
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS201392.roa
File: AS201392.roa (raw, json)
Hash identifier: 0latAeNkMyUvLzTj7h78tJMLtAMCChmvaCttODvbWMM=
Subject key identifier: 9D:5D:E6:61:7C:15:C4:C7:5D:32:E3:7B:DF:5B:7F:BE:EE:48:23:BB
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 34D4A5539D6A6332F917E4997BD7A847FE16D28B
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS201392.roa
Signing time: Fri 05 Jun 2026 07:12:11 +0000
ROA not before: Fri 05 Jun 2026 07:07:11 +0000
ROA not after: Fri 04 Jun 2027 07:12:11 +0000
asID: 201392
IP address blocks: 2a0a:6040:fe00::/40 maxlen: 48
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:d4:a5:53:9d:6a:63:32:f9:17:e4:99:7b:d7:a8:47:fe:16:d2:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jun 5 07:07:11 2026 GMT
Not After : Jun 4 07:12:11 2027 GMT
Subject: CN=9D5DE6617C15C4C75D32E37BDF5B7FBEEE4823BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c2:a6:e4:c6:4c:e6:2e:50:e1:09:6d:29:5b:
8f:74:05:fe:29:e5:60:57:e7:11:2e:ce:91:1b:3a:
28:e6:d4:83:9c:34:cc:79:e4:ee:48:83:57:df:0f:
82:eb:89:5b:b0:88:30:e6:cd:4d:fe:b4:2c:96:bf:
d1:f3:37:e2:aa:0d:56:47:40:5b:82:da:11:1f:7b:
4a:78:7a:c6:3a:23:8c:5a:aa:f4:c2:56:69:a5:15:
33:ef:fc:f9:1f:4a:16:59:20:df:f1:50:61:a5:fa:
85:5c:1b:8b:09:f0:dc:d7:1d:1b:e0:7e:63:b6:14:
e9:ae:53:b5:db:86:85:57:da:89:58:fc:05:ea:24:
73:a7:d1:5c:36:40:4c:e5:34:f6:ed:e6:5c:f9:0d:
4a:eb:64:39:a8:ad:73:ae:0a:c5:97:bc:5d:41:b7:
3c:ae:b4:61:e4:88:b5:d4:5f:84:e6:8f:05:f6:cd:
35:9c:d8:56:3f:32:a3:64:b9:2e:2b:94:82:df:df:
8d:d7:62:7d:62:a7:ed:03:43:1c:87:2d:ac:a3:45:
1c:f8:46:ba:a4:09:18:fe:aa:17:8c:1e:21:cf:95:
e7:83:ea:5a:96:d2:1c:90:f4:a4:10:fc:16:43:45:
71:0f:83:6a:28:03:db:7d:f8:36:16:dd:e5:39:74:
0a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5D:E6:61:7C:15:C4:C7:5D:32:E3:7B:DF:5B:7F:BE:EE:48:23:BB
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS201392.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:fe00::/40
Signature Algorithm: sha256WithRSAEncryption
75:2b:05:46:b6:fc:4d:54:2e:7c:23:9f:bc:1e:29:c5:af:21:
66:f3:bb:5d:2e:72:f9:b3:58:88:32:a1:9b:19:7a:76:06:91:
52:45:22:e8:f8:fc:12:39:93:68:ed:be:3d:ca:6a:a7:05:dc:
a2:ca:2f:7d:0a:95:5d:17:2d:df:e9:5e:cb:72:90:53:ff:5e:
11:3a:f6:9b:4d:1c:1c:9b:26:64:06:87:19:4a:1b:10:b1:ae:
e0:fe:36:e8:ed:fe:a2:2e:8c:3e:0c:bd:77:31:ac:0d:c7:38:
64:5b:1b:1b:bb:1e:22:7e:f6:97:94:2e:19:95:c7:d6:9a:90:
7e:f1:81:bd:22:27:97:00:58:ea:2e:1b:62:0e:f5:db:24:0f:
6a:d5:ce:0f:9f:49:1c:e7:f7:fb:f5:b3:27:34:d8:25:93:2f:
62:93:4a:13:72:2b:80:b6:2f:d0:51:28:b3:8d:fd:b5:27:38:
fc:5a:48:39:bf:6c:88:68:c7:14:73:7c:94:53:ab:d1:bb:31:
5f:d3:ff:2a:dd:c8:ac:22:d8:b9:a7:3f:ef:bd:8f:5e:24:1b:
bd:41:ce:c0:67:de:6b:4b:34:f3:d3:2a:56:57:72:9c:35:fa:
82:d7:48:a3:ac:77:15:8e:e4:69:6b:3e:bf:ac:71:20:5b:05:
72:a2:c3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:02 2026 by rpki-client