$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199688.roa File: AS199688.roa (raw, json) Hash identifier: 4hy9W5yFfO22rdOg4PlgeO+g9S/pyXVIup6cOSyyr4s= Subject key identifier: 21:CC:05:DD:C7:85:72:22:6A:8F:80:FA:B1:49:55:8A:B7:E4:91:90 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 512502159753D452D44B6E58852AE77565521F94 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199688.roa Signing time: Fri 05 Jun 2026 07:12:23 +0000 ROA not before: Fri 05 Jun 2026 07:07:23 +0000 ROA not after: Fri 04 Jun 2027 07:12:23 +0000 asID: 199688 IP address blocks: 2a0a:6040:7600::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:25:02:15:97:53:d4:52:d4:4b:6e:58:85:2a:e7:75:65:52:1f:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:23 2026 GMT Not After : Jun 4 07:12:23 2027 GMT Subject: CN=21CC05DDC78572226A8F80FAB149558AB7E49190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:62:47:3a:25:32:01:95:f9:de:67:6e:e1:5e: 32:99:70:96:ef:cd:81:b6:33:ea:b2:ca:0f:d5:b5: 2f:ba:62:bd:08:da:c9:e5:a8:3c:7b:59:e8:fc:11: e4:44:89:cc:9b:75:72:1f:c8:74:c4:4b:8e:53:84: b6:9f:59:8b:fe:74:06:58:44:cf:05:d5:b0:c7:46: 67:a8:3e:c7:b1:47:17:c6:9c:eb:d6:a0:54:38:ba: 00:e4:6e:7e:e2:e9:ca:0c:ae:bf:98:c1:eb:34:a0: 5c:a4:45:5d:4e:11:96:a2:59:1d:04:df:fb:f7:ea: 06:09:40:58:1b:05:0f:8a:ee:29:69:04:d3:ce:61: 29:e9:e7:c3:e7:a0:5d:f3:da:2f:aa:d3:92:9c:c3: a9:ff:02:fb:f7:20:b2:5c:dd:7f:b2:aa:c3:61:c3: d7:e9:14:60:89:c8:4a:bb:f9:48:5f:96:e0:ce:c6: 44:ff:14:6b:c0:e0:e2:26:08:a6:8b:cf:78:69:0e: b2:61:e3:fa:56:17:43:e6:35:63:e1:1b:22:c4:28: a7:7e:9e:27:4c:78:9c:35:ee:21:8a:37:fc:23:82: b7:6b:29:eb:50:a6:61:2a:11:a8:da:2e:5a:4e:22: 52:db:33:8d:7c:a9:d6:22:61:39:57:53:eb:8f:fe: e4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CC:05:DD:C7:85:72:22:6A:8F:80:FA:B1:49:55:8A:B7:E4:91:90 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199688.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:7600::/40 Signature Algorithm: sha256WithRSAEncryption b5:0c:b8:ff:4c:38:86:66:57:5d:53:4f:79:06:0c:53:05:46: 46:c2:1f:a3:bf:5e:29:0e:c7:d1:b3:06:fc:c9:c7:30:0e:b0: 09:9e:42:ab:46:32:80:7b:1c:5d:a8:bb:c6:33:ca:c3:7e:38: 93:45:58:6a:e0:f1:22:c5:0b:74:a2:9f:af:14:2a:2f:83:1c: 26:28:ab:9b:6d:33:60:32:ba:99:69:00:cf:48:f0:d5:21:80: bd:68:b8:ab:95:1b:04:33:cd:86:04:83:9d:e8:f4:f2:1b:07: a1:00:8e:42:b8:43:d9:37:cb:56:21:2c:95:21:51:ef:bd:b1: f0:3b:c2:4b:f1:16:f9:b9:1c:42:f2:ef:88:7a:97:e4:e9:be: fe:7b:95:33:25:b2:cf:a5:bc:fb:44:b4:6e:f8:90:8a:60:60: 4b:12:9a:d2:37:78:4e:36:df:b4:fa:15:c8:46:05:ed:b0:3b: 54:bc:88:75:f4:0b:89:f9:c8:63:b2:28:41:2c:9f:d8:09:b8: 97:b8:03:b6:e3:56:55:11:7b:7b:6c:8a:2f:aa:a2:06:c2:89: 33:81:c1:ea:8e:53:ef:ca:c9:e7:5b:9e:ae:95:32:94:44:bc: 6e:29:78:2c:bf:83:09:12:42:7c:08:80:f5:9f:eb:ed:41:38: 91:18:60:cc -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUUSUCFZdT1FLUS25YhSrndWVSH5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MjNaFw0yNzA2MDQwNzEyMjNaMDMxMTAvBgNV BAMTKDIxQ0MwNUREQzc4NTcyMjI2QThGODBGQUIxNDk1NThBQjdFNDkxOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQYkc6JTIBlfneZ27hXjKZcJbv zYG2M+qyyg/VtS+6Yr0I2snlqDx7Wej8EeREicybdXIfyHTES45ThLafWYv+dAZY RM8F1bDHRmeoPsexRxfGnOvWoFQ4ugDkbn7i6coMrr+Ywes0oFykRV1OEZaiWR0E 3/v36gYJQFgbBQ+K7ilpBNPOYSnp58PnoF3z2i+q05Kcw6n/Avv3ILJc3X+yqsNh w9fpFGCJyEq7+UhfluDOxkT/FGvA4OImCKaLz3hpDrJh4/pWF0PmNWPhGyLEKKd+ nidMeJw17iGKN/wjgrdrKetQpmEqEajaLlpOIlLbM418qdYiYTlXU+uP/uSZAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUIcwF3ceFciJqj4D6sUlVirfkkZAwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMTk5Njg4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQHYwDQYJKoZIhvcNAQELBQADggEBALUM uP9MOIZmV11TT3kGDFMFRkbCH6O/XikOx9GzBvzJxzAOsAmeQqtGMoB7HF2ou8Yz ysN+OJNFWGrg8SLFC3Sin68UKi+DHCYoq5ttM2AyuplpAM9I8NUhgL1ouKuVGwQz zYYEg53o9PIbB6EAjkK4Q9k3y1YhLJUhUe+9sfA7wkvxFvm5HELy74h6l+Tpvv57 lTMlss+lvPtEtG74kIpgYEsSmtI3eE4237T6FchGBe2wO1S8iHX0C4n5yGOyKEEs n9gJuJe4A7bjVlURe3tsii+qogbCiTOBweqOU+/Kyedbnq6VMpREvG4peCy/gwkS QnwIgPWf6+1BOJEYYMw= -----END CERTIFICATE-----Generated at Sat Jun 13 09:11:05 2026 by rpki-client