
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200242.roa
File: AS200242.roa (raw, json)
Hash identifier: 0xyD9ytWK9kQ1h43Ci4sHuNxfGLB/9jR5o1+9CTsZNQ=
Subject key identifier: 66:35:59:C2:3E:3A:82:8A:3D:A0:2D:C8:14:E6:0E:7F:B7:D9:B1:9D
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 559AEFDA664FEB7649DBC3C3F48EC5D86BF4D9D7
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200242.roa
Signing time: Fri 05 Jun 2026 07:12:12 +0000
ROA not before: Fri 05 Jun 2026 07:07:12 +0000
ROA not after: Fri 04 Jun 2027 07:12:12 +0000
asID: 200242
IP address blocks: 2a0a:6040:4100::/40 maxlen: 48
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:9a:ef:da:66:4f:eb:76:49:db:c3:c3:f4:8e:c5:d8:6b:f4:d9:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jun 5 07:07:12 2026 GMT
Not After : Jun 4 07:12:12 2027 GMT
Subject: CN=663559C23E3A828A3DA02DC814E60E7FB7D9B19D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:73:44:d3:e8:bc:52:bb:53:84:70:0c:b0:3e:
b7:d5:fb:cf:b4:f1:f0:42:32:c3:4f:44:38:64:f5:
ca:d0:f0:f3:55:7a:c6:7d:6b:96:6f:be:70:cc:a5:
90:e4:1c:aa:d2:67:fe:b9:42:61:59:cc:60:23:aa:
ec:db:70:bb:3d:29:a1:01:be:d1:9f:76:9e:f7:30:
42:71:4d:2d:ff:b7:cf:4b:64:48:2b:a9:b0:64:56:
29:b2:c5:15:7d:09:e1:33:af:f6:ca:fd:1b:13:8e:
90:1f:0a:27:5a:4c:36:66:01:39:b9:12:c9:cd:6a:
99:e4:f0:05:93:1d:94:81:6f:10:3f:df:7d:ca:5b:
24:00:f7:4f:d3:4c:c1:0e:5d:5e:b1:e2:c7:c9:6c:
44:b9:c4:3b:cc:85:7e:0c:59:f4:10:77:c9:1b:92:
24:3b:93:e6:cb:b2:68:a1:ed:7d:e3:94:ce:64:2a:
42:ce:c8:1b:a2:ef:11:d4:1e:0b:fe:a8:6f:a7:e7:
09:a2:ed:ce:fb:ba:fd:68:44:66:e8:ac:c1:ea:2d:
97:f5:b0:8e:8f:26:06:58:84:fc:5c:cc:08:50:02:
9c:fb:fd:e7:b8:b5:b2:3d:37:72:b6:e0:9c:a6:01:
dc:51:aa:be:96:7b:50:6f:78:bc:ad:07:05:80:cd:
4e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:35:59:C2:3E:3A:82:8A:3D:A0:2D:C8:14:E6:0E:7F:B7:D9:B1:9D
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200242.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:4100::/40
Signature Algorithm: sha256WithRSAEncryption
5a:c8:1b:b3:ff:16:32:f8:d9:a9:d8:92:82:77:d0:fc:af:c5:
2e:a8:a4:d8:ff:3c:29:82:dc:91:9a:12:67:e9:22:aa:b6:37:
00:ba:ab:81:c3:f9:34:7a:b7:52:a3:3e:3d:6c:c4:9d:07:13:
45:8e:8b:ab:17:00:3f:e5:f4:04:dc:cc:e9:e7:a9:61:ae:55:
99:9f:62:78:c1:6e:f2:9e:09:6e:0e:81:4a:38:60:e0:c1:6a:
db:b1:3d:19:96:9b:45:51:8f:0d:3d:07:8e:40:0f:ff:d4:30:
12:98:33:45:28:ca:a5:8d:c4:d4:ef:4a:d3:33:d1:e9:a9:3a:
22:70:f5:4e:2d:ab:45:a0:06:6f:f7:c7:4a:8c:7e:0f:13:fe:
b8:14:f9:96:38:3d:a8:9e:35:5e:9a:12:c2:8a:e6:20:ba:cf:
82:fa:69:f8:ce:2a:f4:f2:cd:71:ab:b5:3f:23:c2:07:11:a9:
c6:e5:e2:3e:fd:52:06:1d:9f:46:88:da:bb:7b:95:ee:9b:ab:
c0:5a:37:c0:0c:bc:db:46:01:7b:23:1c:32:c3:d7:5c:ea:31:
f2:12:38:c1:b0:cd:35:10:cb:28:82:48:fa:72:ce:4f:99:9d:
8e:87:8d:78:c7:65:5a:3a:c6:d3:51:ba:bd:db:41:22:ea:0a:
02:1a:44:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:43:22 2026 by rpki-client