
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS57974.roa
File: AS57974.roa (raw, json)
Hash identifier: n9+ho1R7jkNtjCfzC+FORE2jnQxl4K7X6kv7umieIro=
Subject key identifier: D1:85:87:47:CF:B7:5B:20:98:85:54:6A:29:24:79:E5:AD:5D:B9:F4
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 07547148E07675C464DDC74FC32E6410A9BE6FC5
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS57974.roa
Signing time: Fri 04 Jul 2025 06:53:11 +0000
ROA not before: Fri 04 Jul 2025 06:48:11 +0000
ROA not after: Fri 03 Jul 2026 06:53:11 +0000
asID: 57974
IP address blocks: 2a0a:6040:6f00::/40 maxlen: 48
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:27:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:54:71:48:e0:76:75:c4:64:dd:c7:4f:c3:2e:64:10:a9:be:6f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jul 4 06:48:11 2025 GMT
Not After : Jul 3 06:53:11 2026 GMT
Subject: CN=D1858747CFB75B209885546A292479E5AD5DB9F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f4:d3:bd:23:cf:e8:7c:fb:39:b5:84:6d:71:
43:f6:c7:4f:72:17:19:55:ea:3e:e3:0e:1c:cc:01:
14:af:cb:ef:4c:32:7f:e2:e9:02:f9:f6:23:74:d8:
2b:ff:54:32:8b:c2:38:9f:1b:31:93:19:17:71:97:
2e:53:39:29:bf:4e:73:09:95:1a:4a:45:88:e2:41:
c1:32:b5:b6:b1:59:62:b6:91:f2:a4:dd:3a:51:9b:
29:12:33:4e:eb:48:b8:6f:5a:48:86:d8:69:39:e3:
eb:f4:fa:af:26:ac:18:54:fd:14:91:8b:22:59:9b:
41:55:11:a4:ab:7d:2b:7c:0b:ec:e3:70:3d:76:e9:
be:5b:8d:c8:33:d5:62:06:ed:c3:fc:49:58:d8:7d:
45:38:1a:4b:a0:1a:27:1c:26:2a:94:3d:cb:33:40:
c8:d9:4b:ff:2a:ca:56:28:03:ee:5b:7c:2f:16:3e:
b3:57:9d:e2:76:af:50:54:cf:8d:23:f6:be:56:99:
8b:59:aa:17:fb:d0:05:a5:4b:3e:31:4b:a2:3b:28:
63:4a:fd:b9:9c:8c:82:b8:ca:b7:61:3e:6f:41:12:
91:16:8f:06:eb:10:a7:d6:dc:87:84:43:18:b5:f0:
a2:08:d9:be:ea:93:69:2e:4d:7a:ed:ef:92:66:f1:
56:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:85:87:47:CF:B7:5B:20:98:85:54:6A:29:24:79:E5:AD:5D:B9:F4
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS57974.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:6f00::/40
Signature Algorithm: sha256WithRSAEncryption
53:ab:e5:39:0d:cc:b3:19:49:52:5e:ee:d1:de:d8:b6:f1:0e:
71:f8:ae:a5:b4:48:0c:54:e6:f1:ac:76:5c:a5:e0:f3:d4:ac:
c8:e1:63:4b:75:f7:86:f7:7e:ff:df:54:d8:ad:28:6e:b3:42:
32:7e:a7:c9:a2:8a:b9:d7:c3:f2:97:54:bb:94:d9:16:b5:a3:
28:da:15:40:c3:ed:04:70:a5:5a:05:cd:cc:e1:24:0b:64:65:
65:a3:fc:3a:35:b4:b6:63:66:3e:41:e0:89:c0:f2:c2:31:60:
83:72:15:bf:19:06:55:d7:d6:c4:d9:f2:59:30:77:4a:f7:a6:
2b:f6:23:33:c5:0f:d5:80:bd:20:0e:81:22:4d:c1:2b:ef:10:
32:d9:dc:77:40:3d:03:95:8c:c5:84:77:f3:8e:4f:c7:60:bd:
e2:31:05:8d:30:26:c0:8f:e3:6e:c1:da:73:18:dc:6b:14:48:
b9:5b:34:28:af:02:26:b0:08:30:7e:99:a6:0e:55:c9:eb:5a:
3a:07:cf:07:ba:3d:ff:2e:72:0b:87:ce:c2:9a:d2:c5:48:64:
91:58:43:8f:56:08:19:b5:a6:8c:82:ee:6d:3c:86:f4:9e:bb:
0f:f0:54:64:e9:f6:5a:8a:f2:8b:d5:4c:f2:44:c3:b6:38:b5:
48:6d:e0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:25:35 2025 by rpki-client