
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200158.roa
File: AS200158.roa (raw, json)
Hash identifier: LrzbuRW8z0ZXtR1POk3bkF+43IAboA9GjIfK0mLKtfk=
Subject key identifier: 3D:D1:FB:9D:82:C4:28:DD:1A:CB:FF:1C:77:98:40:08:EB:0D:E3:AC
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 207CD77ED04BD66EA6366ADBC0C7FE20E0BD8A6D
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200158.roa
Signing time: Fri 05 Jun 2026 07:12:15 +0000
ROA not before: Fri 05 Jun 2026 07:07:15 +0000
ROA not after: Fri 04 Jun 2027 07:12:15 +0000
asID: 200158
IP address blocks: 2a0a:6040:600::/40 maxlen: 48
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:7c:d7:7e:d0:4b:d6:6e:a6:36:6a:db:c0:c7:fe:20:e0:bd:8a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jun 5 07:07:15 2026 GMT
Not After : Jun 4 07:12:15 2027 GMT
Subject: CN=3DD1FB9D82C428DD1ACBFF1C77984008EB0DE3AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f1:bd:53:84:04:d4:8d:c2:79:4c:21:5e:e8:
b3:cc:0a:f7:a6:1f:11:fd:ab:ff:1c:69:9c:51:11:
20:1e:7e:11:29:60:9e:30:82:72:34:84:aa:6b:5f:
76:57:20:ac:fa:55:68:60:10:34:57:51:14:9d:6b:
99:f6:42:7b:e6:f5:40:21:db:91:e9:89:41:62:8e:
00:3b:93:a8:5f:e6:73:59:e9:38:a9:9f:3f:2f:c4:
bb:33:ed:1d:90:c9:11:76:2c:e7:66:b5:bc:6f:76:
69:88:00:6d:6a:dc:e9:1e:41:62:5f:95:3f:66:53:
8e:95:6c:46:f4:29:78:0f:90:a2:9d:53:94:8a:d9:
b8:0b:b5:36:60:82:e3:51:ac:3c:8f:fc:f6:51:07:
a9:3f:2d:56:55:a2:fe:38:85:79:2d:fc:f8:fd:fd:
25:7f:5d:d7:1e:f4:68:dd:99:c0:25:b0:d9:5e:12:
a2:12:20:b3:0b:24:d8:a4:3a:0d:8f:26:80:42:ef:
06:30:72:38:af:9c:b3:7d:20:53:96:48:3c:49:ea:
b9:18:12:51:f7:9a:8d:b4:0f:14:c9:e3:e5:69:78:
8f:af:e6:54:77:9a:f8:29:6e:80:1b:3b:2d:c0:48:
55:c6:24:a5:4b:b4:20:ea:a5:fd:f4:9f:ab:8f:37:
f4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D1:FB:9D:82:C4:28:DD:1A:CB:FF:1C:77:98:40:08:EB:0D:E3:AC
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200158.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:600::/40
Signature Algorithm: sha256WithRSAEncryption
31:d1:1a:4d:e8:1c:9b:6b:0e:12:0c:9d:a8:0d:44:a8:f7:7a:
e5:6d:9f:b6:77:11:d0:08:ca:4c:2e:d1:59:5a:52:6e:28:e7:
8b:a4:1d:76:87:ec:21:81:56:52:e9:98:ab:b1:db:cc:9b:c5:
94:4d:d7:9d:7b:fc:b9:4a:ad:15:ee:c5:60:49:4a:73:8e:f6:
9d:81:67:28:f6:51:20:eb:c0:ed:61:60:72:db:ea:74:c1:ee:
b2:4d:4c:98:f8:1b:c3:aa:9b:33:74:27:aa:4a:65:99:3e:13:
63:25:61:89:68:3a:ee:33:9a:13:78:3e:dc:91:91:a5:3c:60:
fb:46:f8:11:f3:00:e2:b5:2c:7f:5c:8b:8c:ca:69:35:cd:24:
81:a9:9a:17:0a:f9:7d:0c:81:c5:c3:41:69:06:23:f2:51:b8:
22:4c:85:dd:d8:11:6c:6e:fe:41:08:cc:a3:8a:d4:ac:52:45:
07:1d:57:78:38:e5:d7:13:be:a7:84:d7:ff:92:bb:20:75:f9:
34:ad:39:86:1c:86:47:a2:15:c8:60:42:da:a3:21:54:1b:a7:
71:6d:72:5b:c9:91:d7:9c:40:9a:1e:c2:0d:b4:c3:c0:bb:49:
05:79:e0:31:0a:29:ba:e2:fb:4a:22:24:0d:f8:88:d7:83:47:
69:f4:ef:ca
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUIHzXftBL1m6mNmrbwMf+IOC9im0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNjA2MDUwNzA3MTVaFw0yNzA2MDQwNzEyMTVaMDMxMTAvBgNV
BAMTKDNERDFGQjlEODJDNDI4REQxQUNCRkYxQzc3OTg0MDA4RUIwREUzQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK8b1ThATUjcJ5TCFe6LPMCvem
HxH9q/8caZxRESAefhEpYJ4wgnI0hKprX3ZXIKz6VWhgEDRXURSda5n2Qnvm9UAh
25HpiUFijgA7k6hf5nNZ6Tipnz8vxLsz7R2QyRF2LOdmtbxvdmmIAG1q3OkeQWJf
lT9mU46VbEb0KXgPkKKdU5SK2bgLtTZgguNRrDyP/PZRB6k/LVZVov44hXkt/Pj9
/SV/Xdce9GjdmcAlsNleEqISILMLJNikOg2PJoBC7wYwcjivnLN9IFOWSDxJ6rkY
ElH3mo20DxTJ4+VpeI+v5lR3mvgpboAbOy3ASFXGJKVLtCDqpf30n6uPN/RXAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUPdH7nYLEKN0ay/8cd5hACOsN46wwHwYDVR0j
BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3
RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80
L0FTMjAwMTU4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQAYwDQYJKoZIhvcNAQELBQADggEBADHR
Gk3oHJtrDhIMnagNRKj3euVtn7Z3EdAIykwu0VlaUm4o54ukHXaH7CGBVlLpmKux
28ybxZRN1517/LlKrRXuxWBJSnOO9p2BZyj2USDrwO1hYHLb6nTB7rJNTJj4G8Oq
mzN0J6pKZZk+E2MlYYloOu4zmhN4PtyRkaU8YPtG+BHzAOK1LH9ci4zKaTXNJIGp
mhcK+X0MgcXDQWkGI/JRuCJMhd3YEWxu/kEIzKOK1KxSRQcdV3g45dcTvqeE1/+S
uyB1+TStOYYchkeiFchgQtqjIVQbp3FtclvJkdecQJoewg20w8C7SQV54DEKKbri
+0oiJA34iNeDR2n078o=
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:17 2026 by rpki-client