
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS60301.roa
File: AS60301.roa (raw, json)
Hash identifier: 9cF4ZFvayOBNpLu6eqD2igmiDUb7iY5rXCvdcP1eRAY=
Subject key identifier: 3C:05:23:18:DA:6B:86:86:E2:1F:AB:01:85:E8:8D:7F:A9:50:82:30
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 0BC4FB0F69E35F5C6FF2994E153B3FA2174874EE
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS60301.roa
Signing time: Fri 05 Jun 2026 07:12:42 +0000
ROA not before: Fri 05 Jun 2026 07:07:42 +0000
ROA not after: Fri 04 Jun 2027 07:12:42 +0000
asID: 60301
IP address blocks: 2a05:dfc1:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:c4:fb:0f:69:e3:5f:5c:6f:f2:99:4e:15:3b:3f:a2:17:48:74:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jun 5 07:07:42 2026 GMT
Not After : Jun 4 07:12:42 2027 GMT
Subject: CN=3C052318DA6B8686E21FAB0185E88D7FA9508230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4d:df:cc:c0:8a:e7:65:19:9d:bf:f8:ea:fc:
a7:7b:8b:3d:24:31:ab:42:c3:64:ae:5a:12:31:b4:
54:12:5b:7c:1e:f6:13:c3:c1:3f:3d:a2:d8:a1:0d:
7f:b7:f7:cc:dc:29:11:3e:e3:8d:d2:12:c1:de:f3:
68:92:d7:4d:65:8b:ae:04:cc:80:68:3f:54:d8:46:
3a:77:88:5c:2b:42:f8:60:0f:fa:5d:c4:e7:66:81:
48:eb:9c:49:86:0e:6e:d6:21:e6:7d:d2:ea:cd:96:
a7:f1:e0:0a:1c:fe:98:2d:6e:2d:ca:d3:f9:29:4a:
2b:43:ed:ed:41:0a:95:69:cc:d1:6e:af:0e:87:11:
ef:77:d0:50:0c:2d:a4:01:52:ca:db:a8:f5:31:8c:
7d:67:13:9c:55:1f:f9:a4:6c:3e:9e:8e:7b:17:5d:
b3:8f:71:db:81:09:09:ed:9e:bd:5d:93:f6:ed:b6:
e7:36:1d:07:ad:94:68:28:e5:b4:5f:06:80:c1:20:
ff:fb:da:86:46:2f:0d:50:d5:ae:b2:98:9a:c4:51:
92:ea:e4:2d:8c:14:c1:2e:dd:50:61:42:8d:39:5d:
d0:28:87:4a:4e:c9:d1:c1:b1:a0:cc:67:e6:c8:46:
b9:a2:55:a8:f5:d6:e7:a7:d8:a1:5d:04:ad:b6:50:
67:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:05:23:18:DA:6B:86:86:E2:1F:AB:01:85:E8:8D:7F:A9:50:82:30
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS60301.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:6000::/40
Signature Algorithm: sha256WithRSAEncryption
c0:4d:e8:0b:4b:db:d9:f6:02:34:04:53:36:f1:80:77:27:56:
0e:d9:c1:32:54:8a:25:da:a5:77:51:62:b9:cc:70:b4:5a:d3:
e9:4f:23:28:d8:d7:57:3d:6a:2f:65:a1:51:aa:48:b8:99:48:
1b:b4:4a:85:00:6c:27:5b:37:9b:0f:98:70:79:06:87:e7:a8:
d2:63:4d:07:c7:64:b3:89:2e:13:a4:dd:7f:36:c0:95:1e:5c:
3a:a6:85:fe:56:6e:e8:5a:e3:c9:a2:b4:77:37:6d:95:00:18:
96:ee:f7:85:41:1a:55:65:6a:cf:b6:c2:ba:37:5c:99:ff:12:
39:90:94:c9:27:db:d5:83:1d:54:06:28:62:87:07:de:86:5f:
4d:4f:e1:47:99:5f:7a:2e:ad:77:b5:e9:2e:d8:1b:d8:38:43:
05:7f:7b:27:9c:d9:eb:d9:32:94:c8:b1:3e:ad:18:a4:83:d2:
f7:0b:77:87:8e:6f:12:dd:09:28:f2:17:04:4a:4c:c8:84:c5:
8f:95:2f:43:06:3d:7a:cc:48:1b:96:d6:8b:ac:7b:05:22:09:
7e:94:4a:3a:7b:4c:f8:e5:97:22:85:f1:95:30:24:4c:fb:3b:
d5:86:0e:87:d8:09:44:40:cd:40:97:1f:fb:7c:91:fd:b9:ea:
c1:b9:bc:73
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUC8T7D2njX1xv8plOFTs/ohdIdO4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNjA2MDUwNzA3NDJaFw0yNzA2MDQwNzEyNDJaMDMxMTAvBgNV
BAMTKDNDMDUyMzE4REE2Qjg2ODZFMjFGQUIwMTg1RTg4RDdGQTk1MDgyMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGTd/MwIrnZRmdv/jq/Kd7iz0k
MatCw2SuWhIxtFQSW3we9hPDwT89otihDX+398zcKRE+443SEsHe82iS101li64E
zIBoP1TYRjp3iFwrQvhgD/pdxOdmgUjrnEmGDm7WIeZ90urNlqfx4Aoc/pgtbi3K
0/kpSitD7e1BCpVpzNFurw6HEe930FAMLaQBUsrbqPUxjH1nE5xVH/mkbD6ejnsX
XbOPcduBCQntnr1dk/bttuc2HQetlGgo5bRfBoDBIP/72oZGLw1Q1a6ymJrEUZLq
5C2MFMEu3VBhQo05XdAoh0pOydHBsaDMZ+bIRrmiVaj11uen2KFdBK22UGcRAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUPAUjGNprhobiH6sBheiNf6lQgjAwHwYDVR0j
BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3
RjYxRDY3QjBCRTEzQi5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80
L0FTNjAzMDEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgAqBd/BYDANBgkqhkiG9w0BAQsFAAOCAQEAwE3o
C0vb2fYCNARTNvGAdydWDtnBMlSKJdqld1FiucxwtFrT6U8jKNjXVz1qL2WhUapI
uJlIG7RKhQBsJ1s3mw+YcHkGh+eo0mNNB8dks4kuE6TdfzbAlR5cOqaF/lZu6Frj
yaK0dzdtlQAYlu73hUEaVWVqz7bCujdcmf8SOZCUySfb1YMdVAYoYocH3oZfTU/h
R5lfei6td7XpLtgb2DhDBX97J5zZ69kylMixPq0YpIPS9wt3h45vEt0JKPIXBEpM
yITFj5UvQwY9esxIG5bWi6x7BSIJfpRKOntM+OWXIoXxlTAkTPs71YYOh9gJREDN
QJcf+3yR/bnqwbm8cw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:15 2026 by rpki-client