
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS61228.roa
File: AS61228.roa (raw, json)
Hash identifier: gSHIeEN0DUlBpYdb1CY5Z9++E+LWlI6mX/1sb2w/nvg=
Subject key identifier: E4:66:5F:1F:8E:8C:E1:C0:B4:B1:90:BC:C6:B6:67:80:33:D2:0D:DF
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 01FF89510FDE73EF0A995A57A1F6EC055EB26209
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS61228.roa
Signing time: Fri 05 Jun 2026 07:12:42 +0000
ROA not before: Fri 05 Jun 2026 07:07:42 +0000
ROA not after: Fri 04 Jun 2027 07:12:42 +0000
asID: 61228
IP address blocks: 2a0a:6040:cf00::/40 maxlen: 48
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:ff:89:51:0f:de:73:ef:0a:99:5a:57:a1:f6:ec:05:5e:b2:62:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jun 5 07:07:42 2026 GMT
Not After : Jun 4 07:12:42 2027 GMT
Subject: CN=E4665F1F8E8CE1C0B4B190BCC6B6678033D20DDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e4:c4:b4:94:e9:98:1c:93:38:6d:72:50:5a:
f7:87:9b:38:86:3e:ad:d8:e5:76:88:ca:4b:af:cc:
fb:74:5a:34:60:39:72:d3:70:25:a6:f6:84:47:72:
cf:c9:89:9f:47:aa:24:fc:29:10:dc:dc:d2:63:cf:
06:6d:cb:68:b3:49:e4:d4:3a:7b:2c:7c:25:d2:62:
fd:82:fb:22:ae:f7:c1:3e:43:92:35:dc:3c:3a:56:
a1:64:25:70:65:37:8b:91:f5:ac:7a:f4:d6:6b:56:
73:cf:03:6d:d6:4c:70:6c:79:d4:15:8e:c6:fb:2a:
b2:04:41:9b:38:32:0b:de:00:1b:b1:4b:95:a6:c9:
ac:2e:b8:85:fe:20:6e:a3:68:88:8d:bf:de:2a:35:
3c:21:3d:64:96:b3:51:cf:40:1f:17:90:b5:63:ee:
fa:16:e0:8c:ed:c6:a0:b5:04:5f:25:43:1b:2b:24:
7b:d6:7c:36:e0:51:d7:3c:6e:07:f0:c1:78:53:92:
26:e4:44:11:f4:52:97:48:ec:bd:29:97:2c:cd:5d:
86:b2:ac:7a:c1:7b:03:06:a1:88:43:1f:19:1b:53:
2d:18:da:fe:18:a2:06:a1:f4:b2:cd:b0:fd:88:47:
76:5a:94:3e:20:8f:e2:9c:70:e5:5d:2c:ca:8c:32:
83:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:66:5F:1F:8E:8C:E1:C0:B4:B1:90:BC:C6:B6:67:80:33:D2:0D:DF
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS61228.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:cf00::/40
Signature Algorithm: sha256WithRSAEncryption
bf:a7:75:c0:cd:be:3f:6f:fd:20:80:b0:c5:63:1b:6e:00:4d:
34:2e:d4:94:b6:96:fe:f1:c9:82:56:af:c9:22:c0:47:c0:6c:
46:a6:13:28:a9:da:40:d3:1f:09:a7:d2:3f:3e:cb:fa:4a:91:
9f:b1:f3:7c:77:81:b0:d2:7d:e5:99:1a:7a:3e:42:28:3d:ea:
d9:ec:22:34:8d:4a:46:89:72:cd:f7:5c:3c:91:00:08:09:07:
6c:0e:60:72:c2:cf:5c:ad:b6:14:36:9e:3b:d1:76:90:40:db:
96:9a:d3:68:14:3f:26:6a:a1:4e:0e:dd:53:f2:5b:58:b3:40:
b8:ab:bd:c3:80:26:f8:33:c6:86:f5:ea:db:ef:3b:bc:f2:8a:
af:f3:86:12:ad:e1:18:e9:3e:f7:45:ac:11:b6:57:ee:24:3c:
38:d4:07:56:43:f3:39:d5:b8:df:c9:3c:0f:cd:42:d1:66:f6:
09:ae:0c:e1:e3:9b:bb:fd:b3:e7:9c:89:49:6f:a8:82:09:54:
72:de:81:d0:2a:ac:d8:16:ee:88:b3:7e:11:ba:ad:53:97:c0:
65:e4:c0:7a:f9:6a:83:6b:2d:12:73:60:8a:4b:60:4a:de:d4:
0c:91:48:67:36:70:02:56:96:67:0f:3f:f0:16:00:26:89:f2:
f5:3b:17:5a
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUAf+JUQ/ec+8KmVpXofbsBV6yYgkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNjA2MDUwNzA3NDJaFw0yNzA2MDQwNzEyNDJaMDMxMTAvBgNV
BAMTKEU0NjY1RjFGOEU4Q0UxQzBCNEIxOTBCQ0M2QjY2NzgwMzNEMjBEREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE5MS0lOmYHJM4bXJQWveHmziG
Pq3Y5XaIykuvzPt0WjRgOXLTcCWm9oRHcs/JiZ9HqiT8KRDc3NJjzwZty2izSeTU
OnssfCXSYv2C+yKu98E+Q5I13Dw6VqFkJXBlN4uR9ax69NZrVnPPA23WTHBsedQV
jsb7KrIEQZs4MgveABuxS5WmyawuuIX+IG6jaIiNv94qNTwhPWSWs1HPQB8XkLVj
7voW4IztxqC1BF8lQxsrJHvWfDbgUdc8bgfwwXhTkibkRBH0UpdI7L0plyzNXYay
rHrBewMGoYhDHxkbUy0Y2v4Yogah9LLNsP2IR3ZalD4gj+KccOVdLMqMMoM3AgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQU5GZfH46M4cC0sZC8xrZngDPSDd8wHwYDVR0j
BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3
RjYxRDY3QjBCRTEzQi5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80
L0FTNjEyMjgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgAqCmBAzzANBgkqhkiG9w0BAQsFAAOCAQEAv6d1
wM2+P2/9IICwxWMbbgBNNC7UlLaW/vHJglavySLAR8BsRqYTKKnaQNMfCafSPz7L
+kqRn7HzfHeBsNJ95Zkaej5CKD3q2ewiNI1KRolyzfdcPJEACAkHbA5gcsLPXK22
FDaeO9F2kEDblprTaBQ/JmqhTg7dU/JbWLNAuKu9w4Am+DPGhvXq2+87vPKKr/OG
Eq3hGOk+90WsEbZX7iQ8ONQHVkPzOdW438k8D81C0Wb2Ca4M4eObu/2z55yJSW+o
gglUct6B0Cqs2BbuiLN+EbqtU5fAZeTAevlqg2stEnNgiktgSt7UDJFIZzZwAlaW
Zw8/8BYAJony9TsXWg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:10 2026 by rpki-client