$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199605.roa File: AS199605.roa (raw, json) Hash identifier: tT9vzFMr3EQxzjbw1oKmob8BrIfYq0tTO+T1jpHvXKU= Subject key identifier: FA:67:D7:7E:1E:54:BF:FF:72:29:B5:47:A5:61:D1:58:7E:7A:E2:17 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 0585F4DFDE07E46643094AB1F416DAD584F79C6A Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199605.roa Signing time: Fri 05 Jun 2026 07:12:30 +0000 ROA not before: Fri 05 Jun 2026 07:07:30 +0000 ROA not after: Fri 04 Jun 2027 07:12:30 +0000 asID: 199605 IP address blocks: 2a0a:6040:7e00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:85:f4:df:de:07:e4:66:43:09:4a:b1:f4:16:da:d5:84:f7:9c:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:30 2026 GMT Not After : Jun 4 07:12:30 2027 GMT Subject: CN=FA67D77E1E54BFFF7229B547A561D1587E7AE217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cb:69:75:68:a2:67:c5:1a:70:89:58:bc:d5: 4e:77:46:bc:92:e1:b5:71:15:bd:15:aa:9c:5b:ff: 23:6e:ff:40:32:ea:61:df:83:11:1e:45:3b:37:4d: 4c:a5:7f:61:41:05:9b:15:97:00:c3:c5:fe:93:1c: 75:fa:b1:14:42:cd:f6:ee:68:9e:f4:4b:29:e0:4b: 74:d3:14:c0:f7:ad:e4:df:4d:f9:3b:27:45:3c:d2: 31:4e:11:25:77:20:fa:c3:2b:c2:df:16:4a:86:6f: 9a:27:f2:af:a6:ad:da:55:71:66:c1:68:9b:34:29: 28:c3:6d:66:b0:f2:5c:cf:40:cc:2c:ae:f6:dc:85: e7:16:c5:19:9f:a2:e0:98:5d:bb:d4:1c:b8:2b:49: 9e:84:6e:c2:e3:b5:9e:40:83:64:16:c0:af:0b:69: dd:41:f1:cb:28:87:94:c2:af:21:b5:6d:c6:98:ec: 1d:40:06:de:3c:43:8c:97:4e:dc:d0:48:61:f5:84: 6b:3d:b8:9a:6b:03:12:ce:ea:b1:57:d4:2a:c9:d5: 78:6e:df:0a:81:8a:51:74:b3:11:00:b7:d3:a6:f0: e1:76:97:0e:14:2e:b5:a2:d3:99:0b:2a:d6:2d:6b: 74:bd:30:7d:2d:9b:c2:a1:ec:25:09:8a:ef:e8:05: 31:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:67:D7:7E:1E:54:BF:FF:72:29:B5:47:A5:61:D1:58:7E:7A:E2:17 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199605.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:7e00::/40 Signature Algorithm: sha256WithRSAEncryption 2d:f4:89:90:17:47:93:3d:94:e3:47:2b:f2:cd:c3:5d:3b:1b: d4:5a:58:29:a7:60:c4:01:1e:12:c7:25:41:78:e2:3b:22:8d: 77:ac:b8:8f:34:d3:e5:04:2f:24:57:bf:ba:18:32:ef:a4:16: 2c:fe:8d:85:cf:bb:dc:c5:2b:fb:67:6d:1d:98:c8:c2:9a:92: 12:46:f6:81:04:59:93:9c:a4:33:24:75:1e:2f:ec:8e:fa:52: fc:4a:4b:f2:aa:01:e2:68:f4:94:f4:6b:e5:c9:49:58:31:b1: 65:3a:f5:d7:ef:b6:57:19:f9:ec:a5:e5:ca:39:7e:56:4c:8e: 50:3d:5b:a8:ec:45:03:11:f6:18:5c:1f:5a:ba:6d:7d:d9:35: 3f:af:d6:78:d1:43:a7:c8:8a:ed:8a:04:4c:79:21:8d:be:ca: 7d:f9:f8:72:8b:d0:6b:a5:ba:b5:40:6d:f3:7b:77:03:5e:05: 27:9b:4b:e3:ee:59:39:da:35:f3:fa:b5:e6:e7:1b:36:03:73: ef:1c:f5:50:4a:66:84:65:7a:df:66:bd:8b:93:67:43:eb:2e: 73:80:1d:1e:2c:03:52:97:fe:ae:b8:f1:6d:50:aa:41:e6:de: 26:57:b8:58:37:7f:75:ac:70:d9:b3:5b:c7:b5:29:84:90:75: 5f:53:eb:b5 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUBYX0394H5GZDCUqx9Bba1YT3nGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MzBaFw0yNzA2MDQwNzEyMzBaMDMxMTAvBgNV BAMTKEZBNjdENzdFMUU1NEJGRkY3MjI5QjU0N0E1NjFEMTU4N0U3QUUyMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyy2l1aKJnxRpwiVi81U53RryS 4bVxFb0Vqpxb/yNu/0Ay6mHfgxEeRTs3TUylf2FBBZsVlwDDxf6THHX6sRRCzfbu aJ70SyngS3TTFMD3reTfTfk7J0U80jFOESV3IPrDK8LfFkqGb5on8q+mrdpVcWbB aJs0KSjDbWaw8lzPQMwsrvbchecWxRmfouCYXbvUHLgrSZ6EbsLjtZ5Ag2QWwK8L ad1B8csoh5TCryG1bcaY7B1ABt48Q4yXTtzQSGH1hGs9uJprAxLO6rFX1CrJ1Xhu 3wqBilF0sxEAt9Om8OF2lw4ULrWi05kLKtYta3S9MH0tm8Kh7CUJiu/oBTFjAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU+mfXfh5Uv/9yKbVHpWHRWH564hcwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMTk5NjA1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQH4wDQYJKoZIhvcNAQELBQADggEBAC30 iZAXR5M9lONHK/LNw107G9RaWCmnYMQBHhLHJUF44jsijXesuI800+UELyRXv7oY Mu+kFiz+jYXPu9zFK/tnbR2YyMKakhJG9oEEWZOcpDMkdR4v7I76UvxKS/KqAeJo 9JT0a+XJSVgxsWU69dfvtlcZ+eyl5co5flZMjlA9W6jsRQMR9hhcH1q6bX3ZNT+v 1njRQ6fIiu2KBEx5IY2+yn35+HKL0GulurVAbfN7dwNeBSebS+PuWTnaNfP6tebn GzYDc+8c9VBKZoRlet9mvYuTZ0PrLnOAHR4sA1KX/q648W1QqkHm3iZXuFg3f3Ws cNmzW8e1KYSQdV9T67U= -----END CERTIFICATE-----Generated at Sat Jun 13 06:43:20 2026 by rpki-client