$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200246.roa File: AS200246.roa (raw, json) Hash identifier: cna8xsFD5qegxrrztQ1Xn4myZiW4ajVG9WI3PQw5zM4= Subject key identifier: BB:4F:51:B1:82:61:95:18:5D:7F:75:55:48:75:07:11:A4:8D:DD:61 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 1EFFC241CA6B9910F810A48265891BBB20F7E377 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200246.roa Signing time: Fri 05 Jun 2026 07:12:11 +0000 ROA not before: Fri 05 Jun 2026 07:07:11 +0000 ROA not after: Fri 04 Jun 2027 07:12:11 +0000 asID: 200246 IP address blocks: 2a0a:6040:2e00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ff:c2:41:ca:6b:99:10:f8:10:a4:82:65:89:1b:bb:20:f7:e3:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:11 2026 GMT Not After : Jun 4 07:12:11 2027 GMT Subject: CN=BB4F51B1826195185D7F755548750711A48DDD61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:de:2a:0f:8f:73:db:0e:7b:56:58:b8:8c:2b: 79:b5:79:cd:08:6f:bb:46:80:4b:1d:1d:89:0d:4b: 5f:09:0a:be:3c:9e:53:4f:95:17:e7:1b:69:44:d5: 59:a2:f9:ac:4a:c2:eb:8e:6c:f3:90:a3:3c:78:e8: f9:c7:22:63:a4:12:82:cc:4c:6e:4b:a3:a0:91:1c: 69:d9:63:cb:cb:17:07:90:74:cc:a7:3b:a0:a0:21: 38:8b:c8:db:ab:42:2c:6f:c6:31:a9:f3:54:1d:fb: db:ed:71:c0:b1:27:2b:a3:38:15:95:e4:c4:7d:ce: c7:3a:27:0d:57:81:53:f5:2e:bc:b4:3a:1a:ff:6c: b1:c6:9b:48:92:1f:5f:8e:e7:63:5f:d4:80:2e:15: eb:0b:37:17:d2:bd:b2:5e:f4:c7:b2:91:73:df:54: da:0b:2f:f8:10:d1:f9:5d:12:cc:14:54:cd:ce:be: 55:a7:38:71:55:e5:23:eb:de:a9:d1:ab:ac:d8:24: 9a:0b:e0:d9:0d:64:2f:b5:0b:4c:58:6f:6b:05:50: 93:9c:ff:7e:f7:ec:c3:68:74:83:9c:ee:c7:56:cd: 92:14:66:da:69:0c:3c:c7:89:47:a9:b4:d1:66:e1: 6b:d4:ea:90:59:91:c9:ee:ed:8d:c3:9f:e5:b4:ae: 4a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:4F:51:B1:82:61:95:18:5D:7F:75:55:48:75:07:11:A4:8D:DD:61 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200246.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:2e00::/40 Signature Algorithm: sha256WithRSAEncryption af:f3:05:9e:bf:22:3e:2e:0b:a7:6a:bb:ef:6d:b1:9c:cb:59: f9:39:c5:bc:c7:5d:12:8a:db:8c:51:55:96:54:47:ed:00:20: bc:c0:9d:de:0f:63:4f:15:06:91:b0:eb:43:dc:b8:5a:9a:0e: 40:b6:cf:ca:72:f5:88:3e:a6:64:5a:bb:41:c7:06:36:ed:13: 63:88:fb:43:17:f1:cd:11:6a:09:44:f8:8d:d9:cd:ba:a8:2a: ff:8e:f9:a7:bf:94:9e:26:e2:f2:f0:74:84:d1:8f:ef:43:ed: 02:2e:c1:76:fc:54:af:37:51:0b:ac:4d:30:a8:16:8f:7f:b4: c6:80:16:30:80:91:58:49:6c:bb:51:59:5a:a7:d4:23:58:be: 62:8e:7b:5d:91:a4:bb:83:23:2c:17:4f:da:4c:48:4e:31:27: e0:db:a8:d4:a5:d9:5d:e8:ea:31:df:1f:ef:40:29:81:3e:d3: 9b:14:e5:fc:0d:17:d1:9f:05:61:80:92:91:ea:b0:6a:ff:cc: e7:8c:67:a9:3b:f8:0f:3c:32:31:15:3d:3a:8c:dc:96:c9:e0: 7a:c4:27:ee:24:d7:72:2e:57:27:71:35:0c:6a:73:5b:62:e6: b2:1c:cc:cd:47:d9:77:de:9c:17:4a:2a:8c:24:ac:bd:c8:38: 1e:c2:29:8b -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUHv/CQcprmRD4EKSCZYkbuyD343cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MTFaFw0yNzA2MDQwNzEyMTFaMDMxMTAvBgNV BAMTKEJCNEY1MUIxODI2MTk1MTg1RDdGNzU1NTQ4NzUwNzExQTQ4RERENjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR3ioPj3PbDntWWLiMK3m1ec0I b7tGgEsdHYkNS18JCr48nlNPlRfnG2lE1Vmi+axKwuuObPOQozx46PnHImOkEoLM TG5Lo6CRHGnZY8vLFweQdMynO6CgITiLyNurQixvxjGp81Qd+9vtccCxJyujOBWV 5MR9zsc6Jw1XgVP1Lry0Ohr/bLHGm0iSH1+O52Nf1IAuFesLNxfSvbJe9MeykXPf VNoLL/gQ0fldEswUVM3OvlWnOHFV5SPr3qnRq6zYJJoL4NkNZC+1C0xYb2sFUJOc /3737MNodIOc7sdWzZIUZtppDDzHiUeptNFm4WvU6pBZkcnu7Y3Dn+W0rkqNAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUu09RsYJhlRhdf3VVSHUHEaSN3WEwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAwMjQ2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQC4wDQYJKoZIhvcNAQELBQADggEBAK/z BZ6/Ij4uC6dqu+9tsZzLWfk5xbzHXRKK24xRVZZUR+0AILzAnd4PY08VBpGw60Pc uFqaDkC2z8py9Yg+pmRau0HHBjbtE2OI+0MX8c0RaglE+I3ZzbqoKv+O+ae/lJ4m 4vLwdITRj+9D7QIuwXb8VK83UQusTTCoFo9/tMaAFjCAkVhJbLtRWVqn1CNYvmKO e12RpLuDIywXT9pMSE4xJ+DbqNSl2V3o6jHfH+9AKYE+05sU5fwNF9GfBWGAkpHq sGr/zOeMZ6k7+A88MjEVPTqM3JbJ4HrEJ+4k13IuVydxNQxqc1ti5rIczM1H2Xfe nBdKKowkrL3IOB7CKYs= -----END CERTIFICATE-----Generated at Sat Jun 13 09:11:07 2026 by rpki-client