
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200690.roa
File: AS200690.roa (raw, json)
Hash identifier: p3qvBeAWJ2Hfbms8XXKOBpnloM55X1TrrbToFHayNbU=
Subject key identifier: 52:D2:B5:6A:C4:85:1A:D4:8B:AA:F6:D2:D3:7C:BC:97:7F:77:BD:B5
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 08572C3BB963BE608D15A75A8369817753252D8D
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200690.roa
Signing time: Fri 05 Jun 2026 07:12:16 +0000
ROA not before: Fri 05 Jun 2026 07:07:16 +0000
ROA not after: Fri 04 Jun 2027 07:12:16 +0000
asID: 200690
IP address blocks: 2a0a:6040:a300::/40 maxlen: 48
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:57:2c:3b:b9:63:be:60:8d:15:a7:5a:83:69:81:77:53:25:2d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jun 5 07:07:16 2026 GMT
Not After : Jun 4 07:12:16 2027 GMT
Subject: CN=52D2B56AC4851AD48BAAF6D2D37CBC977F77BDB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0c:8f:5f:87:54:47:51:3c:66:a1:0e:dd:e9:
ea:f3:e4:24:1a:47:5f:00:6d:bc:6f:76:62:41:50:
df:0e:25:48:4c:fe:43:f4:8a:4f:19:1d:e8:a2:a2:
9d:41:0c:91:99:c8:d9:44:d8:9d:27:ed:61:58:02:
eb:e5:50:21:16:b8:0d:85:95:aa:f0:9a:0a:cc:04:
8e:f8:3b:f3:71:db:80:4e:c7:d4:5f:3e:5d:1a:de:
79:6f:12:ba:7b:35:5a:1d:15:3e:fc:65:e3:82:06:
65:10:0a:ef:19:f4:a5:73:3e:d3:f5:35:54:96:c7:
9a:5d:f0:35:98:72:17:a3:c9:b4:dc:da:f7:74:fe:
04:64:f1:7f:d2:1d:38:b8:6c:85:86:ea:32:b2:1d:
a8:9b:77:49:10:db:16:b0:fb:42:40:b9:d5:f4:8a:
bc:f4:b7:0c:a8:ac:e9:e4:11:dc:21:6c:5e:08:2e:
d3:0a:02:54:6e:7f:5c:8e:f3:e9:01:63:d9:a9:33:
22:00:9c:e6:12:61:9d:fe:52:bd:69:a6:89:eb:62:
fc:4a:e2:70:e5:e2:05:4c:72:23:dd:05:20:72:8b:
f6:68:c2:77:57:b0:bf:55:91:42:11:fe:c3:ff:70:
46:8f:67:27:ee:53:23:32:62:73:34:99:2c:b6:4d:
d7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D2:B5:6A:C4:85:1A:D4:8B:AA:F6:D2:D3:7C:BC:97:7F:77:BD:B5
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200690.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:a300::/40
Signature Algorithm: sha256WithRSAEncryption
2e:38:dd:5e:3f:6f:f5:8f:99:e6:7e:fa:61:ed:f7:2d:0c:a6:
da:b9:3e:6d:5b:83:83:9e:70:6d:64:9c:a3:31:7f:2f:57:6a:
5e:8f:d0:97:a4:dc:04:27:03:5e:ba:72:19:0f:a7:01:df:b1:
a8:1e:12:35:4b:91:c6:3f:f7:22:28:82:ba:f8:cf:5c:1e:1d:
79:09:7b:f3:51:90:82:cb:8b:f1:27:c4:a7:81:7f:84:fb:4d:
59:9c:63:7f:f7:a2:13:14:65:26:d9:9f:be:72:d0:a8:62:f9:
2b:bb:d5:99:3b:11:0a:5a:8b:be:f6:8e:78:bd:85:4e:3b:54:
e9:90:34:5b:39:ff:32:17:57:cf:ce:fb:4a:c8:75:7c:91:b2:
d9:c0:d3:b8:07:8e:4e:5e:9f:3d:52:c4:c4:4f:ea:4f:1d:cb:
39:c1:e7:3c:2f:7d:3d:f5:e8:b3:a0:bb:9f:09:68:ae:78:b2:
55:a4:29:28:65:0b:8a:a9:fb:15:d6:8f:23:22:15:c2:f7:27:
a6:06:7f:43:ab:15:2d:dc:d2:aa:a0:7f:fe:4e:d4:d3:68:d5:
51:b0:6d:4f:22:c9:c6:ac:61:d1:26:20:71:71:e6:d0:5a:30:
48:96:9d:60:cb:43:00:41:da:e1:96:c7:bd:70:d1:36:fe:28:
bb:53:b5:c4
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUCFcsO7ljvmCNFadag2mBd1MlLY0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNjA2MDUwNzA3MTZaFw0yNzA2MDQwNzEyMTZaMDMxMTAvBgNV
BAMTKDUyRDJCNTZBQzQ4NTFBRDQ4QkFBRjZEMkQzN0NCQzk3N0Y3N0JEQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9DI9fh1RHUTxmoQ7d6erz5CQa
R18AbbxvdmJBUN8OJUhM/kP0ik8ZHeiiop1BDJGZyNlE2J0n7WFYAuvlUCEWuA2F
larwmgrMBI74O/Nx24BOx9RfPl0a3nlvErp7NVodFT78ZeOCBmUQCu8Z9KVzPtP1
NVSWx5pd8DWYchejybTc2vd0/gRk8X/SHTi4bIWG6jKyHaibd0kQ2xaw+0JAudX0
irz0twyorOnkEdwhbF4ILtMKAlRuf1yO8+kBY9mpMyIAnOYSYZ3+Ur1pponrYvxK
4nDl4gVMciPdBSByi/ZowndXsL9VkUIR/sP/cEaPZyfuUyMyYnM0mSy2TdeZAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUUtK1asSFGtSLqvbS03y8l393vbUwHwYDVR0j
BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3
RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80
L0FTMjAwNjkwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQKMwDQYJKoZIhvcNAQELBQADggEBAC44
3V4/b/WPmeZ++mHt9y0Mptq5Pm1bg4OecG1knKMxfy9Xal6P0Jek3AQnA166chkP
pwHfsageEjVLkcY/9yIogrr4z1weHXkJe/NRkILLi/EnxKeBf4T7TVmcY3/3ohMU
ZSbZn75y0Khi+Su71Zk7EQpai772jni9hU47VOmQNFs5/zIXV8/O+0rIdXyRstnA
07gHjk5enz1SxMRP6k8dyznB5zwvfT316LOgu58JaK54slWkKShlC4qp+xXWjyMi
FcL3J6YGf0OrFS3c0qqgf/5O1NNo1VGwbU8iycasYdEmIHFx5tBaMEiWnWDLQwBB
2uGWx71w0Tb+KLtTtcQ=
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:07 2026 by rpki-client