
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS58339.roa
File: AS58339.roa (raw, json)
Hash identifier: Rx/1lvFpnF/BexRVMd/ItSY/vWXujBFrLG3T0AyEPrE=
Subject key identifier: A0:7C:E1:D9:D5:DC:DD:62:7D:66:08:5D:7A:23:68:EE:81:14:AB:3F
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 7AA2943305D15F723BF28DEDF60C42C6FC513F77
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS58339.roa
Signing time: Fri 05 Jun 2026 07:12:34 +0000
ROA not before: Fri 05 Jun 2026 07:07:34 +0000
ROA not after: Fri 04 Jun 2027 07:12:34 +0000
asID: 58339
IP address blocks: 2a05:dfc1:5f00::/40 maxlen: 48
2a05:dfc1:8e00::/40 maxlen: 48
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:a2:94:33:05:d1:5f:72:3b:f2:8d:ed:f6:0c:42:c6:fc:51:3f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jun 5 07:07:34 2026 GMT
Not After : Jun 4 07:12:34 2027 GMT
Subject: CN=A07CE1D9D5DCDD627D66085D7A2368EE8114AB3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:fb:45:71:1f:94:18:eb:f2:84:00:88:e4:f3:
66:96:89:93:22:4c:71:6e:0a:d6:65:32:23:33:0e:
15:2a:b3:7f:f4:ed:4e:e7:0a:3e:52:f7:4d:a8:03:
93:03:33:23:2d:e3:c7:84:d7:30:f4:97:08:09:a8:
94:79:86:e8:08:e2:32:87:5a:62:f9:fa:ed:ec:99:
69:f3:81:bb:cf:7f:65:59:2a:d3:3e:6e:1b:46:60:
c4:3b:95:ea:19:9b:2f:3c:4d:e0:1c:a7:c4:d9:f6:
81:4c:c7:b9:4c:f3:d5:89:f1:ae:e9:07:37:94:28:
3c:b5:27:d2:2d:67:a4:c1:fa:c3:85:f4:63:14:51:
a3:62:48:84:95:4b:aa:a5:27:70:47:51:ca:52:91:
37:a7:53:2c:ba:a1:b0:5f:79:03:d8:16:97:d5:4e:
45:0e:a4:04:8d:d3:4e:4f:e3:df:41:1b:67:c4:46:
25:13:f3:04:92:63:1e:64:4d:7f:a0:78:b5:4c:1d:
22:61:36:d0:55:79:12:28:f3:9f:5f:cb:ff:65:33:
85:df:89:a6:55:58:ef:35:5a:27:04:27:d1:6e:cf:
b0:28:ec:20:23:d2:56:b6:b5:51:ef:2f:54:15:c9:
cd:36:5e:ed:bb:ba:0b:59:05:40:e2:07:38:b1:61:
2d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7C:E1:D9:D5:DC:DD:62:7D:66:08:5D:7A:23:68:EE:81:14:AB:3F
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS58339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:5f00::/40
2a05:dfc1:8e00::/40
Signature Algorithm: sha256WithRSAEncryption
67:bd:61:49:05:7a:dc:45:6f:df:c9:13:df:d3:d0:be:05:ba:
91:f4:41:33:5d:f0:a0:d9:7b:0e:aa:9a:e7:54:cb:13:f8:28:
81:75:9d:5f:ad:00:aa:18:f8:33:0c:46:c2:90:52:f4:12:79:
73:72:7c:24:3f:79:8b:a0:14:c9:71:bf:49:00:42:6c:4a:16:
c5:12:1b:92:3d:bf:8f:ac:fd:24:8e:82:20:bb:bf:bf:ce:6f:
1b:54:70:3c:95:6b:a0:d4:90:17:b0:99:3c:1c:fd:92:cb:bb:
d7:6f:07:fd:64:e7:87:c6:0f:c7:00:70:8b:af:cc:fb:c5:03:
33:c9:16:d8:fa:46:0f:09:da:6d:ed:be:78:a1:f4:01:e1:04:
a1:2b:57:49:3a:b5:04:58:a4:01:87:80:39:23:ab:ef:a4:a3:
00:fe:d2:11:d7:04:1d:65:53:68:54:e0:bb:f9:b4:79:ab:06:
8d:bd:03:69:06:82:d2:59:52:09:58:4d:c8:0a:d7:bf:cb:cf:
60:ad:86:fa:61:d7:a4:30:44:87:3c:b3:57:f0:e3:b0:28:11:
94:fb:64:1d:5b:45:a5:79:74:ac:21:48:2a:d5:d2:12:92:46:
fc:a4:35:7a:db:f4:a6:78:38:3f:9b:66:51:08:46:e5:af:7d:
92:80:9a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:08 2026 by rpki-client