$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS198025.roa File: AS198025.roa (raw, json) Hash identifier: zyQ+TMiIv+GSDNpzW6mrALy1zvYyP8ZZtmdwZEG8TYc= Subject key identifier: AE:25:D7:AC:18:E8:94:43:31:01:C4:22:EE:D6:59:86:E5:8B:29:81 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 40CEE118E16B77569EA647CC425DD0464ABCF79B Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS198025.roa Signing time: Fri 05 Jun 2026 07:12:47 +0000 ROA not before: Fri 05 Jun 2026 07:07:47 +0000 ROA not after: Fri 04 Jun 2027 07:12:47 +0000 asID: 198025 IP address blocks: 2a05:dfc1:5900::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 13:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:ce:e1:18:e1:6b:77:56:9e:a6:47:cc:42:5d:d0:46:4a:bc:f7:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:47 2026 GMT Not After : Jun 4 07:12:47 2027 GMT Subject: CN=AE25D7AC18E894433101C422EED65986E58B2981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:85:5a:41:f6:60:49:65:6d:d5:32:83:95:49: e3:18:2b:4f:6a:a9:be:2b:5a:2d:c4:18:c4:8d:94: d9:96:c2:a0:1b:5e:32:ac:5e:9f:53:0a:d4:ea:6d: 81:25:9a:31:15:49:40:ad:5b:45:a9:78:8a:39:96: d4:2a:ee:3e:fd:7c:75:5e:bd:9b:5d:5c:66:fe:61: d8:02:6c:45:a0:8b:3e:c0:63:f5:e6:cf:57:aa:40: 8c:a2:17:8c:45:7a:59:cf:7b:88:ff:45:04:9c:13: d1:46:8d:a3:44:b6:ae:9d:f6:21:89:c2:77:d4:38: 29:3a:a5:c2:df:7f:d7:d8:e5:7e:b7:48:8e:98:50: 4c:58:d6:08:c3:2d:8d:c2:34:85:be:d7:c2:b6:54: f7:d6:85:c1:6b:42:6b:17:c4:10:2e:df:b8:1e:a1: 9d:f4:1c:ae:17:59:a9:4b:66:f4:44:44:cd:ad:ea: a8:4d:a6:0a:2c:0b:d3:04:fd:a7:35:72:87:2e:b2: 62:d5:5c:12:4d:49:3d:e4:59:57:17:4c:83:51:c6: 65:dc:ee:28:e9:a1:39:9e:40:f4:ac:5d:d5:59:c6: d7:f5:e7:e6:1d:a7:0f:fd:e2:d7:c7:6e:bc:7e:3b: 18:2c:bd:d9:c4:a3:17:e2:1b:a0:f7:0f:34:70:6f: 88:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:25:D7:AC:18:E8:94:43:31:01:C4:22:EE:D6:59:86:E5:8B:29:81 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS198025.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:5900::/40 Signature Algorithm: sha256WithRSAEncryption 7f:ff:9d:ce:fb:75:ef:bf:7d:86:be:67:c2:4d:b6:f7:c5:41: 8f:3b:29:c9:4d:51:80:a0:58:94:5d:e9:de:4c:e5:0f:98:ca: 36:62:46:85:94:3e:31:0e:c2:82:c0:df:9c:16:c5:de:23:28: f3:46:11:a9:18:31:d5:4d:d4:3e:45:b5:4b:1c:7d:df:19:59: dc:62:3d:12:2b:70:86:63:df:cc:d7:35:0e:54:1b:d0:83:2e: 08:36:75:fc:9e:eb:df:e1:e3:5e:c4:29:80:3e:36:b5:58:15: c3:45:4e:10:7f:0c:bd:c1:2f:f8:5f:8d:79:6a:5a:4f:5a:5c: 20:09:3d:85:9d:f6:33:2e:90:ef:26:6d:cf:2c:6b:f1:65:10: 45:c0:0f:4d:4a:2a:fd:1a:88:1c:76:b1:05:a6:cf:24:59:03: 7a:ff:5e:91:71:ac:4a:8c:03:cf:29:92:a1:88:dc:09:b2:0d: 23:ca:33:f4:23:f5:80:fd:8a:0a:9b:a1:cf:32:63:c0:6b:f9: 16:d5:12:90:4d:3b:c0:73:af:a2:b6:53:b4:27:3f:5b:b8:64: 4d:38:c9:d7:23:b7:b1:76:04:8a:84:01:c0:75:2d:2d:bd:b5: 7a:5e:e3:04:42:30:dd:f0:16:f0:55:66:27:66:ee:3a:c8:70: be:ae:36:e0 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUQM7hGOFrd1aepkfMQl3QRkq895swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3NDdaFw0yNzA2MDQwNzEyNDdaMDMxMTAvBgNV BAMTKEFFMjVEN0FDMThFODk0NDMzMTAxQzQyMkVFRDY1OTg2RTU4QjI5ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyhVpB9mBJZW3VMoOVSeMYK09q qb4rWi3EGMSNlNmWwqAbXjKsXp9TCtTqbYElmjEVSUCtW0WpeIo5ltQq7j79fHVe vZtdXGb+YdgCbEWgiz7AY/Xmz1eqQIyiF4xFelnPe4j/RQScE9FGjaNEtq6d9iGJ wnfUOCk6pcLff9fY5X63SI6YUExY1gjDLY3CNIW+18K2VPfWhcFrQmsXxBAu37ge oZ30HK4XWalLZvRERM2t6qhNpgosC9ME/ac1cocusmLVXBJNST3kWVcXTINRxmXc 7ijpoTmeQPSsXdVZxtf15+Ydpw/94tfHbrx+OxgsvdnEoxfiG6D3DzRwb4glAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUriXXrBjolEMxAcQi7tZZhuWLKYEwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMTk4MDI1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwVkwDQYJKoZIhvcNAQELBQADggEBAH// nc77de+/fYa+Z8JNtvfFQY87KclNUYCgWJRd6d5M5Q+YyjZiRoWUPjEOwoLA35wW xd4jKPNGEakYMdVN1D5FtUscfd8ZWdxiPRIrcIZj38zXNQ5UG9CDLgg2dfye69/h 417EKYA+NrVYFcNFThB/DL3BL/hfjXlqWk9aXCAJPYWd9jMukO8mbc8sa/FlEEXA D01KKv0aiBx2sQWmzyRZA3r/XpFxrEqMA88pkqGI3AmyDSPKM/Qj9YD9igqboc8y Y8Br+RbVEpBNO8Bzr6K2U7QnP1u4ZE04ydcjt7F2BIqEAcB1LS29tXpe4wRCMN3w FvBVZidm7jrIcL6uNuA= -----END CERTIFICATE-----Generated at Thu Jun 11 19:13:35 2026 by rpki-client