$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199497.roa File: AS199497.roa (raw, json) Hash identifier: n3ljoauNAUJIcl3/cyYDn01uqYKhVqvfG/3EECnFhS0= Subject key identifier: E2:7B:9A:D5:01:AA:26:92:3E:33:2E:CA:B2:14:E1:48:6F:AC:70:E8 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 660433DEAD1BE9CA5480428C3388AD339CFD232C Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199497.roa Signing time: Fri 05 Jun 2026 07:12:37 +0000 ROA not before: Fri 05 Jun 2026 07:07:37 +0000 ROA not after: Fri 04 Jun 2027 07:12:37 +0000 asID: 199497 IP address blocks: 2a0a:6040:eb00::/40 maxlen: 40 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:04:33:de:ad:1b:e9:ca:54:80:42:8c:33:88:ad:33:9c:fd:23:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:37 2026 GMT Not After : Jun 4 07:12:37 2027 GMT Subject: CN=E27B9AD501AA26923E332ECAB214E1486FAC70E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:44:8b:59:e6:28:b4:12:f0:33:2e:ff:5b:e6: 87:e8:e4:57:ac:f0:37:e8:40:10:0b:6b:49:12:d5: 94:96:51:4a:bc:7b:31:63:b9:e7:32:01:33:45:0a: 8a:38:d6:01:09:6d:44:f5:6b:cf:3a:3c:f3:74:f9: fc:83:e6:44:ca:38:a1:87:0c:53:3f:2a:40:86:db: 73:47:14:36:b9:61:5e:3b:77:46:07:52:c0:dc:16: 74:e2:ba:b0:2f:bc:b8:80:8f:c6:d4:64:9c:50:68: 7a:50:50:fe:c8:8a:17:c9:b4:f0:00:6d:9a:2a:06: 2d:a4:39:15:5d:5c:39:d7:40:bd:9c:f5:bb:01:16: ad:ec:99:a7:91:69:60:18:c5:f0:2d:eb:ae:75:51: 45:a1:0a:9b:b7:60:73:d4:67:41:d0:42:8b:73:37: c8:9b:92:47:2e:48:a3:a8:4e:2c:9c:1f:4f:92:28: 6b:8e:b5:93:90:64:1e:2f:f9:07:92:ab:0c:8e:4d: 5f:c1:2f:16:86:28:26:b7:45:75:d3:03:b4:c2:24: 9d:22:eb:2a:a7:74:9a:0b:b9:b2:a5:0d:eb:61:eb: 10:ed:3c:cc:4f:9d:30:81:e3:e2:0f:03:2b:00:1f: 4f:e0:66:d2:4f:d5:3a:47:32:d0:1c:e1:f7:6b:89: 02:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:7B:9A:D5:01:AA:26:92:3E:33:2E:CA:B2:14:E1:48:6F:AC:70:E8 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199497.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:eb00::/40 Signature Algorithm: sha256WithRSAEncryption bc:1b:1b:e9:20:f1:7d:fb:b7:f4:7f:4c:8d:c5:d5:5b:74:2e: b3:67:f0:ec:cb:93:0e:f6:a6:b5:78:02:10:10:b1:7a:7a:27: f3:e6:e6:6e:3f:9e:30:8e:c9:e3:1a:b1:84:69:ac:39:79:85: b0:98:0c:55:08:ad:37:00:ae:8c:df:4c:cd:44:17:a0:d0:68: 89:c3:3e:df:76:21:5d:0e:fc:57:db:2e:df:85:89:98:e3:7e: a0:87:4e:2b:d7:94:3c:a2:ad:5a:f4:1a:03:fc:51:2c:ec:8d: 4c:96:2f:17:5c:17:aa:88:6c:19:cc:ba:28:9e:a0:77:e3:8f: cf:7c:03:b8:56:21:a9:49:28:fc:12:0c:1a:25:4e:7d:07:02: e8:f8:b7:c5:54:36:7a:63:25:10:53:a7:a4:98:84:6b:58:1c: ac:6c:1f:1d:f8:4e:5d:e0:9d:be:e4:9b:8f:11:77:df:d0:f9: 92:e1:36:ff:a3:29:37:9f:05:36:06:d7:19:36:a9:1e:af:e8: 28:e7:71:7e:2b:3a:70:c5:f6:49:b6:ab:ad:c9:d3:16:29:03: da:9a:4e:af:95:17:15:cf:87:49:d3:e2:2d:c6:3d:8b:10:0b: 4b:49:03:30:e6:62:80:97:01:7c:3a:2c:b1:65:cd:e7:fb:e4: 0a:7b:4d:8c -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUZgQz3q0b6cpUgEKMM4itM5z9IywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MzdaFw0yNzA2MDQwNzEyMzdaMDMxMTAvBgNV BAMTKEUyN0I5QUQ1MDFBQTI2OTIzRTMzMkVDQUIyMTRFMTQ4NkZBQzcwRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBRItZ5ii0EvAzLv9b5ofo5Fes 8DfoQBALa0kS1ZSWUUq8ezFjuecyATNFCoo41gEJbUT1a886PPN0+fyD5kTKOKGH DFM/KkCG23NHFDa5YV47d0YHUsDcFnTiurAvvLiAj8bUZJxQaHpQUP7IihfJtPAA bZoqBi2kORVdXDnXQL2c9bsBFq3smaeRaWAYxfAt6651UUWhCpu3YHPUZ0HQQotz N8ibkkcuSKOoTiycH0+SKGuOtZOQZB4v+QeSqwyOTV/BLxaGKCa3RXXTA7TCJJ0i 6yqndJoLubKlDeth6xDtPMxPnTCB4+IPAysAH0/gZtJP1TpHMtAc4fdriQLHAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU4nua1QGqJpI+My7KshThSG+scOgwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMTk5NDk3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQOswDQYJKoZIhvcNAQELBQADggEBALwb G+kg8X37t/R/TI3F1Vt0LrNn8OzLkw72prV4AhAQsXp6J/Pm5m4/njCOyeMasYRp rDl5hbCYDFUIrTcArozfTM1EF6DQaInDPt92IV0O/FfbLt+FiZjjfqCHTivXlDyi rVr0GgP8USzsjUyWLxdcF6qIbBnMuiieoHfjj898A7hWIalJKPwSDBolTn0HAuj4 t8VUNnpjJRBTp6SYhGtYHKxsHx34Tl3gnb7km48Rd9/Q+ZLhNv+jKTefBTYG1xk2 qR6v6CjncX4rOnDF9km2q63J0xYpA9qaTq+VFxXPh0nT4i3GPYsQC0tJAzDmYoCX AXw6LLFlzef75Ap7TYw= -----END CERTIFICATE-----Generated at Sat Jun 13 09:11:14 2026 by rpki-client