$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199767.roa File: AS199767.roa (raw, json) Hash identifier: JTcgJVqHBRG/lEZrfJ4jiIcfMbcsr0147n3iGbXtheM= Subject key identifier: F5:84:6F:D9:D5:C4:C0:70:F4:B0:40:8C:B2:1E:82:D2:82:B8:F0:97 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 67DFFD4801FA684D554BA006D520B410B467B3AD Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199767.roa Signing time: Fri 05 Jun 2026 07:12:38 +0000 ROA not before: Fri 05 Jun 2026 07:07:38 +0000 ROA not after: Fri 04 Jun 2027 07:12:38 +0000 asID: 199767 IP address blocks: 2a0a:6040:4f00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:df:fd:48:01:fa:68:4d:55:4b:a0:06:d5:20:b4:10:b4:67:b3:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:38 2026 GMT Not After : Jun 4 07:12:38 2027 GMT Subject: CN=F5846FD9D5C4C070F4B0408CB21E82D282B8F097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:85:2e:38:4d:0d:a6:6f:d8:d1:d1:31:2c:16: 96:79:9d:66:b1:52:c9:0a:79:91:41:0c:a6:1f:5a: 97:a2:aa:be:a8:97:9b:01:e3:33:50:5a:78:2e:d1: bb:97:61:02:1c:61:73:28:7c:7c:d8:f0:62:51:56: 76:23:c6:aa:a2:57:01:f0:98:ba:57:f5:63:0a:6b: df:44:86:2c:10:fd:de:40:0c:dd:af:cf:81:53:c7: 1c:2f:c7:37:00:63:4f:b5:f3:3e:ae:10:47:ef:93: c9:d7:38:a1:5a:be:56:42:74:02:f1:8a:31:54:54: 98:6c:94:f9:6e:7d:7c:9e:84:36:da:91:89:92:4c: 7c:6d:9d:e2:a9:49:8c:9d:bd:6d:1e:b9:51:40:9a: 90:6e:55:2c:c9:ba:b9:f8:72:43:da:28:99:21:76: 9b:cb:8d:8c:6e:2f:b2:fd:1a:2d:02:91:57:e4:55: 8d:fc:83:a4:d0:60:63:e3:1f:86:55:41:49:b5:8c: 4d:8e:7a:f5:6a:fa:50:ea:10:cd:35:6f:0f:b7:21: 81:9d:a5:02:91:75:c5:02:b4:0a:b7:7f:80:b7:24: 1d:65:82:18:1d:c2:27:49:58:51:66:6b:d5:71:fb: 4e:96:1c:06:b3:7a:0e:48:25:bc:b9:6e:12:f9:b0: 4c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:84:6F:D9:D5:C4:C0:70:F4:B0:40:8C:B2:1E:82:D2:82:B8:F0:97 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS199767.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:4f00::/40 Signature Algorithm: sha256WithRSAEncryption 32:a6:19:4e:78:f5:a2:e2:57:5d:57:af:d4:8a:9a:04:9c:e8: 4f:d3:41:c4:fc:6b:b7:13:a9:50:74:ea:3a:63:fa:26:bb:df: d6:03:07:dc:ab:29:2b:8f:7a:1a:b0:6f:14:4f:51:df:02:70: dc:80:cc:35:5c:98:ee:18:3a:49:33:a5:41:0c:a7:03:53:b6: 8e:61:a2:80:93:b3:ef:19:37:cf:90:f4:c8:be:e7:bf:ce:c5: 05:56:ea:a3:81:26:3b:a9:cd:13:f4:96:47:1a:6c:42:9b:ec: cc:bc:2e:84:75:ce:20:82:b0:81:8f:e0:73:c3:86:3c:c0:3c: 2b:fa:a4:45:93:4d:e7:d4:6c:d2:6b:61:82:3e:42:ab:54:6d: 06:29:d7:68:b1:97:38:3c:1a:69:b3:b7:96:5f:d7:cb:49:73: 0c:43:e6:02:77:bc:72:fc:e8:c2:09:47:09:6e:aa:c5:e0:a9: 58:25:e4:cf:cc:8f:9b:ad:9a:09:fd:ac:37:3b:b5:60:ab:1c: d2:11:24:14:48:43:5e:98:c8:1a:94:a6:0d:6d:a3:b2:1f:9d: b8:70:b7:1e:33:90:cd:1c:50:09:7a:7a:95:bc:99:0b:66:81: ab:3e:75:e5:a0:a9:d6:de:cb:1b:a5:1a:61:2d:3e:7b:ec:fc: 81:8c:c3:fc -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUZ9/9SAH6aE1VS6AG1SC0ELRns60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MzhaFw0yNzA2MDQwNzEyMzhaMDMxMTAvBgNV BAMTKEY1ODQ2RkQ5RDVDNEMwNzBGNEIwNDA4Q0IyMUU4MkQyODJCOEYwOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8hS44TQ2mb9jR0TEsFpZ5nWax UskKeZFBDKYfWpeiqr6ol5sB4zNQWngu0buXYQIcYXMofHzY8GJRVnYjxqqiVwHw mLpX9WMKa99EhiwQ/d5ADN2vz4FTxxwvxzcAY0+18z6uEEfvk8nXOKFavlZCdALx ijFUVJhslPlufXyehDbakYmSTHxtneKpSYydvW0euVFAmpBuVSzJurn4ckPaKJkh dpvLjYxuL7L9Gi0CkVfkVY38g6TQYGPjH4ZVQUm1jE2OevVq+lDqEM01bw+3IYGd pQKRdcUCtAq3f4C3JB1lghgdwidJWFFma9Vx+06WHAazeg5IJby5bhL5sEzXAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU9YRv2dXEwHD0sECMsh6C0oK48JcwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMTk5NzY3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQE8wDQYJKoZIhvcNAQELBQADggEBADKm GU549aLiV11Xr9SKmgSc6E/TQcT8a7cTqVB06jpj+ia739YDB9yrKSuPehqwbxRP Ud8CcNyAzDVcmO4YOkkzpUEMpwNTto5hooCTs+8ZN8+Q9Mi+57/OxQVW6qOBJjup zRP0lkcabEKb7My8LoR1ziCCsIGP4HPDhjzAPCv6pEWTTefUbNJrYYI+QqtUbQYp 12ixlzg8Gmmzt5Zf18tJcwxD5gJ3vHL86MIJRwluqsXgqVgl5M/Mj5utmgn9rDc7 tWCrHNIRJBRIQ16YyBqUpg1to7Ifnbhwtx4zkM0cUAl6epW8mQtmgas+deWgqdbe yxulGmEtPnvs/IGMw/w= -----END CERTIFICATE-----Generated at Sat Jun 13 10:22:59 2026 by rpki-client