$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200141.roa File: AS200141.roa (raw, json) Hash identifier: sS6ayp0U7UkzOequ3mtr1ecqKiF4RYSAfV66ybRPg5U= Subject key identifier: 49:92:AB:22:7E:72:51:52:9C:B3:96:D3:84:6F:3E:DB:D4:63:68:06 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 3F0AFEC460781450B531B80717B01E415249E46E Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200141.roa Signing time: Fri 05 Jun 2026 07:12:38 +0000 ROA not before: Fri 05 Jun 2026 07:07:38 +0000 ROA not after: Fri 04 Jun 2027 07:12:38 +0000 asID: 200141 IP address blocks: 2a0a:6040:4a00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:0a:fe:c4:60:78:14:50:b5:31:b8:07:17:b0:1e:41:52:49:e4:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:38 2026 GMT Not After : Jun 4 07:12:38 2027 GMT Subject: CN=4992AB227E7251529CB396D3846F3EDBD4636806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f9:c0:9e:26:09:04:ac:88:32:14:82:89:d2: de:40:24:07:4b:04:f7:68:38:31:e4:d4:23:6a:21: b9:70:df:50:1e:bc:56:c8:3e:f3:f5:71:c2:b1:02: a0:6f:a1:52:0f:e7:19:b9:6c:80:de:97:d6:7a:f7: 24:c4:03:c6:18:45:e6:16:8d:94:5d:8d:f0:1f:72: af:2c:e9:5c:8a:97:de:cd:d2:3a:99:31:d1:42:d7: 3d:05:40:51:8b:01:7f:d5:64:5d:16:f0:f4:29:c0: 4e:b0:32:d0:8b:35:3b:a2:f8:cb:da:6c:33:90:6b: a2:e3:bf:a8:1b:bb:b7:b3:62:70:0e:28:21:7f:40: 36:41:5c:7b:d3:d9:80:91:cb:88:2b:c0:50:4d:60: 8b:75:8b:e1:db:2f:99:91:f2:90:37:5c:a1:91:b0: 65:d2:37:78:59:fb:c3:e8:8a:80:49:31:b5:bc:d7: d3:03:04:e8:91:e5:c7:28:ac:7e:ce:11:21:0f:8d: 8d:e8:c4:aa:63:77:e6:40:c1:43:7d:89:9b:19:99: d2:35:e8:4c:55:1f:0c:24:f9:f1:ce:d1:d8:51:13: 4b:2f:70:27:34:1d:cd:f1:4c:a9:b8:af:a9:8d:d6: a0:c2:d1:5a:4c:2c:ab:a6:13:6d:0f:18:9e:8d:fa: 26:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:92:AB:22:7E:72:51:52:9C:B3:96:D3:84:6F:3E:DB:D4:63:68:06 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200141.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:4a00::/40 Signature Algorithm: sha256WithRSAEncryption 98:92:c8:20:53:a6:ca:35:2b:04:34:96:58:1a:68:2e:2a:5b: 89:4d:c3:6a:86:b9:89:e1:a9:fc:e0:dd:b2:0b:69:05:c6:91: 9d:67:3c:0e:33:49:f6:32:0e:4a:eb:3d:b7:62:fc:0d:32:8e: ab:fa:c0:31:06:73:ad:9a:f3:8a:e0:e4:e4:84:3f:ab:71:65: ef:0d:77:03:95:be:91:f3:40:5f:fd:8e:54:bd:f4:7c:46:53: 99:f5:da:62:31:3e:24:b3:0a:bc:ac:45:7c:5d:69:ea:e8:63: da:bd:2f:29:15:98:52:af:30:01:eb:b2:c9:e7:8b:3d:44:f9: 9e:2a:3a:92:44:b5:b5:69:55:fe:79:ae:64:15:82:d7:73:f8: 48:ae:22:ff:41:41:53:19:95:2a:ef:ba:33:5e:43:d8:80:2f: 71:4f:8e:38:a9:e2:e9:53:2e:20:4c:51:dc:44:00:30:a2:22: b8:02:02:a7:35:35:ea:e4:1e:c0:6f:39:82:d9:b8:a2:5e:fe: a6:3c:aa:34:3d:a1:e4:a8:cc:dd:f3:4c:36:1f:5e:dc:da:a9: 40:82:d9:0d:f6:51:7a:96:43:11:f7:5a:55:c2:77:68:07:f3: b9:30:77:b3:42:9b:58:fb:5b:f9:5d:1e:52:f3:5e:9c:a9:f6: 18:12:fd:af -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUPwr+xGB4FFC1MbgHF7AeQVJJ5G4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MzhaFw0yNzA2MDQwNzEyMzhaMDMxMTAvBgNV BAMTKDQ5OTJBQjIyN0U3MjUxNTI5Q0IzOTZEMzg0NkYzRURCRDQ2MzY4MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD+cCeJgkErIgyFIKJ0t5AJAdL BPdoODHk1CNqIblw31AevFbIPvP1ccKxAqBvoVIP5xm5bIDel9Z69yTEA8YYReYW jZRdjfAfcq8s6VyKl97N0jqZMdFC1z0FQFGLAX/VZF0W8PQpwE6wMtCLNTui+Mva bDOQa6Ljv6gbu7ezYnAOKCF/QDZBXHvT2YCRy4grwFBNYIt1i+HbL5mR8pA3XKGR sGXSN3hZ+8PoioBJMbW819MDBOiR5ccorH7OESEPjY3oxKpjd+ZAwUN9iZsZmdI1 6ExVHwwk+fHO0dhRE0svcCc0Hc3xTKm4r6mN1qDC0VpMLKumE20PGJ6N+ibvAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUSZKrIn5yUVKcs5bThG8+29RjaAYwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAwMTQxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQEowDQYJKoZIhvcNAQELBQADggEBAJiS yCBTpso1KwQ0llgaaC4qW4lNw2qGuYnhqfzg3bILaQXGkZ1nPA4zSfYyDkrrPbdi /A0yjqv6wDEGc62a84rg5OSEP6txZe8NdwOVvpHzQF/9jlS99HxGU5n12mIxPiSz CrysRXxdaeroY9q9LykVmFKvMAHrssnniz1E+Z4qOpJEtbVpVf55rmQVgtdz+Eiu Iv9BQVMZlSrvujNeQ9iAL3FPjjip4ulTLiBMUdxEADCiIrgCAqc1NerkHsBvOYLZ uKJe/qY8qjQ9oeSozN3zTDYfXtzaqUCC2Q32UXqWQxH3WlXCd2gH87kwd7NCm1j7 W/ldHlLzXpyp9hgS/a8= -----END CERTIFICATE-----Generated at Sat Jun 13 09:11:06 2026 by rpki-client