$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200570.roa File: AS200570.roa (raw, json) Hash identifier: WcNM50yEbZEP0K1r0Fr/4hIPiEMVgdDBZgNO6uOI8eI= Subject key identifier: E5:DD:53:F9:EC:81:B7:F9:60:58:13:A7:4E:02:EA:B4:92:65:9A:E1 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 60C1A7A8CB7F53479032ABCFFFA90A5D125C524F Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200570.roa Signing time: Fri 05 Jun 2026 07:12:45 +0000 ROA not before: Fri 05 Jun 2026 07:07:45 +0000 ROA not after: Fri 04 Jun 2027 07:12:45 +0000 asID: 200570 IP address blocks: 2a0a:6040:ee00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:c1:a7:a8:cb:7f:53:47:90:32:ab:cf:ff:a9:0a:5d:12:5c:52:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:45 2026 GMT Not After : Jun 4 07:12:45 2027 GMT Subject: CN=E5DD53F9EC81B7F9605813A74E02EAB492659AE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5b:8d:38:f5:71:fd:1a:42:0d:cd:77:45:bb: 1b:58:63:5c:98:f8:f7:a3:5d:1b:21:52:c6:d6:8f: d0:85:ef:bd:00:b7:18:bb:bb:1c:7b:80:49:48:f7: be:0b:69:1f:7f:9b:1a:63:81:53:b6:6d:08:9f:4e: 36:08:76:b9:e2:b7:33:c4:14:f2:5d:15:dd:47:6c: 27:c4:04:38:ac:16:f3:fd:e6:c5:b9:55:a6:5e:b3: c2:b7:3e:5a:6a:7d:7a:1b:78:47:0c:c7:04:63:7c: a8:30:8a:11:19:d2:d8:9e:98:bf:e6:f0:91:21:c1: 6c:e6:df:fc:06:10:1f:0f:57:9e:ba:5e:d4:97:f4: e3:b5:05:1c:5e:b1:51:a6:dd:1a:20:e9:f5:1e:cd: 44:aa:b1:65:cd:08:7b:34:b8:66:02:e8:4a:88:bf: cf:17:a0:b9:50:f4:04:b1:98:94:b3:22:d9:7d:f5: af:a4:ca:4e:89:28:22:0a:53:4e:0b:06:86:b2:8a: b3:e0:33:a0:8d:24:f7:4a:29:50:86:ab:2d:0b:c3: 9d:1e:a6:f4:f7:ee:83:18:15:3b:3a:46:56:68:f8: 3c:11:1c:79:f4:d8:27:a4:16:4c:ae:2d:3c:ad:45: 11:69:27:32:b7:f0:48:6a:4e:51:e4:4d:e4:fe:1f: ec:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:DD:53:F9:EC:81:B7:F9:60:58:13:A7:4E:02:EA:B4:92:65:9A:E1 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200570.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:ee00::/40 Signature Algorithm: sha256WithRSAEncryption 29:6f:ce:2a:e2:42:94:3e:f6:2e:b3:35:25:72:8a:72:40:8f: 00:98:96:aa:f7:a7:35:14:c7:d6:ac:d1:80:75:c8:0b:a5:29: 36:67:a3:e3:6b:81:2f:0b:1c:43:d2:f2:cf:7a:6c:04:0a:f2: 24:09:8a:21:10:97:8f:d4:11:aa:b1:cd:46:ee:15:bd:32:e8: 49:fc:2f:c9:a1:63:d2:be:ed:72:0f:67:38:5b:c5:45:39:6f: 6e:e8:2b:9a:7d:3a:10:1e:48:47:a1:0a:02:3b:ce:bc:7a:7a: de:f3:91:d3:99:2a:b1:25:d1:e6:a7:4e:c6:87:7b:8c:26:b0: d7:09:58:67:81:8e:27:bb:1e:0d:f5:36:9c:45:a3:58:1f:d1: 02:76:73:d6:b7:1e:4b:db:87:98:ad:41:18:ee:dd:da:0b:ed: 06:39:0a:e7:27:0c:fd:17:89:a1:c6:e4:66:6c:56:10:f8:25: ba:8f:c7:1d:2a:9a:b1:41:00:92:16:ec:94:ba:2e:7a:44:59: 42:ab:30:3b:da:d3:f4:42:f4:a2:8d:52:22:b7:08:ea:88:c0: f5:d0:3f:8f:a4:9c:61:38:d7:cf:3b:58:57:aa:a5:bf:b9:94: 1f:79:ed:0a:0e:16:46:04:38:bb:2a:ae:4b:2f:8c:b1:17:65: 6b:6f:24:60 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUYMGnqMt/U0eQMqvP/6kKXRJcUk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3NDVaFw0yNzA2MDQwNzEyNDVaMDMxMTAvBgNV BAMTKEU1REQ1M0Y5RUM4MUI3Rjk2MDU4MTNBNzRFMDJFQUI0OTI2NTlBRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJW4049XH9GkINzXdFuxtYY1yY +PejXRshUsbWj9CF770Atxi7uxx7gElI974LaR9/mxpjgVO2bQifTjYIdrnitzPE FPJdFd1HbCfEBDisFvP95sW5VaZes8K3PlpqfXobeEcMxwRjfKgwihEZ0tiemL/m 8JEhwWzm3/wGEB8PV566XtSX9OO1BRxesVGm3Rog6fUezUSqsWXNCHs0uGYC6EqI v88XoLlQ9ASxmJSzItl99a+kyk6JKCIKU04LBoayirPgM6CNJPdKKVCGqy0Lw50e pvT37oMYFTs6RlZo+DwRHHn02CekFkyuLTytRRFpJzK38EhqTlHkTeT+H+zFAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU5d1T+eyBt/lgWBOnTgLqtJJlmuEwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAwNTcwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQO4wDQYJKoZIhvcNAQELBQADggEBAClv ziriQpQ+9i6zNSVyinJAjwCYlqr3pzUUx9as0YB1yAulKTZno+NrgS8LHEPS8s96 bAQK8iQJiiEQl4/UEaqxzUbuFb0y6En8L8mhY9K+7XIPZzhbxUU5b27oK5p9OhAe SEehCgI7zrx6et7zkdOZKrEl0eanTsaHe4wmsNcJWGeBjie7Hg31NpxFo1gf0QJ2 c9a3Hkvbh5itQRju3doL7QY5CucnDP0XiaHG5GZsVhD4JbqPxx0qmrFBAJIW7JS6 LnpEWUKrMDva0/RC9KKNUiK3COqIwPXQP4+knGE41887WFeqpb+5lB957QoOFkYE OLsqrksvjLEXZWtvJGA= -----END CERTIFICATE-----Generated at Sat Jun 13 06:43:26 2026 by rpki-client