$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200221.roa File: AS200221.roa (raw, json) Hash identifier: Sysro0VQ5VA5RZtgrBZhhahlEijr9oxY/vtDGAWS34A= Subject key identifier: 1A:CB:EE:29:05:B8:6F:51:EB:CC:C4:6B:73:EC:54:8B:0D:6A:A9:FE Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 3D2FD23108E11201BC599E21CE17584C4E12823A Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200221.roa Signing time: Fri 05 Jun 2026 07:12:33 +0000 ROA not before: Fri 05 Jun 2026 07:07:33 +0000 ROA not after: Fri 04 Jun 2027 07:12:33 +0000 asID: 200221 IP address blocks: 2a0a:6040:2100::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:2f:d2:31:08:e1:12:01:bc:59:9e:21:ce:17:58:4c:4e:12:82:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:33 2026 GMT Not After : Jun 4 07:12:33 2027 GMT Subject: CN=1ACBEE2905B86F51EBCCC46B73EC548B0D6AA9FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ce:5f:29:20:b0:43:14:d1:04:93:e1:86:58: 99:1e:31:0f:3b:40:24:49:df:69:f6:47:97:95:96: f0:06:93:e3:7f:4e:81:3e:b4:e0:74:59:74:40:35: 08:45:2b:05:d9:d4:c2:b4:b4:d0:5d:22:e9:74:a0: 01:ae:13:96:b5:ac:fc:ab:67:f5:05:a7:a8:b8:c1: d8:d7:e2:a3:47:5c:ca:0c:de:87:c5:80:29:6c:de: c9:4b:bf:ce:95:09:f9:a8:1f:61:dc:1a:0c:c3:cc: e0:95:62:46:6b:e1:70:a1:5b:db:b8:56:2a:b6:aa: 6e:a2:b9:dc:b2:31:f2:29:12:b6:62:1d:e8:de:86: c6:2c:48:50:8e:a4:15:b6:99:cf:16:f4:9d:9f:03: af:87:f4:6a:48:98:79:ef:54:e8:28:ae:e8:9b:af: 71:3c:e0:f7:22:70:96:12:23:71:6e:4a:32:56:41: ab:08:56:a0:67:6f:c2:40:06:3b:5a:c0:0d:26:18: 2a:0c:14:86:39:78:8a:47:f4:07:4a:64:6b:a1:6d: 96:a3:ad:7f:d3:a3:3b:a1:90:ae:0b:c4:29:37:02: f6:58:f8:c3:f9:4b:bf:6e:7e:e5:fb:93:11:6e:bc: b8:7a:eb:c1:0b:47:e5:6c:99:eb:51:59:7f:37:5a: 2c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:CB:EE:29:05:B8:6F:51:EB:CC:C4:6B:73:EC:54:8B:0D:6A:A9:FE X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200221.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:2100::/40 Signature Algorithm: sha256WithRSAEncryption a3:47:e8:d9:21:fa:7d:80:f4:a8:b2:8e:00:41:0f:a4:3c:ce: 96:3f:a2:1a:e1:a7:09:c1:87:7d:26:94:ed:b2:50:97:04:54: c6:7b:8f:66:51:5d:e8:a0:39:b9:d4:9e:d8:c3:17:b1:9c:ec: a4:b3:80:1d:0a:d7:ad:07:48:f0:1b:9e:85:47:e9:e9:1a:3b: 8b:57:9e:26:33:a0:f0:21:99:c1:a1:0a:bb:4d:5b:73:bd:b1: b9:cd:27:d3:88:09:18:8f:3d:7b:2f:ed:19:85:60:ef:c1:26: 4f:68:23:bd:22:89:dc:0e:33:65:4c:65:8d:17:ef:60:ed:60: bc:5d:1b:10:2a:01:c3:fc:38:71:d5:d3:1a:82:e6:ec:8d:8c: 13:23:3b:87:0a:6a:89:6d:1e:0c:40:5e:27:6c:f8:ba:a6:37: 68:17:45:8a:9f:d5:de:d4:ab:8c:7a:44:37:ef:2b:81:c1:e9: b8:2b:a9:7e:3e:44:71:8a:b3:ff:63:83:d8:79:cd:16:25:b8: 4f:86:ff:63:50:e9:1d:da:8f:56:cf:6f:79:22:d6:af:59:0c: b0:da:5d:58:1d:f5:d9:c4:68:65:9d:80:74:22:a6:f1:74:c2: a1:03:35:b4:c1:6d:61:b3:a6:cb:bb:b6:9a:e1:69:31:1b:58: 3e:14:d2:4c -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUPS/SMQjhEgG8WZ4hzhdYTE4SgjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MzNaFw0yNzA2MDQwNzEyMzNaMDMxMTAvBgNV BAMTKDFBQ0JFRTI5MDVCODZGNTFFQkNDQzQ2QjczRUM1NDhCMEQ2QUE5RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfzl8pILBDFNEEk+GGWJkeMQ87 QCRJ32n2R5eVlvAGk+N/ToE+tOB0WXRANQhFKwXZ1MK0tNBdIul0oAGuE5a1rPyr Z/UFp6i4wdjX4qNHXMoM3ofFgCls3slLv86VCfmoH2HcGgzDzOCVYkZr4XChW9u4 Viq2qm6iudyyMfIpErZiHejehsYsSFCOpBW2mc8W9J2fA6+H9GpImHnvVOgoruib r3E84PcicJYSI3FuSjJWQasIVqBnb8JABjtawA0mGCoMFIY5eIpH9AdKZGuhbZaj rX/TozuhkK4LxCk3AvZY+MP5S79ufuX7kxFuvLh668ELR+VsmetRWX83WiwNAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUGsvuKQW4b1HrzMRrc+xUiw1qqf4wHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAwMjIxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQCEwDQYJKoZIhvcNAQELBQADggEBAKNH 6Nkh+n2A9KiyjgBBD6Q8zpY/ohrhpwnBh30mlO2yUJcEVMZ7j2ZRXeigObnUntjD F7Gc7KSzgB0K160HSPAbnoVH6ekaO4tXniYzoPAhmcGhCrtNW3O9sbnNJ9OICRiP PXsv7RmFYO/BJk9oI70iidwOM2VMZY0X72DtYLxdGxAqAcP8OHHV0xqC5uyNjBMj O4cKaoltHgxAXids+LqmN2gXRYqf1d7Uq4x6RDfvK4HB6bgrqX4+RHGKs/9jg9h5 zRYluE+G/2NQ6R3aj1bPb3ki1q9ZDLDaXVgd9dnEaGWdgHQipvF0wqEDNbTBbWGz psu7tprhaTEbWD4U0kw= -----END CERTIFICATE-----Generated at Sat Jun 13 05:39:21 2026 by rpki-client