$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200840.roa File: AS200840.roa (raw, json) Hash identifier: 44tKom6iBqU0Ioj+w49Xz5EQuYUyda9LOhujbt4b8ZE= Subject key identifier: C7:D3:35:20:95:46:10:DA:8E:F2:BE:7B:73:11:BA:18:D2:30:34:3D Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 7E49538078688CBCD71B593C761CFA54ECCC1546 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200840.roa Signing time: Fri 05 Jun 2026 07:12:29 +0000 ROA not before: Fri 05 Jun 2026 07:07:29 +0000 ROA not after: Fri 04 Jun 2027 07:12:29 +0000 asID: 200840 IP address blocks: 2a0a:6040:c400::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:49:53:80:78:68:8c:bc:d7:1b:59:3c:76:1c:fa:54:ec:cc:15:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:29 2026 GMT Not After : Jun 4 07:12:29 2027 GMT Subject: CN=C7D33520954610DA8EF2BE7B7311BA18D230343D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4b:6a:52:cc:56:f4:29:61:23:25:56:6f:71: b8:ab:11:11:99:82:5f:34:1a:c8:94:c6:20:de:c6: dc:74:01:c4:47:34:56:85:19:31:42:ad:43:ab:f8: 1d:a7:2b:74:5f:93:80:42:09:71:ad:b6:fc:31:86: 72:23:24:d4:fb:46:98:77:e9:c6:d6:00:98:73:8b: 3b:bb:b9:8e:52:a7:41:5d:91:d5:39:78:f9:5a:e5: 70:27:81:ae:b3:d8:e7:49:43:78:30:43:f7:b7:21: 93:64:02:31:11:f7:ea:2b:ea:16:8b:13:ec:83:47: 86:0e:0f:bc:ce:65:59:84:f3:89:3d:aa:3d:cb:76: 85:1c:cd:98:21:13:8e:d0:f3:f2:28:e8:d0:16:67: b3:5c:0f:a0:74:f1:5c:d7:72:25:a3:7d:dc:5b:13: 96:9c:db:a2:ca:bb:0a:29:a0:ab:97:a9:22:64:ed: a7:87:4d:12:15:fe:07:cd:dd:c4:6f:a6:5f:a1:73: b9:9b:04:61:33:3b:7d:e6:d8:3c:89:dc:b0:01:4a: 84:cd:c5:ee:5d:6f:15:27:3d:76:bc:4f:37:f6:a6: 1d:f5:c7:3c:ab:ee:56:fc:f6:6f:be:32:3c:00:16: c4:39:10:6b:bb:a4:1d:ee:1d:68:29:09:ef:b7:c9: 60:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D3:35:20:95:46:10:DA:8E:F2:BE:7B:73:11:BA:18:D2:30:34:3D X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200840.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:c400::/40 Signature Algorithm: sha256WithRSAEncryption 63:fa:d5:b5:13:4b:a2:52:e0:04:91:61:e8:6d:e6:b0:d9:05: fb:20:21:d0:fa:dc:25:20:aa:4f:62:7d:da:78:76:d2:23:3c: 8b:f9:48:02:1d:20:0a:c6:2e:4b:02:28:01:65:89:68:ad:cb: 64:7b:b7:91:ab:42:36:e1:04:74:01:5e:0b:e2:93:64:50:26: 4d:03:1c:85:56:8b:3d:d5:6d:ff:8d:b6:cc:cf:af:19:0d:14: 24:16:0b:83:8d:58:db:e7:d3:15:e5:f8:75:71:1d:9b:88:f6: 87:bc:78:88:5d:ee:30:4f:bb:6c:32:ff:85:57:43:5f:85:48: 2f:00:ea:9f:e2:3e:d0:49:d8:93:6f:0c:53:f8:a1:af:9d:0b: 7a:ae:58:dd:25:7a:80:15:42:16:63:16:c9:ac:23:a3:de:4a: d9:c0:1b:15:2b:90:54:47:f2:d5:49:15:58:18:64:14:70:5d: a9:22:99:3e:a5:47:45:e5:9c:40:cb:10:21:05:80:f1:c5:c1: ae:d1:17:03:66:7b:25:4e:9a:d4:04:ea:61:47:6b:bd:e8:ac: 70:cc:54:24:06:ae:38:d6:9a:70:f4:38:43:2e:d5:94:06:04: 27:82:3c:7b:b6:11:87:a4:f2:b4:1d:f8:54:f1:f2:4a:61:38: 48:df:22:61 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUfklTgHhojLzXG1k8dhz6VOzMFUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MjlaFw0yNzA2MDQwNzEyMjlaMDMxMTAvBgNV BAMTKEM3RDMzNTIwOTU0NjEwREE4RUYyQkU3QjczMTFCQTE4RDIzMDM0M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPS2pSzFb0KWEjJVZvcbirERGZ gl80GsiUxiDextx0AcRHNFaFGTFCrUOr+B2nK3Rfk4BCCXGttvwxhnIjJNT7Rph3 6cbWAJhzizu7uY5Sp0FdkdU5ePla5XAnga6z2OdJQ3gwQ/e3IZNkAjER9+or6haL E+yDR4YOD7zOZVmE84k9qj3LdoUczZghE47Q8/Io6NAWZ7NcD6B08VzXciWjfdxb E5ac26LKuwopoKuXqSJk7aeHTRIV/gfN3cRvpl+hc7mbBGEzO33m2DyJ3LABSoTN xe5dbxUnPXa8Tzf2ph31xzyr7lb89m++MjwAFsQ5EGu7pB3uHWgpCe+3yWBxAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUx9M1IJVGENqO8r57cxG6GNIwND0wHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAwODQwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQMQwDQYJKoZIhvcNAQELBQADggEBAGP6 1bUTS6JS4ASRYeht5rDZBfsgIdD63CUgqk9ifdp4dtIjPIv5SAIdIArGLksCKAFl iWity2R7t5GrQjbhBHQBXgvik2RQJk0DHIVWiz3Vbf+NtszPrxkNFCQWC4ONWNvn 0xXl+HVxHZuI9oe8eIhd7jBPu2wy/4VXQ1+FSC8A6p/iPtBJ2JNvDFP4oa+dC3qu WN0leoAVQhZjFsmsI6PeStnAGxUrkFRH8tVJFVgYZBRwXakimT6lR0XlnEDLECEF gPHFwa7RFwNmeyVOmtQE6mFHa73orHDMVCQGrjjWmnD0OEMu1ZQGBCeCPHu2EYek 8rQd+FTx8kphOEjfImE= -----END CERTIFICATE-----Generated at Sat Jun 13 10:22:56 2026 by rpki-client