
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS23470.roa
File: AS23470.roa (raw, json)
Hash identifier: INCdMC5EekJ+37mnMPkC+DOtmwid1Ls7Os8v9BT2FTA=
Subject key identifier: 45:77:69:B5:9C:B7:50:71:A5:FD:DC:C3:30:E2:AF:1F:4A:E3:A7:8B
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 4FBCF8159E0755EBEE7E650C811C16AC7B4D0787
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS23470.roa
Signing time: Fri 05 Jun 2026 07:12:34 +0000
ROA not before: Fri 05 Jun 2026 07:07:34 +0000
ROA not after: Fri 04 Jun 2027 07:12:34 +0000
asID: 23470
IP address blocks: 2a05:dfc1:5800::/40 maxlen: 48
2a0a:6040:3900::/40 maxlen: 48
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:bc:f8:15:9e:07:55:eb:ee:7e:65:0c:81:1c:16:ac:7b:4d:07:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jun 5 07:07:34 2026 GMT
Not After : Jun 4 07:12:34 2027 GMT
Subject: CN=457769B59CB75071A5FDDCC330E2AF1F4AE3A78B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:86:8f:5f:4b:27:ab:45:9b:d5:90:26:bf:c4:
5e:79:03:2a:34:5b:46:ab:ab:67:4e:be:0f:55:d9:
a6:3f:37:d3:cd:f1:88:a9:dd:3d:36:01:5a:1f:70:
fb:41:bc:2e:fd:46:32:7b:c9:d6:63:0c:cf:02:0a:
81:32:70:ca:6f:5b:55:3c:38:48:bf:50:1e:4e:0e:
af:aa:ea:69:c7:f8:38:66:49:35:3d:de:0b:40:b0:
ea:36:5e:d4:80:79:78:63:05:07:84:78:92:8a:9d:
4a:ac:3f:fc:2e:0a:86:9e:30:79:ea:3a:82:a3:5a:
86:60:c2:62:5b:76:b2:4b:c2:00:58:8c:f9:55:16:
e7:53:2f:23:06:5d:18:8c:f4:14:d0:7f:80:81:8a:
ed:b5:34:9f:e6:44:61:2f:d6:de:f5:ec:60:58:cf:
0d:a3:45:a2:31:13:62:62:c0:1d:fe:b8:29:0c:19:
4e:4b:f3:d0:bb:1c:dc:e6:22:cf:30:00:e2:cc:27:
91:75:62:82:63:f1:35:5a:37:4d:3a:af:93:4b:2a:
88:35:e8:1e:c9:b7:16:b6:7b:ea:3e:d8:c4:33:1f:
69:01:7e:af:20:fa:79:58:b7:88:59:37:7a:c1:15:
32:93:03:70:7f:69:57:9e:56:bf:6b:de:ab:fa:ec:
17:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:77:69:B5:9C:B7:50:71:A5:FD:DC:C3:30:E2:AF:1F:4A:E3:A7:8B
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS23470.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:5800::/40
2a0a:6040:3900::/40
Signature Algorithm: sha256WithRSAEncryption
af:1e:f5:25:d0:4a:9f:1c:7f:a6:13:a7:56:f7:c1:35:55:7a:
bd:59:4e:24:f1:93:58:0a:9c:e2:aa:70:e7:66:29:8d:c2:67:
7a:8e:c6:7a:fd:43:fb:c2:07:33:f0:73:03:70:7a:83:ae:87:
59:3d:4f:ad:6d:48:12:6d:2f:7d:03:f3:7b:d5:91:d8:a4:8f:
c3:64:0a:63:d1:cd:66:d7:b3:71:3b:e0:56:6f:22:fd:83:24:
47:d8:27:3c:e3:ba:fa:2b:90:b9:1b:48:af:59:a0:c5:43:74:
31:44:53:5b:92:7d:31:d4:76:1e:9b:ee:1b:ee:b9:80:6d:1b:
4f:84:98:3d:ef:f0:e6:a0:39:31:8f:88:c5:8c:30:67:f2:bf:
5e:4d:de:3f:e5:e2:8d:65:c5:d4:a6:f1:b6:c4:66:62:da:55:
57:7a:65:e8:13:f3:37:f2:12:af:91:7e:45:24:64:df:7b:25:
ef:03:11:6c:1f:f8:d4:63:59:8c:15:8e:4b:4f:ed:1b:1e:cc:
2f:5d:e6:dd:50:13:3c:5a:59:07:6e:5a:cf:e2:53:af:6c:ee:
bb:f0:a4:02:b6:97:a8:1b:c0:ea:c7:6c:03:19:da:cc:24:3f:
15:06:f6:4a:97:ce:fb:9e:f0:a6:35:52:71:54:5b:1e:91:2e:
99:97:6a:04
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIUT7z4FZ4HVevufmUMgRwWrHtNB4cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNjA2MDUwNzA3MzRaFw0yNzA2MDQwNzEyMzRaMDMxMTAvBgNV
BAMTKDQ1Nzc2OUI1OUNCNzUwNzFBNUZERENDMzMwRTJBRjFGNEFFM0E3OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNho9fSyerRZvVkCa/xF55Ayo0
W0arq2dOvg9V2aY/N9PN8Yip3T02AVofcPtBvC79RjJ7ydZjDM8CCoEycMpvW1U8
OEi/UB5ODq+q6mnH+DhmSTU93gtAsOo2XtSAeXhjBQeEeJKKnUqsP/wuCoaeMHnq
OoKjWoZgwmJbdrJLwgBYjPlVFudTLyMGXRiM9BTQf4CBiu21NJ/mRGEv1t717GBY
zw2jRaIxE2JiwB3+uCkMGU5L89C7HNzmIs8wAOLMJ5F1YoJj8TVaN006r5NLKog1
6B7Jtxa2e+o+2MQzH2kBfq8g+nlYt4hZN3rBFTKTA3B/aVeeVr9r3qv67Bd5AgMB
AAGjggH7MIIB9zAdBgNVHQ4EFgQURXdptZy3UHGl/dzDMOKvH0rjp4swHwYDVR0j
BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3
RjYxRDY3QjBCRTEzQi5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80
L0FTMjM0NzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKQYIKwYBBQUH
AQcBAf8EGjAYMBYEAgACMBADBgAqBd/BWAMGACoKYEA5MA0GCSqGSIb3DQEBCwUA
A4IBAQCvHvUl0EqfHH+mE6dW98E1VXq9WU4k8ZNYCpziqnDnZimNwmd6jsZ6/UP7
wgcz8HMDcHqDrodZPU+tbUgSbS99A/N71ZHYpI/DZApj0c1m17NxO+BWbyL9gyRH
2Cc847r6K5C5G0ivWaDFQ3QxRFNbkn0x1HYem+4b7rmAbRtPhJg97/DmoDkxj4jF
jDBn8r9eTd4/5eKNZcXUpvG2xGZi2lVXemXoE/M38hKvkX5FJGTfeyXvAxFsH/jU
Y1mMFY5LT+0bHswvXebdUBM8WlkHblrP4lOvbO678KQCtpeoG8Dqx2wDGdrMJD8V
BvZKl877nvCmNVJxVFsekS6Zl2oE
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:13:06 2026 by rpki-client