
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199762.roa
File: AS199762.roa (raw, json)
Hash identifier: Rm5X120ojSg2TdScsCbQ6vBK1g11Pp771scA/B8+eQg=
Subject key identifier: 82:D6:02:1B:C8:54:40:EA:F4:95:86:1B:E3:54:57:DD:4B:6C:90:C3
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 14208D53B95D8341DAFAA439D54347CEBB32599D
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199762.roa
Signing time: Fri 04 Jul 2025 06:53:09 +0000
ROA not before: Fri 04 Jul 2025 06:48:09 +0000
ROA not after: Fri 03 Jul 2026 06:53:09 +0000
asID: 199762
IP address blocks: 2a0a:6040:3000::/40 maxlen: 48
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:27:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:20:8d:53:b9:5d:83:41:da:fa:a4:39:d5:43:47:ce:bb:32:59:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jul 4 06:48:09 2025 GMT
Not After : Jul 3 06:53:09 2026 GMT
Subject: CN=82D6021BC85440EAF495861BE35457DD4B6C90C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a0:2a:27:6d:93:67:e9:d3:0c:50:7c:d3:62:
18:2c:bd:0f:a9:20:b6:37:72:00:18:2d:cc:9f:f2:
70:0f:c9:97:d7:b8:ea:14:4c:de:a3:be:f5:b8:9f:
83:33:70:19:b2:59:89:31:08:e2:55:82:08:68:9e:
78:9d:fe:fe:44:be:31:1a:0f:15:06:e0:be:7e:95:
27:6a:b6:12:f4:7e:eb:6c:bd:23:52:3e:4d:39:3a:
6f:bc:2c:13:30:e8:49:5c:aa:25:c7:34:15:2c:7c:
f6:46:42:1e:9a:5f:56:b3:08:ae:d8:89:a9:c8:f0:
8b:53:ca:7d:c3:fa:e1:13:29:e7:d0:7c:43:24:71:
cc:8e:7f:f7:98:6c:c7:e5:1b:53:59:97:fc:5d:f7:
fd:37:fc:1c:85:3e:a0:4a:a7:e1:a8:29:9d:f8:5f:
1c:5c:47:a2:22:e5:5c:36:61:6f:49:b6:87:7b:3c:
ed:2c:0f:bf:fb:8a:fa:e4:54:7e:c5:92:f7:44:84:
eb:75:73:f1:19:52:2e:85:b0:73:76:84:ab:39:96:
49:4c:eb:7c:2b:1c:ce:ac:c1:65:e8:50:71:ae:80:
91:1a:a6:29:f9:63:6b:02:a8:43:10:4b:9b:f2:25:
4c:76:01:ad:12:6e:c4:1f:3b:94:af:47:6f:8a:f3:
ed:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D6:02:1B:C8:54:40:EA:F4:95:86:1B:E3:54:57:DD:4B:6C:90:C3
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199762.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:3000::/40
Signature Algorithm: sha256WithRSAEncryption
7f:90:70:4f:bd:fd:07:9e:0a:19:18:c9:f0:0c:c0:7a:2f:b1:
96:48:85:fa:e2:3f:47:ff:db:26:77:c4:30:4a:7e:88:12:31:
ce:1a:12:1a:c9:84:34:e5:9f:b0:c6:ae:d8:c3:98:a7:78:db:
8c:e0:02:ed:33:31:4c:da:db:41:28:75:18:35:79:46:c7:13:
c3:4d:6b:ba:97:08:2b:3d:b7:ea:54:4d:48:70:be:8f:1a:6d:
0c:21:9a:c5:bb:7d:18:ed:8f:e4:97:59:f4:77:21:24:92:d5:
4a:d9:2f:cf:ac:51:fb:f2:29:97:ea:d3:3f:a5:bf:0a:91:ee:
f4:83:14:11:4e:15:6d:f6:ab:29:ca:94:16:18:ae:4e:ef:7f:
0f:2f:c8:e9:b8:53:ab:6b:42:49:ce:d2:ee:8f:b5:23:30:f6:
e1:92:14:bd:8f:24:d7:b2:22:2e:ed:31:8d:1e:69:e8:71:3e:
16:1f:12:21:6d:59:12:20:91:39:bf:a5:c0:0b:2c:fa:91:f6:
53:d9:cf:5e:ed:f0:58:89:44:74:ca:55:e5:d3:b1:cf:c8:41:
d1:21:d3:41:c3:5f:c3:43:33:bf:5d:d8:5b:70:bf:8e:70:8f:
51:8f:77:68:e9:b7:29:bb:0b:1a:9a:c5:cc:f2:bc:ec:2e:da:
17:4f:b5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:34:54 2025 by rpki-client