$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200850.roa File: AS200850.roa (raw, json) Hash identifier: rWjoBZSlG/T/sBLb2KtX2sx6hGxd0p1gEKycqgYRKV0= Subject key identifier: 3B:97:B3:12:6B:9C:31:F5:1F:20:61:6D:D0:3E:AF:4B:AA:20:61:21 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 38C7062913D1E7F389B0258BE4A5D7838D439AB3 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200850.roa Signing time: Fri 05 Jun 2026 07:12:42 +0000 ROA not before: Fri 05 Jun 2026 07:07:42 +0000 ROA not after: Fri 04 Jun 2027 07:12:42 +0000 asID: 200850 IP address blocks: 2a0a:6040:800::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:c7:06:29:13:d1:e7:f3:89:b0:25:8b:e4:a5:d7:83:8d:43:9a:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:42 2026 GMT Not After : Jun 4 07:12:42 2027 GMT Subject: CN=3B97B3126B9C31F51F20616DD03EAF4BAA206121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f8:fd:c6:74:1e:1f:44:e8:23:9c:ca:ad:37: ae:c5:b1:8d:bf:aa:74:40:0b:26:92:eb:c1:79:0b: 20:44:d5:32:e5:03:df:0d:c5:de:14:12:46:a4:58: 51:fb:37:01:34:d0:a2:a5:58:2e:c5:c6:53:d7:3e: 21:1d:c0:f4:da:d7:c4:88:38:6d:c9:66:c0:4b:6f: b6:63:53:a5:f3:5e:4d:7a:23:7d:e6:4f:54:2a:01: 04:fe:74:ba:e3:44:18:54:15:3d:ea:d9:17:3a:2f: be:d1:c0:86:21:49:c2:6e:38:61:42:4e:0d:d6:e2: c2:3c:9d:9d:81:be:50:32:cf:92:14:ee:5c:eb:b4: db:31:fb:60:6e:06:8b:c9:56:2b:08:30:79:97:ae: fe:db:39:22:5d:13:e2:b6:d3:17:11:1b:93:e5:e2: 8f:7c:7d:40:3f:be:6c:3d:34:23:6e:7f:df:99:5d: 0b:2d:a1:4a:36:5a:37:6b:e5:41:d2:56:fb:d3:11: 17:18:3d:00:0d:f8:6e:10:6a:f9:b6:19:50:aa:27: 06:43:3b:fb:9a:e7:ce:70:6e:5a:4f:6e:f1:7f:d6: 66:c1:47:a6:20:3f:0d:b9:81:41:2e:4d:0b:8f:c9: de:b5:e0:2c:37:cd:3f:64:24:7a:16:1a:80:20:99: e7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:97:B3:12:6B:9C:31:F5:1F:20:61:6D:D0:3E:AF:4B:AA:20:61:21 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200850.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:800::/40 Signature Algorithm: sha256WithRSAEncryption 95:66:2d:83:67:39:c6:45:4f:c1:27:8c:38:fc:f1:56:22:4c: dc:0c:3d:3c:fb:a4:97:66:3f:5e:9a:f5:10:53:0a:ef:84:2d: 1c:66:1b:6e:31:ff:65:a3:03:a8:c3:a4:83:f9:17:dd:f5:80: da:17:2b:00:2a:97:d8:be:13:0b:23:40:15:c1:7f:2c:6c:65: f4:00:4b:6d:a3:78:fd:f7:76:3a:04:d1:8c:51:34:00:e8:30: 74:7e:21:65:e3:4e:03:6c:15:69:40:a8:d6:b4:cf:24:b1:57: 24:ae:4a:7b:1b:72:11:62:fd:71:4a:f0:7b:bb:7e:d5:e6:8b: 02:1f:f4:88:e8:a8:77:c8:23:e9:30:67:0d:59:e9:b3:a4:47: d2:f1:a7:2a:0f:ea:3d:46:f1:3f:50:15:df:01:4e:37:9d:ec: 80:46:3d:ae:ef:6c:6e:87:ba:d7:a1:27:e5:5c:b0:47:e5:96: c8:89:bd:cc:39:34:6e:33:03:13:68:b2:25:81:e5:7d:7d:82: 9c:56:9d:01:71:dd:11:8f:36:6b:8f:0e:62:c1:f0:4c:1d:17: 96:b7:0c:1b:49:e4:9f:6b:98:4e:a4:1a:51:91:bb:d2:08:0d: 6f:74:1f:af:ab:c0:94:16:80:47:78:e8:1d:6f:97:41:82:2e: 59:5f:91:dd -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUOMcGKRPR5/OJsCWL5KXXg41DmrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3NDJaFw0yNzA2MDQwNzEyNDJaMDMxMTAvBgNV BAMTKDNCOTdCMzEyNkI5QzMxRjUxRjIwNjE2REQwM0VBRjRCQUEyMDYxMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX+P3GdB4fROgjnMqtN67FsY2/ qnRACyaS68F5CyBE1TLlA98Nxd4UEkakWFH7NwE00KKlWC7FxlPXPiEdwPTa18SI OG3JZsBLb7ZjU6XzXk16I33mT1QqAQT+dLrjRBhUFT3q2Rc6L77RwIYhScJuOGFC Tg3W4sI8nZ2BvlAyz5IU7lzrtNsx+2BuBovJVisIMHmXrv7bOSJdE+K20xcRG5Pl 4o98fUA/vmw9NCNuf9+ZXQstoUo2Wjdr5UHSVvvTERcYPQAN+G4Qavm2GVCqJwZD O/ua585wblpPbvF/1mbBR6YgPw25gUEuTQuPyd614Cw3zT9kJHoWGoAgmefnAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUO5ezEmucMfUfIGFt0D6vS6ogYSEwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAwODUwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQAgwDQYJKoZIhvcNAQELBQADggEBAJVm LYNnOcZFT8EnjDj88VYiTNwMPTz7pJdmP16a9RBTCu+ELRxmG24x/2WjA6jDpIP5 F931gNoXKwAql9i+EwsjQBXBfyxsZfQAS22jeP33djoE0YxRNADoMHR+IWXjTgNs FWlAqNa0zySxVySuSnsbchFi/XFK8Hu7ftXmiwIf9IjoqHfII+kwZw1Z6bOkR9Lx pyoP6j1G8T9QFd8BTjed7IBGPa7vbG6HutehJ+VcsEfllsiJvcw5NG4zAxNosiWB 5X19gpxWnQFx3RGPNmuPDmLB8EwdF5a3DBtJ5J9rmE6kGlGRu9IIDW90H6+rwJQW gEd46B1vl0GCLllfkd0= -----END CERTIFICATE-----Generated at Sat Jun 13 09:11:22 2026 by rpki-client