81:c8:c5:31:8e:60:f4:3b:fb:ef:8a:48:4c:c5:32:a5:b1: c2:90:b8:0c:0a:a5:26:22:8b:3c:0b:19:05:f4:21:64:d5:62: b5:4c:9d:e4:67:db:da:4e:fa:82:e8:16:7d:64:1c:c3:88:13: 41:7f:10:08:14:05:cc:b6:e4:32:6d:f2:5d:36:d1:b4:4c:ea: ae:12:db:56:90:5a:4e:bd:09:26:af:27:00:55:d3:51:e0:ab: f3:03:98:94:51:ad:2c:5b:3b:ba:65:a3:4c:cc:52:a1:f5:40: 3d:46:ee:54:26:05:b2:7d:82:be:9c:08:34:9f:d2:59:8b:5d: 56:d0:04:bb -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUcxUIgj7KY81SwKCOJHTD70haf/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MzFaFw0yNzA2MDQwNzEyMzFaMDMxMTAvBgNV BAMTKDE1QTRCMTlEQzQxMzExMUFCQ0YxOEMzNzg3QTcxNTE2RkMyQTM0MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ1bLFI/tuQkvLyXB5sJoDHJfq 0jb6cHFy36p+yrqUDwr1RJaPSz/UlzmyeXYbuGszWETPnvzaMvfvK3ReIMN/dfpW MCK68QBqDTVj07cy0d721pjQvtsIbenraoMkyHBcPMCX9CrQAzLFqY554Lv6G1v+ 0G9RRt2y8aDUcFXTuHNbyZgeKOrtCOJMvuLNwlH1rY2R1dSKYwOPxC9kWViV9II4 z3gvEvn91JQhZlAhGTCLVRgX6sNJA9xw5H84Hm9e+GbRwLPx0beEUZpYJLWrzH06 mwLrwr4rfG4KrX+rluLS0wtDj3uP0h2WXvn/Bfv/rktGtjTAuDMZR9nWqxKZAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUFaSxncQTERq88Yw3h6cVFvwqNCEwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMTk4NjYzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwS8wDQYJKoZIhvcNAQELBQADggEBAKEN ErgCI/xILRfUTTQgHkvLLDldNYh3h/mb388/nIfX+eGQQzi1TIF8HuwxQdmTqH7k WeekDpzWt4t6tCE0dZa8HeIhpDT0x01kYSBHpfNu9PptVgrs2udZpYjwO8PLP/gi JBPzlqwlbZ2qi9fGVLsANH84q+mK/bUyVvbmX6CByMUxjmD0O/vvikhMxTKlscKQ uAwKpSYiizwLGQX0IWTVYrVMneRn29pO+oLoFn1kHMOIE0F/EAgUBcy25DJt8l02 0bRM6q4S21aQWk69CSavJwBV01Hgq/MDmJRRrSxbO7plo0zMUqH1QD1G7lQmBbJ9 gr6cCDSf0lmLXVbQBLs= -----END CERTIFICATE-----Generated at Sat Jun 13 09:11:13 2026 by rpki-client