
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199566.roa
File: AS199566.roa (raw, json)
Hash identifier: oLAgLTRy5/0+IhC5J5/oQwemH4jN0gemZbr6OOBo5/U=
Subject key identifier: F8:86:AA:CE:48:74:E1:CE:67:6A:3B:6A:3C:9E:DB:B5:93:03:27:9A
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 061A5255249988B6C247B95D184271669117EE51
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199566.roa
Signing time: Fri 05 Jun 2026 07:12:30 +0000
ROA not before: Fri 05 Jun 2026 07:07:30 +0000
ROA not after: Fri 04 Jun 2027 07:12:30 +0000
asID: 199566
IP address blocks: 2a0a:6040:bc00::/40 maxlen: 48
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:1a:52:55:24:99:88:b6:c2:47:b9:5d:18:42:71:66:91:17:ee:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jun 5 07:07:30 2026 GMT
Not After : Jun 4 07:12:30 2027 GMT
Subject: CN=F886AACE4874E1CE676A3B6A3C9EDBB59303279A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:50:f5:09:4c:cf:7f:92:16:cd:5e:6a:90:5a:
db:12:ba:40:26:1a:4b:f2:66:e8:b4:ea:ac:fb:bf:
61:47:f3:6b:0b:01:72:4b:1f:60:0b:84:79:11:85:
f7:3e:0c:8a:c1:28:e1:bf:f9:7e:8e:8d:58:30:65:
00:80:45:03:43:9b:f9:6a:50:59:7a:54:7a:5a:83:
8f:d8:77:c7:40:5b:ed:32:ee:b9:cc:b2:f2:74:7c:
e0:8b:ec:15:ab:ed:de:d4:d9:e9:d5:a1:a9:c4:14:
79:89:64:eb:d9:ca:ea:63:ae:1e:64:6e:46:b9:7a:
cc:97:41:b9:a3:41:90:0a:95:10:e5:d1:8d:a3:e7:
4e:04:07:fb:30:d8:46:ec:ff:fd:ac:1e:8b:08:c3:
c5:d4:5e:7b:0c:67:89:fb:31:02:e1:b6:19:0e:d0:
3b:ac:a1:a7:d0:42:82:3f:86:0a:b4:38:eb:0b:84:
33:2e:bc:9e:4f:0d:46:e7:fb:54:17:98:54:9c:99:
6e:ac:10:85:7c:79:3f:19:a3:3b:80:98:ac:e9:24:
fd:ec:62:22:28:e7:bf:48:7c:5a:0a:a8:02:4b:0b:
e5:7e:cb:05:91:d3:a6:3b:93:93:40:cb:d1:85:94:
0e:b3:e1:40:44:2c:1f:4a:ec:37:6a:a9:cf:01:9b:
6f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:86:AA:CE:48:74:E1:CE:67:6A:3B:6A:3C:9E:DB:B5:93:03:27:9A
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199566.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:bc00::/40
Signature Algorithm: sha256WithRSAEncryption
6c:30:ac:6f:57:2a:8c:0c:79:95:07:c7:5d:ff:06:6f:9b:3f:
6e:9a:86:9e:31:4d:10:04:98:f1:4d:01:7a:fb:f0:66:6f:3a:
22:c1:72:fe:02:9b:41:b4:d2:87:a9:9d:fb:a7:7d:57:33:b6:
5b:e9:6a:a4:c1:b4:22:6c:6f:51:28:1a:d8:2a:2f:6c:21:96:
84:91:19:85:0e:41:d9:c3:b9:72:a4:c8:14:f1:7b:6c:c9:1b:
c4:99:19:7a:07:7a:b1:6e:3c:67:dd:08:da:c4:72:85:61:54:
ea:01:62:6b:53:c0:06:20:cf:6e:82:90:2a:48:13:8f:e9:e0:
b7:57:34:64:ce:3c:65:93:b3:32:2d:41:b8:33:19:86:e9:fd:
53:7d:c2:a2:04:ba:cb:c0:0c:a1:43:c6:8b:f4:41:cf:8d:80:
af:de:4f:5c:87:7e:e1:c0:0f:5b:5a:3c:02:6e:10:5a:b1:70:
ef:5c:89:e8:06:c0:18:bd:23:f1:fa:ce:64:dc:6f:3c:ec:69:
1c:0a:af:75:24:18:55:2f:2d:36:83:ce:18:28:89:45:66:a7:
f9:e8:f3:fa:f3:ef:87:ad:a4:f7:78:dc:04:f2:97:d1:0d:8f:
28:8c:2d:47:fb:ac:4e:59:be:b5:47:0d:5e:12:35:9c:a6:29:
9a:12:c8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:16 2026 by rpki-client