
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216115.roa
File: AS216115.roa (raw, json)
Hash identifier: gs+0ZfnN1qWm7xEPHQ3idCXSxQN+okRibr9apIejBg4=
Subject key identifier: B1:25:6C:97:FF:2F:2D:F3:34:35:74:D2:B0:BF:EE:E9:74:A3:B8:A5
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 111F759991278597B44D4C289082A82E889FF6CD
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216115.roa
Signing time: Fri 05 Jun 2026 07:12:11 +0000
ROA not before: Fri 05 Jun 2026 07:07:11 +0000
ROA not after: Fri 04 Jun 2027 07:12:11 +0000
asID: 216115
IP address blocks: 2a05:dfc1:b400::/40 maxlen: 48
2a05:dfc1:b500::/40 maxlen: 48
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:1f:75:99:91:27:85:97:b4:4d:4c:28:90:82:a8:2e:88:9f:f6:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jun 5 07:07:11 2026 GMT
Not After : Jun 4 07:12:11 2027 GMT
Subject: CN=B1256C97FF2F2DF3343574D2B0BFEEE974A3B8A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b4:6e:7a:82:1c:94:d4:21:47:01:85:51:15:
85:5e:58:fc:4a:a3:2c:85:87:a6:15:91:b4:b5:d7:
7e:9b:6f:25:5b:b1:dc:28:a0:78:67:c4:e0:f6:17:
c5:39:c9:df:bd:9d:18:5a:ad:4b:02:3f:08:b1:cb:
48:de:fd:16:6d:0a:30:cd:2a:b2:55:99:93:8e:bd:
9f:16:f5:fb:20:a4:02:a0:3d:9d:df:f4:d1:28:92:
da:7c:5a:1f:23:1d:49:bf:2b:bd:fb:b1:7e:5d:3f:
ca:c2:5e:55:7b:7b:eb:a2:3c:ee:05:4e:07:15:a5:
41:d0:dc:4a:6d:86:94:d3:37:4a:2a:6d:53:e8:fe:
ba:d5:c0:dd:16:01:56:0a:bc:23:00:14:10:cd:51:
77:13:91:8a:5d:4d:d9:ab:c5:16:cc:5a:36:23:d5:
05:df:e6:93:3f:94:72:4e:4c:a6:15:c5:24:bd:d1:
9f:2a:3c:41:4f:e1:4e:22:b6:6c:2f:00:24:5d:ea:
3b:98:c3:48:d9:3f:ff:22:cf:16:9c:da:70:72:5a:
a8:75:7c:0a:ac:33:91:8c:5a:d2:0b:c4:1a:02:b8:
83:27:c6:66:1e:46:00:b4:f9:3c:26:c6:89:c2:c6:
80:50:51:ec:08:4b:fc:92:dd:f9:6f:cc:42:f5:fe:
09:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:25:6C:97:FF:2F:2D:F3:34:35:74:D2:B0:BF:EE:E9:74:A3:B8:A5
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216115.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:b400::/39
Signature Algorithm: sha256WithRSAEncryption
65:6c:d9:a3:f2:84:03:bc:ed:0f:d1:c9:78:db:b8:d4:f9:2a:
2a:f6:c4:57:ae:d4:8c:9e:62:dd:1f:be:c6:27:4e:a1:dd:7e:
4f:b2:89:f0:c6:0a:00:22:ac:03:ae:14:f7:d4:ab:c9:7e:42:
63:33:70:5e:31:52:99:88:a8:6b:f8:6a:87:f2:ac:4e:d3:70:
37:d1:2d:38:e8:98:9c:4c:15:d9:fb:15:ef:60:90:8d:18:42:
d3:d6:7e:64:6b:97:4d:b3:83:ce:c9:69:66:da:e3:cd:ab:c6:
a7:15:f4:88:75:0e:a3:b5:63:ae:74:82:cc:26:24:ed:1a:f0:
31:48:78:b4:f9:f6:a0:57:53:96:24:6c:52:cf:12:71:94:82:
c7:a0:98:51:68:a5:52:13:c5:1c:a8:c3:c4:a1:61:11:dd:50:
f8:cb:29:9a:27:e7:8e:1f:48:3f:cd:d2:65:45:df:2d:88:f0:
4a:d1:d2:d6:fd:6a:ca:48:aa:d2:c3:2c:76:9a:28:bd:0c:8d:
f5:bf:79:4f:98:86:9c:ba:05:d4:81:4c:5e:97:64:85:fd:3c:
c1:99:17:71:b2:60:c7:0b:e1:5b:6c:26:4e:4a:97:a1:98:fd:
dd:bb:38:c6:e4:4b:e7:3a:9e:d5:8a:ef:a0:c4:13:70:fc:60:
67:69:3b:0b
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUER91mZEnhZe0TUwokIKoLoif9s0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNjA2MDUwNzA3MTFaFw0yNzA2MDQwNzEyMTFaMDMxMTAvBgNV
BAMTKEIxMjU2Qzk3RkYyRjJERjMzNDM1NzREMkIwQkZFRUU5NzRBM0I4QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8tG56ghyU1CFHAYVRFYVeWPxK
oyyFh6YVkbS1136bbyVbsdwooHhnxOD2F8U5yd+9nRharUsCPwixy0je/RZtCjDN
KrJVmZOOvZ8W9fsgpAKgPZ3f9NEoktp8Wh8jHUm/K737sX5dP8rCXlV7e+uiPO4F
TgcVpUHQ3EpthpTTN0oqbVPo/rrVwN0WAVYKvCMAFBDNUXcTkYpdTdmrxRbMWjYj
1QXf5pM/lHJOTKYVxSS90Z8qPEFP4U4itmwvACRd6juYw0jZP/8izxac2nByWqh1
fAqsM5GMWtILxBoCuIMnxmYeRgC0+TwmxonCxoBQUewIS/yS3flvzEL1/gmrAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUsSVsl/8vLfM0NXTSsL/u6XSjuKUwHwYDVR0j
BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3
RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80
L0FTMjE2MTE1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYBKgXfwbQwDQYJKoZIhvcNAQELBQADggEBAGVs
2aPyhAO87Q/RyXjbuNT5Kir2xFeu1IyeYt0fvsYnTqHdfk+yifDGCgAirAOuFPfU
q8l+QmMzcF4xUpmIqGv4aofyrE7TcDfRLTjomJxMFdn7Fe9gkI0YQtPWfmRrl02z
g87JaWba482rxqcV9Ih1DqO1Y650gswmJO0a8DFIeLT59qBXU5YkbFLPEnGUgseg
mFFopVITxRyow8ShYRHdUPjLKZon544fSD/N0mVF3y2I8ErR0tb9aspIqtLDLHaa
KL0MjfW/eU+Yhpy6BdSBTF6XZIX9PMGZF3GyYMcL4VtsJk5Kl6GY/d27OMbkS+c6
ntWK76DEE3D8YGdpOws=
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:48 2026 by rpki-client