
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS49707.roa
File: AS49707.roa (raw, json)
Hash identifier: cHtO0jV7Niq6gr4IbDHVMwavotkPaARnZlYLvDZka1c=
Subject key identifier: BE:01:8E:4D:38:EA:8F:D9:6E:9C:DA:0A:1C:28:A9:39:78:23:7A:E1
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 622326A6E6F978E13E85D16D1350A542DB128234
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS49707.roa
Signing time: Fri 05 Jun 2026 07:12:40 +0000
ROA not before: Fri 05 Jun 2026 07:07:40 +0000
ROA not after: Fri 04 Jun 2027 07:12:40 +0000
asID: 49707
IP address blocks: 2a0a:6040:4c00::/40 maxlen: 48
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:23:26:a6:e6:f9:78:e1:3e:85:d1:6d:13:50:a5:42:db:12:82:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jun 5 07:07:40 2026 GMT
Not After : Jun 4 07:12:40 2027 GMT
Subject: CN=BE018E4D38EA8FD96E9CDA0A1C28A93978237AE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ac:b5:e8:cf:25:72:a5:0e:18:fa:c0:70:00:
d5:c9:c0:06:6b:36:1a:70:fd:f7:e3:b2:9c:6e:fe:
74:b4:bc:34:9f:89:df:78:64:4e:3f:bb:b5:ca:7b:
7c:59:dd:4a:20:0a:ca:69:58:4a:d9:a4:7e:bc:fc:
cf:6e:3e:a8:5c:a5:3a:b6:af:4a:e5:d3:69:9c:2e:
ae:70:5d:e8:34:4e:b3:6c:97:8e:a2:38:0e:4b:68:
29:ab:84:b8:eb:cb:ae:e7:d7:ed:c1:19:ef:82:72:
82:86:33:a1:8f:8a:c3:fb:f9:5e:55:c5:f0:ed:07:
63:5b:29:a2:17:f4:3f:9a:52:b9:89:e9:7f:a0:6a:
b9:23:1c:38:a0:1c:ce:ca:25:b1:a5:4c:f5:84:94:
68:47:25:9f:e1:7e:e0:11:fe:fb:f0:9d:d3:2c:c3:
17:ed:fb:99:5b:b5:f3:97:75:07:fd:66:c7:13:31:
14:72:dc:5c:f8:bc:5d:e0:cb:76:f6:fe:45:4c:eb:
73:0f:0f:91:d2:06:f2:d0:6d:4e:d1:a2:e6:61:a5:
8c:e0:34:4b:bb:d2:8a:33:66:90:30:fd:cc:bb:fd:
b9:3a:87:75:1f:85:a9:27:38:d9:8b:97:b3:97:52:
af:61:ab:90:14:38:42:ff:a6:f2:00:ae:70:ad:ab:
61:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:01:8E:4D:38:EA:8F:D9:6E:9C:DA:0A:1C:28:A9:39:78:23:7A:E1
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS49707.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:4c00::/40
Signature Algorithm: sha256WithRSAEncryption
aa:36:da:32:e3:69:44:50:00:db:1d:03:76:77:66:43:dc:57:
6d:46:7b:4d:d8:50:ed:0f:f6:52:8a:5a:95:4c:21:19:4d:c1:
e3:a1:05:83:b4:e2:66:ea:15:78:4b:6e:b1:34:66:81:79:b2:
b9:64:36:05:18:d2:0e:aa:48:a4:6e:7e:1b:01:b2:5f:21:46:
3b:a7:5d:5a:60:44:78:db:62:14:3a:0d:76:13:08:be:90:d3:
da:96:e5:40:05:59:5d:85:18:bd:f2:42:c5:41:9f:5e:22:ca:
76:7e:0e:46:05:0c:d3:38:4e:4d:f9:5c:dc:61:1f:6c:4b:11:
dd:ad:b8:ac:bd:df:bb:2e:22:99:46:bb:b8:b8:f3:5d:23:fb:
64:89:07:8e:b7:45:6f:60:76:bd:1d:13:9b:bf:09:4b:d5:6d:
c0:07:da:94:5a:a7:71:4f:b3:aa:ea:55:e1:1a:9f:9d:03:89:
f8:88:df:c0:ef:dd:8f:e6:98:06:eb:26:c1:71:2a:31:75:30:
52:c8:b1:a4:ea:d0:b4:5b:32:2d:0f:4a:99:f4:c9:4d:30:ff:
40:38:56:99:1f:2d:8e:79:bc:e6:0c:81:6a:58:72:82:9f:b8:
6e:47:3d:4e:33:00:64:06:4a:0c:9d:da:46:6c:6d:92:9d:5e:
ce:fa:38:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:15 2026 by rpki-client