
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS57934.roa
File: AS57934.roa (raw, json)
Hash identifier: 6PQZz2zse/z2Jv3I67VdTGPbIToTjwA68Qniz+06U/w=
Subject key identifier: F4:2C:A3:E2:C6:19:59:F1:E7:3B:28:32:28:75:EF:A7:43:B1:F4:4A
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 4CF9247619569FC55BFF583A77E0D067294BB9B0
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS57934.roa
Signing time: Fri 05 Jun 2026 07:12:18 +0000
ROA not before: Fri 05 Jun 2026 07:07:18 +0000
ROA not after: Fri 04 Jun 2027 07:12:18 +0000
asID: 57934
IP address blocks: 2a0a:6040:5800::/40 maxlen: 48
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 21:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:f9:24:76:19:56:9f:c5:5b:ff:58:3a:77:e0:d0:67:29:4b:b9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jun 5 07:07:18 2026 GMT
Not After : Jun 4 07:12:18 2027 GMT
Subject: CN=F42CA3E2C61959F1E73B28322875EFA743B1F44A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:91:09:6b:3a:18:52:4b:3d:0b:23:2f:42:93:
1e:e3:50:27:23:2e:37:04:9b:a9:4b:42:53:64:3e:
2b:f2:ed:47:c3:61:81:4b:57:5c:40:4d:7e:c0:af:
ed:90:23:96:41:d0:63:c3:de:da:e8:0e:33:2f:4a:
83:d4:48:5f:ce:8e:ab:76:66:e7:34:b0:67:24:2b:
86:0a:f5:a7:d2:91:2d:f5:17:33:83:c8:78:12:e9:
de:c0:f3:03:42:54:45:85:88:dc:9e:7a:e9:b6:da:
41:b3:23:0c:f3:cc:60:87:2c:46:07:61:11:84:84:
09:6a:4d:c6:98:9f:57:f9:2f:99:19:44:dc:ce:77:
5b:f4:3f:03:78:ba:95:18:e0:85:87:10:2a:69:92:
0b:51:19:c5:b4:8a:df:63:b3:2e:90:5c:b1:0e:89:
53:e4:20:c3:fc:1b:ce:60:31:01:11:bf:8b:d9:7b:
9f:b0:f1:53:91:27:22:64:65:9a:cd:80:bf:77:88:
cd:c8:e8:bf:53:70:fb:b2:8e:f6:f5:44:7a:c2:a6:
cf:83:45:c8:47:a7:eb:15:eb:76:41:4b:1e:b4:9b:
5b:87:56:60:a0:a5:9c:e3:40:e3:e6:8e:dd:4b:96:
85:9a:d1:cd:dc:04:a4:31:26:9e:6f:6d:c5:32:23:
d6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2C:A3:E2:C6:19:59:F1:E7:3B:28:32:28:75:EF:A7:43:B1:F4:4A
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS57934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:5800::/40
Signature Algorithm: sha256WithRSAEncryption
a5:0a:0e:d9:3d:dc:df:9f:b0:40:66:db:f0:17:3a:6e:42:60:
4f:e8:7a:54:58:ad:63:02:a1:37:05:9f:52:63:c9:93:25:d8:
ff:7e:b0:0a:8f:cd:22:71:69:de:30:3b:3c:58:dc:d8:f4:eb:
76:f2:fb:1c:87:aa:9b:85:e9:12:1f:c4:44:d1:17:5c:90:ba:
f5:64:22:e7:f1:92:c8:62:56:74:3c:02:23:05:35:9c:2d:25:
3a:93:99:fa:2f:d2:b2:a5:ad:51:6e:98:1f:85:90:e3:d7:55:
6e:d0:35:87:5d:ac:e8:3a:cd:8b:2b:13:99:b6:95:85:0e:30:
8e:a0:2e:df:73:ed:e6:e7:42:dd:25:61:87:91:c1:ae:a4:95:
3e:7c:f6:e6:a1:7f:a7:3f:7e:a8:19:73:33:17:10:15:12:99:
3f:8c:0d:70:0c:18:f0:d6:df:1d:6e:26:6c:21:46:ba:5a:e6:
c3:6c:95:39:79:52:d2:5b:5f:28:76:9a:48:10:6c:2b:01:cc:
03:53:fb:3c:8f:0c:b6:db:2e:a5:be:78:c8:be:5d:61:30:1c:
5e:74:ca:3d:73:ef:a8:2c:3e:ea:0b:c2:7a:48:b8:e0:f4:1a:
85:5c:e5:01:16:74:d9:88:cf:7e:04:1e:60:74:a9:e2:f9:30:
ae:70:97:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 7 07:06:08 2026 by rpki-client