
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215748.roa
File: AS215748.roa (raw, json)
Hash identifier: RA2K8HVzQukY19zYp8EULRjyQDtHM28X4bj0txAdkhw=
Subject key identifier: F3:D3:E1:AF:14:4B:3B:C5:50:B5:6A:B1:1A:38:41:34:1D:70:D4:60
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 3EA38F990423820D4047ABED038027714F978212
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215748.roa
Signing time: Fri 05 Jun 2026 07:12:43 +0000
ROA not before: Fri 05 Jun 2026 07:07:43 +0000
ROA not after: Fri 04 Jun 2027 07:12:43 +0000
asID: 215748
IP address blocks: 2a06:9f81:3100::/40 maxlen: 48
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:a3:8f:99:04:23:82:0d:40:47:ab:ed:03:80:27:71:4f:97:82:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jun 5 07:07:43 2026 GMT
Not After : Jun 4 07:12:43 2027 GMT
Subject: CN=F3D3E1AF144B3BC550B56AB11A3841341D70D460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:45:31:3a:62:a8:64:32:22:6e:fc:b3:24:96:
5d:8d:b9:57:a2:2f:7e:68:8a:43:37:a9:5f:01:ea:
7d:81:90:6d:60:21:54:fa:9b:77:cc:c8:7b:99:d3:
64:c2:5c:e8:85:e4:c9:1d:bd:9a:52:90:18:8e:4e:
06:d0:05:71:a4:99:da:b2:74:9e:45:d2:54:89:01:
4e:4f:3f:52:b5:a0:25:e9:62:91:e0:9b:a9:b7:bc:
3b:b0:8d:76:30:e8:1d:bd:62:ff:f0:31:cb:27:8e:
b5:81:55:90:7a:be:8f:aa:64:33:0e:f9:1c:33:eb:
15:bc:f4:2d:36:bf:9c:62:66:21:34:2e:02:05:7d:
2b:67:61:70:e8:3d:6a:65:ea:44:f3:0f:96:62:a0:
b1:0b:2f:eb:7d:19:e9:55:17:c4:39:54:55:2f:2c:
63:d3:98:2f:99:2f:98:25:e6:f2:bc:42:23:cb:00:
ae:4f:c1:be:33:fb:6e:21:3d:b4:0d:e9:24:3f:ef:
38:d6:19:60:5a:eb:cc:9b:ec:e7:d8:62:8b:e6:71:
20:da:5d:88:76:30:a8:70:1e:a9:7a:65:72:17:6e:
a6:8d:33:9b:0d:7d:1a:8d:67:81:f6:9e:f8:d6:11:
1e:5e:92:38:fc:a4:0b:c0:01:34:bc:18:e3:07:c5:
35:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D3:E1:AF:14:4B:3B:C5:50:B5:6A:B1:1A:38:41:34:1D:70:D4:60
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS215748.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:3100::/40
Signature Algorithm: sha256WithRSAEncryption
13:16:79:6f:25:c3:91:22:67:54:87:8b:4d:d4:78:1f:5f:75:
16:70:6b:08:05:93:27:fa:7a:e7:68:db:22:78:5e:23:eb:70:
ff:37:7e:ce:1f:8a:74:d4:99:4f:c9:7f:8e:d4:9d:62:5d:4f:
5a:4e:18:f8:77:44:03:70:32:61:63:c2:b8:0a:ce:81:c5:e7:
44:d2:91:46:98:95:ea:4f:db:37:62:11:41:84:c5:68:7d:6d:
83:fd:25:5f:05:00:57:e2:a6:3d:2a:d1:4a:85:76:32:f9:e9:
e9:c6:9a:a6:c2:30:32:dd:12:71:bb:9a:d7:e2:6b:d2:9e:ba:
92:5e:24:0a:43:92:05:d2:79:2f:4e:1a:56:31:bc:cc:ee:52:
a5:72:e8:c1:79:f9:c7:09:8c:d0:d4:ea:e6:cc:d1:71:f3:40:
22:da:19:8e:87:52:ed:aa:d1:46:c0:bf:5a:68:95:f7:ea:ef:
d0:34:f6:26:16:e0:81:09:fd:1b:64:9f:3d:08:56:38:f2:1e:
9a:68:70:2d:6a:4b:c8:11:18:5a:fb:1f:81:68:39:80:94:a8:
07:64:74:25:8e:0a:e9:ca:29:e7:3e:98:30:5b:32:cf:b3:5e:
7a:90:e7:3b:c2:93:45:44:70:0a:39:56:51:9f:68:56:b3:83:
af:bc:99:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:22:58 2026 by rpki-client