$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199594.roa File: AS199594.roa (raw, json) Hash identifier: 7VoX/kUPoERkboB9hVvyIVvUFYT6vgF/DeCcAkJA7mY= Subject key identifier: A8:39:C1:94:1B:87:93:D2:6C:E5:C2:32:D2:8E:7A:8A:6A:FE:64:C8 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 0E0AB4A8063D25FF323AF022940A74E0E380203F Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199594.roa Signing time: Fri 05 Jun 2026 07:12:37 +0000 ROA not before: Fri 05 Jun 2026 07:07:37 +0000 ROA not after: Fri 04 Jun 2027 07:12:37 +0000 asID: 199594 IP address blocks: 2a0a:6040:8100::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:0a:b4:a8:06:3d:25:ff:32:3a:f0:22:94:0a:74:e0:e3:80:20:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:37 2026 GMT Not After : Jun 4 07:12:37 2027 GMT Subject: CN=A839C1941B8793D26CE5C232D28E7A8A6AFE64C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f3:e3:18:5b:a8:3a:f6:61:22:84:a9:8c:0e: 40:88:2b:3d:3b:d6:76:5c:53:f9:e0:b2:ca:0b:95: e5:93:95:ac:1e:72:8e:20:38:41:3c:0f:37:31:6f: 59:0c:64:1a:32:ae:2e:02:a2:0b:6a:d2:7f:14:18: 84:4c:8f:f2:90:81:c0:cc:68:8e:a1:7f:3d:34:73: 71:24:bd:a3:65:5a:df:ac:31:8d:b3:5d:b1:7f:bf: b8:7b:1f:19:16:d2:e5:63:c3:58:d7:e4:f6:50:54: 6d:44:2d:52:a4:d6:5e:c9:56:77:af:b0:fe:49:ef: 37:39:01:8d:6e:ef:bd:45:30:99:92:a2:8f:2e:92: 50:fb:ff:20:ac:f8:8b:d9:a3:df:f1:4d:e7:ba:68: d2:7a:7e:14:ae:16:ca:74:be:ec:06:8e:df:08:92: 9c:d3:e2:46:88:81:bd:87:54:30:df:7d:c3:dd:37: b2:0d:bd:7f:c1:05:a6:2b:7e:0d:fd:7e:6b:ce:ae: f8:ae:f2:12:e8:8b:78:b8:48:ec:d6:24:cc:3d:24: 6e:d0:88:04:e9:5d:81:77:3c:2c:eb:52:55:3c:91: 89:62:68:72:86:66:03:c0:1b:ee:d5:23:81:ab:d3: da:a2:d0:81:54:d9:64:a4:aa:3c:57:2f:62:8a:0e: b7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:39:C1:94:1B:87:93:D2:6C:E5:C2:32:D2:8E:7A:8A:6A:FE:64:C8 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199594.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:8100::/40 Signature Algorithm: sha256WithRSAEncryption 23:71:1c:62:59:53:c6:58:ef:af:f2:fe:3a:10:ec:4d:72:69: 6b:4d:ab:fd:a1:4e:44:89:f6:7a:fc:1b:98:4a:b0:9f:09:ed: bc:b7:da:07:05:5e:33:50:0f:a2:57:0e:dd:16:b1:04:81:7f: de:be:1b:22:06:44:66:72:79:09:04:d1:dd:71:0f:78:f7:89: 1b:ae:55:46:0d:8f:fd:f3:0c:7e:1e:61:c3:b2:54:72:d1:77: 63:df:3c:40:42:06:2f:cb:0e:0c:6b:52:92:5f:dc:23:ee:74: 73:4f:2e:8f:3c:e7:52:58:9c:a6:ae:98:17:ee:33:81:10:de: 0f:84:5c:d7:e7:c7:2a:e8:81:aa:28:ea:80:9f:ce:94:75:b1: 10:b2:84:48:2d:78:77:c9:e7:0a:5b:fc:8e:84:b4:06:97:0b: 5f:7b:78:19:33:48:55:a0:b4:ba:48:88:58:0b:16:9b:01:05: 53:a3:cc:4c:32:4b:fa:8d:e1:1f:f3:25:58:b3:a5:d1:fd:96: df:d9:27:a0:49:53:81:e2:e9:df:cf:6e:dd:32:dc:57:2a:5a: e6:12:aa:7c:cf:f6:76:f8:70:cb:c1:8c:1a:86:4e:04:58:ca: 9d:fc:71:cc:81:25:ff:d1:f2:37:4b:49:dd:33:19:d7:d6:a1: 99:de:44:66 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUDgq0qAY9Jf8yOvAilAp04OOAID8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MzdaFw0yNzA2MDQwNzEyMzdaMDMxMTAvBgNV BAMTKEE4MzlDMTk0MUI4NzkzRDI2Q0U1QzIzMkQyOEU3QThBNkFGRTY0QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz8+MYW6g69mEihKmMDkCIKz07 1nZcU/ngssoLleWTlaweco4gOEE8Dzcxb1kMZBoyri4Cogtq0n8UGIRMj/KQgcDM aI6hfz00c3EkvaNlWt+sMY2zXbF/v7h7HxkW0uVjw1jX5PZQVG1ELVKk1l7JVnev sP5J7zc5AY1u771FMJmSoo8uklD7/yCs+IvZo9/xTee6aNJ6fhSuFsp0vuwGjt8I kpzT4kaIgb2HVDDffcPdN7INvX/BBaYrfg39fmvOrviu8hLoi3i4SOzWJMw9JG7Q iATpXYF3PCzrUlU8kYliaHKGZgPAG+7VI4Gr09qi0IFU2WSkqjxXL2KKDrdzAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUqDnBlBuHk9Js5cIy0o56imr+ZMgwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMTk5NTk0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQIEwDQYJKoZIhvcNAQELBQADggEBACNx HGJZU8ZY76/y/joQ7E1yaWtNq/2hTkSJ9nr8G5hKsJ8J7by32gcFXjNQD6JXDt0W sQSBf96+GyIGRGZyeQkE0d1xD3j3iRuuVUYNj/3zDH4eYcOyVHLRd2PfPEBCBi/L DgxrUpJf3CPudHNPLo8851JYnKaumBfuM4EQ3g+EXNfnxyrogaoo6oCfzpR1sRCy hEgteHfJ5wpb/I6EtAaXC197eBkzSFWgtLpIiFgLFpsBBVOjzEwyS/qN4R/zJViz pdH9lt/ZJ6BJU4Hi6d/Pbt0y3FcqWuYSqnzP9nb4cMvBjBqGTgRYyp38ccyBJf/R 8jdLSd0zGdfWoZneRGY= -----END CERTIFICATE-----Generated at Sat Jun 13 09:10:54 2026 by rpki-client