$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200775.roa File: AS200775.roa (raw, json) Hash identifier: 33U/EBBJ500uyvoczvWaWJG/TorU4D9P3TBRxulrGUw= Subject key identifier: 17:36:F9:E7:41:BC:4D:C5:79:4F:FB:78:93:E5:F6:B5:77:EC:E5:E6 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 7ADECD653FD9695079A97DE404421D323813D8A5 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200775.roa Signing time: Fri 04 Jul 2025 06:53:13 +0000 ROA not before: Fri 04 Jul 2025 06:48:13 +0000 ROA not after: Fri 03 Jul 2026 06:53:13 +0000 asID: 200775 IP address blocks: 2a0a:6040:c200::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:de:cd:65:3f:d9:69:50:79:a9:7d:e4:04:42:1d:32:38:13:d8:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:13 2025 GMT Not After : Jul 3 06:53:13 2026 GMT Subject: CN=1736F9E741BC4DC5794FFB7893E5F6B577ECE5E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ed:38:87:1a:bd:20:4b:1f:f8:16:1b:eb:32: 2e:91:fd:83:6d:61:66:17:b7:3b:12:dd:38:2c:7f: a0:da:a9:07:4f:6a:6a:98:1d:b7:c1:4f:57:94:d8: 95:f4:30:ea:e8:86:c1:0d:b6:b2:cf:83:c4:30:61: d7:19:58:7e:80:55:a3:39:fe:33:a4:a3:2a:e9:6f: d7:9e:f5:18:b6:9c:83:b3:ca:43:4d:2d:80:7d:0b: a0:a6:3f:f5:07:bd:3b:af:80:8b:bb:48:1f:4f:df: 8d:cc:8e:9c:53:2c:41:0c:9b:e8:8d:0e:65:86:52: 3f:50:37:cf:cd:a8:78:3e:4c:28:9c:b6:f8:ff:da: 74:da:88:75:06:24:0b:5f:71:92:9c:4d:6d:f5:06: d6:b2:bd:b7:e7:e7:eb:f0:2a:83:a6:05:75:aa:39: 8d:de:9d:33:86:b5:70:1e:f5:52:d5:cf:4c:93:5d: 77:35:ed:d5:82:a0:ca:14:56:1a:99:82:82:41:5c: 4a:c1:0f:29:24:75:07:33:02:0f:24:90:78:a5:8f: da:81:28:50:e7:12:cf:f7:ee:31:b3:91:36:f6:ca: 92:d8:3e:3b:98:77:58:86:3f:2f:28:c4:82:ac:a2: d3:9d:05:d2:2c:e2:88:21:99:61:1b:21:ca:34:6b: a9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:36:F9:E7:41:BC:4D:C5:79:4F:FB:78:93:E5:F6:B5:77:EC:E5:E6 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200775.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:c200::/40 Signature Algorithm: sha256WithRSAEncryption 45:b7:46:0d:ba:bc:08:b1:47:10:23:41:65:e7:33:bd:d2:77: 92:30:af:80:85:e0:5e:38:f6:6d:c3:95:a1:48:d3:60:7a:ee: bc:50:da:5e:39:a8:7a:08:1f:9f:cb:60:8a:90:79:06:d0:74: 09:a6:a0:96:c8:3e:a1:ac:0c:a4:42:93:84:95:a6:47:21:ef: 26:e9:e3:a1:1f:ab:24:e5:0a:2f:27:1a:26:2c:49:2c:33:47: 4c:a7:d1:ad:21:cf:ec:84:70:fb:0a:e9:83:16:8d:a6:61:de: 38:1c:3a:71:8f:69:cd:69:2b:d8:a9:c8:4e:dc:66:71:b8:fd: 95:30:a7:15:dc:53:d5:f6:fa:8f:aa:f0:15:c4:4c:5f:8b:d8: df:59:bc:ea:df:59:ff:cc:d6:d7:42:fd:a8:35:40:bc:5d:83: c1:b8:e0:88:60:d3:d8:4b:fb:df:18:ac:88:53:83:a5:1a:3e: 9e:53:0e:26:ac:42:21:7d:c8:8e:37:4e:8f:e4:ad:17:8a:2b: d6:23:47:13:87:a1:34:9a:58:20:3f:fa:92:62:bc:61:80:f6: e4:b5:02:0b:f2:12:59:5d:d7:87:a7:2b:e6:d9:61:c9:6b:30: 92:fb:72:5e:ff:35:df:30:5e:86:50:20:c6:4a:c6:e5:83:f5: bb:dd:f1:cf -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUet7NZT/ZaVB5qX3kBEIdMjgT2KUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MTNaFw0yNjA3MDMwNjUzMTNaMDMxMTAvBgNV BAMTKDE3MzZGOUU3NDFCQzREQzU3OTRGRkI3ODkzRTVGNkI1NzdFQ0U1RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz7TiHGr0gSx/4FhvrMi6R/YNt YWYXtzsS3Tgsf6DaqQdPamqYHbfBT1eU2JX0MOrohsENtrLPg8QwYdcZWH6AVaM5 /jOkoyrpb9ee9Ri2nIOzykNNLYB9C6CmP/UHvTuvgIu7SB9P343MjpxTLEEMm+iN DmWGUj9QN8/NqHg+TCictvj/2nTaiHUGJAtfcZKcTW31Btayvbfn5+vwKoOmBXWq OY3enTOGtXAe9VLVz0yTXXc17dWCoMoUVhqZgoJBXErBDykkdQczAg8kkHilj9qB KFDnEs/37jGzkTb2ypLYPjuYd1iGPy8oxIKsotOdBdIs4oghmWEbIco0a6ndAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUFzb550G8TcV5T/t4k+X2tXfs5eYwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAwNzc1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQMIwDQYJKoZIhvcNAQELBQADggEBAEW3 Rg26vAixRxAjQWXnM73Sd5Iwr4CF4F449m3DlaFI02B67rxQ2l45qHoIH5/LYIqQ eQbQdAmmoJbIPqGsDKRCk4SVpkch7ybp46EfqyTlCi8nGiYsSSwzR0yn0a0hz+yE cPsK6YMWjaZh3jgcOnGPac1pK9ipyE7cZnG4/ZUwpxXcU9X2+o+q8BXETF+L2N9Z vOrfWf/M1tdC/ag1QLxdg8G44Ihg09hL+98YrIhTg6UaPp5TDiasQiF9yI43To/k rReKK9YjRxOHoTSaWCA/+pJivGGA9uS1AgvyElld14enK+bZYclrMJL7cl7/Nd8w XoZQIMZKxuWD9bvd8c8= -----END CERTIFICATE-----Generated at Wed Nov 5 12:57:01 2025 by rpki-client