$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200267.roa File: AS200267.roa (raw, json) Hash identifier: xjPWlyO+uKX7x63pje7ED0Z9AgkWMMsFfFdzJV2vsPM= Subject key identifier: FE:10:B0:A7:FA:66:16:9F:0E:DD:15:75:7A:C9:77:64:FF:B9:27:86 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 238403D1340B250349C99A5BD3B8809FC98695AC Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200267.roa Signing time: Fri 04 Jul 2025 06:53:21 +0000 ROA not before: Fri 04 Jul 2025 06:48:21 +0000 ROA not after: Fri 03 Jul 2026 06:53:21 +0000 asID: 200267 IP address blocks: 2a0a:6040:c00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:84:03:d1:34:0b:25:03:49:c9:9a:5b:d3:b8:80:9f:c9:86:95:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:21 2025 GMT Not After : Jul 3 06:53:21 2026 GMT Subject: CN=FE10B0A7FA66169F0EDD15757AC97764FFB92786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:83:37:dc:06:de:69:1c:23:34:b9:f2:cf:c8: d3:ae:60:e5:ba:d2:b7:16:15:80:9f:aa:c9:94:f0: 1f:1f:b8:62:b7:cf:ae:9b:67:6e:06:5f:b1:8a:d9: 63:01:b9:7c:bd:64:9c:47:91:3b:51:fe:7c:cd:9e: 26:c6:d2:c8:89:02:7a:6b:86:1b:ef:b8:ac:8f:c3: af:c0:79:56:7e:9e:7d:a3:a2:6f:6a:fc:76:7d:d4: 23:f4:89:84:39:2c:15:6f:0a:8b:d0:2f:24:35:14: d9:a7:bd:b0:55:7f:be:c3:39:6c:8b:cf:3b:a9:96: 4d:41:16:e7:16:90:56:db:c5:44:34:86:78:43:99: bc:0e:f7:53:bd:27:cf:42:c1:63:28:e2:fd:51:88: 15:1e:61:8d:cf:03:71:6f:78:5a:ce:99:89:58:05: 70:42:74:71:79:79:96:40:43:01:42:76:f4:b1:51: bd:c7:e5:3f:f6:28:60:d8:9f:84:34:9c:fa:ff:6a: 67:ab:91:0d:14:4f:2d:66:c5:c5:d2:e3:23:74:0d: 18:e4:5a:fc:a8:0d:50:5c:09:85:83:7c:93:fe:c9: e3:ed:6f:32:cf:e3:71:3f:93:72:3f:08:e5:51:2c: 26:1c:63:c5:74:5e:22:82:39:64:ba:f4:00:ff:79: 9c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:10:B0:A7:FA:66:16:9F:0E:DD:15:75:7A:C9:77:64:FF:B9:27:86 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200267.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:c00::/40 Signature Algorithm: sha256WithRSAEncryption 8a:3d:13:55:47:52:30:c6:f7:88:43:1e:04:42:59:ae:af:87: 91:6d:ce:42:ec:a5:c5:f8:80:36:3a:aa:d8:50:46:52:74:9d: 0d:9c:0f:42:a9:44:de:0f:82:4e:ea:fa:f0:a0:37:ce:0d:07: 4d:31:73:b2:cf:43:f9:dc:8d:35:9d:18:b7:2b:78:2a:17:3e: c4:de:f6:75:8d:05:74:f6:40:fe:0f:6c:36:80:0d:67:f7:2e: 7d:41:3d:42:d8:58:0c:3b:be:38:a1:f0:22:38:84:bd:37:f7: a9:ea:0d:d8:57:ee:e5:0f:e8:84:bb:e6:56:c3:ac:fe:30:a4: 6d:98:80:29:ec:e3:0d:d3:2f:cc:85:7f:31:0c:38:8a:8f:97: fa:56:db:f7:a0:57:d7:a8:4f:75:dc:06:bd:30:bd:8b:5a:5b: 26:6e:97:92:7b:3a:f1:08:5a:9e:74:5b:9d:a1:75:ed:da:e8: 9b:dd:4b:91:ba:b4:05:d1:72:47:77:f8:2b:e4:9f:68:36:48: 9d:50:54:cd:8a:d6:da:d0:52:59:13:f3:76:e0:e6:b6:72:b5: ad:0b:8a:e8:f8:33:e9:66:1f:2f:13:66:41:71:09:44:ea:25: c7:bb:5d:df:34:d1:db:46:69:23:3b:a3:ef:65:7b:87:e4:b8: 33:d9:dc:0a -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUI4QD0TQLJQNJyZpb07iAn8mGlawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MjFaFw0yNjA3MDMwNjUzMjFaMDMxMTAvBgNV BAMTKEZFMTBCMEE3RkE2NjE2OUYwRUREMTU3NTdBQzk3NzY0RkZCOTI3ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+gzfcBt5pHCM0ufLPyNOuYOW6 0rcWFYCfqsmU8B8fuGK3z66bZ24GX7GK2WMBuXy9ZJxHkTtR/nzNnibG0siJAnpr hhvvuKyPw6/AeVZ+nn2jom9q/HZ91CP0iYQ5LBVvCovQLyQ1FNmnvbBVf77DOWyL zzuplk1BFucWkFbbxUQ0hnhDmbwO91O9J89CwWMo4v1RiBUeYY3PA3FveFrOmYlY BXBCdHF5eZZAQwFCdvSxUb3H5T/2KGDYn4Q0nPr/amerkQ0UTy1mxcXS4yN0DRjk WvyoDVBcCYWDfJP+yePtbzLP43E/k3I/COVRLCYcY8V0XiKCOWS69AD/eZxPAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU/hCwp/pmFp8O3RV1esl3ZP+5J4YwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAwMjY3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQAwwDQYJKoZIhvcNAQELBQADggEBAIo9 E1VHUjDG94hDHgRCWa6vh5FtzkLspcX4gDY6qthQRlJ0nQ2cD0KpRN4Pgk7q+vCg N84NB00xc7LPQ/ncjTWdGLcreCoXPsTe9nWNBXT2QP4PbDaADWf3Ln1BPULYWAw7 vjih8CI4hL0396nqDdhX7uUP6IS75lbDrP4wpG2YgCns4w3TL8yFfzEMOIqPl/pW 2/egV9eoT3XcBr0wvYtaWyZul5J7OvEIWp50W52hde3a6JvdS5G6tAXRckd3+Cvk n2g2SJ1QVM2K1trQUlkT83bg5rZyta0Liuj4M+lmHy8TZkFxCUTqJce7Xd800dtG aSM7o+9le4fkuDPZ3Ao= -----END CERTIFICATE-----Generated at Wed Nov 5 12:56:34 2025 by rpki-client