
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200556.roa
File: AS200556.roa (raw, json)
Hash identifier: L8h+bWBRDQl+dFJKzRGzf1Siy7Bkdljg+WezIRI7EHw=
Subject key identifier: 25:D8:84:20:98:46:77:31:15:00:6C:8A:CF:C3:12:53:A5:35:35:3D
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 63286A13ADDEBD0A12523E7EB073B9793E688771
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200556.roa
Signing time: Fri 05 Jun 2026 07:12:17 +0000
ROA not before: Fri 05 Jun 2026 07:07:17 +0000
ROA not after: Fri 04 Jun 2027 07:12:17 +0000
asID: 200556
IP address blocks: 2a0a:6040:1600::/40 maxlen: 48
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:28:6a:13:ad:de:bd:0a:12:52:3e:7e:b0:73:b9:79:3e:68:87:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jun 5 07:07:17 2026 GMT
Not After : Jun 4 07:12:17 2027 GMT
Subject: CN=25D884209846773115006C8ACFC31253A535353D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:88:9f:46:5a:64:36:00:8d:09:d6:5e:0c:a6:
75:5d:f1:3d:3f:41:b1:57:d6:79:ec:0a:41:92:64:
8e:2c:52:b6:dc:a9:47:fd:e0:b9:e0:12:aa:64:ce:
15:22:2e:9f:f9:2d:91:cf:f9:52:5e:05:c1:b3:3c:
56:ff:b0:e7:86:ed:18:46:e6:c9:95:e1:f3:47:f4:
6e:55:de:27:f1:db:bd:57:9a:13:03:74:fa:9d:71:
1f:9b:9e:2e:5b:5d:bc:bd:6c:c9:5c:e7:2a:42:df:
a3:19:6e:48:12:5f:5b:6a:da:37:45:0b:67:fb:29:
84:0c:70:c7:16:1b:c0:a9:5c:77:77:ac:1c:1b:bf:
8a:f7:76:04:0a:5c:5c:be:74:d2:37:a9:bf:f9:33:
0a:09:a6:c2:5a:e2:98:e7:c4:53:b0:a3:23:a2:c0:
0e:14:d8:91:da:80:7b:ee:7a:d0:f6:42:84:e7:94:
85:50:53:13:16:3a:65:cf:02:e0:f7:a1:fc:b4:2b:
13:41:57:c0:d7:47:63:79:b2:b6:87:86:82:4e:13:
f0:61:20:98:61:d1:2a:d3:0f:1f:59:a2:ec:a1:4e:
9b:5b:fd:d2:f4:46:f5:b5:24:95:bb:f8:d4:6d:0d:
17:c6:fa:f4:54:f7:8f:3b:89:d4:df:ca:6b:a7:54:
92:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D8:84:20:98:46:77:31:15:00:6C:8A:CF:C3:12:53:A5:35:35:3D
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200556.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:1600::/40
Signature Algorithm: sha256WithRSAEncryption
b1:7a:ff:49:d8:a8:ee:0a:96:cb:05:99:2c:58:43:86:2d:94:
53:b4:d0:61:c9:ac:0f:dd:58:f6:04:cf:7a:dc:0f:ff:b4:b0:
a3:e5:8e:b7:e3:ea:85:97:0f:d2:d1:a6:01:c7:e0:3e:55:7b:
34:83:b2:9f:a8:f2:26:01:1c:8b:b0:0e:17:72:26:e6:2a:65:
38:22:d9:26:c6:22:b1:bc:b8:e3:aa:4d:7e:e2:6e:90:3e:e9:
43:62:b2:94:2d:0a:95:5f:71:f0:c7:cd:a8:da:18:cc:26:ef:
41:71:33:92:f9:06:9e:67:46:25:5b:a3:7d:27:d6:58:65:48:
b0:b8:59:93:6f:9b:ef:6b:ce:33:63:90:d3:64:a9:7c:d0:25:
24:6f:6a:4f:30:39:2a:b3:f7:42:b3:22:b1:9a:db:cd:73:aa:
64:21:18:d3:e9:fa:6b:69:eb:95:af:71:69:61:54:98:61:5f:
ab:31:d1:0c:a3:f2:6e:63:2a:09:92:08:69:67:32:77:6b:ba:
c3:7f:45:81:1a:a8:75:e2:e1:01:03:c9:66:47:97:a9:08:3d:
fa:98:4e:12:99:76:30:d8:11:e9:6f:2d:80:2e:55:2a:1a:53:
9b:ac:bd:a2:05:60:54:81:ac:b8:5b:51:21:fd:83:c6:8a:43:
48:ec:f9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:12:01 2026 by rpki-client