$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200754.roa File: AS200754.roa (raw, json) Hash identifier: 3qMB2g8u0Xdb8dHLbItalVMwhUoGnRsurD1ICeOP1Z0= Subject key identifier: F0:2B:07:E9:91:59:33:4A:91:C2:6D:FD:FE:1D:0A:50:C7:72:1E:AE Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 1C7964DF01182B6FE79F8A951BC374010E734038 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200754.roa Signing time: Fri 05 Jun 2026 07:12:24 +0000 ROA not before: Fri 05 Jun 2026 07:07:24 +0000 ROA not after: Fri 04 Jun 2027 07:12:24 +0000 asID: 200754 IP address blocks: 2a0a:6040:c300::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:79:64:df:01:18:2b:6f:e7:9f:8a:95:1b:c3:74:01:0e:73:40:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:24 2026 GMT Not After : Jun 4 07:12:24 2027 GMT Subject: CN=F02B07E99159334A91C26DFDFE1D0A50C7721EAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4e:10:f0:1e:30:85:5a:a4:b0:d8:5f:6e:42: d7:4c:56:0b:47:2d:de:fb:3f:5d:77:0f:52:0b:04: 01:a5:38:71:4b:72:8f:e2:df:42:f0:3a:96:ae:cc: e2:db:a7:4d:1b:ab:92:84:2a:ad:9a:be:64:31:0a: 45:02:1e:74:43:a7:f6:1a:dd:de:8f:98:6a:b2:b0: cb:61:ab:23:81:16:5b:31:a5:ea:f4:95:f6:1c:9c: 03:b2:2c:2e:47:17:a5:25:fc:d8:b6:e2:2c:76:84: 96:b4:8e:50:80:2b:71:e3:0a:00:16:67:f4:ef:4f: fb:67:86:69:38:03:dd:7c:c9:11:ca:1d:3b:f5:24: 1e:b2:bc:00:0d:04:96:63:00:66:3b:73:1e:74:d5: 1a:3b:3e:13:21:8a:64:f4:ad:fd:20:35:a3:3d:0c: c6:9a:ad:c5:89:bc:23:8e:76:27:4f:7d:8d:d1:31: 02:23:3a:03:20:c9:9b:4a:e1:cd:f7:17:98:8f:65: f5:0f:43:26:18:ac:28:33:b7:66:77:d1:67:8d:02: a0:39:f5:8d:66:3a:1e:02:c3:87:f5:95:e9:e1:48: 87:14:64:ac:b7:19:38:82:fe:bc:17:1e:83:fb:45: a6:d7:a6:f6:44:39:2b:6e:0b:30:a3:c8:44:d1:60: 44:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:2B:07:E9:91:59:33:4A:91:C2:6D:FD:FE:1D:0A:50:C7:72:1E:AE X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200754.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:c300::/40 Signature Algorithm: sha256WithRSAEncryption 97:ee:26:99:85:3c:81:b1:22:3b:56:9b:86:aa:d4:53:59:bd: 80:16:b9:29:8f:1c:0c:95:5e:70:45:4c:66:34:7b:01:6c:94: 69:c9:a4:e4:28:cd:3b:bf:bf:d5:e9:e6:e3:e1:fc:95:2c:73: 00:a6:0b:f6:f5:bc:9f:45:0f:68:58:8f:b9:ba:3f:25:f0:04: 68:01:01:58:50:09:af:62:93:53:cd:bf:05:4d:94:ff:cb:14: 01:08:37:73:e7:b5:ab:fc:f1:8f:e7:36:5d:08:17:9c:6a:03: 91:a7:49:b8:cd:5e:bf:65:0f:52:47:77:eb:0c:f3:53:25:9a: 02:09:4c:23:16:7e:96:a5:ee:66:69:07:90:2d:b6:16:cc:d9: c3:96:ea:01:c8:2a:31:1a:93:68:59:59:26:c6:65:a8:89:e0: f2:c2:67:d6:fe:53:41:21:34:f7:0a:4e:74:aa:d5:88:e4:d9: cb:e6:a1:e0:1a:b7:74:13:82:d4:d6:05:01:19:52:e3:c0:24: 4c:ca:3b:da:3a:59:dd:e4:8a:8c:e6:98:ee:48:e3:61:48:a0: a3:68:4a:91:c7:33:50:7b:92:06:39:f1:dc:10:1f:cb:df:4d: 25:f1:8f:19:b9:77:b1:dd:9c:7c:b2:b9:b3:04:9f:d8:c3:06: 57:56:e0:5f -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUHHlk3wEYK2/nn4qVG8N0AQ5zQDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MjRaFw0yNzA2MDQwNzEyMjRaMDMxMTAvBgNV BAMTKEYwMkIwN0U5OTE1OTMzNEE5MUMyNkRGREZFMUQwQTUwQzc3MjFFQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtThDwHjCFWqSw2F9uQtdMVgtH Ld77P113D1ILBAGlOHFLco/i30LwOpauzOLbp00bq5KEKq2avmQxCkUCHnRDp/Ya 3d6PmGqysMthqyOBFlsxper0lfYcnAOyLC5HF6Ul/Ni24ix2hJa0jlCAK3HjCgAW Z/TvT/tnhmk4A918yRHKHTv1JB6yvAANBJZjAGY7cx501Ro7PhMhimT0rf0gNaM9 DMaarcWJvCOOdidPfY3RMQIjOgMgyZtK4c33F5iPZfUPQyYYrCgzt2Z30WeNAqA5 9Y1mOh4Cw4f1lenhSIcUZKy3GTiC/rwXHoP7RabXpvZEOStuCzCjyETRYETLAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU8CsH6ZFZM0qRwm39/h0KUMdyHq4wHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAwNzU0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQMMwDQYJKoZIhvcNAQELBQADggEBAJfu JpmFPIGxIjtWm4aq1FNZvYAWuSmPHAyVXnBFTGY0ewFslGnJpOQozTu/v9Xp5uPh /JUscwCmC/b1vJ9FD2hYj7m6PyXwBGgBAVhQCa9ik1PNvwVNlP/LFAEIN3Pntav8 8Y/nNl0IF5xqA5GnSbjNXr9lD1JHd+sM81MlmgIJTCMWfpal7mZpB5AtthbM2cOW 6gHIKjEak2hZWSbGZaiJ4PLCZ9b+U0EhNPcKTnSq1Yjk2cvmoeAat3QTgtTWBQEZ UuPAJEzKO9o6Wd3kiozmmO5I42FIoKNoSpHHM1B7kgY58dwQH8vfTSXxjxm5d7Hd nHyyubMEn9jDBldW4F8= -----END CERTIFICATE-----Generated at Sat Jun 13 09:11:08 2026 by rpki-client