
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216429.roa
File: AS216429.roa (raw, json)
Hash identifier: 3b8zOUtpphyTQ/c9Yd/p/EnYWSmEy4+VpskO4CFlSF8=
Subject key identifier: EA:73:9E:50:66:58:E2:08:01:C9:B6:99:FD:1F:2C:EC:34:A2:A3:9A
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 214742414AF1D14EAEF5AE718103471220860450
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216429.roa
Signing time: Fri 05 Jun 2026 07:12:36 +0000
ROA not before: Fri 05 Jun 2026 07:07:36 +0000
ROA not after: Fri 04 Jun 2027 07:12:36 +0000
asID: 216429
IP address blocks: 2a05:dfc1:8700::/40 maxlen: 48
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:47:42:41:4a:f1:d1:4e:ae:f5:ae:71:81:03:47:12:20:86:04:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jun 5 07:07:36 2026 GMT
Not After : Jun 4 07:12:36 2027 GMT
Subject: CN=EA739E506658E20801C9B699FD1F2CEC34A2A39A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ac:90:f7:0c:29:d3:cd:49:a3:16:af:b5:c0:
70:b8:c0:a9:e6:53:01:31:c9:ce:2e:22:51:ec:76:
96:58:ca:1c:2f:6c:f5:3b:ae:46:d7:0f:30:22:ed:
3e:de:88:03:ee:e0:a8:6e:c0:21:bc:4e:3a:77:99:
2e:aa:32:4b:e7:04:c1:a9:d1:97:e5:3e:70:38:19:
e2:a2:b4:40:12:e8:26:27:9c:c2:80:84:db:90:cf:
57:a4:49:cd:ca:5b:b0:73:d7:d6:a4:c6:aa:f6:0e:
24:74:56:c9:7e:76:b9:d2:c3:64:1f:4f:c4:d8:05:
3e:87:3f:f8:a4:4b:59:60:9d:8c:d6:32:2f:40:ce:
34:b6:4b:e1:d6:0e:27:77:e7:dc:06:dd:23:41:38:
ae:f6:59:3c:dc:19:dd:c9:df:0f:71:d8:33:2e:5f:
67:a3:8b:06:4e:61:60:55:e8:aa:e2:dc:94:b9:90:
b8:ba:db:51:d9:89:f2:27:af:b8:59:a4:87:9a:0a:
f1:03:10:34:41:d8:8b:a6:38:dd:0a:86:99:a3:94:
ba:e8:94:c2:59:ec:8b:bd:74:e5:88:bc:72:9d:fe:
83:3e:50:59:bc:29:53:1c:03:ec:61:69:b2:70:40:
df:bd:60:1f:18:f2:61:f0:75:9c:8b:0f:da:f4:48:
b4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:73:9E:50:66:58:E2:08:01:C9:B6:99:FD:1F:2C:EC:34:A2:A3:9A
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS216429.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:8700::/40
Signature Algorithm: sha256WithRSAEncryption
55:37:1b:3f:15:c8:a6:7b:9f:5e:92:1e:e6:28:35:d7:de:bf:
75:a2:0c:cb:e9:ff:c2:de:39:ea:c7:24:49:ef:45:6b:45:68:
a3:f7:bb:62:e1:8f:f7:d3:80:54:92:65:aa:24:73:7e:a6:14:
d6:c3:4b:93:bc:72:9e:6b:ca:f1:58:42:b5:de:7d:05:39:80:
03:eb:62:d5:86:0f:6e:8a:4e:15:24:58:59:f5:8b:e0:36:8a:
c5:1d:a4:9f:5a:f5:05:c7:bf:15:a4:13:a1:45:1c:75:b5:28:
aa:75:15:33:45:44:ff:0a:3a:cc:0d:80:85:91:61:6d:ed:23:
fc:69:64:89:1a:d2:c8:ca:e8:97:16:d0:c4:43:cd:6d:0e:5f:
1c:42:fa:3a:d9:dd:a0:bd:38:62:42:1a:64:83:28:89:7c:fa:
d6:5c:85:7a:8e:bc:12:97:59:15:6e:78:36:18:e6:5a:c1:9b:
d2:7f:26:19:f1:8e:a9:3a:d1:01:91:5a:d9:bf:8d:c4:91:c0:
6a:47:2d:0d:81:4a:7d:2b:52:c6:54:34:69:d5:c4:8f:2b:6e:
91:42:4b:8f:3a:6f:17:d9:62:3b:97:85:be:53:db:16:62:8a:
2c:83:d9:51:b9:55:3b:7c:c3:56:0b:f1:68:78:89:ea:bc:a7:
29:3e:40:1c
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUIUdCQUrx0U6u9a5xgQNHEiCGBFAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNjA2MDUwNzA3MzZaFw0yNzA2MDQwNzEyMzZaMDMxMTAvBgNV
BAMTKEVBNzM5RTUwNjY1OEUyMDgwMUM5QjY5OUZEMUYyQ0VDMzRBMkEzOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGrJD3DCnTzUmjFq+1wHC4wKnm
UwExyc4uIlHsdpZYyhwvbPU7rkbXDzAi7T7eiAPu4KhuwCG8Tjp3mS6qMkvnBMGp
0ZflPnA4GeKitEAS6CYnnMKAhNuQz1ekSc3KW7Bz19akxqr2DiR0Vsl+drnSw2Qf
T8TYBT6HP/ikS1lgnYzWMi9AzjS2S+HWDid359wG3SNBOK72WTzcGd3J3w9x2DMu
X2ejiwZOYWBV6Kri3JS5kLi621HZifInr7hZpIeaCvEDEDRB2IumON0KhpmjlLro
lMJZ7Iu9dOWIvHKd/oM+UFm8KVMcA+xhabJwQN+9YB8Y8mHwdZyLD9r0SLSRAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQU6nOeUGZY4ggBybaZ/R8s7DSio5owHwYDVR0j
BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3
RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80
L0FTMjE2NDI5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwYcwDQYJKoZIhvcNAQELBQADggEBAFU3
Gz8VyKZ7n16SHuYoNdfev3WiDMvp/8LeOerHJEnvRWtFaKP3u2Lhj/fTgFSSZaok
c36mFNbDS5O8cp5ryvFYQrXefQU5gAPrYtWGD26KThUkWFn1i+A2isUdpJ9a9QXH
vxWkE6FFHHW1KKp1FTNFRP8KOswNgIWRYW3tI/xpZIka0sjK6JcW0MRDzW0OXxxC
+jrZ3aC9OGJCGmSDKIl8+tZchXqOvBKXWRVueDYY5lrBm9J/Jhnxjqk60QGRWtm/
jcSRwGpHLQ2BSn0rUsZUNGnVxI8rbpFCS486bxfZYjuXhb5T2xZiiiyD2VG5VTt8
w1YL8Wh4ieq8pyk+QBw=
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:47 2026 by rpki-client