
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS205848.roa
File: AS205848.roa (raw, json)
Hash identifier: UacV8c8RnNQxXtlw9FBZYDpuw92/nxjewounir583lY=
Subject key identifier: 37:BE:61:E6:15:10:E7:73:DF:BF:77:E1:13:54:1E:7F:F1:25:A8:51
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 375494BF8C28D4A0345C9850ECF5B477B48231DA
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS205848.roa
Signing time: Fri 05 Jun 2026 07:12:20 +0000
ROA not before: Fri 05 Jun 2026 07:07:20 +0000
ROA not after: Fri 04 Jun 2027 07:12:20 +0000
asID: 205848
IP address blocks: 2a0a:6040:f500::/40 maxlen: 48
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:54:94:bf:8c:28:d4:a0:34:5c:98:50:ec:f5:b4:77:b4:82:31:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jun 5 07:07:20 2026 GMT
Not After : Jun 4 07:12:20 2027 GMT
Subject: CN=37BE61E61510E773DFBF77E113541E7FF125A851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9c:0a:b7:27:f5:82:cc:f0:aa:e3:17:f0:ad:
8d:be:a0:15:46:e8:8f:10:4d:36:a4:10:bd:bd:4b:
e4:7d:48:a5:84:32:64:a7:20:c2:72:9e:c3:63:eb:
fd:2a:e8:a8:62:67:a5:d8:de:6a:d8:7f:49:83:ce:
98:6a:8a:c5:5a:a4:7c:1f:b6:7b:22:00:b8:3d:90:
16:53:fd:81:05:0c:0b:fa:d5:1b:af:c6:97:2e:ec:
94:25:67:ee:61:44:fa:7c:87:e7:19:d0:f5:a9:a7:
eb:f2:a7:ef:dd:0d:a5:26:45:3a:80:14:60:10:48:
15:25:3e:20:93:dd:55:4f:95:51:77:6e:2a:d9:9f:
8d:b9:bd:06:a8:c0:84:9b:3c:f1:ad:5c:8c:a4:e3:
b4:1f:7d:39:65:3b:52:9c:16:0e:1e:bd:ea:94:9a:
3c:e0:91:7c:40:59:0e:f9:95:48:eb:11:c3:16:c3:
63:08:42:31:8e:3d:15:92:c3:58:7d:91:89:04:6a:
26:b8:37:bd:de:50:e9:19:c2:4d:ca:56:ce:2f:e3:
17:c2:14:31:6b:4e:da:bf:c8:af:84:aa:9e:f3:1e:
49:5d:1e:32:8b:db:87:8b:8b:c8:e3:74:cc:3e:ff:
e2:07:6f:3a:0c:9f:c6:b2:df:a8:ab:3e:38:be:c9:
84:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BE:61:E6:15:10:E7:73:DF:BF:77:E1:13:54:1E:7F:F1:25:A8:51
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS205848.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:f500::/40
Signature Algorithm: sha256WithRSAEncryption
bf:1b:19:84:21:42:eb:10:cd:be:79:2c:92:88:c3:05:45:60:
46:de:c8:67:c4:28:75:55:3c:c7:75:87:87:9d:8d:60:5d:81:
8f:4a:93:a2:14:ef:92:7e:2b:24:1c:cb:73:12:b5:18:28:82:
e9:f1:c3:3c:2a:50:4f:27:34:24:5f:41:09:19:27:42:73:7f:
30:5d:4e:e7:8d:f6:e3:8a:5e:49:25:c9:44:97:db:ad:bc:87:
73:84:2b:10:23:60:c7:ce:54:b1:50:34:11:10:22:e1:fe:5f:
ce:fb:f6:63:63:31:2d:af:b2:67:e8:2f:ea:2d:3f:3d:53:23:
80:f7:91:a5:70:2b:e8:2f:24:de:7e:f0:cb:00:df:c2:ac:ec:
58:84:99:68:78:0e:20:98:fa:f4:3a:1e:a8:b1:72:25:95:28:
c1:82:02:9b:f9:0e:dd:67:d2:55:65:2c:e3:05:87:6d:88:eb:
b2:1b:70:0b:3c:09:ca:bc:62:32:8f:8a:25:80:0a:49:1c:56:
81:76:ba:a2:83:33:f6:50:89:50:74:69:09:14:6c:64:dc:3e:
0e:bd:5f:f4:39:9e:21:d9:50:90:86:ca:42:49:72:de:1d:7e:
22:8b:36:8b:a6:09:46:3d:83:f9:80:2d:b4:55:6b:78:e2:c2:
3b:a6:5b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:43:25 2026 by rpki-client