
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS51089.roa
File: AS51089.roa (raw, json)
Hash identifier: XVqbAaaWZyxKqzKDSikoXVN5bEBrVlOTltiZhH537Js=
Subject key identifier: B8:EB:21:60:3A:7D:11:E6:9E:43:C5:0E:50:B7:81:F3:6E:65:D4:05
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 292F8F6789ED0EE0F9DE3E2F20C0D1FB57DB8794
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS51089.roa
Signing time: Fri 05 Jun 2026 07:12:10 +0000
ROA not before: Fri 05 Jun 2026 07:07:10 +0000
ROA not after: Fri 04 Jun 2027 07:12:10 +0000
asID: 51089
IP address blocks: 2a06:9f81:5700::/40 maxlen: 48
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:2f:8f:67:89:ed:0e:e0:f9:de:3e:2f:20:c0:d1:fb:57:db:87:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jun 5 07:07:10 2026 GMT
Not After : Jun 4 07:12:10 2027 GMT
Subject: CN=B8EB21603A7D11E69E43C50E50B781F36E65D405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ba:cc:e1:5a:40:e4:c9:5c:8f:13:20:10:89:
4c:36:22:6c:bf:9d:fd:cf:ee:b2:19:d6:ef:25:ec:
04:00:71:67:25:81:0f:c8:70:bc:d0:68:d3:3d:f3:
57:15:2b:97:73:0b:4e:83:1a:df:a5:0e:9d:b4:53:
79:d0:b0:98:69:4b:96:61:2e:0b:7f:b2:69:c1:c7:
c2:f4:92:e5:b2:23:cc:b9:a9:d0:b6:aa:de:5b:19:
9e:d2:9b:9b:da:01:0f:d3:81:0a:c7:bc:d7:99:54:
a2:d0:9c:d3:04:59:35:24:fb:d6:d4:73:53:04:a6:
f9:d2:04:ac:a5:9f:9c:a5:f6:6c:c6:61:15:c4:21:
7c:1c:b5:b7:ec:40:54:ce:fe:2c:89:68:7b:f1:c0:
ca:35:d5:8c:1d:90:5d:85:f2:7f:6a:d3:07:d0:34:
0f:f1:d4:4e:70:56:db:ca:33:a8:1b:56:08:83:0b:
d5:70:80:8f:80:f0:4e:46:7b:04:a9:d7:2f:49:c3:
ed:c2:61:fb:44:41:70:36:21:31:93:4d:6f:4d:e2:
05:18:b4:a0:68:83:da:76:01:49:47:d3:64:e1:67:
10:27:77:c8:28:01:16:e6:a0:87:04:e6:11:41:87:
b1:e3:0d:5a:39:2d:1b:44:e3:66:a5:ca:6c:ad:8c:
1a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EB:21:60:3A:7D:11:E6:9E:43:C5:0E:50:B7:81:F3:6E:65:D4:05
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS51089.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f81:5700::/40
Signature Algorithm: sha256WithRSAEncryption
7d:00:fc:49:f2:0f:db:10:39:d1:e3:73:ea:c1:21:d8:f8:46:
8a:24:2e:a7:36:13:84:e2:d5:e6:1d:e1:ca:8b:9a:82:24:eb:
cb:d0:f7:a5:a6:ea:b6:00:21:da:57:7b:6b:9c:c4:4e:e9:1a:
2b:eb:9a:a4:05:6d:5d:d2:42:df:00:e8:1b:72:f9:80:aa:a4:
03:23:38:7f:6e:d6:36:09:54:25:77:92:4b:d1:30:5e:13:17:
c7:4a:e1:d6:a6:cb:97:f6:ac:cf:8b:71:f5:cc:31:04:80:75:
52:8f:67:6f:ff:94:f8:20:d2:26:58:a3:20:4e:80:11:18:1c:
36:91:5e:31:87:8b:67:75:5b:e5:4a:aa:4f:2e:2b:a1:c6:d0:
02:f0:c3:3a:f3:09:60:f4:66:39:bc:d3:9d:ac:1d:9d:31:5a:
0d:ca:6d:1f:6e:ad:d1:04:e9:95:29:11:6b:f8:0c:58:1e:d3:
10:74:53:a2:b4:f2:d9:26:21:02:2f:52:94:53:eb:a6:52:9e:
57:aa:bc:0f:d4:a2:48:d8:b2:17:12:2c:ed:4b:cc:f1:93:8f:
73:a7:cc:e8:fe:91:d6:3f:71:58:da:7a:c8:ba:77:84:31:67:
7d:09:cc:38:29:d6:93:e0:35:47:5d:ed:a1:b4:6e:59:5a:4f:
91:a7:6e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:19 2026 by rpki-client