$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200730.roa File: AS200730.roa (raw, json) Hash identifier: /psk/byR71l2iG1RJzsgmQSTAx5CoE0mzFQsRH9KCwA= Subject key identifier: CA:B1:20:18:C8:7F:11:A9:7C:D5:FB:18:BF:5F:BE:1E:91:40:9A:69 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 3FD9D0D6CEB8F4E9A6500D1705307BD9A8228B78 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200730.roa Signing time: Fri 05 Jun 2026 07:12:29 +0000 ROA not before: Fri 05 Jun 2026 07:07:29 +0000 ROA not after: Fri 04 Jun 2027 07:12:29 +0000 asID: 200730 IP address blocks: 2a0a:6040:c900::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:d9:d0:d6:ce:b8:f4:e9:a6:50:0d:17:05:30:7b:d9:a8:22:8b:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:29 2026 GMT Not After : Jun 4 07:12:29 2027 GMT Subject: CN=CAB12018C87F11A97CD5FB18BF5FBE1E91409A69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:55:14:29:0e:6e:f4:e2:3b:02:65:76:dc:7a: 5e:18:0c:12:22:86:72:22:a2:0f:e8:e6:3e:21:55: 07:8b:08:dd:5d:8a:2a:1d:83:a8:83:d7:4f:40:bb: d8:1c:9c:2a:fb:9b:45:a5:00:1e:d7:0d:e4:58:ee: 16:d8:e8:5c:24:c7:e3:56:f6:64:dc:e0:f9:85:a8: cd:04:2e:53:d6:81:cd:53:ed:a7:0e:30:e7:a5:2d: c7:6d:22:64:d0:e4:7e:80:45:70:0a:b1:eb:1e:86: b0:2c:67:83:d6:55:8a:35:b9:66:e0:7f:44:81:e0: da:1e:bd:99:c9:0f:1a:54:eb:d0:d4:ee:fb:19:81: 42:11:a8:b0:76:e8:51:3d:cc:68:a2:5d:5b:a5:4b: dd:f1:13:74:4d:17:1f:e1:8f:9c:e7:4a:c3:6c:ed: e4:a7:05:a0:65:bd:68:f0:be:89:cc:d6:1d:43:ef: 7e:ab:c6:23:9b:4f:48:ec:52:5d:df:2f:bf:6b:3d: fb:11:01:d9:6b:d6:5d:52:d4:e8:cc:44:b0:38:e6: b8:98:93:cf:d3:85:72:f0:6a:3f:c5:21:a9:9a:f7: 4a:4d:1e:d6:65:5d:32:60:b2:59:a0:dd:7e:50:c4: 89:60:3f:c6:45:c2:22:7f:2d:29:de:78:39:8e:d4: db:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B1:20:18:C8:7F:11:A9:7C:D5:FB:18:BF:5F:BE:1E:91:40:9A:69 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:c900::/40 Signature Algorithm: sha256WithRSAEncryption 8a:40:2a:67:2b:c2:d6:6c:ae:2e:b8:f3:4b:f5:3d:ac:7c:15: ed:5b:ef:e2:bf:86:4c:fc:57:2c:a2:d6:41:0a:c8:31:8e:f7: 9c:10:83:e2:13:f6:ed:75:7f:9b:a9:4e:43:fa:1a:3a:8c:66: fb:61:1e:1b:b9:da:37:57:d2:ef:33:db:b4:24:93:10:4e:02: 43:46:4b:a2:86:e8:6b:b1:d0:45:78:98:67:d2:e7:e8:cc:cf: 0a:1d:b4:03:7a:91:b5:90:99:3a:c6:39:97:86:46:17:25:22: 5d:31:d4:6f:d7:fd:4b:6b:69:d2:45:0c:46:c2:43:8b:3f:ef: 10:cf:df:2c:e5:bc:e6:1c:93:8d:05:4d:ac:31:b9:de:45:88: f7:9f:ed:a8:b7:2c:63:bc:2c:ed:1f:09:b6:f4:9d:e0:87:07: ca:ce:23:65:0e:f6:24:1a:91:c0:94:fb:8e:c5:60:ab:d5:b8: a5:4c:5f:fb:45:af:c8:b1:26:cb:99:12:35:f8:81:8d:45:a1: 4b:8e:ef:e5:89:f7:66:17:f0:e8:01:0f:27:80:28:7a:35:67: 8b:4e:1d:08:c7:91:f3:2d:f0:bb:9c:d9:4c:d7:16:ae:75:e8: 98:c3:6e:5c:f6:1a:16:c5:fd:a6:1b:2c:08:25:30:08:11:4a: 3d:1e:ec:72 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUP9nQ1s649OmmUA0XBTB72agii3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MjlaFw0yNzA2MDQwNzEyMjlaMDMxMTAvBgNV BAMTKENBQjEyMDE4Qzg3RjExQTk3Q0Q1RkIxOEJGNUZCRTFFOTE0MDlBNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsVRQpDm704jsCZXbcel4YDBIi hnIiog/o5j4hVQeLCN1diiodg6iD109Au9gcnCr7m0WlAB7XDeRY7hbY6Fwkx+NW 9mTc4PmFqM0ELlPWgc1T7acOMOelLcdtImTQ5H6ARXAKsesehrAsZ4PWVYo1uWbg f0SB4NoevZnJDxpU69DU7vsZgUIRqLB26FE9zGiiXVulS93xE3RNFx/hj5znSsNs 7eSnBaBlvWjwvonM1h1D736rxiObT0jsUl3fL79rPfsRAdlr1l1S1OjMRLA45riY k8/ThXLwaj/FIama90pNHtZlXTJgslmg3X5QxIlgP8ZFwiJ/LSneeDmO1NuBAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUyrEgGMh/Eal81fsYv1++HpFAmmkwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAwNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQMkwDQYJKoZIhvcNAQELBQADggEBAIpA KmcrwtZsri6480v1Pax8Fe1b7+K/hkz8Vyyi1kEKyDGO95wQg+IT9u11f5upTkP6 GjqMZvthHhu52jdX0u8z27QkkxBOAkNGS6KG6Gux0EV4mGfS5+jMzwodtAN6kbWQ mTrGOZeGRhclIl0x1G/X/UtradJFDEbCQ4s/7xDP3yzlvOYck40FTawxud5FiPef 7ai3LGO8LO0fCbb0neCHB8rOI2UO9iQakcCU+47FYKvVuKVMX/tFr8ixJsuZEjX4 gY1FoUuO7+WJ92YX8OgBDyeAKHo1Z4tOHQjHkfMt8Luc2UzXFq516JjDblz2GhbF /aYbLAglMAgRSj0e7HI= -----END CERTIFICATE-----Generated at Sat Jun 13 09:10:23 2026 by rpki-client