
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200728.roa
File: AS200728.roa (raw, json)
Hash identifier: ArL2s0Bt4y+LlrhL+pE8ZDMmF7bffYJwdCElFjIft4w=
Subject key identifier: 1F:EF:2B:76:3D:30:77:ED:EC:B5:0E:48:BF:E6:34:49:49:88:CB:F3
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 5C84EBC315CDCADB18E721539F803C8E13C346BB
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200728.roa
Signing time: Fri 05 Jun 2026 07:12:45 +0000
ROA not before: Fri 05 Jun 2026 07:07:45 +0000
ROA not after: Fri 04 Jun 2027 07:12:45 +0000
asID: 200728
IP address blocks: 2a0a:6040:7e00::/40 maxlen: 48
2a0a:6040:d000::/40 maxlen: 48
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:84:eb:c3:15:cd:ca:db:18:e7:21:53:9f:80:3c:8e:13:c3:46:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jun 5 07:07:45 2026 GMT
Not After : Jun 4 07:12:45 2027 GMT
Subject: CN=1FEF2B763D3077EDECB50E48BFE634494988CBF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:85:13:fc:87:99:3c:02:0f:e9:84:38:1c:16:
24:a5:f5:3d:1c:78:f1:85:77:ee:9d:1d:17:3e:1d:
b9:f8:f9:68:4e:e2:09:e3:a5:61:32:9c:b1:f5:fe:
61:ef:d2:6d:9e:c9:e9:b3:4e:e3:27:f8:76:57:da:
4d:34:90:71:2b:eb:38:5f:68:2a:c7:dd:02:63:3d:
95:07:56:b8:4f:d5:f2:e0:39:bd:b2:25:8e:a3:0d:
70:86:b3:55:9d:fc:1d:6c:e5:98:20:a3:96:bc:19:
7a:46:15:fa:c4:f3:ce:d2:dd:51:87:10:88:2d:a2:
f8:af:97:56:67:4e:14:57:06:01:a7:34:4e:c4:5e:
ae:73:ab:97:5f:79:9b:cc:aa:f9:d5:ab:eb:b6:69:
e5:3b:e8:62:1b:36:5c:15:f1:86:ed:b3:79:e7:29:
df:f3:64:fb:d5:5d:67:56:42:3d:ef:71:f3:e2:58:
82:83:0e:18:26:dd:e7:16:cd:1f:8e:df:a3:8b:d0:
5c:4f:d0:76:80:43:87:ad:e7:a0:1c:2d:29:2c:a2:
a5:30:cc:14:a2:ef:2f:6c:da:4f:d9:30:68:77:d0:
5d:2f:ba:f0:c6:0c:51:e8:8f:9e:43:7d:2d:3c:9d:
b7:2f:90:00:7a:f8:af:bd:c2:0b:20:a9:1c:2c:4e:
3c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EF:2B:76:3D:30:77:ED:EC:B5:0E:48:BF:E6:34:49:49:88:CB:F3
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200728.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:7e00::/40
2a0a:6040:d000::/40
Signature Algorithm: sha256WithRSAEncryption
39:f7:f7:e1:be:36:69:49:eb:8f:28:1a:6b:93:61:2f:18:ab:
f4:a5:40:99:18:fd:f1:25:80:7d:62:0d:1b:aa:69:1a:df:a7:
3e:80:ca:48:c3:d6:4f:90:cf:63:9b:2a:82:d1:4f:77:c1:f7:
dd:8b:cf:99:b5:a3:57:5b:84:a2:b6:84:18:2f:8a:9f:3e:6c:
0f:db:0c:d6:f7:93:b3:3f:06:40:c4:5b:84:39:3b:1b:99:63:
91:cc:5d:1f:f3:e7:8c:10:53:a5:77:88:b9:17:08:20:d2:35:
d6:a1:f2:85:81:6d:5c:3a:85:65:58:ca:ac:c8:01:da:99:5e:
cb:6e:15:d8:c1:77:01:10:ed:22:49:15:99:eb:f3:5f:95:08:
5b:60:6e:41:98:6b:22:cf:6e:81:55:d9:d3:9e:7c:88:06:b2:
a0:a6:2c:a5:22:0d:0c:12:ac:5e:a0:b8:71:ad:99:6b:a0:a4:
28:6b:6d:17:c6:74:a9:91:c2:6d:79:cc:de:dd:86:f9:a6:1c:
21:f9:ae:5e:ad:3f:d6:b4:64:08:54:51:f7:90:67:d1:0e:e9:
7e:ba:92:fe:d7:f7:f1:6a:37:15:1b:19:43:b7:98:a9:6e:d3:
9f:30:b9:8a:e5:e3:66:8d:d3:0a:7a:cf:4d:7c:ad:fb:42:38:
6c:78:a1:d5
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIUXITrwxXNytsY5yFTn4A8jhPDRrswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNjA2MDUwNzA3NDVaFw0yNzA2MDQwNzEyNDVaMDMxMTAvBgNV
BAMTKDFGRUYyQjc2M0QzMDc3RURFQ0I1MEU0OEJGRTYzNDQ5NDk4OENCRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClhRP8h5k8Ag/phDgcFiSl9T0c
ePGFd+6dHRc+Hbn4+WhO4gnjpWEynLH1/mHv0m2eyemzTuMn+HZX2k00kHEr6zhf
aCrH3QJjPZUHVrhP1fLgOb2yJY6jDXCGs1Wd/B1s5Zggo5a8GXpGFfrE887S3VGH
EIgtovivl1ZnThRXBgGnNE7EXq5zq5dfeZvMqvnVq+u2aeU76GIbNlwV8Ybts3nn
Kd/zZPvVXWdWQj3vcfPiWIKDDhgm3ecWzR+O36OL0FxP0HaAQ4et56AcLSksoqUw
zBSi7y9s2k/ZMGh30F0vuvDGDFHoj55DfS08nbcvkAB6+K+9wgsgqRwsTjyRAgMB
AAGjggH8MIIB+DAdBgNVHQ4EFgQUH+8rdj0wd+3stQ5Iv+Y0SUmIy/MwHwYDVR0j
BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3
RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80
L0FTMjAwNzI4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCkGCCsGAQUF
BwEHAQH/BBowGDAWBAIAAjAQAwYAKgpgQH4DBgAqCmBA0DANBgkqhkiG9w0BAQsF
AAOCAQEAOff34b42aUnrjygaa5NhLxir9KVAmRj98SWAfWING6ppGt+nPoDKSMPW
T5DPY5sqgtFPd8H33YvPmbWjV1uEoraEGC+Knz5sD9sM1veTsz8GQMRbhDk7G5lj
kcxdH/PnjBBTpXeIuRcIINI11qHyhYFtXDqFZVjKrMgB2pley24V2MF3ARDtIkkV
mevzX5UIW2BuQZhrIs9ugVXZ0558iAayoKYspSINDBKsXqC4ca2Za6CkKGttF8Z0
qZHCbXnM3t2G+aYcIfmuXq0/1rRkCFRR95Bn0Q7pfrqS/tf38Wo3FRsZQ7eYqW7T
nzC5iuXjZo3TCnrPTXyt+0I4bHih1Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:58:14 2026 by rpki-client