$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200795.roa File: AS200795.roa (raw, json) Hash identifier: MqscJAO61ye/04XgikUw+/Qa7U9mMD9+BYxUTFi6v1g= Subject key identifier: 15:24:B3:C3:19:B6:29:2C:A9:49:B8:7D:B1:0F:0F:91:51:A1:AA:FE Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 23DE88B343F91B59E4AF956FC7DEBC3FCE2181C3 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200795.roa Signing time: Fri 05 Jun 2026 07:12:37 +0000 ROA not before: Fri 05 Jun 2026 07:07:37 +0000 ROA not after: Fri 04 Jun 2027 07:12:37 +0000 asID: 200795 IP address blocks: 2a0a:6040:be00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:de:88:b3:43:f9:1b:59:e4:af:95:6f:c7:de:bc:3f:ce:21:81:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:37 2026 GMT Not After : Jun 4 07:12:37 2027 GMT Subject: CN=1524B3C319B6292CA949B87DB10F0F9151A1AAFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:25:e2:70:c9:1b:9e:fb:38:d2:f4:4c:b8:8a: c8:dd:cb:ee:2d:be:23:b8:ac:f1:f9:fd:32:08:f7: 46:4c:b6:af:4f:1b:65:2c:2f:96:34:d6:8e:a8:51: 86:13:5e:1a:5c:cc:cf:60:79:b7:20:cf:17:25:0d: 6e:87:60:66:76:d9:43:d9:5e:04:0f:82:7b:a6:08: d1:a8:a9:76:71:8e:fe:3a:2d:cf:1e:d1:99:8b:f9: 91:a2:22:93:cd:92:c1:04:9c:e3:cd:6c:6c:c5:5a: 35:bc:08:26:ea:ef:18:36:62:e6:28:3f:93:4a:93: b0:5f:60:94:0f:55:34:b6:3e:fa:71:01:85:12:51: 64:41:5d:b0:61:7f:b2:ca:fe:88:df:03:43:06:ca: 97:4e:fb:0e:89:6e:a6:41:e0:21:93:a4:a5:28:39: 2b:f5:35:32:bc:a7:50:54:27:52:d0:8f:fd:4a:71: 8d:1e:ea:00:ab:bc:20:2e:67:c4:e4:e1:a0:19:b6: 7a:c4:a5:3a:b4:2f:52:d9:d4:d2:2b:35:53:e6:6d: c3:e6:cb:a0:c8:cf:28:08:e7:1c:3b:55:e1:b2:05: 78:af:f6:e0:94:26:7d:d1:42:b4:9f:63:34:b5:c8: 7a:7b:cf:92:5f:78:eb:f0:d4:89:ec:e1:2c:be:82: 11:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:24:B3:C3:19:B6:29:2C:A9:49:B8:7D:B1:0F:0F:91:51:A1:AA:FE X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200795.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:be00::/40 Signature Algorithm: sha256WithRSAEncryption 66:8c:cc:cb:0b:a8:c3:f2:6b:6d:41:4b:dd:0d:6c:19:77:fd: 79:61:70:0a:cd:c4:5b:06:66:a0:c7:4c:f6:cd:b2:50:62:ab: 34:d1:bf:00:84:c6:8e:e0:50:cf:48:66:f3:5e:04:83:15:78: a7:11:ce:2d:ef:7e:0c:05:45:c8:44:e2:52:b1:f4:a0:2f:8c: a8:6c:aa:cf:bc:6a:7e:f0:5b:6f:88:20:db:d7:88:87:ea:f5: db:26:7f:28:46:cb:9a:77:ca:84:28:01:bf:d3:b3:3c:2d:5e: be:1a:29:f4:cf:9d:20:2c:cc:13:80:fb:de:18:b6:c7:59:d6: 86:63:bf:01:51:eb:a5:dc:a6:58:3a:ba:49:29:25:50:a8:b6: 59:b1:56:95:39:51:99:72:54:1d:13:81:a5:d9:47:8d:d0:e1: 56:9d:8b:10:4d:cb:e6:1a:fe:91:85:6d:5c:6f:e7:03:21:6d: 04:85:e8:c1:5e:f5:db:5b:95:4a:e1:72:0f:40:f2:67:3d:83: 85:cf:46:3b:3c:6b:fd:ca:3c:77:06:cc:b6:e3:18:b5:af:e9: 69:96:7a:22:95:0c:f8:1b:66:d3:83:da:25:15:04:54:62:e6: c5:8e:e1:51:4c:cf:61:56:e0:93:b3:ea:4d:75:8f:df:3f:b7: 3e:ff:03:01 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUI96Is0P5G1nkr5Vvx968P84hgcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MzdaFw0yNzA2MDQwNzEyMzdaMDMxMTAvBgNV BAMTKDE1MjRCM0MzMTlCNjI5MkNBOTQ5Qjg3REIxMEYwRjkxNTFBMUFBRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXJeJwyRue+zjS9Ey4isjdy+4t viO4rPH5/TII90ZMtq9PG2UsL5Y01o6oUYYTXhpczM9gebcgzxclDW6HYGZ22UPZ XgQPgnumCNGoqXZxjv46Lc8e0ZmL+ZGiIpPNksEEnOPNbGzFWjW8CCbq7xg2YuYo P5NKk7BfYJQPVTS2PvpxAYUSUWRBXbBhf7LK/ojfA0MGypdO+w6JbqZB4CGTpKUo OSv1NTK8p1BUJ1LQj/1KcY0e6gCrvCAuZ8Tk4aAZtnrEpTq0L1LZ1NIrNVPmbcPm y6DIzygI5xw7VeGyBXiv9uCUJn3RQrSfYzS1yHp7z5JfeOvw1Ins4Sy+ghEjAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUFSSzwxm2KSypSbh9sQ8PkVGhqv4wHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAwNzk1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQL4wDQYJKoZIhvcNAQELBQADggEBAGaM zMsLqMPya21BS90NbBl3/XlhcArNxFsGZqDHTPbNslBiqzTRvwCExo7gUM9IZvNe BIMVeKcRzi3vfgwFRchE4lKx9KAvjKhsqs+8an7wW2+IINvXiIfq9dsmfyhGy5p3 yoQoAb/TszwtXr4aKfTPnSAszBOA+94YtsdZ1oZjvwFR66Xcplg6ukkpJVCotlmx VpU5UZlyVB0TgaXZR43Q4VadixBNy+Ya/pGFbVxv5wMhbQSF6MFe9dtblUrhcg9A 8mc9g4XPRjs8a/3KPHcGzLbjGLWv6WmWeiKVDPgbZtOD2iUVBFRi5sWO4VFMz2FW 4JOz6k11j98/tz7/AwE= -----END CERTIFICATE-----Generated at Sat Jun 13 09:11:11 2026 by rpki-client