
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS212178.roa
File: AS212178.roa (raw, json)
Hash identifier: X2KP6epnAhIDn3zasxgud7tfLIlM9XsR2FeXfsLS6sw=
Subject key identifier: 75:DA:60:8A:A2:88:E2:5C:DF:36:D7:FC:20:00:00:7F:91:71:1A:D7
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 07CC6A76F6DD11E2C01B8299CDF40754147BF7F8
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS212178.roa
Signing time: Fri 05 Jun 2026 07:12:18 +0000
ROA not before: Fri 05 Jun 2026 07:07:18 +0000
ROA not after: Fri 04 Jun 2027 07:12:18 +0000
asID: 212178
IP address blocks: 2a0a:6040:5600::/40 maxlen: 48
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:cc:6a:76:f6:dd:11:e2:c0:1b:82:99:cd:f4:07:54:14:7b:f7:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jun 5 07:07:18 2026 GMT
Not After : Jun 4 07:12:18 2027 GMT
Subject: CN=75DA608AA288E25CDF36D7FC2000007F91711AD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:67:9b:66:30:f3:c1:fc:02:a5:97:8b:13:a8:
98:02:83:87:b0:2f:ea:c4:9c:71:13:19:23:30:4b:
4d:2c:30:50:5f:11:e7:fd:68:a2:3c:91:b9:4e:39:
70:88:0d:96:4c:d1:b5:31:00:ca:92:6e:10:38:d8:
31:b8:84:19:f3:3a:43:d0:22:99:40:5d:37:d3:2c:
cb:21:4d:78:f1:4e:e7:dd:c5:fd:c3:8b:f2:52:47:
ac:9a:2d:14:eb:5f:1b:3f:90:ee:49:90:26:b1:45:
43:c5:bc:e2:c8:d5:a9:6c:c8:2a:b0:9a:e1:99:9f:
88:5f:c8:88:19:50:b6:76:14:fd:37:f4:47:a2:3e:
7c:d2:92:0c:50:65:0e:5b:91:9c:d0:6e:e8:25:c6:
ca:ed:58:a0:50:dc:78:78:71:00:42:11:49:0d:ed:
5c:bb:61:94:69:9a:30:6a:67:26:4b:9b:6d:d3:a4:
ec:b4:bd:5f:08:b0:cb:fe:fc:70:4a:4a:86:23:45:
cd:57:13:22:c5:59:1a:aa:c8:a3:25:6a:95:fa:ff:
75:ff:c1:fc:7e:c3:a2:b6:42:9c:85:6a:45:43:ff:
64:e7:5b:4c:06:af:9d:d1:da:06:0b:97:e9:10:e4:
55:6c:38:67:f9:97:49:15:df:92:bc:86:ac:77:33:
27:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DA:60:8A:A2:88:E2:5C:DF:36:D7:FC:20:00:00:7F:91:71:1A:D7
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS212178.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:5600::/40
Signature Algorithm: sha256WithRSAEncryption
c1:bf:e7:52:1c:fe:0a:3f:5d:a7:39:13:77:d9:40:0b:f8:37:
0c:f2:57:ed:48:fb:c9:38:3f:7a:e6:66:f4:13:1c:1e:76:58:
06:83:ff:7a:5d:f8:4c:27:46:35:d0:29:06:91:f1:a5:33:94:
c7:a1:f7:e9:2e:56:0e:fc:a0:88:be:0f:5a:f3:6c:d6:53:87:
db:28:ea:e0:fb:f3:0f:3f:88:1e:65:16:ee:4c:3b:94:ef:80:
d1:2d:0a:f6:a9:ac:be:64:f5:51:50:01:2d:5c:63:0b:2a:27:
ec:42:16:c9:11:7b:b0:65:7c:45:1a:c2:7a:72:10:73:60:8a:
5c:5a:3d:c4:bd:8e:bf:8f:22:3e:dc:a8:27:6f:54:52:c5:96:
00:1c:a4:c1:74:99:25:f7:1e:a9:70:d9:77:54:d5:91:ec:95:
b1:7f:c2:c0:75:91:ca:7c:75:95:4d:1c:52:03:1e:ce:bc:4c:
73:86:82:b3:db:f7:a2:fb:06:32:e7:72:e6:66:a4:34:52:c0:
17:c6:8e:91:bd:72:bf:6d:54:6c:17:2b:e8:3c:37:97:81:ba:
1a:49:46:cc:d8:d1:c3:58:9b:e4:c3:05:d8:7a:f5:f1:d5:1d:
ec:88:7b:16:55:f1:72:bb:ce:d4:12:dd:16:a6:29:26:7e:cb:
95:f2:28:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:06 2026 by rpki-client