
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS36791.roa
File: AS36791.roa (raw, json)
Hash identifier: OgYpKePI4JvDg0mzSeFXJrCRwEpgXSrUz8gnuvkg6Fk=
Subject key identifier: 3A:F5:04:83:BD:32:89:AE:23:05:F2:DF:74:85:F2:42:12:D2:06:7A
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: AB1DF074A13B7E32FBEFB4D9AFC2954B0C3DC3
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS36791.roa
Signing time: Fri 05 Jun 2026 07:12:08 +0000
ROA not before: Fri 05 Jun 2026 07:07:08 +0000
ROA not after: Fri 04 Jun 2027 07:12:08 +0000
asID: 36791
IP address blocks: 2a05:dfc1:1e00::/40 maxlen: 48
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
ab:1d:f0:74:a1:3b:7e:32:fb:ef:b4:d9:af:c2:95:4b:0c:3d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jun 5 07:07:08 2026 GMT
Not After : Jun 4 07:12:08 2027 GMT
Subject: CN=3AF50483BD3289AE2305F2DF7485F24212D2067A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:58:a0:69:a2:70:8f:9d:7f:87:f4:03:c5:3c:
65:19:88:ed:79:69:b4:65:62:5a:89:ae:4e:75:9e:
38:51:be:82:68:42:c9:28:9b:8d:8d:c2:93:15:64:
70:18:65:d4:ec:9e:24:db:ef:c1:e9:9b:a3:1d:83:
2f:4c:5f:a1:23:67:e9:48:97:3c:3c:ea:32:dc:ee:
09:24:9c:c5:35:1e:5f:8a:bc:51:3e:b7:4e:6f:7f:
d4:33:21:be:a2:db:bb:41:1d:ec:8b:60:b8:43:ad:
66:d4:e9:59:96:b4:a8:ef:de:69:47:95:ab:73:ff:
7e:5c:68:a2:2d:67:65:4e:4b:3b:03:7a:fb:95:27:
2b:c4:c5:d2:44:5a:ad:04:a3:f6:b3:f7:0c:06:99:
4e:b9:28:fd:43:cd:4e:eb:92:80:c6:a0:d7:43:9f:
49:61:0c:69:3e:53:e1:3e:34:81:16:88:26:22:34:
a1:b1:ee:a3:c7:b4:0a:be:86:ac:ab:a2:4f:eb:2c:
73:ab:bf:77:4e:82:a6:39:16:91:c0:06:24:43:aa:
b8:24:b1:29:e4:76:95:de:0d:6f:08:8e:83:a8:48:
e8:b7:e2:14:b7:8a:4e:17:fb:ac:9c:e1:f4:9a:e9:
d4:10:19:0b:94:01:f9:4a:12:b7:f7:3d:90:4e:e4:
35:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F5:04:83:BD:32:89:AE:23:05:F2:DF:74:85:F2:42:12:D2:06:7A
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS36791.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:1e00::/40
Signature Algorithm: sha256WithRSAEncryption
bb:54:31:44:43:33:6e:8f:b7:68:cc:eb:2e:9c:4d:82:6b:c1:
4b:28:b5:4a:79:c9:3b:b2:5f:90:95:3c:d1:5b:fd:cd:39:38:
9c:54:d1:42:29:b4:e9:9e:d4:7b:e5:a9:3b:ee:54:dc:93:f7:
24:d2:18:3b:ae:fe:60:42:cf:8d:2b:18:e2:82:70:1b:32:2a:
96:a4:73:4e:61:34:cf:a6:46:29:e9:f0:dd:71:f6:cf:b2:38:
69:5c:08:80:37:19:95:e8:54:f4:84:12:0b:ae:42:5a:2e:ed:
3c:35:93:fc:56:e3:a1:9a:28:4d:7e:0b:3f:4f:4e:09:1c:38:
a2:7d:4a:07:c8:26:b8:e5:c8:e1:8c:f4:b8:72:15:ee:12:bf:
2e:ee:ec:d1:6d:af:f3:d6:3f:da:ab:e2:3c:25:74:74:a7:57:
92:77:1a:90:c8:bd:a4:76:f4:74:b5:40:40:74:3e:11:e6:66:
94:aa:58:09:4e:ca:ec:6f:da:f0:ee:dd:e6:17:7d:14:21:02:
0a:e5:64:6c:26:8c:64:33:7b:54:62:13:43:e8:0a:02:3c:a5:
77:d5:11:2a:1f:4d:8d:55:13:6b:91:1e:5c:76:9d:2e:26:f7:
aa:55:88:f1:d2:67:fe:70:a9:04:c8:f4:1a:80:94:b2:ca:06:
b5:b6:2e:75
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUAKsd8HShO34y+++02a/ClUsMPcMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNjA2MDUwNzA3MDhaFw0yNzA2MDQwNzEyMDhaMDMxMTAvBgNV
BAMTKDNBRjUwNDgzQkQzMjg5QUUyMzA1RjJERjc0ODVGMjQyMTJEMjA2N0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHWKBponCPnX+H9APFPGUZiO15
abRlYlqJrk51njhRvoJoQskom42NwpMVZHAYZdTsniTb78Hpm6Mdgy9MX6EjZ+lI
lzw86jLc7gkknMU1Hl+KvFE+t05vf9QzIb6i27tBHeyLYLhDrWbU6VmWtKjv3mlH
latz/35caKItZ2VOSzsDevuVJyvExdJEWq0Eo/az9wwGmU65KP1DzU7rkoDGoNdD
n0lhDGk+U+E+NIEWiCYiNKGx7qPHtAq+hqyrok/rLHOrv3dOgqY5FpHABiRDqrgk
sSnkdpXeDW8IjoOoSOi34hS3ik4X+6yc4fSa6dQQGQuUAflKErf3PZBO5DW5AgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUOvUEg70yia4jBfLfdIXyQhLSBnowHwYDVR0j
BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3
RjYxRDY3QjBCRTEzQi5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80
L0FTMzY3OTEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgAqBd/BHjANBgkqhkiG9w0BAQsFAAOCAQEAu1Qx
REMzbo+3aMzrLpxNgmvBSyi1SnnJO7JfkJU80Vv9zTk4nFTRQim06Z7Ue+WpO+5U
3JP3JNIYO67+YELPjSsY4oJwGzIqlqRzTmE0z6ZGKenw3XH2z7I4aVwIgDcZlehU
9IQSC65CWi7tPDWT/FbjoZooTX4LP09OCRw4on1KB8gmuOXI4Yz0uHIV7hK/Lu7s
0W2v89Y/2qviPCV0dKdXkncakMi9pHb0dLVAQHQ+EeZmlKpYCU7K7G/a8O7d5hd9
FCECCuVkbCaMZDN7VGITQ+gKAjyld9URKh9NjVUTa5EeXHadLib3qlWI8dJn/nCp
BMj0GoCUssoGtbYudQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:19 2026 by rpki-client