$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200237.roa File: AS200237.roa (raw, json) Hash identifier: AnPVUgJFi/LjiiEGDM3wT3F0PCFCAlhh876NtmOVLxA= Subject key identifier: 3E:10:95:E2:D3:D9:5F:81:15:69:10:B8:AB:C0:FC:F8:45:7C:AB:4A Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 489C8B7146DCD9D59DD0543069EBA3141D8C9B35 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200237.roa Signing time: Fri 05 Jun 2026 07:12:49 +0000 ROA not before: Fri 05 Jun 2026 07:07:49 +0000 ROA not after: Fri 04 Jun 2027 07:12:49 +0000 asID: 200237 IP address blocks: 2a0a:6040:3800::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:9c:8b:71:46:dc:d9:d5:9d:d0:54:30:69:eb:a3:14:1d:8c:9b:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:49 2026 GMT Not After : Jun 4 07:12:49 2027 GMT Subject: CN=3E1095E2D3D95F81156910B8ABC0FCF8457CAB4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cc:78:3d:89:8a:23:9a:14:7c:5b:8a:f5:07: 19:91:df:c5:0a:2d:2b:f5:8f:9f:ad:ca:37:de:6b: 6b:d0:e0:30:24:fd:87:f8:91:53:64:02:57:7b:d4: 72:7e:a3:15:0f:99:9f:e2:36:06:11:bb:89:0c:ed: a5:65:1d:48:b3:11:84:22:4d:09:03:e0:74:d0:2a: 19:7d:ee:02:4d:05:31:b5:20:65:ff:ae:27:e3:33: ae:5e:1b:a0:75:27:17:e0:4d:24:59:f8:8a:92:64: e0:1a:15:2e:4b:03:b2:ac:af:e5:af:f4:fe:4d:fe: de:b8:24:21:04:ac:4c:da:dc:d7:3e:49:78:dc:4b: 28:5b:06:1e:5b:93:34:e7:84:97:1c:46:a0:86:ed: d8:e0:fa:65:d6:68:f1:34:1d:80:f0:a2:9f:bf:b3: 9d:60:c0:7e:d7:ac:95:b0:54:73:4e:51:76:13:b8: 7e:4e:25:01:60:4e:19:5e:6f:c7:6e:90:b2:3e:c7: 52:80:ba:67:34:07:69:d9:87:d6:43:f5:e1:a6:65: 12:3e:10:21:25:05:cb:44:54:3a:76:26:10:38:2d: 28:72:16:bf:58:10:e2:9b:e2:11:61:b2:a3:08:9c: 1a:d9:dd:1b:1b:72:0f:03:d9:66:7d:89:f4:b7:29: d9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:10:95:E2:D3:D9:5F:81:15:69:10:B8:AB:C0:FC:F8:45:7C:AB:4A X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:3800::/40 Signature Algorithm: sha256WithRSAEncryption 08:79:37:60:dd:49:f7:97:24:84:aa:6e:dd:42:65:ee:b4:12: 03:d6:cd:5d:7f:1f:5e:c0:aa:cd:9a:39:05:b7:12:37:41:20: 8b:4a:62:9a:ca:bc:12:62:2b:53:fe:76:3a:01:3a:ad:4a:3d: 5a:c6:27:f8:0b:8a:f1:54:d7:20:70:65:8b:f0:cc:e5:32:59: 7e:8c:ce:a4:b6:fb:8b:61:28:f5:04:da:77:d3:b5:c6:ff:05: 1e:f3:36:64:82:0d:08:95:8c:da:88:6a:2f:2b:d6:c2:fa:c9: 88:09:44:f7:0e:28:d7:96:e5:ca:11:72:c9:cc:26:b0:d6:11: a9:e5:30:4c:ff:2b:0e:41:a3:7f:fd:60:2f:f1:23:81:06:fb: 45:3d:70:08:80:7b:5e:ad:ad:6c:02:38:40:f4:4c:db:62:9d: dc:9d:b3:fd:71:10:69:24:c9:a4:8d:af:a3:7b:70:cf:da:70: 3c:12:db:d6:6f:31:21:6b:d7:36:13:6e:5a:e3:21:4e:27:3b: 9a:62:43:0e:2e:3e:fe:c2:11:5f:78:ec:b3:6e:12:95:ad:7f: 94:77:0b:4a:9c:28:38:44:69:42:b9:59:8c:c6:ba:b3:a2:cd: 80:3c:6c:64:32:27:43:c5:a5:04:0f:dd:52:70:d0:05:c2:f1: 51:6f:03:64 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUSJyLcUbc2dWd0FQwaeujFB2MmzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3NDlaFw0yNzA2MDQwNzEyNDlaMDMxMTAvBgNV BAMTKDNFMTA5NUUyRDNEOTVGODExNTY5MTBCOEFCQzBGQ0Y4NDU3Q0FCNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDzHg9iYojmhR8W4r1BxmR38UK LSv1j5+tyjfea2vQ4DAk/Yf4kVNkAld71HJ+oxUPmZ/iNgYRu4kM7aVlHUizEYQi TQkD4HTQKhl97gJNBTG1IGX/rifjM65eG6B1JxfgTSRZ+IqSZOAaFS5LA7Ksr+Wv 9P5N/t64JCEErEza3Nc+SXjcSyhbBh5bkzTnhJccRqCG7djg+mXWaPE0HYDwop+/ s51gwH7XrJWwVHNOUXYTuH5OJQFgThleb8dukLI+x1KAumc0B2nZh9ZD9eGmZRI+ ECElBctEVDp2JhA4LShyFr9YEOKb4hFhsqMInBrZ3Rsbcg8D2WZ9ifS3KdkXAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUPhCV4tPZX4EVaRC4q8D8+EV8q0owHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAwMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQDgwDQYJKoZIhvcNAQELBQADggEBAAh5 N2DdSfeXJISqbt1CZe60EgPWzV1/H17Aqs2aOQW3EjdBIItKYprKvBJiK1P+djoB Oq1KPVrGJ/gLivFU1yBwZYvwzOUyWX6MzqS2+4thKPUE2nfTtcb/BR7zNmSCDQiV jNqIai8r1sL6yYgJRPcOKNeW5coRcsnMJrDWEanlMEz/Kw5Bo3/9YC/xI4EG+0U9 cAiAe16trWwCOED0TNtindyds/1xEGkkyaSNr6N7cM/acDwS29ZvMSFr1zYTblrj IU4nO5piQw4uPv7CEV947LNuEpWtf5R3C0qcKDhEaUK5WYzGurOizYA8bGQyJ0PF pQQP3VJw0AXC8VFvA2Q= -----END CERTIFICATE-----Generated at Sat Jun 13 09:11:17 2026 by rpki-client