$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200243.roa File: AS200243.roa (raw, json) Hash identifier: 9fkMbsXYHcBHOUuuMgsl4UzjCrXUE1zRk3Sm/QKhles= Subject key identifier: 5A:C0:B9:9E:15:F2:DE:66:E2:D5:01:D9:53:E3:76:2A:32:B8:7A:61 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 6E1006F138B2B152907324B11DF6207471E35F7E Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200243.roa Signing time: Fri 05 Jun 2026 07:12:13 +0000 ROA not before: Fri 05 Jun 2026 07:07:13 +0000 ROA not after: Fri 04 Jun 2027 07:12:13 +0000 asID: 200243 IP address blocks: 2a0a:6040:900::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:10:06:f1:38:b2:b1:52:90:73:24:b1:1d:f6:20:74:71:e3:5f:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:13 2026 GMT Not After : Jun 4 07:12:13 2027 GMT Subject: CN=5AC0B99E15F2DE66E2D501D953E3762A32B87A61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:56:ca:c8:dd:b0:af:c7:6f:d8:70:15:22:2b: ff:9b:b7:79:2c:30:c1:2e:56:90:95:c8:a0:70:a1: 77:01:c4:6c:97:df:1f:4a:6e:62:a7:11:cc:bf:d9: 86:40:6d:a3:60:00:de:65:1f:e4:52:e4:f8:bd:3c: b0:ff:25:bc:b9:da:bf:8e:5c:25:fc:d0:57:1d:69: 64:8d:99:bd:de:f4:e2:91:07:0f:f3:d5:ba:45:a1: 34:16:40:c9:67:fd:fb:36:04:9d:b5:74:81:c0:02: 3d:6e:06:b4:f2:0a:f0:23:d3:be:fc:53:b4:b1:81: e5:b3:a3:18:a5:3c:c9:5b:82:3c:93:ba:2e:3d:fc: c4:25:a5:22:20:54:2d:44:37:2b:a0:80:9b:09:d9: 50:65:e4:cc:71:4d:07:0f:89:b6:44:0e:34:51:35: 9e:64:cc:03:50:bf:71:2e:5f:8f:ff:86:1b:c5:f8: 0f:72:10:c8:38:5b:03:b0:40:99:d5:32:41:cc:28: fb:f0:37:73:00:4d:c0:4c:b5:62:f5:79:d5:39:93: e7:ee:54:b8:a9:cd:f8:92:87:82:d7:ca:f4:e0:da: e4:6d:1f:4f:b6:ef:7c:87:47:41:a2:2b:22:c7:16: 6d:9e:fd:ab:84:f0:38:b4:1e:f6:dc:78:24:7a:71: f0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C0:B9:9E:15:F2:DE:66:E2:D5:01:D9:53:E3:76:2A:32:B8:7A:61 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200243.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:900::/40 Signature Algorithm: sha256WithRSAEncryption 69:5c:7a:92:a9:6c:9b:c2:66:96:91:36:16:3d:6b:69:97:58: 7a:c1:5e:69:8f:b1:42:1a:04:f9:79:dc:e9:6f:c0:b2:52:a6: de:53:bf:f1:e5:b2:fd:1a:b7:33:c0:c6:f1:06:30:04:0e:78: 60:df:99:4e:39:00:cc:43:70:01:23:cb:a1:34:e8:16:ac:a1: 70:ac:84:1b:a0:40:07:49:47:7c:00:71:5d:e4:3b:07:a8:c1: e2:57:17:5e:20:ef:0f:de:b8:c5:17:33:86:41:23:e9:04:6c: 83:27:97:16:50:51:a9:cc:d1:63:0b:10:61:6e:b8:b5:9d:ee: fa:e5:25:9f:6c:22:2a:8c:2e:f6:ea:6b:65:e4:7b:07:50:22: 3d:53:7c:3e:eb:99:88:7e:b9:a7:c5:df:bc:70:4e:2d:43:a6: 4e:37:e2:6c:d0:fb:80:19:c6:69:d5:a2:7c:9d:85:cc:74:8a: c1:d6:e9:ca:b3:96:17:4a:f7:0b:20:c0:af:98:0c:f4:31:17: 98:2f:8d:d0:2b:55:b5:cb:1f:f2:97:61:2b:a7:20:1a:d2:6b: c1:18:1f:e2:59:3b:51:a7:c5:b9:9c:ca:c5:80:0d:11:94:e0: 32:a5:7a:5f:2c:1a:7d:fc:b5:0a:23:42:70:0a:3d:3d:ce:69: 4e:6e:fd:b8 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUbhAG8TiysVKQcySxHfYgdHHjX34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MTNaFw0yNzA2MDQwNzEyMTNaMDMxMTAvBgNV BAMTKDVBQzBCOTlFMTVGMkRFNjZFMkQ1MDFEOTUzRTM3NjJBMzJCODdBNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtVsrI3bCvx2/YcBUiK/+bt3ks MMEuVpCVyKBwoXcBxGyX3x9KbmKnEcy/2YZAbaNgAN5lH+RS5Pi9PLD/Jby52r+O XCX80FcdaWSNmb3e9OKRBw/z1bpFoTQWQMln/fs2BJ21dIHAAj1uBrTyCvAj0778 U7SxgeWzoxilPMlbgjyTui49/MQlpSIgVC1ENyuggJsJ2VBl5MxxTQcPibZEDjRR NZ5kzANQv3EuX4//hhvF+A9yEMg4WwOwQJnVMkHMKPvwN3MATcBMtWL1edU5k+fu VLipzfiSh4LXyvTg2uRtH0+273yHR0GiKyLHFm2e/auE8Di0HvbceCR6cfBNAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUWsC5nhXy3mbi1QHZU+N2KjK4emEwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAwMjQzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQAkwDQYJKoZIhvcNAQELBQADggEBAGlc epKpbJvCZpaRNhY9a2mXWHrBXmmPsUIaBPl53OlvwLJSpt5Tv/Hlsv0atzPAxvEG MAQOeGDfmU45AMxDcAEjy6E06BasoXCshBugQAdJR3wAcV3kOweoweJXF14g7w/e uMUXM4ZBI+kEbIMnlxZQUanM0WMLEGFuuLWd7vrlJZ9sIiqMLvbqa2XkewdQIj1T fD7rmYh+uafF37xwTi1Dpk434mzQ+4AZxmnVonydhcx0isHW6cqzlhdK9wsgwK+Y DPQxF5gvjdArVbXLH/KXYSunIBrSa8EYH+JZO1GnxbmcysWADRGU4DKlel8sGn38 tQojQnAKPT3OaU5u/bg= -----END CERTIFICATE-----Generated at Sat Jun 13 09:11:12 2026 by rpki-client