$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS198786.roa File: AS198786.roa (raw, json) Hash identifier: 1E3kBF1usqK9t8tldmijoLCow3q2qxyWx9yZ7V7pUrs= Subject key identifier: 0C:2E:F6:29:80:8E:35:03:B1:A5:6C:2E:A7:00:DA:B7:78:47:4B:D1 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 7AF5A221F1663A68FA63AEF2A1DF031E33CE3F72 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS198786.roa Signing time: Fri 05 Jun 2026 07:12:48 +0000 ROA not before: Fri 05 Jun 2026 07:07:48 +0000 ROA not after: Fri 04 Jun 2027 07:12:48 +0000 asID: 198786 IP address blocks: 2a05:dfc1:3500::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:f5:a2:21:f1:66:3a:68:fa:63:ae:f2:a1:df:03:1e:33:ce:3f:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:48 2026 GMT Not After : Jun 4 07:12:48 2027 GMT Subject: CN=0C2EF629808E3503B1A56C2EA700DAB778474BD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d4:22:0f:db:b3:36:36:50:c6:6f:44:11:26: e8:05:d5:07:0d:24:ba:69:13:d7:96:7b:64:0c:12: d9:6c:0b:a6:1e:78:70:e1:3a:f5:80:4a:1e:ab:d6: 82:fc:94:fa:20:f2:62:a8:03:1a:78:d8:b2:75:02: 6b:84:19:99:e1:54:1c:73:ae:ad:25:f3:f8:f6:b8: 28:1b:38:4e:1e:f3:6a:87:c4:93:e8:ec:a3:c7:ea: 4b:95:89:eb:c7:74:bf:1e:26:ea:98:0a:76:c4:39: 7c:e1:da:29:09:4a:b9:af:8c:3f:65:c4:a8:5e:2d: bc:56:d8:dc:8a:2c:31:6d:5c:35:32:86:6d:d5:74: a7:f1:c4:4a:31:f1:d4:17:f1:0b:30:b7:57:11:8e: e2:31:bc:43:71:39:f6:83:00:28:84:c1:5c:39:38: b8:10:1f:07:c1:24:40:06:25:30:fe:7a:57:57:e3: 48:47:43:a0:08:75:23:64:18:2d:b6:05:10:47:5c: 89:d4:37:6a:cf:db:04:c0:ad:05:de:1e:a9:8a:6f: f1:b0:19:c2:52:5c:14:41:a3:e2:60:5a:92:b1:3a: b2:a3:c0:92:98:a3:02:22:d5:c1:22:6d:02:3c:57: 88:97:58:0f:21:cc:00:0f:64:50:55:d5:fd:9b:2f: d2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2E:F6:29:80:8E:35:03:B1:A5:6C:2E:A7:00:DA:B7:78:47:4B:D1 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS198786.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:3500::/40 Signature Algorithm: sha256WithRSAEncryption 04:87:33:b7:9a:3d:03:18:9e:e2:85:23:05:ee:a4:c7:44:4a: d3:2e:a7:ab:c9:88:04:2b:08:36:2f:f0:44:68:75:4f:5e:76: ac:68:41:7e:01:df:79:bb:3b:63:e9:da:8b:be:b3:a5:56:06: da:7a:11:6c:be:35:72:e8:dc:67:0d:87:93:b6:27:0e:72:a2: a0:98:dd:76:02:27:84:9d:98:07:65:a1:10:4c:ae:ad:b2:74: f3:1d:bf:f7:76:08:0d:5f:34:63:1a:c5:48:3f:1b:5b:ec:3e: 85:ef:7b:6e:27:56:f6:e8:20:7b:86:3c:ea:f3:fe:48:ed:9f: fa:35:42:5f:0f:7c:73:63:30:00:e6:84:31:aa:0c:4d:56:e4: 82:29:34:30:79:08:47:9f:b7:1f:28:15:09:2f:6a:9d:ce:6d: ec:4e:8a:36:7b:be:4b:a0:8e:ef:e1:f4:7b:aa:f2:c1:cc:14: 2d:32:0d:6f:8b:10:48:d1:7d:66:17:67:fe:ab:db:7e:e0:8c: 3b:ab:58:16:b6:39:c3:f6:e1:4e:68:92:a6:da:f5:57:69:02: 21:63:df:c9:65:bd:b6:6a:4f:bc:eb:26:a0:cf:c6:fb:de:53: 03:aa:04:be:c0:01:b2:34:5a:a0:61:79:bb:c4:2a:d3:9e:19: 9a:ab:12:4c -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUevWiIfFmOmj6Y67yod8DHjPOP3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3NDhaFw0yNzA2MDQwNzEyNDhaMDMxMTAvBgNV BAMTKDBDMkVGNjI5ODA4RTM1MDNCMUE1NkMyRUE3MDBEQUI3Nzg0NzRCRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw1CIP27M2NlDGb0QRJugF1QcN JLppE9eWe2QMEtlsC6YeeHDhOvWASh6r1oL8lPog8mKoAxp42LJ1AmuEGZnhVBxz rq0l8/j2uCgbOE4e82qHxJPo7KPH6kuVievHdL8eJuqYCnbEOXzh2ikJSrmvjD9l xKheLbxW2NyKLDFtXDUyhm3VdKfxxEox8dQX8Qswt1cRjuIxvENxOfaDACiEwVw5 OLgQHwfBJEAGJTD+eldX40hHQ6AIdSNkGC22BRBHXInUN2rP2wTArQXeHqmKb/Gw GcJSXBRBo+JgWpKxOrKjwJKYowIi1cEibQI8V4iXWA8hzAAPZFBV1f2bL9KJAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUDC72KYCONQOxpWwupwDat3hHS9EwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMTk4Nzg2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwTUwDQYJKoZIhvcNAQELBQADggEBAASH M7eaPQMYnuKFIwXupMdEStMup6vJiAQrCDYv8ERodU9edqxoQX4B33m7O2Pp2ou+ s6VWBtp6EWy+NXLo3GcNh5O2Jw5yoqCY3XYCJ4SdmAdloRBMrq2ydPMdv/d2CA1f NGMaxUg/G1vsPoXve24nVvboIHuGPOrz/kjtn/o1Ql8PfHNjMADmhDGqDE1W5IIp NDB5CEeftx8oFQkvap3ObexOijZ7vkugju/h9Huq8sHMFC0yDW+LEEjRfWYXZ/6r 237gjDurWBa2OcP24U5okqba9VdpAiFj38llvbZqT7zrJqDPxvveUwOqBL7AAbI0 WqBhebvEKtOeGZqrEkw= -----END CERTIFICATE-----Generated at Sat Jun 13 09:10:55 2026 by rpki-client